Privacy policy
Effective from: 19 October 2026. This is a translation for convenience; in case of discrepancy the Slovenian version prevails.
1. Controller
The controller of personal data is Nodiver d.o.o., Cesta Zore Perello-Godina 2, 6000 Koper, Slovenia, registration number 9837825000 (“we”). For any questions about data protection and to exercise your rights, write to info@delaj.si.
We process personal data in accordance with the General Data Protection Regulation (GDPR), the Slovenian Personal Data Protection Act (ZVOP-2) and the Electronic Communications Act (ZEKom-2).
2. What data we process, why and on what basis
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name and surname or company name, email address, password (encrypted), company tax number | User account, login, email verification, fraud prevention | Contract (Art. 6(1)(b) GDPR) | Until the account is deleted |
| Candidate CV (uploaded file and/or online CV: experience, education, skills, languages, location, phone, job-search status, preferred countries and fields) | Job applications, display in the candidate database | Contract (1(b)); visibility in the candidate database based on consent (1(a)) | Until deleted or changed by the candidate or the account is deleted |
| Job applications (CV, cover letter, phone, application status) | Forwarding to the employer chosen by the candidate | Contract (1(b)) at the candidate’s express request | 180 days from submission, then deleted automatically |
| Messages and offers between candidates and employers | Communication through the Portal, email notifications | Contract (1(b)) | Until either party’s account is deleted |
| Job ads and company profile (including the contact person, not public) | Publishing job ads, promotions | Contract (1(b)) | Until the job ad or account is deleted |
| Orders, invoices, payments, credit | Providing paid services, accounting | Contract (1(b)); legal obligation (1(c)) – VAT Act | Invoices 10 years after the end of the year of issue |
| Technical data (IP address, access time, browser), security logs | Security, prevention of misuse and spam | Legitimate interest (1(f)) | Up to 12 months |
| Consent to newsletters and notifications (optional) | Sending news, new job alerts and offers | Consent (1(a)) | Until withdrawn |
| Analytics cookies (Google Analytics) | Visit statistics to improve the Portal | Consent (1(a)), ZEKom-2 | See section 6 |
Providing data is voluntary, but without the required data we cannot provide an account or service. We do not carry out automated decision-making or profiling with effects on individuals; searches in the candidate database are carried out by employers themselves using filters.
3. Who we share data with
- Employers – only applications submitted by the candidate and the online CV of candidates who have switched on visibility in the database (without email and phone). The employer is an independent controller of this data.
- Processors providing services to us under a data processing agreement: hosting and email (Hostinger), online payments (Stripe), analytics (Google), protection of forms against abuse and bots (Google reCAPTCHA or Cloudflare Turnstile – processing technical device and browser data and the IP address at registration, login and password reset), email delivery (SMTP provider), accounting and invoicing (VASCO).
- Competent authorities, where required by law.
Some processors (e.g. Stripe, Google) may also process data outside the EU/EEA. Such transfers are based on a European Commission adequacy decision (e.g. the EU–US Data Privacy Framework) or standard contractual clauses.
We do not sell personal data or share it with third parties for their marketing.
4. Data security
CVs and application attachments are stored in a protected folder that is not publicly accessible and are downloaded only by authorised users after login. The connection to the Portal is encrypted (HTTPS) and passwords are stored encrypted. Only authorised persons have access to the data.
5. Your rights
You have the right to access your data, rectification, erasure (“right to be forgotten”), restriction of processing, data portability, to object to processing based on legitimate interest, and to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. You can manage most data yourself in your account (CV, database visibility, account deletion); for anything else write to info@delaj.si. We reply within one month at the latest.
If you believe that processing breaches the regulations, you can lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si, www.ip-rs.si.
6. Cookies and local storage
We use necessary cookies and local storage without consent, as they are required for the Portal to work. We set analytics cookies only if you accept them in the cookie banner. You can change your choice at any time by clicking “Cookie settings” in the footer.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| wordpress_logged_in_*, wordpress_sec_* | Necessary | Logging in to the user account | Session or 14 days (“stay logged in”) |
| woocommerce_*, wp_woocommerce_session_* | Necessary | Basket and checkout | Up to 2 days |
| dj_lang, pll_language | Necessary | Remembers the selected language | 1 year |
| dj-theme (local storage) | Necessary | Remembers the light/dark theme | Until cleared in the browser |
| dj-filters-* (local storage) | Necessary | Remembers selected job filters | Until cleared in the browser |
| dj-consent (local storage) | Necessary | Remembers your cookie choice | 12 months |
| _GRECAPTCHA (local storage) or cf_clearance | Necessary | Protecting registration and login against bots (on those pages only) | Up to 6 months |
| _ga, _ga_* | Analytics (Google Analytics) | Anonymised visit statistics | Up to 2 years |
7. Changes
We may update this privacy policy. The current version is always published on this page; registered users are notified of material changes by email.