Privacy Policy

Last Updated: July 2025


We (i.e., the company providing this Privacy Policy or named as the operator of this site in the legal notice) take the protection of your personal data seriously. This Privacy Policy describes how we collect, use, disclose, transfer, and store ("process") your personal data. The personal data we process depends on the context of your interactions with us, the products and services you use, your location, and applicable law.

1. Processing of Personal Data in Connection with Your Use of Our Online Services


Categories of Data and Purposes of Processing

When you use our websites, applications, or online services (collectively, "Online Services"), we process the following categories of data:

  • Contact and Organizational Data: First and last name, address, phone number, email address, job title, company name.

  • Application Data: Resume/CV, cover letter, certificates, qualifications, and professional history (see Section 5 for details).

  • Usage Data: Automatically collected information such as IP address, device identifier, operating system, pages visited, and timestamps.

  • Other Data: Information you provide in forms, support requests, or surveys.


We process this data for the following purposes:

  • To provide, administer, and secure our Online Services.

  • To process your inquiries and orders.

  • To manage application processes, including AI-powered resume matching.

  • To provide customer support and improve our services.

  • For marketing, provided you have given your consent or as permitted by law.

  • To enforce our terms of use and prevent fraud.


2. Processing of Data on Our Marketplaces


For the use of our marketplaces, we additionally process:

  • Payment Data: Credit card information and other payment-related data.

  • Compliance Data: Date of birth, nationality, or ID numbers to fulfill legal obligations.


3. Processing of Our Business Partners' Data


We process data from customers, suppliers, and other business partners for contract management, communication, and to comply with legal requirements.


4. Direct Marketing and Customer Satisfaction Surveys

If you have given your consent, we use your data for direct marketing and to conduct surveys. You can object to this use at any time:
📧 fede@rocketlist.ai


5. Applications and AI-Powered Resume Matching


We offer you the opportunity to upload your resume and other application documents to assist you in your search for suitable job opportunities.

Categories of Data and Purpose of Processing:
We process the data you provide in your application documents (e.g., contact details, professional experience, qualifications, skills).

This data is used for the following purposes:

  • AI-Powered Analysis and Matching (CV Parsing & Matching): To quickly and efficiently suggest suitable job openings, we analyze your resume data using artificial intelligence (AI). This process extracts and structures relevant information from your documents and matches it against the requirements of job vacancies posted with us. This process is used exclusively to provide you with relevant job suggestions. No fully automated decision-making takes place that produces legal effects concerning you or similarly significantly affects you. The final decision on an application or a suggestion is always made by human staff.

  • Inclusion in our Talent Pool: If you give us your explicit consent, we will store your data in our talent pool beyond the specific application process. This allows us to contact you in the future if a suitable position becomes available.


Legal Basis for Processing:

  • The processing of your data for the purpose of AI-powered matching with specific jobs is necessary for the performance of our contract with you for the use of our services (Art. 6(1)(b) GDPR).

  • Inclusion in our talent pool is based on your consent (Art. 6(1)(a) GDPR).

  • The short-term retention of your data after an application process is based on our legitimate interests to defend against potential legal claims (Art. 6(1)(f) GDPR).


6. Data Sharing

We only share your data when necessary, with:

  • Group companies and sales partners.

  • Service providers who support us (e.g., for IT, payment processing, or AI technologies). They are contractually bound to protect your data (Data Processing Agreement).

  • Public authorities, if we are legally required to do so.

International data transfers only occur if an adequate level of data protection is ensured (e.g., through EU Standard Contractual Clauses).


7. Data Retention


We delete your data as soon as the purpose for processing no longer applies and no legal retention obligations exist.

  • Application data is typically deleted no later than 6 months after the end of the application process, unless you have consented to a longer storage period.

  • Data in our talent pool is stored for 2 years. We will ask for your renewed consent before this period expires.


8. Your Rights


You have the right to:

  • Access the data we process about you.

  • Rectify inaccurate data.

  • Erase your data.

  • Restrict the processing of your data.

  • Data portability.

  • Object to the processing of your data.

  • Withdraw your consent at any time with future effect.


9. Data Security


We implement appropriate technical and organizational measures to protect your data against loss, misuse, and unauthorized access.


10. Contact


For questions about data protection, please contact our Data Protection Officer:
📧 fede@rocketlist.ai

You also have the right to lodge a complaint with the competent supervisory authority:
The German Federal Commissioner for Data Protection and Freedom of Information (BfDI)
🌐 www.bfdi.bund.de


11. Specific Provisions for the EU


The processing of your data is based on the following legal grounds under the GDPR:

  • Performance of a contract (Art. 6(1)(b))

  • Legal obligations (Art. 6(1)(c))

  • Legitimate interests (Art. 6(1)(f))

  • Consent (Art. 6(1)(a))


12. Specific Provisions for Switzerland


Complaints can be filed with the Swiss Federal Data Protection and Information Commissioner (FDPIC):
🌐 www.edoeb.admin.ch


13. Specific Provisions for the USA


  • Do Not Track: Our Online Services do not currently respond to browser “Do Not Track” signals.

  • Children: We do not knowingly collect personal data from children under the age of 13.

  • Additional Rights: Residents of certain states may have additional rights. For inquiries, please use the contact information provided in Section 10.