Ovde Jobs Platform
Effective date: 15/02/2026

This Privacy Policy (“Policy”) explains how Alina Konkina PR Paprika SMM, TIN 66487946, with registered seat at Gostivarska 84, 11010 Belgrade, Republic of Serbia (the “Company”, “Ovde Jobs”, “we”, “us”), collects and processes personal data in connection with the use of the website https://ovdejobs.com and related services (the “Website” or “Platform”).

This Policy is drafted in accordance with the Law on Personal Data Protection of the Republic of Serbia (“Official Gazette RS” no. 87/2018), which is largely aligned with the EU General Data Protection Regulation (GDPR). 

If there is any inconsistency between this Policy and mandatory provisions of applicable Serbian data protection law, such mandatory provisions shall prevail.

1. CONTROLLER AND CONTACT DETAILS

The data controller for processing personal data described in this Policy is:

Alina Konkina PR Paprika SMM
Gostivarska 84, 11010 Belgrade
Republic of Serbia
Email: alina@ovdejobs.com | rabotavserbii@gmail.com
Website: https://ovdejobs.com

If you have any questions or requests concerning this Policy or our processing of your personal data, you may contact us using the above details.

The competent data protection authority in Serbia is the:

Commissioner for Information of Public Importance and Personal Data Protection
15 Bulevar kralja Aleksandra, 11120 Belgrade, Serbia
Tel: +381 11 3408 900
Email: office@poverenik.rs

You have the right to lodge a complaint with the Commissioner, as further explained in Section 12 below.

2. SCOPE OF THIS POLICY

This Policy applies to:

• visitors to the Website,
• registered Candidates who create an account, post a resume/CV or apply for vacancies,
• registered Employers/Customers who create an account, post vacancies or use paid services,
• recipients of our email newsletters and other electronic communications.

This Policy does not apply to processing carried out independently by Employers outside the Platform (for example, once a Candidate’s data is exported to the Employer’s internal systems). In such cases, Employers act as independent controllers and must provide their own privacy information.

3. DEFINITIONS

Terms such as “personal data”, “processing”, “controller”, “processor”, “data subject”, “recipient” and “third party” have the meanings given in the Law on Personal Data Protection and, where relevant, GDPR. 

For clarity:

• Personal data means any information relating to an identified or identifiable natural person. 
• Processing means any operation performed on personal data, such as collection, storage, use, disclosure, deletion, etc. 

4. CATEGORIES OF DATA WE PROCESS

4.1 Data you provide to us

When you create an account (Candidate or Employer):

• Name and surname
• Email address
• Password (stored in hashed form)
• Role (Candidate / Employer)
• Company name and details (for Employers)
• Position / job title (for Employer’s contact person)
• Country and (optionally) city

When you create or update a Candidate profile / CV:

• Professional headline and summary
• Work experience and education
• Skills, languages and other professional information
• Links to external profiles (LinkedIn, portfolio, etc.)
• Expected salary, preferred location and work conditions (if you choose to provide this)

When Employers post vacancies or company profiles:

• Company description
• Job title and description
• Location / remote / hybrid
• Salary range (if provided)
• Required skills and experience
• Internal reference IDs
• Employer contact data for the vacancy (email, phone, etc.)

When you contact us or subscribe to newsletters:

• Name and email
• Content of your message, requests or feedback
• Communication preferences (opt-in / opt-out)

4.2 Data we collect automatically (technical and usage data)

When you visit or use the Website, we may automatically collect:

• IP address
• Browser type and version
• Device type and operating system
• Language settings
• Dates and times of access
• Pages visited and actions taken (e.g. search queries, vacancy views, CV views)
• Referrer URL (page you came from)
• Approximate location (country / city) derived from IP address

This information is collected through server logs, cookies and similar technologies as described in Section 6.

4.3 Data we receive from third parties

We may receive limited personal data from third parties, such as:

• analytics and advertising partners (aggregated usage statistics),
• payment service providers (payment confirmation data, not full card numbers),
• social media or communication platforms (if you contact us there).

We do not buy or rent personal data from data brokers.

5. PURPOSES AND LEGAL BASES FOR PROCESSING

We process personal data only where we have a valid legal basis. Typical legal bases under Serbian data protection law include performance of a contract, legitimate interest, legal obligation and consent. 

5.1 Operating the Platform and providing services

We process your personal data to:

• create and manage your account,
• enable posting of vacancies and resumes,
• allow search and matching between Candidates and Employers,
• allow Employers to unlock Candidate contact details using Credits,
• facilitate communication between Candidates and Employers.

Legal basis: performance of a contract or taking steps at your request prior to entering into a contract (for example, creating a profile, applying for a job), and our legitimate interest in operating an online job platform.

5.2 Communication and support

We process your contact details to:

• respond to your requests and inquiries,
• notify you about changes to the Platform or this Policy,
• send transactional emails (e.g., registration confirmation, password reset, purchase confirmation, important service notifications).

Legal basis: performance of a contract and our legitimate interest in providing proper customer support and ensuring service continuity.

5.3 Marketing and newsletters

If you subscribe to our newsletters or explicitly agree to receive marketing communications, we process your email address and marketing preferences to send you:

• updates about new vacancies or candidates,
• news about the labour market in Serbia,
• information about new features and services of Ovde Jobs.

The Law on Electronic Commerce in Serbia requires consent for sending unsolicited commercial messages and gives recipients the right to opt out at any time. 

Legal basis: your consent. You can withdraw your consent at any time by using the unsubscribe link in our emails or by contacting us.

5.4 Security, prevention of abuse and legal compliance

We may process technical and account data to:

• ensure security and integrity of the Website,
• detect and prevent fraud, scraping, unauthorized access or other abuses,
• investigate potential violations of our Terms and Conditions,
• comply with legal obligations (e.g., accounting, tax, responding to lawful requests from authorities).

Legal basis: our legitimate interests in protecting the Platform and Users, and compliance with legal obligations.

5.5 Statistics and service improvements

We use aggregated and anonymized or pseudonymized data (for example, number of visits, search patterns, vacancy performance) to:

• understand how the Platform is used,
• improve user experience and functionalities,
• develop new services.

Legal basis: our legitimate interest in improving the Platform.

We do not use your personal data to make decisions that produce legal or similarly significant effects solely based on automated processing (no fully automated “hire / no hire” decisions).

6. COOKIES AND ANALYTICS

6.1 What are cookies?

Cookies are small text files that are stored on your device when you visit a website. They may be set by us (“first-party cookies”) or by third-party providers whose services we use (“third-party cookies”).

6.2 Types of cookies we may use

• Strictly necessary cookies – essential for the functioning of the Website (e.g. maintaining your session after login). These cookies are typically set in response to actions you take and do not require consent.
• Functional cookies – help remember your preferences (e.g. language, region) and improve your experience.
• Analytics cookies – collect information about how visitors use the Website (e.g. number of visitors, which pages are visited most often). We may use tools such as Google Analytics or similar services, which process data according to their own privacy policies.
• Marketing cookies – may be used in connection with our promotional campaigns (for example, to measure effectiveness of ads or to limit the number of times you see a particular ad).

6.3 Cookie management

Where required by law, we will ask for your consent before placing non-essential cookies (for example, analytics or marketing cookies). You can:

• manage your cookie preferences via your browser settings (block or delete cookies),
• use any cookie banner or settings panel implemented on the Website.

Note that blocking some types of cookies may affect your experience or certain functionalities.

A more detailed list of cookies and their retention periods may be provided in a separate Cookie Policy available on the Website.

7. RESUME DATABASE AND ACCESS BY EMPLOYERS

7.1 Visibility of Candidate profiles

If you create a Candidate profile or upload a resume, you can choose:

• which information is visible to Employers (e.g. full name, current position, skills),
• whether your contact details (email, phone) are immediately visible or may only be accessed by Employers who unlock them using Credits (depending on Platform configuration).

We encourage you not to include sensitive personal data (such as information about health, religion, political opinions, etc.) in your resume unless strictly necessary and allowed by applicable law.

7.2 Role of Employers

When Employers access and process Candidate data through the Platform for their own recruitment purposes, they act as independent controllers under the Law on Personal Data Protection and must comply with their own legal obligations (for example, providing privacy notices to candidates, ensuring lawful basis for processing, setting retention periods). 

Ovde Jobs does not control or supervise Employer’s internal processing once Candidate data is exported or used outside the Platform.

7.3 Credits and contact details

Employers may browse Candidate profiles for free, but access to certain elements (e.g. email or phone number) may require spending Credits. When an Employer spends Credits to unlock contact details, we log that event for billing and security purposes.

We are not responsible if, after unlocking contact details, the Candidate does not respond or is no longer available.

8. DATA SHARING AND RECIPIENTS

We do not sell your personal data.

We may share personal data with:

• Hosting and IT service providers (for example, EU-based cloud hosting, infrastructure and maintenance providers that store and process data on our behalf);
• Email and communication service providers (for sending transactional and marketing emails, push notifications, etc.);
• Analytics providers (for aggregated usage statistics);
• Payment service providers (for processing payments from Employers, limited to necessary transaction data);
• Professional advisors (lawyers, accountants, auditors) bound by confidentiality obligations;
• State authorities or law enforcement bodies where required by applicable law or court orders.

All such recipients act either as processors (processing data on our instruction) or as independent controllers for their own purposes. Where required, we conclude appropriate data processing agreements with processors.

9. INTERNATIONAL TRANSFERS

As a rule, we store personal data on servers located within the European Union.

Where we need to engage service providers located outside the Republic of Serbia and/or outside the European Economic Area (EEA), we will ensure that an adequate level of protection is provided, for example by:

• relying on an adequacy decision (where applicable), or
• entering into standard contractual clauses or similar contractual safeguards approved by competent authorities.

You may contact us for further information about specific cross-border transfers.

10. DATA RETENTION

We keep personal data only for as long as necessary for the purposes for which it was collected, taking into account:

• duration of your registration and active use of the Platform,
• legal retention periods (e.g. accounting and tax obligations),
• potential limitation periods for legal claims.

Indicatively:

• Candidate account data and resumes – retained while your account is active; if you delete your account, we will delete or anonymize your data within a reasonable period, except where we must keep certain information for legal or security reasons.
• Employer account and billing data – retained for the duration of the contractual relationship and for the period required by accounting and tax law (typically at least 5–10 years, depending on the type of document).
• Technical logs and security events – retained for a period necessary to ensure security and investigate incidents (for example, several months, unless longer retention is needed for a specific investigation).
• Marketing / newsletter data – retained until you withdraw your consent or object, plus a short grace period to implement your request.

Where data is kept in backup systems, it may remain there until backups are overwritten in the ordinary course of business.

11. SECURITY

We implement appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access, in accordance with the Law on Personal Data Protection. 

Measures may include, among others:

• access controls,
• password hashing,
• encrypted connections (HTTPS),
• logging and monitoring of access,
• regular updates and patches for software components,
• internal policies and training where appropriate.

However, no system can be fully secure. Users are responsible for keeping their login credentials confidential and must not share them with others.

12. YOUR RIGHTS

Under the Law on Personal Data Protection, you have several rights in relation to your personal data, including (subject to legal conditions): 

• Right of access – to obtain confirmation as to whether we process your personal data and receive a copy of such data.
• Right to rectification – to request correction of inaccurate or incomplete data.
• Right to erasure – to request deletion of your personal data where, for example, it is no longer necessary for the purposes for which it was collected or you have withdrawn consent (where consent was the legal basis), and there is no other legal ground for processing.
• Right to restriction of processing – to request that we restrict processing in certain situations (e.g. while we verify the accuracy of data or the grounds for processing).
• Right to data portability – to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit those data to another controller, where processing is based on consent or contract and carried out by automated means.
• Right to object – to object to processing based on our legitimate interest, including profiling, and to object at any time to processing for direct marketing.
• Right to withdraw consent – where processing is based on your consent, you can withdraw it at any time (this does not affect the lawfulness of processing before withdrawal).

To exercise your rights, you can contact us using the details in Section 1. We may need to verify your identity before responding. We will respond within the deadlines set by applicable law.

You also have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (contact details in Section 1) if you believe that your data protection rights have been violated. 

13. CHILDREN’S DATA

The Platform is not intended for children under the age of 16 and we do not knowingly collect personal data from children under 16.

If you are under 16, please do not use the Platform or provide any personal data. If we become aware that personal data of a child has been collected without appropriate consent or legal basis, we will take steps to delete such data.

14. CHANGES TO THIS POLICY

We may update or amend this Privacy Policy from time to time, for example in order to reflect changes in:

• applicable legislation,
• our services and functionalities,
• technologies we use.

The updated Policy will be published on the Website with a new “Effective date”. We encourage you to review it periodically. Continued use of the Platform after the publication of an updated Policy will be deemed acceptance of such changes.

15. CONTACT

If you have any questions, requests or complaints regarding this Privacy Policy or our processing of your personal data, you can contact us at:

Email: alina@ovdejobs.com | rabotavserbii@gmail.com