2. What Data We Collect
a) Account Data
- Name
- Email address
- Profile information
b) Usage Data
- IP address (anonymised for analytics)
- Device information
- Pages visited
c) Job-related Data
- Job applications
- Messages sent via the contact form
3. Purpose of Processing
We process data to:
- Provide platform functionality
- Match users with relevant jobs
- Improve our services
- Ensure platform security
4. Legal Basis (GDPR & nFADP)
We process your data under the following legal bases:
- Contract (Art. 6(1)(b) GDPR) — for providing core platform functionality
- Legitimate interest (Art. 6(1)(f) GDPR) — for security and service improvement
- Consent (Art. 6(1)(a) GDPR) — for email alerts (double opt-in), which you can withdraw at any time
We also comply with the revised Swiss Federal Act on Data Protection (revFADP / nDSG), in force since 1 September 2023. As a Swiss-based controller, we apply both EU GDPR and Swiss nDSG standards to all personal data we process.
5. Third-Party Services
We use the following processors:
- Supabase — database and file storage (EU region)
- Resend — transactional email delivery
- Sentry — error monitoring (processes IP address and browser information)
- Umami — privacy-friendly analytics (no cookies, IP anonymised)
6. Cookies
We use only strictly necessary cookies: session cookies for employer account authentication (deleted when you close your browser). No tracking, advertising, or analytics cookies are used. Umami Analytics processes page view data without any cookies. Sentry error monitoring does not use persistent cookies.
7. Data Retention
- Account data: retained while your account is active and deleted within 30 days of an account deletion request
- Job applications and messages: retained for up to 6 months
- Email alert subscriptions: retained until you unsubscribe
8. Your Rights (GDPR & nFADP)
You have the right to:
- Access your data
- Correct inaccurate data
- Request erasure of your data
- Object to or restrict processing
- Data portability
- Lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at fdpic.ch, or with the data protection authority in your EU country of residence
9. Security
We implement technical and organisational measures to protect your data.
10a. Supervisory Authority
Swiss residents may contact the Federal Data Protection and Information Commissioner (FDPIC): Feldeggweg 1, 3003 Berne, Switzerland — fdpic.ch. EU/EEA residents may alternatively contact the data protection supervisory authority in their country of residence.
10. Contact
For any privacy-related questions or to exercise your rights, please contact:
Markus Vesely
Dorfstrasse 37, 3624 Goldiwil (Thun), Switzerland
hello@nextstopalps.com