PRIVACY NOTICE
How we handle your information
A LinkedIn profile PDF that you export and upload is handled as a one-time career document snapshot. Careers Denmark does not connect to, scrape or continuously sync your LinkedIn account.
1. Controller and contact
Careers Denmark is an independent service operated in Denmark by Careers App ApS (under stiftelse), the data controller. The CVR number will be provided once registration is complete. Questions or requests about personal data can be sent to hello@careersdenmark.dk or submitted through our Contact page.
2. Information we process
- Account information, including name, email address and authentication identifiers.
- CVs, résumés and previous applications that you choose to upload, including extracted text and hyperlinks.
- A browser-bound anonymous identifier when you use document matching without creating a permanent account.
- Your inferred capability profile, manual skill adjustments, experience and education.
- A private career timeline prepared only from documents you explicitly designate as CV evidence, documents you explicitly designate as education evidence, or a LinkedIn profile PDF you explicitly provide, including employer titles, interpreted functional titles, dates, responsibilities, role scope, provenance and confidence. Unconfirmed and private documents do not create or enrich career or education history.
- Career-direction questionnaire answers that you choose to provide, including preferred responsibilities, achievements, leadership style, work environment, mobility and professional boundaries.
- Your confirmations, corrections or removals of timeline interpretations. The original source wording remains separate; candidate-confirmed facts receive the strongest evidentiary status.
- Optional professional-profile information, including a profile photograph, an introduction video of up to 1 minute 30 seconds, headline, location, phone number, summary, desired roles and recruiter-discovery preference. You may also add a date of birth; it remains private unless you separately enable age sharing, in which case approved recruiters receive only the calculated current age and never the date itself. If you use the built-in recorder, the site requests camera and microphone access; the live stream remains in your browser and only the take you explicitly choose is uploaded.
- An optional private commute origin, chosen travel mode and maximum distance or travel time. When you ask the service to calculate a commute, we also retain the resulting distance and duration for relevant workplace locations so they do not need to be recalculated on every visit.
- Saved jobs, role-relevance feedback, match scores, application stages, notes, contacts and generated drafts.
- Career-nudge acknowledgement and snooze timestamps, stored with a compact state version so the red unread badge can clear and remain cleared across devices. Nudge state does not store CV content, application notes or job titles.
- When a company asks for access to the recruiter workspace: the contact person's name, work email, mobile number, company, LinkedIn link and consent.
- Recruiter-supplied job descriptions and the professional search criteria inferred from them. The uploaded job-post file and full extracted text are processed transiently and are not retained; only criteria a recruiter chooses to save are stored.
- Job-alert preferences and delivery history when alerts are enabled.
- Company requests and limited operational logs, including request time, a pseudonymised IP hash, feature used, outcome and non-content error details. Audit events never include CV, application, questionnaire-answer, introduction-video, date-of-birth or full recruiter job-post content.
3. Why and on what basis
Account operation, document analysis, job matching, application tracking and requested exports are processed to provide the service you ask for (GDPR Article 6(1)(b)). Security, abuse prevention and limited operational logging are based on legitimate interests (Article 6(1)(f)). Interpreting your CV with AI is part of the service you ask for (Article 6(1)(b)) and happens only after you have accepted it in the dialog when you upload. Job-alert emails are sent only when you actively enable them, and every job-alert and other notification email has a signed unsubscribe link that works only for your own account. Platform news and permission for Careers Denmark to contact you about relevant recruitment opportunities each require a separate, optional choice (Article 6(1)(a)). Neither is required for job alerts or core functionality.
Controlled recruiter discovery is based on your explicit, optional choice (Article 6(1)(a)). You can withdraw that choice under Profile. Withdrawal removes your profile from new recruiter searches; an earlier introduction request or information a recruiter lawfully retained may need separate handling. We retain consent and withdrawal timestamps as compliance evidence. Your uploaded CV/application files, their extracted text, phone number and email address are not shown in the recruiter workspace.
Improving the service: your role-relevance feedback, saved-job activity and optional job-fit scores (for example when you rate how well suggested jobs fit your CV) are also used in aggregated, pseudonymised form to improve the matching quality of the service for all users, based on legitimate interests (Article 6(1)(f)). Individual scores are never shown to other users or to recruiters, are never used to profile you for any purpose other than your own matching, and models or statistics derived from them do not contain your identity. You can use the service fully without providing any scores.
The service is not intended to process special-category data under Article 9. If such information is included incidentally, it is not intentionally used as a matching factor, and it is excluded from any data used to improve the service.
4. Matching and profiling
The service automatically compares the documents you explicitly designate as CV evidence, together with your settings, with job descriptions. Documents default to private use in the bulk uploader; older uploads remain private until you choose “Use as CV evidence” or “Use as education evidence.” Automatic document classification is advisory and cannot promote an unconfirmed document into matching. Where a role can be separated reliably, the service also prepares a private timeline with an employer title, interpreted functional title, dates, responsibilities, role scope, provenance and a visible confidence state. Candidate-approved or corrected facts receive the strongest weight.
You can change a document back to private, approve, correct, remove or leave a timeline interpretation unreviewed. Removing an imported interpretation creates a private suppression record so a rebuild does not restore it silently. Confirmation changes the status of the interpreted fact; it does not erase the original source wording. Career aspirations and suggested next roles remain a separate direction signal and never become historical evidence merely because they were suggested. If you mark a role relevant or not relevant, that private feedback may adjust similar future rankings within a limited range. Scores are recommendations for your own use, do not decide whether you can apply and do not make hiring decisions with legal or similarly significant effects.
The optional recruiter-profile draft and application drafts are generated within the service from your career evidence and settings. They are not published or submitted until you review them. Inferred language proficiency, dates, titles, achievements and other factual claims must be reviewed by you. Timeline and career-direction answers remain private unless a separate feature clearly asks you to share specific information.
Professional-profile discovery is separate and off by default. Approved recruiters and hiring managers can define professional criteria directly or upload a job description that is converted into editable capability, role, location, language and experience criteria. Language fit contributes no more than five points. The resulting score is a decision-support ranking, not a hiring decision; the hiring team remains responsible for an individual assessment. Candidate ranking, retrieval, filters, alerts and recommendations do not use profile photographs, video, date of birth, age, gender or other protected characteristics. If you add a date of birth, it remains private; only a calculated age can appear to an approved recruiter, and only after you separately enable both professional-profile discovery and age visibility. An approved hiring team may send a private, role-specific invitation to apply, but sees only the profile fields you chose to share and does not receive your contact information, date of birth or source documents. You remain free to ignore or decline an invitation. Access is manually reviewed and may be suspended.
5. Storage, providers and transfers
Private profile data and documents are stored in a Supabase project in Stockholm (eu-north-1) in the EU, which also handles sign-in. Vercel hosts and delivers the website from Stockholm (arn1) and processes operational request data. Railway runs our worker in the EU, which collects public job adverts and enriches them. Resend delivers job-alert and account email on our behalf and processes the recipient address and the content of those messages for that purpose. One.com receives and stores incoming mail to @careersdenmark.dk as our processor, so a reply or an enquiry you send to one of our addresses is received and stored there. If you sign in with Google or Apple, that provider and Supabase process the authentication request. If you separately allow analytics, Google Analytics receives limited website-use and device information; CV text, application contents and account-profile fields are not deliberately included in analytics events. CV text is not sent to Google.
AI-assisted document analysis
When you upload a CV, the service uses AI-assisted document analysis to interpret it: an automated reading of your career history that produces proposals you can correct. The text is sent to OpenAI only after you have accepted it in the dialog when you upload. Before it is sent, email addresses, phone numbers, links and CPR numbers are removed from the text. This is data minimisation, not anonymisation: names and career history are still sent. Documents you have marked as private or as education evidence, and previous applications, are not sent to OpenAI. A new CV enriches or corrects your master CV; it never replaces it, and the previous value is kept so you can undo the change.
OpenAI processes the content as our processor under a data processing agreement with OpenAI Ireland Ltd., entered into on 1 October 2026. Transfers to countries outside the EEA rest on the EU standard contractual clauses (SCC). OpenAI does not use the content to train its models. The request asks the provider not to store it, but OpenAI may keep the content for up to 30 days for abuse monitoring under its own terms. That is not a promise of zero retention. This is processing to deliver the service you asked for, not sharing your documents. The output is advisory and editable: interpreted facts keep a visible confidence and provenance, uncertain interpretations stay marked for your review rather than being treated as confirmed, and nothing is added to your confirmed master CV without your review. Rule-based parsing runs regardless.
When you open the explanation for a job and have accepted it, we send your match data (the calculated criteria such as title, industry, years of experience and distance) and the job's title and company to OpenAI Ireland Ltd. OpenAI writes a short explanation of the match. Your name, contact details and CV text are not sent. The score itself is calculated without AI. The explanation is saved so the same one is not made again. This match explanation is also part of the service you ask for (Article 6(1)(b)) and happens only after you have accepted it.
When you ask for a draft of your CV or cover letter and have accepted it, we send the facts you have approved in your master CV (employers, job titles, dates, education, role descriptions, tasks, skills, your headline, summary and languages) and the text of the job advert, with contact details removed, to OpenAI Ireland Ltd. OpenAI writes the draft. Your name and contact details from your profile are not sent; we add them to the document afterwards. A check marks claims in the draft that your profile does not cover, and you review the draft before you use it. The draft is saved with your application documents. You are asked the first time you use AI drafting. Without your acceptance, AI writes nothing; you can still use our template, which does not use AI. Application drafts are also part of the service you ask for (Article 6(1)(b)), and the processing agreement and transfer basis described above apply.
Public job adverts that we collect are also read and enriched with AI: by default with OpenAI, and job collection can be configured to use Anthropic. Adverts may contain contact persons as written in the advert. Closed jobs are archived automatically once the application deadline has passed.
If you explicitly save and calculate an optional commute preference, the commute origin and relevant workplace addresses are sent from the server to Google Maps Platform Routes API solely to calculate route distance and duration for your selected car or public-transport mode. The service stores the resulting route estimates privately with your account. The commute origin and route estimates are not shown to employers or recruiters and are not sent to Google Analytics. You can disable or replace the preference under Profile, and account deletion removes the stored preference and estimates under the retention process described below.
Provider support, security services or subprocessors may involve processing outside the EEA. Where that occurs, the relevant provider’s lawful transfer mechanism, including adequacy decisions or standard contractual clauses as applicable, is relied upon. Provider terms and subprocessor information should be reviewed as part of the service’s recurring compliance review.
6. Retention
Signed-in account information and uploaded material are retained while your account remains active. An account that has had no sign-in or other recorded service activity for approximately 23 months receives an email warning and is scheduled for deletion 30 days later. Signing in or using the account before that date cancels the scheduled deletion. You can delete a document or your complete account sooner at any time.
Self-service or inactivity-based account deletion removes private uploaded files, profile data, drafts, preferences and application history. Deleting an uploaded file removes it from our storage immediately. We are not currently writing any new independent recovery copy of uploaded files. Encrypted copies written by our previous backup provider before 8 September 2026 are no longer reachable by us, and we have not been given a date on which that provider erases them; those copies were encrypted before transfer and cannot be read without a key we hold separately from them. Routine daily database backups at our hosting provider may still contain the associated record for up to 7 days before they age out. Guest profiles are temporary: once an anonymous profile reaches 30 days, its account, documents and derived profile are removed in the next daily cleanup. You can delete individual guest documents sooner from the Profile page.
Operational audit metadata is removed after 90 days during the daily maintenance run unless needed longer to investigate security or abuse. Provider logs follow the relevant provider’s operational retention. Do not use the service as your only archive.
7. Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction, objection and a portable copy of your information. You may also complain to the Danish Data Protection Authority. We aim to respond within one month. Signed-in users can download a personal-data export and permanently delete their account from Account & privacy. If those controls do not meet your request, use the Contact page.
8. Security and breaches
Private database rows and stored files use account ownership rules. Connections use HTTPS and secrets are kept outside the public codebase. Uploaded files are checked for type, signature, size, unsafe archive expansion and common active or embedded content. These controls are not a guarantee that every malicious file can be detected, and no internet service can guarantee absolute security. If a breach creates a reportable risk, we will follow applicable notification requirements.
9. Changes
Material changes will be dated here. Where a change materially affects account data, users will be informed or asked to acknowledge the revised notice as appropriate.
Changes 12 October 2026. From 12 October 2026 the data controller for Careers Denmark at careersdenmark.dk is Careers App ApS (under stiftelse). You can contact us at hello@careersdenmark.dk.
On the same day we moved the service to new infrastructure. Your data is still stored in the EU with Supabase in Stockholm (eu-north-1). The website's server functions run with Vercel in Stockholm (arn1), and our worker runs with Railway in the EU. Existing accounts, uploaded CVs and master CVs were moved. Accounts whose email address was never confirmed were not moved.