Privacy Policy
Last updated: March 30, 2026
This privacy policy describes how ITALY SOFT S.R.L. collects, uses, and protects the personal data of users of the joberix.com website and the Joberix platform, in accordance with Regulation (EU) 2016/679 (GDPR). In the event of any discrepancy between language versions, the Italian version shall prevail.
1. Data Controller
ITALY SOFT S.R.L.
Via Ribet 14, 10062 Luserna San Giovanni (TO), Italy
VAT: IT11995830012
Email: info@joberix.com
For any questions regarding personal data protection, you may contact the Data Controller at the email address above.
2. Personal data we collect
We collect the following categories of personal data:
a) Browsing data
Our IT systems automatically collect certain data transmitted as part of standard internet communication protocols (IP address, browser type, operating system, pages visited, access times).
b) Cookies
Our website uses technical cookies and, with your consent, analytics cookies. For detailed information, please see our Cookie Policy.
c) Voluntarily provided data
Personal data you provide when registering on the platform (name, email, company details) or through direct communications.
d) Payment data
Payment data is handled directly by our payment service provider and is not stored on our servers.
e) Candidate data
When recruiters use the platform, candidate data is processed including: CVs, contact information, professional skills, and AI voice interview recordings and transcripts.
3. Purposes and legal basis
| Purpose | Legal basis | Data processed |
|---|---|---|
| Providing the Joberix service | Performance of a contract — Art. 6(1)(b) | Registration and usage data |
| Website statistical analysis | Consent — Art. 6(1)(a) | Analytics cookies, browsing data |
| Customer support | Performance of a contract — Art. 6(1)(b) | Contact data, communications |
| Legal and tax obligations | Legal obligation — Art. 6(1)(c) | Billing data |
| Platform security | Legitimate interest — Art. 6(1)(f) | Access logs, browsing data |
4. Candidate data processing
Joberix acts as a Data Processor under Article 28 GDPR with respect to candidate data entered by recruiters into the platform.
The recruiter (Joberix customer) is the Data Controller of their candidates' data and must ensure they have a valid legal basis for processing.
Candidate data processed by the platform includes:
- CVs and professional data
- Contact information
- AI-generated evaluations and scores
- AI voice interview recordings and transcripts
A Data Processing Agreement (DPA) is available for all customers on paid plans.
5. Automated decision-making and artificial intelligence
Joberix uses artificial intelligence systems to:
- Generate optimized job descriptions
- Analyze and evaluate CVs
- Conduct structured voice interviews
- Produce candidate scores and recommendations
These activities produce evaluations and suggestions but do not constitute automated decision-making within the meaning of Article 22 GDPR. The final hiring decision always rests with the recruiter (a human being).
You may request information about the logic used by the algorithms by writing to info@joberix.com.
6. Data recipients
Personal data may be shared with the following categories of recipients:
- Google LLC — hosting services (Google Cloud Platform) and analytics (Google Analytics)
- Anthropic, PBC — AI processing for CV analysis and content generation
- ElevenLabs, Inc. — voice technology for AI interviews
- Payment service providers — transaction processing
All suppliers are bound by contractual agreements compliant with Article 28 GDPR.
7. International transfers
Some of our suppliers are based in the United States. Data transfers to the US are carried out based on:
- EU-US Data Privacy Framework — European Commission adequacy decision of July 10, 2023
- Standard Contractual Clauses (SCCs) — adopted by the European Commission under Article 46(2)(c) GDPR
A copy of the appropriate safeguards may be requested by writing to info@joberix.com.
8. Data retention
| Data type | Retention period |
|---|---|
| Browsing data and analytics cookies | Up to 26 months |
| User account data | Duration of the contractual relationship + 10 years (tax obligations) |
| Candidate data | Until deleted by the recruiter (Data Controller) |
| Voice interview recordings | Until deleted by the recruiter (Data Controller) |
| Billing data | 10 years (tax obligations under Italian law) |
9. Your rights
Under Articles 15–22 of the GDPR, you have the right to:
- Access (Art. 15) — obtain confirmation of processing and a copy of your data
- Rectification (Art. 16) — correct inaccurate or incomplete data
- Erasure (Art. 17) — request deletion of your data ("right to be forgotten")
- Restriction (Art. 18) — restrict processing in certain circumstances
- Data portability (Art. 20) — receive your data in a structured, machine-readable format
- Object (Art. 21) — object to processing based on legitimate interest
- Withdraw consent (Art. 7) — withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal
To exercise your rights, write to: info@joberix.com
We will respond within 30 days of receiving your request, as required by Article 12(3) GDPR.
10. Right to lodge a complaint
You have the right to lodge a complaint with the competent supervisory authority:
Garante per la Protezione dei Dati Personali (Italian Data Protection Authority)
Piazza Venezia 11, 00187 Rome, Italy
Website: www.garanteprivacy.it
Email: garante@gpdp.it
11. Changes to this policy
The Data Controller reserves the right to modify this privacy policy at any time. Changes will be published on this page with an updated date.
We encourage you to review this page periodically.