DATA PRIVACY POLICY

Effective as of 22.06.2026. Version of 17.06.2026.

The Company processes a range of personal data of Users, Candidate Users or Employer Users (respectively, representatives of Employer Users that are legal entities, or Employer Users that are natural persons acting as individual entrepreneurs) when they use the Jobber Platform. This privacy policy (hereinafter — the "Policy") describes which categories of personal data are processed, how they are used, what options You have in connection with such processing, as well as how We will respect the rights You hold as a data subject in accordance with the legislation on the protection of personal data, including Regulation (EU) 2016/679 (hereinafter — "GDPR"), Law of the Republic of Moldova No. 133/2011 "On the Protection of Personal Data" — until the entry into force of Law No. 195/2024, and subsequently Law of the Republic of Moldova No. 195/2024 on the protection of personal data.

BEFORE YOU BEGIN USING THE JOBBER PLATFORM OR OUR SERVICES, WE RECOMMEND THAT YOU CAREFULLY READ THIS POLICY IN ORDER TO UNDERSTAND HOW YOUR PERSONAL DATA IS PROCESSED.

1. Who is responsible for the processing of Your data?

JOBBER SPACE S.R.L., IDNO: 1020600038888, with its registered office in the Republic of Moldova, Chișinău, str. Alba Iulia, 75, is the controller of personal data in accordance with the legislation on the protection of personal data applicable in the Republic of Moldova and, depending on the circumstances, with the GDPR, in respect of the personal data of Users collected and processed through the Jobber Platform.

For its personal data processing activities, the Company has appointed a Data Protection Officer (hereinafter — "DPO"), who may be contacted at the following contacts:

Address: str. Alba Iulia, 75, Chișinău, Republic of Moldova

Email: dpo@jobber.md

Phone: +373 22 300 300

In respect of data collected through cookies for marketing purposes, see the separate Cookie Policy.

2. What data do we process?

We process the following categories of personal data:

2.1. Data that You provide to us directly

Creation of a Candidate User account

When creating a Candidate User account, You provide us with data such as: first name, last name, email address, mobile phone number, date of birth.

Creation of an Employer User account

When creating an Employer User account, You provide the data of the company's representative (first name, last name, position, contact information), as well as the company's unique legal entity identifier (IDNO).

On the basis of the IDNO, we request the following data from the State Register of Legal Entities of the Republic of Moldova, maintained by the Public Services Agency (ASP) of the Republic of Moldova, and obtain, to the extent that this information is publicly available or accessible under the law, the following data:

Official name of the company;

Legal status (active / inactive / in the process of liquidation);

Date of registration;

Legal address.

This data is processed for the purpose of verifying the existence, status and legitimacy of the company, preventing fraud and protecting Candidate Users. Verification may be carried out automatically by querying the public register or manually by our Contact Center. If the IDNO is not found in the public register or the Employer User is located outside the Republic of Moldova, the registration application is forwarded to our Contact Center for manual processing and verification.

Candidate User profile data

You may include in your profile and in your CV a range of information, such as: education, professional experience, skills and competencies, photograph, preferred positions and fields of activity, salary expectations, qualification information.

We ask You not to include in Your CV or profile data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, data concerning health, disability, sex life or sexual orientation, biometric or genetic data, as well as other special categories of data, except where their inclusion is strictly necessary and permitted by law. Jobber does not use such data for matching, scoring, filtering, recommendations, advertising or targeting, and if such data accidentally appears in the materials You provide, it is processed with additional safeguards and, depending on the circumstances, may be deleted, masked or ignored in the matching process.

Other data provided by You when using the Jobber Platform

We may store information obtained from You as a result of inquiries sent by email or through chat, as well as in the event of Your participation in our surveys. When You contact our Contact Center (by phone or email), we may retain correspondence or recordings of conversations for the purposes of service quality and employee training.

2.2. Data generated by the Matching Engine

As part of the operation of the Jobber Platform, our Matching Engine generates and processes the following categories of derived data:

Compatibility profile — a percentage indicator of compatibility between the Candidate User's profile and the job listings published by Employer Users, calculated on the basis of professional experience, skills, education, location and expected salary;

Category according to Jobber's proprietary categorization system — an automatic classification of Your professional profile according to a proprietary categorization system developed by Jobber specifically for the platform;

Search activity status — an indication of Your preferences regarding the job search (active search / passive search / not searching);

Professional preferences — positions and fields of activity that You have indicated as preferences when setting up your profile.

2.3. Data on unlock requests

When an Employer User sends a request for access to Your contact data, we process the following:

Identifier of the Employer User who initiated the request;

Request status (pending / accepted / declined / expired);

Date and time of the initiation of the request, of Your response and of the expiry (where applicable);

Your decision to accept or decline the request.

2.4. Data on job applications (direct responses from Candidates)

When You, as a Candidate User, submit an application (response) to a specific job vacancy, we process the following data:

Identifier of the vacancy to which You responded;

Identifier of the Employer User who published the vacancy;

Date and time of submission of the application;

Accompanying materials that You voluntarily attached (cover letter, additional CV, portfolio, etc.);

Status of the review of the application by the Employer User.

When You submit an application, Your profile (including contact data) is transferred to the Employer User by Your explicit action — this process differs from the unlock model (see section 3.11), under which contact data is protected until Your separate consent.

2.5. Communications data via Telegram

If You choose to receive notifications through the Telegram application, we process Your unique Telegram user ID to deliver to You notifications related to Jobber's Services. Connecting Telegram is optional, may be disabled at any time and does not condition the use of the Platform's basic functions. In the notifications delivered through Telegram, we limit the content to the necessary information, while detailed information is generally available in the Jobber account.

2.6. Data on recurring payments

For Employer Users using subscription services (STARTER, BUSINESS or PREMIUM), we process data on recurring payments, including:

Bank card tokens (processed and stored exclusively by our payment service providers: Paynet and MAIB);

Transaction history (amount, date, status, subscription type);

Information on the renewal or cancellation of the subscription.

We clarify that Jobber does not directly store full bank card numbers. Card tokens are managed exclusively by payment processors in accordance with the PCI DSS standard.

2.7. Data collected or generated during Your interaction with the Platform

We record in a log information about when and how You visit or otherwise use Jobber's Services, including how You use the Platform (for example, whether You updated Your CV, whether You submitted applications to vacancies).

We also use cookies and similar technologies to recognize You and Your devices. We also allow third parties to use cookies. The manner of use of these technologies is described in the Cookie Policy.

When using the Jobber Platform, we receive data about Your IP address, IP-based location, proxy server, operating system, web browser and its modules, device identifier. If You use our services from a mobile device, such device may transmit to us data about Your geographic location based on Your mobile device's settings. We will request Your consent before using the geolocation function or other tools to determine Your location.

2.8. Technical and analytical data

We process technical data, such as IP addresses, browser type and version, operating system, internet service provider and other similar information about Your device, for the purpose of ensuring the optimal functioning and security of the Platform. This data is used specifically to prevent cyberattacks, detect unauthorized uses and protect our IT systems.

In addition, we use the Amplitude analytics service (provided by Amplitude Inc.) to collect and analyze data on the use of the Jobber Platform, including actions performed on the platform, frequency of use, user journey and feature effectiveness. Analytics via Amplitude is activated only after obtaining Your consent to non-essential cookies / analytical identifiers, and the data is used for the purposes of improving the product and the user experience.

2.9. Marketing data and third-party cookies

When visiting the Jobber Platform, cookies and similar technologies of the following services may be set:

Meta Pixel (Meta Platforms, Inc.) — for measuring the effectiveness of advertising campaigns on Facebook and Instagram, retargeting and advertising optimization;

Google Ads / DoubleClick (Google LLC) — for measuring the effectiveness of advertising on Google and partner networks, retargeting;

LinkedIn Insight Tag (LinkedIn Corporation) — for measuring the effectiveness of advertising campaigns on LinkedIn and B2B targeting.

A detailed description of these cookies is provided in the Cookie Policy. The setting of marketing cookies takes place only after obtaining Your explicit consent through the cookie banner.

2.10. Data obtained from third parties

We obtain information about Your visits to and interaction with services provided by other organizations when You visit the services of other providers that use advertising, cookies or similar technologies.

In the case of contact persons designated by Employer Users (other than account owners), the data is collected from the respective account owner.

3. For what purpose do we process Your personal data?

Below we inform You of the purposes for which we collect and process Your personal data, as well as the legal basis for such processing.

3.1. Use of the Services by Candidate Users

We process the data of Candidate Users in order to allow them to use Jobber's Services, including:

Creation and management of the user account;

Creation and updating of the professional profile and CV;

Offering relevant vacancies through the Matching Engine;

The ability to respond to job listings published by Employer Users;

Filtering and searching of job listings according to the criteria specified by the Candidate User.

Legal basis: art. 6(1)(b) GDPR — performance of a contract to which the data subject is party, as well as art. 6(1)(f) GDPR — our legitimate interest in providing quality services and improving the user experience.

3.2. Use of the Services by Employer Users

We process the data of Employer Users in order to allow them to use Jobber's Services, including:

Creation and management of the account, including verification of the company's identity via IDNO;

Publication and management of job listings;

Access to anonymized candidate profiles through the Matching Engine;

Management of unlock requests for access to candidates' contact data;

Management of subscriptions and payments;

Prevention and detection of fraud, including through the verification of company data in public registers.

Legal basis: art. 6(1)(b) GDPR — performance of a contract, as well as art. 6(1)(f) GDPR — our legitimate interest in preventing fraud and ensuring the integrity of the Platform.

3.3. Management of relationships with Users and support

We process Your data to manage our relationship with You as a User, to respond to Your inquiries and complaints, and to provide technical support through our Contact Center, email or chat.

Legal basis: art. 6(1)(f) GDPR — our legitimate interest in managing relationships with users and providing adequate support.

3.4. Service communications

We process Your data to send communications about Jobber's Services, including notifications about platform updates, changes to the terms of use, information about Your account and other operational communications.

Operational communications concerning the account, security, unlock requests, applications, changes to terms and the functioning of the Services are not of a marketing nature. Commercial, advertising or marketing communications by email, SMS, web push, Telegram or other electronic channels are delivered only on the basis of Your prior consent, except in the limited cases permitted by applicable law for our own similar goods or services, where You were given an explicit opportunity to object at the moment of data collection and in each subsequent message.

Legal basis: art. 6(1)(b) GDPR — performance of a contract for strictly operational communications, art. 6(1)(f) GDPR — our legitimate interest in managing relationships with Users and delivering necessary non-advertising informational messages, as well as art. 6(1)(a) GDPR — Your consent for commercial, advertising and electronic marketing communications, where required.

3.5. Use of geolocation services

When You use the geolocation function of Your device, we will request Your consent. Geolocation data is used to offer You relevant vacancies depending on Your geographic location.

Legal basis: art. 6(1)(a) GDPR — Your consent.

3.6. Analytics and statistics on the use of the Platform

We process Your data to carry out analysis and collect statistics on the use of the Jobber Platform for the purpose of improving functionality and performance, understanding user behavior and developing new features. To technical logs strictly necessary for the functioning and security of the Platform, the legitimate interest basis applies. For analysis via Amplitude or other tools using cookies, SDKs or non-essential identifiers, the processing is carried out only on the basis of Your consent.

Legal basis: art. 6(1)(f) GDPR — our legitimate interest in respect of technical logs, security, strictly necessary internal statistics and operational improvements not involving non-essential tracking; art. 6(1)(a) GDPR — Your consent for non-essential analytical tools, including Amplitude.

3.7. Connection via Facebook / LinkedIn / Google

If You choose to connect via Your Facebook, LinkedIn or Google account, we will obtain certain information from Your profile on these platforms according to the permissions You grant. This data is used exclusively for the creation and authentication of Your Jobber account.

Legal basis: art. 6(1)(b) GDPR — performance of a contract, as well as art. 6(1)(a) GDPR — Your consent.

3.8. Compliance with legal obligations

We process Your data to comply with legal obligations, including tax, accounting, reporting and compliance obligations under applicable law.

Legal basis: art. 6(1)(c) GDPR — compliance with a legal obligation incumbent upon us.

3.9. Protection of rights and interests

We process Your data to the extent necessary to establish, exercise or defend legal rights, including in the event of legal proceedings, complaints or administrative procedures.

Legal basis: art. 6(1)(f) GDPR — our legitimate interest in protecting rights and interests.

3.10. Matching Engine — AI scoring

We process the data of Candidate Users and Employer Users through the Matching Engine (our Matching Engine, based on artificial intelligence) to efficiently connect candidates with employment opportunities.

The Matching Engine automatically analyzes the candidate's professional profile (experience, skills, education, location, expected salary) and compares it with the requirements of job listings, generating a percentage compatibility indicator. Profile categorization is performed through Jobber's proprietary categorization system — a proprietary classification developed specifically for the needs of the Platform.

Candidates are provided to Employer Users according to a cascaded delivery system, under which Employer Users with higher-tier subscriptions have priority access to newly created or updated candidate profiles. This mechanism is described in detail in Section 7 (Profiling and automated decisions).

For the processing and classification of data, including for the semantic analysis of profiles, we use the artificial intelligence services provided by Anthropic Inc. (Claude API).

Legal basis: art. 6(1)(f) GDPR — our legitimate interest in providing an efficient and relevant matching service, as well as art. 6(1)(b) GDPR — performance of a contract with the platform's users, to the extent that the processing is necessary to provide the requested features.

Before launching or substantially modifying the Matching Engine, Jobber carries out a data protection impact assessment to the extent required by applicable law, analyzing, among other things, the risks of discrimination, scoring errors, the impact on the visibility of Candidates and the differentiated access of Employer Users to anonymized profiles.

The Matching Engine is not intended to use special categories of data in the matching, scoring, filtering or recommendation process. The results generated by the system are of an indicative nature, may be reviewed at the request of the data subject and must not be construed as a guarantee of employment or selection.

3.11. Unlock model — access to candidates' contact data

The Jobber Platform operates on the basis of an unlock model, under which the contact data of Candidate Users is protected and not visible to Employer Users by default.

The process works as follows:

The Employer User views the anonymized candidate profile (without contact data);

The Employer User initiates an unlock request;

The Candidate User receives a notification (via Telegram, email, web push or SMS) about the request;

The Candidate User has 24 hours to accept or decline the request;

If the Candidate User accepts — their contact data is transferred to the Employer User;

If the Candidate User declines or does not respond within the 24-hour period — the request expires and contact data is not transferred.

A maximum of 3 companies may simultaneously have active unlock requests in respect of the same candidate. A cooldown period of 90 days applies to repeat requests from the same company in respect of the same candidate.

Legal basis:

In respect of the Candidate User: art. 6(1)(a) GDPR — the candidate's explicit consent, expressed through the acceptance of the unlock request;

In respect of the Employer User: art. 6(1)(b) GDPR — performance of a contract for the provision of Jobber services.

3.12. Direct responses to vacancies (Candidate applications)

When a Candidate User submits an application (response) to a specific vacancy published by an Employer User, their profile (including contact data, CV and accompanying materials) is transferred to the Employer User directly as part of the response process. This is an explicit action of the Candidate User, by which they themselves initiate the disclosure of their contact data to a specific employer in the context of a specific vacancy.

In contrast to the unlock model (section 3.11), under which the request is initiated by the Employer User and the Candidate User decides on disclosure in response, in the case of a direct response the initiative and consent come from the Candidate User at the moment of submitting the application.

After the application is submitted, the Employer User obtains access to the profile and contact data of the Candidate User for the purposes of reviewing the application and contacting the Candidate regarding the vacancy.

Legal basis:

In respect of the Candidate User: art. 6(1)(a) GDPR — explicit consent, expressed through the action of submitting an application to a specific vacancy;

In respect of the Employer User: art. 6(1)(b) GDPR — performance of a contract for the provision of Jobber services.

3.13. Verification of companies

Upon registration of an Employer User account, we process the company's unique legal entity identifier (IDNO) to verify its existence and legal status by querying the public State Register of Legal Entities, maintained by the Public Services Agency (ASP) of the Republic of Moldova. In this operation, ASP is indicated as the source/administrator of the public register being queried, and not as a recipient of Candidate Users' data.

Verification may result in the automatic population in the account of a range of company data, such as the official name, legal address, date of registration and activity status, to the extent that they are available. If the IDNO is not found in the ASP register or the registering organization is located outside the Republic of Moldova — the registration application is forwarded to our Contact Center for manual processing. In this case, we may request additional documents confirming the existence and legitimacy of the company.

The purpose of verification is to prevent fraud, ensure the authenticity of the legal entities using the Jobber Platform, and protect Candidate Users.

Legal basis: art. 6(1)(f) GDPR — our legitimate interest in preventing fraud, verifying the authenticity of legal entities and ensuring the integrity of the Platform, as well as art. 6(1)(b) GDPR — performance of a contract with the Employer User.

3.14. Notifications via Telegram

We use the Telegram Bot API service (provided by Telegram Messenger Inc.) as an optional communication channel with Candidate Users who have chosen to activate it. Through Telegram we may deliver notifications about:

Unlock requests received from Employer Users;

Recommendations of relevant vacancies;

Application status updates;

Other operational communications related to Jobber's Services.

For the functioning of this channel, we process Your Telegram user ID and transmit through the Telegram infrastructure only the minimal content necessary for the notification. Full details about unlock requests, applications or recommendations are generally available in the Jobber account. The Telegram Bot may be disabled at any time from the Jobber account or directly in the Telegram application.

Legal basis: art. 6(1)(a) GDPR — Your consent to the activation of the Telegram channel, as well as art. 6(1)(b) GDPR — performance of a contract for the provision of Jobber services for the delivery of operational notifications requested through this channel.

3.15. Recurring payments

For Employer Users purchasing subscriptions (STARTER, BUSINESS or PREMIUM), we process the data necessary to manage recurring payments through our payment service providers: Paynet and MAIB.

The processing includes:

Initiation and processing of recurring transactions;

Management of automatic renewal of subscriptions;

Processing of subscription cancellations.

Bank card tokens are stored exclusively by the payment processors (Paynet / MAIB) in accordance with PCI DSS standards. Jobber does not have access to full bank card numbers.

Legal basis: art. 6(1)(b) GDPR — performance of a contract for the provision of Jobber services, including the management of subscriptions and payments.

3.16. Marketing analytics and advertising

With Your explicit consent (obtained through the cookie banner), we use pixel tags and similar technologies of the following services to measure the effectiveness of marketing campaigns and optimize advertising: Meta Pixel, Google Ads / DoubleClick, LinkedIn Insight Tag.

For a detailed description, see the Cookie Policy.

Legal basis: art. 6(1)(a) GDPR — Your consent.

4. To whom do we transfer data?

We may disclose Your personal data to the following categories of recipients:

(i) Persons authorized by us to provide the Services

Including persons located in the European Economic Area or in third countries, including:

Data center providers — for hosting and storing data;

Payment service providers — for processing payments, including Paynet and MAIB (for recurring payments and processing of card transactions);

Email platform providers — for example, Google Mail, for operational and marketing communications;

Telegram Messenger Inc. — through the Telegram Bot API, for the delivery of notifications to Candidate Users (unlock requests, vacancy recommendations, status updates);

Amplitude Inc. — for product analytics and understanding the use of the Jobber Platform, for the purposes of improving the services;

Anthropic Inc. (Claude API) — for the processing and classification of data through artificial intelligence as part of the operation of the Matching Engine, including the semantic analysis of profiles;

public registers maintained by the Public Services Agency (ASP) of the Republic of Moldova — as a public source for verifying the existence and legal status of companies upon registration of Employer Users; such querying does not involve the transfer of Candidate Users' data to ASP;

Meta Platforms, Inc. (through Meta Pixel) — for measuring the effectiveness of advertising campaigns and retargeting — only where You have given consent to marketing cookies;

Google LLC (through Google Ads / DoubleClick) — for measuring the effectiveness of advertising and retargeting — only where You have given consent to marketing cookies;

LinkedIn Corporation (through LinkedIn Insight Tag) — for measuring the effectiveness of advertising campaigns on LinkedIn and B2B targeting — only where You have given consent to marketing cookies.

(ii) Employer Users

The contact data and profile of a Candidate User are transferred to an Employer User in two situations:

Upon a direct response by the Candidate User (see section 3.12) — when the Candidate User submits an application to a specific vacancy, their profile (including contact data and attached materials) is transferred to the Employer User as part of the response process;

Through the unlock model (see section 3.11) — when the Employer User initiates a request to unlock contact data, and the Candidate User explicitly accepts this request.

A transfer may take place to Employer Users located outside the European Economic Area or outside the Republic of Moldova only to the extent that there is a legal basis for the transfer and appropriate data protection safeguards apply, including informing the Candidate and, depending on the circumstances, their explicit consent in the context of a direct response or the acceptance of an unlock request.

(iii) Public authorities

If we have a legal obligation to disclose personal data for the purpose of complying with a legal obligation or a decision of a judicial body, public authority.

(iv) Other situations permitted by law

If we are required to or otherwise permitted to do so in accordance with applicable law.

In addition, Your personal data may be disclosed to third-party providers of cookies and similar technologies as described in the Cookie Policy.

International data transfers

In the event of a transfer of Your data to recipients located outside the European Economic Area or outside the Republic of Moldova (including Telegram Messenger Inc., Amplitude Inc., Anthropic Inc., Meta Platforms, Inc., Google LLC, LinkedIn Corporation or other technical providers), we ensure the implementation of adequate safeguards, such as standard contractual clauses (Standard Contractual Clauses) approved by the European Commission, adequacy decisions, the Data Privacy Framework (DPF) for transfers to the United States — only if the provider holds a valid and applicable certification, binding corporate rules or other mechanisms permitted by applicable law. Before using a transfer mechanism, Jobber verifies its applicability for the specific provider and, depending on the circumstances, adopts additional technical and organizational measures. You have the right to request additional information about the safeguards applied to a specific international transfer by contacting the DPO at dpo@jobber.md.

5. How long do we store data?

We store Your personal data for the period necessary to fulfill the purposes for which it was collected, taking into account applicable legal obligations:

Category of data

Storage period

Technical data (IP addresses, access logs, device information)

90 days from the moment of collection

Candidate User data (profile, CV, professional experience)

For the duration of the active account. In the event of inactivity for 24 months, we may send a prior notification, and the data may be deleted or anonymized; in any case, in the absence of a separate legal basis, the profile and CV are not stored for more than 36 months from the moment of the last activity. You may request deletion at any time

Employer User data (company profile, usage history)

For the duration of the active account + 3 years from the moment of the last activity. Financial-accounting and tax documents and related payment records are stored separately in accordance with applicable legal periods, generally up to 10 years.

Data on unlock requests

For the duration of the subscription + 12 months from the moment of expiry of the subscription

Data generated by the Matching Engine (compatibility indicators, categories)

24 months from the moment of the Candidate User's last activity on the Platform or until the deletion/anonymization of the profile, if this occurs earlier. Upon expiry of the period, the derived data is deleted or irreversibly anonymized

Company verification data (IDNO, data from the ASP register)

For the duration of the Employer User account + 3 years. If registration is declined or not completed — a maximum of 12 months from the moment of the last interaction, except where storage is necessary to protect a right or to comply with a legal obligation.

Data on recurring payments (tokens, transaction history)

Bank card tokens are stored exclusively by the payment service processors. Data on transactions, invoicing and accounting and tax obligations are stored in accordance with applicable legal periods, generally up to 10 years.

Marketing data and cookies

A maximum of 2 years from the moment of collection (see also the Cookie Policy)

Correspondence (email, chat, inquiries)

2 years from the moment of the last communication

Amplitude analytics data

A maximum of 2 years from the moment of collection, only to the extent that valid consent to non-essential analytics exists, with the possibility of withdrawing consent at any time.

Upon expiry of the indicated periods, Your personal data will be deleted or irreversibly anonymized.

6. Data security measures

We adopt adequate technical and organizational measures to protect Your personal data against unauthorized access, loss, destruction or unauthorized disclosure, including:

SSL/TLS encryption — all communications between Your device and our servers are encrypted;

Attack detection systems — continuous monitoring of traffic to detect suspicious activity and unauthorized access attempts;

Regular backups — periodic backups of data, stored in separate and protected locations;

Access control — restricted access to personal data, granted only to authorized personnel on the basis of the need-to-know principle;

Vulnerability reporting — we have a process for reporting and remediating security vulnerabilities. If You have discovered a vulnerability, please contact us at dpo@jobber.md;

Payment processor compliance — our payment service providers (Paynet/MAIB) comply with the PCI DSS standard for the protection of card data.

7. Profiling and automated decisions

7.1. Matching Engine — automatic scoring

Jobber uses a Matching Engine based on artificial intelligence, which performs profiling and automated decision-making by scoring in order to connect Candidate Users with relevant employment opportunities. The scoring results are of an indicative nature and do not, in themselves, produce legal consequences for the Candidate User.

What data is used for scoring:

The Matching Engine analyzes the following categories of Candidate User data to calculate the compatibility indicator with each job listing:

Professional experience — fields, positions held, duration of experience;

Skills and competencies — technical and cross-functional skills indicated in the profile;

Education — level of education, specialization, educational institution;

Location — address or area of residence, distance to the place of work, availability for remote work;

Salary expectations — the range indicated by the candidate, compared with the employer's offer;

Category according to Jobber's proprietary categorization system — automatic classification of the profile according to Jobber's proprietary categorization system.

How scoring works:

On the basis of this data, the Matching Engine calculates a percentage compatibility indicator, reflecting the relevance of the candidate's profile for a specific position. The indicator is calculated through a weighted mathematical formula taking into account each component indicated above, supplemented by semantic analysis based on artificial intelligence (provided by Anthropic Inc.). Jobber implements measures to reduce the risk of errors, discrimination and excessive use of data, including testing, monitoring, limiting the data used and the possibility of human review at the request of the data subject.

The Matching Engine deliberately does not use special categories of personal data for scoring or recommendations. In the event that such data is accidentally included in a CV or profile, Jobber does not use it as matching parameters and may apply measures to delete, mask the content or exclude it from automated analysis.

For types of processing which, by their nature, scope, context or purposes, may give rise to a high risk to the rights and freedoms of data subjects, Jobber carries out a data protection impact assessment and periodically reviews the technical and organizational measures applied to the Matching Engine.

7.2. Cascaded Delivery

The Jobber Platform uses a mechanism for the cascaded delivery of candidate profiles to Employer Users, differentiated depending on the Employer User's subscription level. Employer Users with higher-tier subscriptions have priority access to newly created or updated candidate profiles compared with Employer Users with lower subscription tiers. The specific delivery timing parameters may be adjusted by us periodically to ensure the optimal operation of the Platform.

This automated mechanism may affect the timing and volume of information displayed to different Employer Users, however it does not disclose the contact data of a Candidate User without their consent or without their explicit action of direct response. Candidate Users retain all rights in connection with profiling and automated decisions, described in section 7.4 below.

7.3. Unlock Queue

The unlock request system operates on the basis of the following automatic rules:

A maximum of 3 companies may simultaneously have active unlock requests in respect of the same candidate;

Priority in the queue is determined by the Employer User's subscription level — requests from users with higher-tier subscriptions are processed with priority;

24-hour timeout — if the candidate does not respond within 24 hours, the unlock request automatically expires and is considered declined;

90-day cooldown period — the same company may not send a new unlock request in respect of the same candidate within 90 days from the moment of the last request.

In addition, Jobber reserves the right to restrict user activity upon detection of suspicious use (for example, attempts to circumvent the above-mentioned restrictions or other violations affecting the security of the Platform and the interests of other users).

7.4. Your rights in connection with automated decisions

Pursuant to art. 22 GDPR and the relevant provisions of applicable national legislation, You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal consequences or similarly significantly affects You, with the exceptions permitted by law and with appropriate safeguards.

In respect of the automated decisions described above, You have the right:

To human intervention — You may request that a Jobber employee manually review any automated decision affecting You, including the compatibility indicator, the position in the unlock queue or the application of the timeout;

To express Your point of view — You may contest any automated decision and provide us with additional relevant information;

To file an objection — You may file an objection against any automated decision by sending a request to dpo@jobber.md.

We undertake to consider each request and objection within 30 days from the moment of receipt.

Legal basis: art. 6(1)(f) GDPR — our legitimate interest in providing an efficient and relevant matching service, in compliance with art. 22 GDPR and the relevant provisions of national legislation regarding automated individual decisions and profiling, including the right to human intervention, to express Your point of view and to contest the result.

8. What rights do You have as a data subject?

Pursuant to the legislation on the protection of personal data, including the GDPR and Law of RM No. 133/2011 — until the entry into force of Law No. 195/2024, and subsequently Law of RM No. 195/2024 — You have the following rights:

8.1. Right of access

You have the right to obtain from us confirmation as to whether we process Your personal data, as well as access to this data and information about its processing. You may request a copy of Your personal data that we process.

8.2. Right to rectification

You have the right to obtain the rectification of inaccurate personal data relating to You, as well as the completion of incomplete data.

8.3. Right to erasure ("right to be forgotten")

You have the right to obtain the erasure of personal data relating to You, under the conditions provided for in art. 17 GDPR, including when the data is no longer necessary for the purposes for which it was collected, when You withdraw consent or when the processing is unlawful.

8.4. Right to withdraw consent and right to object

You have the right to withdraw Your consent at any time, without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal. You also have the right to object to the processing of Your data on the basis of our legitimate interest, including for the purposes of direct marketing.

8.5. Right to restriction of processing

You have the right to obtain the restriction of the processing of Your personal data under the conditions provided for in art. 18 GDPR, including when You contest the accuracy of the data or object to the processing.

8.6. Right to data portability

You have the right to receive the personal data relating to You that You have provided to us, in a structured, commonly used and machine-readable format, as well as the right to transmit this data to another controller, without hindrance from our side.

8.7. Right to lodge a complaint

You have the right to lodge a complaint with the competent supervisory authority if You consider that the processing of Your personal data violates applicable law.

The competent supervisory authority in the Republic of Moldova:

National Center for Personal Data Protection Address: str. Serghei Lazo 48, MD-2004, Chișinău, Republic of Moldova Email: centru@datepersonale.md

8.8. How You can exercise Your rights

To exercise any of the above-mentioned rights, You may contact us:

Email: dpo@jobber.md

Mail: Data Protection Officer, Jobber Space S.R.L., str. Alba Iulia, 75, Chișinău, Republic of Moldova

Phone: +373 22 300 300

We will respond to Your request within no more than 30 days from the moment of its receipt. In the event that the request is complex or we receive a large number of requests, the period may be extended by a further 60 days, in which case we will inform You of the extension.

9. Changes to this Policy

This Policy may be updated periodically to reflect changes in our activity, in legislation or in data processing practices. The current version of the Policy is always available on the Jobber Platform. We additionally communicate substantial changes to You by email or through a notification on the Platform at least 30 days before they take effect.

This Privacy Policy is effective as of 22.06.2026. Version of 17 June 2026.