Privacy Policy

1. Controller and contact

The controller of your personal data is Planmee s. r. o., Company ID: 55 752 101, registered office: Závodská cesta 24, 010 01 Žilina, entered in the Commercial Register of the District Court Žilina, Section: Sro, Insert No. 83091/L ("we", "us" or the "Operator").

For any question about your personal data, to exercise your rights or to request deletion of your account, please contact us at [email protected].

2. Whose personal data we process

• Visitors: anyone who browses the Portal without signing in.
• Applicants: job seekers who create an applicant account, fill in a profile and apply for job offers.
• Employer contact persons: people who register and manage a company account on behalf of an employer, or who are named as the contact person in a company profile.

3. What personal data we process

We process only the data we need for the purposes described in section 4. Depending on how you use the Portal, this includes:

• Visitors: IP address, browser and device type, date and time of access, the pages requested and the referring page (server logs), and visit statistics that are evaluated only in aggregate.
• Applicants – account: e-mail address and the one-time verification codes used for signing in (the Portal does not use passwords for Applicants).
• Applicants – profile: first and last name, profession, phone number, location, "about me" text, skills, education (degree, school, field of study, dates), work history (job title, company, dates, description), languages and proficiency, salary expectation (from/to, currency), preferred job types (full-time, part-time, fixed-term, freelance, internship, temporary) and preferred work arrangement (on-site, remote, hybrid).
• Applicants – applications: the job offer you applied for, your expected salary, an optional cover letter, up to 3 attachments (for example your CV), the date of the application and its status (pending, accepted, rejected).
• Employer contact persons: e-mail address, password (stored only in hashed form), password reset requests, the name, e-mail address and phone number of the contact person in the company profile, your choice regarding marketing communications, and the actions taken in the account (job offers posted, decisions on applications).
• Company data: name, industry, size, company registration number, description, logo, website and address. This is usually not personal data, but it can be, for example in the case of a sole trader.
• Communication: the content of messages you send us and our replies.

Please do not include special categories of personal data (for example health data, religious or political beliefs) or data on criminal records in your profile, cover letter or attachments unless this is necessary for the specific job.

Saved job offers and your language choice are stored only in your browser. We do not receive this data.

4. Purposes and legal bases

We process personal data only where we have a legal basis under Article 6(1) GDPR:

• Performance of a contract (Art. 6(1)(b) GDPR): creating and managing your account, signing you in (verification codes, passwords, password reset), providing the Portal services, publishing job offers, passing your application – including your profile data and attachments – to the Employer whose offer you apply for, and allowing Employers to review applications and decide on them.
• Legitimate interests (Art. 6(1)(f) GDPR): the security and stability of the Portal, keeping server logs, preventing fraud and misuse, verifying companies, aggregated visit statistics used to improve the Portal, service e-mails about the status of your applications, communication with Employer contact persons on behalf of their company, and establishing, exercising or defending legal claims.
• Consent (Art. 6(1)(a) GDPR): marketing communications and product news for Employers who opted in when signing up. You may withdraw your consent at any time by e-mail to [email protected]. Withdrawal does not affect the lawfulness of processing before it.
• Legal obligations (Art. 6(1)(c) GDPR): responding to requests from public authorities, handling your data protection requests and, should paid services be introduced in the future, meeting accounting and tax obligations.

Where we rely on legitimate interests, we have weighed them against your interests and rights. You can object to such processing at any time (see section 12).

5. Applications and the role of Employers

When you apply for a job offer, we make your application available to the Employer that posted the offer. This includes your profile data, expected salary, cover letter and attachments. The Employer can view and download them and mark your application as accepted or rejected.

From the moment the Employer receives your application, it processes your data as an independent controller. It may use the data only for recruitment for the given offer and must comply with the GDPR.

We are not responsible for how an Employer processes your data after receiving it, for example if it saves your CV in its own systems. To exercise your rights in relation to such processing, please contact the Employer directly.

6. Recipients of personal data

We disclose personal data only to the extent necessary, to these recipients:

• Employers you apply to, as independent controllers (see section 5).
• Technical service providers, in particular for hosting and e-mail delivery. They act as processors, only on our instructions and under data processing agreements pursuant to Article 28 GDPR.
• Our web analytics service, which receives technical visit data (such as the page visited, the referring page and the browser type) and evaluates it only in aggregate.
• Google (Google Fonts): when a page loads, your browser retrieves fonts from Google servers (fonts.googleapis.com, fonts.gstatic.com). Google receives your IP address and technical information about your browser.
• Public authorities, courts and law enforcement bodies, where we are required to disclose data by law.

The sharing buttons for Facebook, X (Twitter), LinkedIn and Reddit only open the respective network in a new window when you click them. Nothing is loaded from these networks beforehand.

We do not sell personal data and do not share it with advertisers.

7. Transfers outside the EU

We process your personal data in the European Union, and our processors store it in the European Union.

Google may process data, in particular your IP address, outside the EU, including in the United States. Such transfers are based on the EU-US Data Privacy Framework, under which Google is certified, and on standard contractual clauses adopted by the European Commission.

8. How long we keep personal data

• Account and profile data of Applicants and Employers: for as long as the account exists. After the account is deleted, we delete the data within 30 days.
• Applications and attachments: for as long as your account exists or until you ask us to delete them. Copies held by Employers are kept under their own responsibility.
• One-time verification codes: 15 minutes.
• Password reset links: 30 minutes.
• Server logs: up to 90 days.
• Consent to marketing communications: until you withdraw it or your account is deleted.
• Data stored in your browser (saved jobs, language): until you delete it in your browser.

Where we need to keep data longer to comply with a legal obligation or to establish, exercise or defend legal claims, we keep only the necessary data and only for the necessary period.

9. Is providing personal data mandatory?

You are not required by law to provide personal data to us. However, some data is necessary to use certain services:

• Applicants need an e-mail address to create an account and sign in, must enter their first and last name to complete their profile, and must state an expected salary to apply.
• Employers need an e-mail address, a password and the company name to create and use a company account.

All other information is voluntary. Without the necessary data we cannot create your account or pass on your application.

10. Automated decision-making and profiling

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR).

The Portal does not automatically evaluate or rank Applicants. Decisions on applications are made by the Employer.

11. Security of personal data

We use appropriate technical and organisational measures to protect personal data, in particular:

• encryption of all communication between your browser and the Portal (HTTPS/TLS);
• access control – an application is accessible only to the Applicant and to the Employer concerned, and our internal access is limited to authorised persons;
• passwords stored only in hashed form, and one-time sign-in codes for Applicants valid for 15 minutes;
• sanitisation of text entered by users to prevent malicious code;
• restrictions on the type and size of uploaded attachments (PDF, DOC, DOCX, max. 5 MB each);
• contractual confidentiality obligations of our processors.

Please keep your sign-in details confidential and do not share verification codes with anyone.

12. Your rights

As a data subject, you have the following rights under the GDPR:

• right of access to your personal data (Art. 15);
• right to rectification of inaccurate or incomplete data (Art. 16);
• right to erasure (Art. 17);
• right to restriction of processing (Art. 18);
• right to data portability (Art. 20);
• right to object to processing based on legitimate interests, and at any time to processing for direct marketing (Art. 21);
• right to withdraw your consent at any time (Art. 7(3));
• right to lodge a complaint with a supervisory authority (Art. 77).

To exercise your rights, write to [email protected]. We will respond without undue delay, at the latest within one month. In complex cases this period may be extended by two further months; we will inform you of this. We may ask you to verify your identity. Exercising your rights is free of charge, unless a request is manifestly unfounded or excessive.

You can update most of your profile data yourself in your account. Account deletion is currently handled on request by e-mail to [email protected].

The supervisory authority in Slovakia is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava 27, Slovak Republic, www.dataprotection.gov.sk. You may also contact the supervisory authority in the EU Member State where you live or work.

13. Cookies and browser storage

We use only strictly necessary and functional cookies and browser storage, for example to keep you signed in and to remember your language. We do not use advertising or marketing cookies.

Our web analytics measures visits only in aggregate. By design, it does not set cookies and does not track you across websites.

You can find details in our Cookie Policy at https://hiremee.eu/en/cookies.

14. Changes to this Privacy Policy

We may update this Privacy Policy when our services or the law change. We will publish the current version on this page with a new date. We will inform registered users of significant changes by e-mail or on the Portal.

This Privacy Policy is effective from 1 October 2026.