webzap/jobs source code

Privacy policy

This is a translation for your convenience. Only the original version is legally binding.

Last updated: 26 September 2026 (languages, welcome email, ad campaign counts, external links, link click counts, anonymous email statistics)

1. Controller

Lennart Schreiber
Calle de los Sargos 4
30383 Los Nietos (Cartagena), Murcia, Spain
Email: kontakt@webzap.eu

We have not appointed a data protection officer, as we are not legally required to.

2. What we collect

Please do not enter your name or other personal details in your text – no phone number, address, health information, or data about other people. We only need what describes your job search intent (field, interests, experience, preferred location, conditions).

3. Purposes and legal basis

These are the only purposes. The service is free of charge. We do not sell your data, share it with third parties for their own purposes, or use it for analytics.

Job matching. Our server compares open job postings with the search criteria derived from your text (rules, no AI provider involved) and emails you the best new matches at the frequency you chose. Your 👍/👎 feedback is used to improve your future matches – for example, “not this company” stops jobs from that company, “too junior” or “wrong location” filters similar jobs, and 👍 favours similar roles. After several votes, our own language model (section 3) re-analyses your text together with your feedback to refine your search criteria; the result is shown on your manage page.

Sponsored jobs – a one-way street. To keep the service free, companies can pay us to include their job in our emails. We select, on our own server, which subscribers' criteria match the job; the company never receives your email address, your text, your feedback or any other data about you – at most aggregated numbers (e.g. “your job was included in 120 emails, 14 people rated it 👍”). Sponsored jobs are always labelled “Sponsored” (Art. 20 LSSI-CE).

Partner links. Some job links come from partner job search engines (currently Adzuna, Jooble and/or Careerjet) and are labelled “Partner link”. These links contain our partner ID: when you click one, you leave our email and visit the partner's website, which learns that the click came from us and may pay us a small fee. From that moment the partner processes your visit (e.g. your IP address and cookies) as an independent controller under its own privacy policy. We never pass your email address or other data to partners.

External links. Some large job sites cannot be searched automatically by our service. So that you don't miss them, an email may end with up to two links to such sites (labelled “External link”), with a search already filled in from your criteria – for example the job title and, if the site supports it, your city (e.g. stepstone.de/jobs/engineering-manager/in-hamburg). We only show sites that fit your criteria (country, field, type of work, languages), each at most once a month, and only in emails we send anyway. When you click such a link, the site receives the search terms contained in the link together with your visit (e.g. your IP address and cookies) and processes them as an independent controller under its own privacy policy. We have no partnership with these sites, receive nothing for your click and pass them no other data. To avoid repeating a link, we store only a one-way hash of each link shown to you, which is deleted with your entry.

Email statistics – anonymous, for technical reasons. We send our emails through Brevo (see section 5). For technical reasons, Brevo adds a small invisible image to every email it sends (to register that it was opened) and routes the links through its own servers (to register clicks); as a sender we cannot switch this off. We have therefore set Brevo to anonymous tracking: Brevo counts opens and clicks without linking them to you or your email address. When your email program loads the image or you click a link, Brevo's servers necessarily receive your IP address and technical details of your device in order to deliver the image or forward you; Brevo keeps the IP address in its logs together with the anonymous event, but without your email address. We do not use these figures and we receive no statistics about you as a person. If you don't want the image to be loaded, set your email program not to load images automatically – all links keep working. Legal basis: our legitimate interest in delivering our emails through a reliable email service provider, Art. 6(1)(f) GDPR.

Link click counts – no tracking. Links to jobs and external sites in our emails lead through our server (webzap.com/go?…), which adds one to a daily total per type of link and source – for example “external link · StepStone: 12 clicks” – and immediately forwards you to the site. The link is the same for everyone who receives it and contains nothing about you. We store only these totals, not who clicked, and our web server does not log these requests. We use the totals to decide which job sources and sites are worth including. Legal basis: our legitimate interest in improving the service, Art. 6(1)(f) GDPR.

Ad campaign counts – no tracking. When we advertise (e.g. on Google), our ad links contain only a campaign name such as “gads-de”. Our server adds up visits, sign-ups and confirmations per campaign and day as plain numbers. To count a confirmation, the campaign name is stored with an unconfirmed sign-up and removed when you confirm it (or deleted with it after 48 hours). We use no cookies, no tracking pixels and no ad-click IDs, and we send nothing about you to the ad network. If a link contains an ad-click ID added by the ad network, we ignore it.

Analysis of your text. To find matching jobs, we automatically convert your text into structured search criteria (e.g. job titles, field, location, remote preference, salary expectation, deal breakers). This is done by an open-weight language model that runs on our own hardware in Spain. Your text is not sent to AI providers such as OpenAI and is not used to train any model. The resulting criteria are stored encrypted with your entry and shown on your manage page; if they are wrong, edit your text and they are derived again. Our hardware is not always online, so this can take some hours. If we ever want to use an external AI provider, we will update this policy and ask for your consent first.

We do not make automated decisions that have legal or similarly significant effects on you (Art. 22 GDPR).

4. How we protect your data

5. Recipients and processors

We use the following service providers, all acting as processors on our behalf under a data processing agreement (Art. 28 GDPR):

Partner job search engines (Adzuna, Jooble, Careerjet) are not our processors and receive nothing from us; they only see your visit if you click a labelled partner link (see section 3): Adzuna, Jooble, Careerjet. Sponsoring companies receive no personal data at all.

We do not share your data with anyone else. Your data is stored in the EU (Germany and Spain). Cloudflare is a US company certified under the EU-U.S. Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR); in addition, Standard Contractual Clauses apply. Brevo processes data primarily in the EU; if it or one of its sub-processors processes data outside the EU/EEA, this is secured by an adequacy decision or by Standard Contractual Clauses (Art. 46(2)(c) GDPR).

6. How long we keep your data

7. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can exercise most of them yourself, instantly, via the manage link in your emails: see everything we store (access), edit your text (rectification), download it as JSON (portability), pause emails, or delete everything (erasure). Lost the link? Request a new one. For anything else, email kontakt@webzap.eu.

You also have the right to lodge a complaint with a supervisory authority, in Spain the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid – www.aepd.es – or the authority of your place of residence.

8. Is providing data required?

No. Providing your email address and text is voluntary, but without them we can't send you job matches.

9. Minimum age

WebZap Jobs is intended for people aged 16 or older.

10. Open source

You can check exactly how your data is handled: the complete source code is public at https://github.com/Kipperlenny/webzap-jobs.

11. Changes

We may update this policy when the service changes. The current version is always available on this page. For material changes affecting your data, we will notify you by email.