Privacy Policy

SalamJobs is aimed at Muslims. An account, a job alert or an application via SalamJobs may therefore allow conclusions about your religion. Religious beliefs are a special category of personal data (Art. 9 GDPR).

We therefore process your data only with your explicit consent (Art. 9(2)(a) GDPR). You give it when registering and when subscribing to the job alert by ticking a separate box; we store the time and the version of the consent text. Without this consent we cannot offer you an account or a job alert, because the religious context is part of the service itself.

You can withdraw your consent at any time with effect for the future: by deleting your account, unsubscribing from the job alert or writing to us. We never pass on data with a religious context to advertising networks or data brokers.

Visiting the website: When you open our pages, our hosting provider Vercel processes technically necessary data: IP address, date and time, page requested, referring page, browser and operating system. This is required to deliver the website and protect it against abuse. Server logs are kept only briefly for troubleshooting and security. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Account and registration: For an account we store your email address and, if you provide them, your name, phone number, place of residence, work experience, qualifications, CV and profile photo. You sign in with a one-time code or a password (stored only as a hash). Legal basis: the contract for using SalamJobs (Art. 6(1)(b) GDPR) and your explicit consent (Art. 9(2)(a) GDPR, see section 2).

Job alert and emails: For the job alert we store your email address, city and search preferences and send you matching jobs, usually once a week. You confirm with a code (double opt-in). Legal basis: your consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR); you can unsubscribe at any time via the link in every email. We also send emails required for your account, such as sign-in codes and confirmations (Art. 6(1)(b) GDPR).

Invitation links: If you register via another person's invitation link, we store the invitation code with your account. The inviting person only sees how many people joined via their link, not who. Legal basis: legitimate interest in fair referrals (Art. 6(1)(f) GDPR).

Applications: When you apply via SalamJobs, we pass your application details (profile, CV, message) to the employer, who is notified by email. The employer is responsible for any further processing. For ads from external sources, such as the job board of the German Federal Employment Agency, you apply directly with the employer or on the original page; we transmit nothing there. Legal basis: Art. 6(1)(b) and Art. 9(2)(a) GDPR.

Employer accounts: For employers we store company details, contact details of the contact persons and job ads. Legal basis: Art. 6(1)(b) GDPR.

Rafik (AI chat): Rafik is an AI system, not a human. When you chat with Rafik, your input is processed by our processor Anthropic (Claude API, Anthropic PBC, USA) to build your search profile. Anthropic does not use API content to train AI models. Information about religious needs (e.g. prayer room, Ramadan) is stored only if you explicitly consent in the chat (Art. 9(2)(a) GDPR). Rafik gives general guidance, not legal or tax advice.

Analytics without storing anything in your browser: We count page visits and individual steps such as a registration in our own counter on our servers. Only the event, the page, the referring domain or campaign parameters and a random identifier that exists only while the page is open are recorded. We store nothing in your browser, record no IP address and no user ID, and use no third-party services. Legal basis: legitimate interest in measuring the use of our service (Art. 6(1)(f) GDPR).

Job views and apply clicks: For the view statistics of individual job ads we record the time, device type and referring page, and for logged-in users the user ID. IP address and browser identifier are stored only to detect abuse and deleted automatically after seven days. Clicks on “Apply” for external ads are stored with your account so that we can ask you afterwards whether you applied. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). This data does not feed into an interest profile. Interest profile

Contact: If you write to us by email or via the contact form, we process your details to handle your request and delete them when they are no longer needed for that purpose. Legal basis: Art. 6(1)(b) or (f) GDPR.

Our Instagram and LinkedIn pages: We run profiles on Instagram (Meta Platforms Ireland Ltd.) and LinkedIn (LinkedIn Ireland Unlimited Company). When you visit them, the networks process your data under their own privacy policies. We are joint controllers with the networks for their page statistics (Art. 26 GDPR); you can also exercise your rights directly with the network. Legal basis for our presence: legitimate interest in public relations (Art. 6(1)(f) GDPR).

What it is: If you are logged in and have given your explicit consent, we build a personal interest profile from your use of SalamJobs in order to recommend more relevant jobs to you — on the website. Without this consent, and for visitors without an account, no profiling takes place. Consent is voluntary; you can use SalamJobs without restriction without it, just without recommendations based on your behaviour.

What we record: Viewed job ads, searches, filters and clicks on features (including Muslim-friendly features such as a prayer room or halal food), adding and removing favourites, clicks on “Apply” and clicks on recommendations — each with your user ID and a timestamp. We also take into account the applications, favourites and saved searches already stored in your account. We do not store your IP address or any device or browser data for this. Once a day we calculate your profile from this: preferred job categories and locations, the Muslim-friendly features you explicitly filter for or have saved in search alerts, and the number of your activities in the last 30 days. We do not store search terms. The calculation follows fixed rules inside our database, without AI models and without external services.

Legal basis: Your explicit consent under Art. 6(1)(a) and Art. 9(2)(a) GDPR. Because SalamJobs is a job platform for Muslims and the profile may contain Muslim-friendly workplace features, it may allow conclusions about your religious beliefs — a special category of personal data. Your consent therefore explicitly covers this point as well. As proof, we store the time, wording and version of the consent text you agreed to, together with the IP address and browser identifier of the granting request.

Retention: Individual events (raw data) are deleted automatically after 180 days; events from the last 90 days are used for the calculation. The profile is kept until you withdraw your consent; it is recalculated daily. Applications, favourites and saved searches remain part of your account independently of this until you remove them yourself.

View, reset, withdraw: You can view your profile at any time under Dashboard → “My Interests”. There you can reset it: we then delete all stored events and the profile; your consent remains in place, and the profile is rebuilt from your future use and from the applications, favourites and saved searches still stored in your account. You can withdraw your consent at any time with effect for the future — under “My Interests” or in the Privacy Center. When you withdraw, we delete all stored events and your profile — usually immediately, at the latest the following night — and stop recording new events. The lawfulness of processing carried out before the withdrawal is not affected (Art. 7(3) GDPR). Go to the Privacy Center

No disclosure to third parties: We do not pass your interest profile or the underlying events on to third parties — in particular not to employers, advertising networks or data brokers — and we do not use them for advertising. Only you and, where necessary for operation, support and troubleshooting, SalamJobs administrators can view them. Internal statistics use profiles only in aggregated form and show only groups of at least ten people. Our hosting providers process the data on our behalf (processing under Art. 28 GDPR).

No automated decision-making: The profile only influences which jobs we suggest to you and in what order. There is no automated decision within the meaning of Art. 22 GDPR: the profile has no influence on your applications or on how employers handle them, and all jobs remain findable for you via search and filters.

Hosting: The data is stored in our database at Supabase in the EU region Frankfurt (eu-central-1). The website and the interfaces through which events are transmitted are operated on our behalf by Vercel Inc. (USA); transfers to the USA are covered by EU standard contractual clauses.

We use the following service providers, who process data only on our behalf and on our instructions (Art. 28 GDPR):

• Vercel Inc., San Francisco (USA): website hosting
• Supabase Inc. (USA), data stored in the EU region Frankfurt: database, sign-in, file storage
• Sendinblue SAS (Brevo), Paris (France): sending emails
• Anthropic PBC, San Francisco (USA): AI chat Rafik
• Google Ireland Ltd., Dublin (Ireland): mailbox for requests to us

Employers also receive your application when you apply to them (see above). We pass data to authorities only where we are legally obliged to. We do not sell data.

Vercel, Supabase and Anthropic are based in the USA. Transfers there are based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) and, where the provider is certified under the EU-US Data Privacy Framework, on the European Commission's adequacy decision (Art. 45 GDPR).

We keep account data until you delete your account. After deletion we remove it within 30 days unless statutory retention obligations apply. We keep job alert data until you unsubscribe and contact requests until they are resolved. The analytics contain no personal data.

• Access to your data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

Right to object: Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

Right to lodge a complaint: You can lodge a complaint with a data protection supervisory authority, in particular in the federal state or country where you live (Art. 77 GDPR).

For all requests, an email to the address in section 1 is sufficient.

We transmit data in encrypted form (TLS). Our database provider stores it encrypted and backs it up regularly. Access is restricted at database level (row level security); only the operator has access to personal data.

No automated decision within the meaning of Art. 22 GDPR takes place. SalamJobs is intended for people aged 16 and over. We update this policy when our service or the law changes; the version published here applies. We inform registered users of material changes by email.