PRIVACY NOTICE
How we handle your information
A LinkedIn profile PDF that you export and upload is handled as a one-time career document snapshot. Careers Denmark does not connect to, scrape or continuously sync your LinkedIn account.
1. Controller and contact
Careers Denmark is an independent service operated in Denmark by Rasmus Julius Risvig Hansen. Questions or requests about personal data can be sent to hello@careersdenmark.dk or submitted through our Contact page.
2. Information we process
- Account information, including name, email address and authentication identifiers.
- CVs, résumés and previous applications that you choose to upload, including extracted text and hyperlinks.
- A browser-bound anonymous identifier when you use document matching without creating a permanent account.
- Your inferred capability profile, manual skill adjustments, experience and education.
- A private career timeline prepared only from documents you explicitly designate as CV evidence, documents you explicitly designate as education evidence, or a LinkedIn profile PDF you explicitly provide, including employer titles, interpreted functional titles, dates, responsibilities, role scope, provenance and confidence. Unconfirmed and private documents do not create or enrich career or education history.
- Career-direction questionnaire answers that you choose to provide, including preferred responsibilities, achievements, leadership style, work environment, mobility and professional boundaries.
- Your confirmations, corrections or removals of timeline interpretations. The original source wording remains separate; candidate-confirmed facts receive the strongest evidentiary status.
- Optional professional-profile information, including a profile photograph, an introduction video of up to 1 minute 30 seconds, headline, location, phone number, summary, desired roles and recruiter-discovery preference. You may also add a date of birth; it remains private unless you separately enable age sharing, in which case approved recruiters receive only the calculated current age and never the date itself. If you use the built-in recorder, the site requests camera and microphone access; the live stream remains in your browser and only the take you explicitly choose is uploaded.
- An optional private commute origin, chosen travel mode and maximum distance or travel time. When you ask the service to calculate a commute, we also retain the resulting distance and duration for relevant workplace locations so they do not need to be recalculated on every visit.
- Saved jobs, role-relevance feedback, match scores, application stages, notes, contacts and generated drafts.
- Career-nudge acknowledgement and snooze timestamps, stored with a compact state version so the red unread badge can clear and remain cleared across devices. Nudge state does not store CV content, application notes or job titles.
- Recruiter-supplied job descriptions and the professional search criteria inferred from them. The uploaded job-post file and full extracted text are processed transiently and are not retained; only criteria a recruiter chooses to save are stored.
- Job-alert preferences and delivery history when alerts are enabled.
- Company requests and limited operational logs, including request time, a pseudonymised IP hash, feature used, outcome and non-content error details. Audit events never include CV, application, questionnaire-answer, introduction-video, date-of-birth or full recruiter job-post content.
3. Why and on what basis
Account operation, document analysis, job matching, application tracking and requested exports are processed to provide the service you ask for (GDPR Article 6(1)(b)). Security, abuse prevention and limited operational logging are based on legitimate interests (Article 6(1)(f)). Job-alert emails are sent only when you actively enable them. Platform news and permission for Careers Denmark to contact you about relevant recruitment opportunities each require a separate, optional choice (Article 6(1)(a)). Neither is required for job alerts or core functionality.
Controlled recruiter discovery is based on your explicit, optional choice (Article 6(1)(a)). You can withdraw that choice under Profile. Withdrawal removes your profile from new recruiter searches; an earlier introduction request or information a recruiter lawfully retained may need separate handling. We retain consent and withdrawal timestamps as compliance evidence. Your uploaded CV/application files, their extracted text, phone number and email address are not shown in the recruiter workspace.
Improving the service: your role-relevance feedback, saved-job activity and optional job-fit scores (for example when you rate how well suggested jobs fit your CV) are also used in aggregated, pseudonymised form to improve the matching quality of the service for all users, based on legitimate interests (Article 6(1)(f)). Individual scores are never shown to other users or to recruiters, are never used to profile you for any purpose other than your own matching, and models or statistics derived from them do not contain your identity. You can use the service fully without providing any scores.
The service is not intended to process special-category data under Article 9. If such information is included incidentally, it is not intentionally used as a matching factor, and it is excluded from any data used to improve the service.
4. Matching and profiling
The service automatically compares the documents you explicitly designate as CV evidence, together with your settings, with job descriptions. Documents default to private use in the bulk uploader; older uploads remain private until you choose “Use as CV evidence” or “Use as education evidence.” Automatic document classification is advisory and cannot promote an unconfirmed document into matching. Where a role can be separated reliably, the service also prepares a private timeline with an employer title, interpreted functional title, dates, responsibilities, role scope, provenance and a visible confidence state. Candidate-approved or corrected facts receive the strongest weight.
You can change a document back to private, approve, correct, remove or leave a timeline interpretation unreviewed. Removing an imported interpretation creates a private suppression record so a rebuild does not restore it silently. Confirmation changes the status of the interpreted fact; it does not erase the original source wording. Career aspirations and suggested next roles remain a separate direction signal and never become historical evidence merely because they were suggested. If you mark a role relevant or not relevant, that private feedback may adjust similar future rankings within a limited range. Scores are recommendations for your own use, do not decide whether you can apply and do not make hiring decisions with legal or similarly significant effects.
The optional recruiter-profile draft and application drafts are generated within the service from your career evidence and settings. They are not published or submitted until you review them. Inferred language proficiency, dates, titles, achievements and other factual claims must be reviewed by you. Timeline and career-direction answers remain private unless a separate feature clearly asks you to share specific information.
Professional-profile discovery is separate and off by default. Approved recruiters and hiring managers can define professional criteria directly or upload a job description that is converted into editable capability, role, location, language and experience criteria. Language fit contributes no more than five points. The resulting score is a decision-support ranking, not a hiring decision; the hiring team remains responsible for an individual assessment. Candidate ranking, retrieval, filters, alerts and recommendations do not use profile photographs, video, date of birth, age, gender or other protected characteristics. If you add a date of birth, it remains private; only a calculated age can appear to an approved recruiter, and only after you separately enable both professional-profile discovery and age visibility. An approved hiring team may send a private, role-specific invitation to apply, but sees only the profile fields you chose to share and does not receive your contact information, date of birth or source documents. You remain free to ignore or decline an invitation. Access is manually reviewed and may be suspended.
5. Storage, providers and transfers
Private profile data and documents are stored using a Supabase project configured in the EU. Vercel hosts and delivers the website and processes operational request data. One.com delivers requested job-alert email and may hold independently encrypted recovery copies of uploaded documents in its Danish hosting environment. Recovery files are encrypted before transfer and are not stored in the public website directory. If you choose Google sign-in, Google and Supabase process the authentication request. If you separately allow analytics, Google Analytics receives limited website-use and device information; CV text, application contents and account-profile fields are not deliberately included in analytics events. CV text is not sent to Google. The service also includes an optional AI-assisted document analysis feature that, when enabled, sends the text of documents you have explicitly designated as CV or education evidence to Anthropic solely to help interpret roles, dates and responsibilities. This feature is off by default and requires separate processor and privacy-policy approval before it can be enabled; deterministic, rule-based parsing runs regardless and remains the baseline for your timeline. When AI-assisted extraction is active, its output is advisory: interpreted facts keep a visible confidence and provenance, and nothing is added to your confirmed timeline without your review.
If you explicitly save and calculate an optional commute preference, the commute origin and relevant workplace addresses are sent from the server to Google Maps Platform Routes API solely to calculate route distance and duration for your selected car or public-transport mode. The service stores the resulting route estimates privately with your account. The commute origin and route estimates are not shown to employers or recruiters and are not sent to Google Analytics. You can disable or replace the preference under Profile, and account deletion removes the stored preference and estimates under the retention process described below.
Provider support, security services or subprocessors may involve processing outside the EEA. Where that occurs, the relevant provider’s lawful transfer mechanism, including adequacy decisions or standard contractual clauses as applicable, is relied upon. Provider terms and subprocessor information should be reviewed as part of the service’s recurring compliance review.
6. Retention
Signed-in account information and uploaded material are retained while your account remains active. An account that has had no sign-in or other recorded service activity for approximately 23 months receives an email warning and is scheduled for deletion 30 days later. Signing in or using the account before that date cancels the scheduled deletion. You can delete a document or your complete account sooner at any time.
Self-service or inactivity-based account deletion removes private uploaded files, profile data, drafts, preferences and application history. Encrypted recovery copies are removed when no retained recovery manifest references them; the application recovery window is currently 14 days. One.com's own web-space backup cycle may retain a deleted encrypted object for up to a further 14 days, so expiry from all routine recovery copies may take up to 28 days. Guest profiles are temporary: once an anonymous profile reaches 30 days, its account, documents and derived profile are removed in the next daily cleanup. You can delete individual guest documents sooner from the Profile page.
Operational audit metadata is removed after 90 days during the daily maintenance run unless needed longer to investigate security or abuse. Provider logs follow the relevant provider’s operational retention. Do not use the service as your only archive.
7. Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction, objection and a portable copy of your information. You may also complain to the Danish Data Protection Authority. We aim to respond within one month. Signed-in users can download a personal-data export and permanently delete their account from Account & privacy. If those controls do not meet your request, use the Contact page.
8. Security and breaches
Private database rows and stored files use account ownership rules. Connections use HTTPS and secrets are kept outside the public codebase. Uploaded files are checked for type, signature, size, unsafe archive expansion and common active or embedded content. These controls are not a guarantee that every malicious file can be detected, and no internet service can guarantee absolute security. If a breach creates a reportable risk, we will follow applicable notification requirements.
9. Changes
Material changes will be dated here. Where a change materially affects account data, users will be informed or asked to acknowledge the revised notice as appropriate.