Privacy policy
Last updated: 11 March 2025
Controller: Career Portal s s.r.o., Mezírka 775/1, 602 00 Brno, Czechia, ID:09747974, EU VAT ID: CZ09747974 (“we”).
Contact details: hello@workingnomads.com
We operate website https://www.workingnomads.com/ (“Website”), which is a platform focused on providing remote work for digital nomads and professionals looking for flexible employment. Our Website considers protecting and ensuring safety of user data as its top priority. Our Website takes the issue of privacy very seriously and would like the users of the Website to know that Our Website takes all the needed precautions to safeguard and protect user data.
We process personal data under rules of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC. We act in two ways regarding your personal data. As personal data controllers and personal data processors. In this Privacy Policy, we would like to inform you how we process your personal data as personal data controller.
A. PERSONAL DATA PROCESSED
Depending on whether you are an advertiser, job seeker, or a visitor to our website in general, we may process different categories of personal data. We divided them into categories below:
Advertisers
If you advertise on our Website or otherwise interact with us as an advertiser, we may collect and process:
- Identification Data: First and last name of a person representing the company, name of the company, address.
- Contact Details: E-mail address, phone number.
- Billing and Payment Data: Billing details, information about payments, payment card, PayPal account.
- Job information: Information relevant to your advertisement, such as company description, nature of the advertiser’s business, advertiser’s website, company category etc.
- Information from Mutual Communication: Any information shared during our communication with you about our services, contract negotiations, complaint handling, or any other correspondence.
We collect those data directly from you when you fill out the sign-up form and agree with our Terms & conditions or communicate with us in other ways. Also, we process personal data automatically when you use our Website (e.g., cookies, technical information).
Job seekers
If you use our Website to look for remote employment or other employment opportunities, we may collect and process:
- Identification Data: First and last name.
- Contact Details: Your e-mail address (for job alerts, response confirmations, etc.), phone number.
- Your Preferences: The locations, job categories, types of roles, position type, salary or any other filtering options you choose.
- Billing and Payment Data: Billing details, information about payments and payment plan, payment card, in case you opt for a premium subscription plan.
We collect those data directly from you when you create a profile, subscribe to job-alert e-mails, or respond to a job advertisement. We need this data to connect you with relevant job opportunities, to send you job alerts if you create your user profile. However, mostly, we act as personal data processors when you apply for a position. That means that the controller of personal data in relation with the candidate selection procedure is the company you are applying to, so for more information about processing, please contact this company.
We do not collect personal information beyond the limited data we need from you to perform our services.
Website Visitors
Regardless of whether you are an advertiser, working nomad, or just visiting our Website, we may process:
- Contact Information: Your e-mail address, subject, description, possible attachments.
- Technical Information: Stored information about your usage of the Website, IP address, preferences when looking for job advertisements, the type of browser and operating system you have used, the date and time of your visit to the site, the pages accessed and documents downloaded, your top-level domain name (for example .com, .gov, .eu etc.), the address of your server; the previous Website visited.
WE DO NOT COLLECT SENSITIVE INFORMATION
We do not collect or request your sensitive information (including, but not limited to, information about your religious or political beliefs, opinions). In case you have voluntarily provided it to us, you shall be solely responsible for security of any sensitive information, and we do not intend to use this information for any purpose, nor share this information with any third parties. Please do not post or add sensitive and other personal information that you would not want to be publicly available.
B. HOW WE USE YOUR PERSONAL DATA (PURPOSES AND LEGAL BASES)
Advertisers
B.1 Concluding the Contract, Creating an Account, and Fulfilling Contractual Obligations
The primary purpose for which we process your personal data as an advertiser is to facilitate the contractual relationship. The data in the scope set out below is required for us to create an account for you, identify you, enable mutual communication, handle billing and payments, fulfill any other rights and obligations under the concluded contract (which we concluded by you agreeing with Terms & conditions when creating account or when ordering advertisement space). Providing this data is mandatory and without providing the required information, the contract cannot be concluded.
For this purpose, we process your Identification Data, Contact Details, Billing and Payment Data, Job information, Information from Mutual Communication.
The legal basis for this processing is the performance of the contract between you and us, as well as the need to take steps at your request prior to concluding the contract.
Data are processed for the duration of our mutual contractual relationship and the active use of the advertiser’s account, and for additional 5 years from the last login.
B.2 Compliance with Legal Obligations
Given that our services also involve collecting payments, issuing invoices etc., we will process personal data to fulfill our legal obligations, particularly related to accounting and tax requirements.
This may primarily include your Billing and Payment Data.
The legal basis for this processing is compliance with our legal obligations. Data are processed for the time required by law, for instance up to 10 years in tax matters and 5–10 years in accounting matters.
B.3 Marketing Communication
When you enter into a contractual relationship, you provide us with your e-mail address. We primarily use it for contractual communication and to fulfill the contractual obligations. We would also love to send you marketing communication and other newsletters. We will do it only if you do not opt-out from such communication.
For this purpose, we use your Contact Details, mainly e-mail address.
You can cancel commercial communications at any time, in each communication you receive. Data will be retained for up to 5 years after the end of our contractual relationship.
B.4 Protection of our rights and Legal Interests and Prevention of Unlawful or Fraudulent Activities
Our Website allows you to upload content and offer job opportunities. A contractual relationship also exists between us. Regardless of our intent, there could be situations involving disputes, third-party claims, etc. For this reason, we also process your personal data to prevent and address violations of the Terms and Conditions, to protect our legal interests, and to prevent any unlawful, fraudulent, or malicious conduct against us or third parties in a contractual relationship with us. We may also share your personal data with third parties if a specific claim requires it, or they may be shared with public authorities.
For this purpose, we process your Identification Data, Contact Details, Billing and Payment Data, Job information, Information from Mutual Communication.
The legal basis for this processing is our legitimate interest, which consists of protecting our legal claims or the legal claims of advertisers or other third parties.
For this purpose, personal data will be stored for the period of 5-10 years according to the possible issues and raised claims. If judicial, administrative, or other (criminal) proceedings begin, the personal data will be processed to the extent necessary for the entire duration of such proceedings. If we learn from law enforcement or administrative bodies that there is a reasonable suspicion of a crime or offense committed by any third party, all your personal data will be processed to the necessary extent until the suspicion is either followed by formal charges, dismissal of the case, or resolved in another manner.
Job seekers
If you are a working nomad, we primarily process your personal data as a personal data processor. However, there are certain personal data processing activities for which we act as a personal data controller.
B.5 Concluding the Contract, Creating an Account, and Fulfilling Contractual Obligations
The same purpose, as for advertisers stated in B.1 of this Privacy Policy will also apply to you. That means that we will process your personal data for contractual relationship if you create your profile.
This includes your Identification Data, Contact Details, Your Preferences, Information Contained in Your Response to an Advertisement. In case you choose the premium subscription plan, we will also process your Billing and Payment Data.
The legal basis for this processing is the performance of the contract between you and us, as well as the need to take steps at your request prior to concluding the contract.
Also, personal data of job seeker may be used in accordance as stipulated in B.4. of this privacy policy.
B.6 Compliance with Legal Obligations
As we can also collect payments from you as a working nomad (in case you choose the premium subscription plan), our processing may also include issuing invoices and fulfilling our legal obligations, particularly related to accounting and tax requirements.
This primarily may include your Billing and Payment Data.
The legal basis for this processing is compliance with our legal obligations. Data are processed for the time required by law, for instance up to 10 years in tax matters and 5–10 years in accounting matters.
B.7 Sending Advertisements and Including You in the Database for Offers (Newsletters)
If you wish to receive information about job offers in your e-mail inbox and be included in the database to receive offers, you can easily do so by providing your consent. By giving your consent, we can send you offers according to your specifications.
For this purpose, we will process your Contact Details and Your Preferences.
The legal basis for this processing is your consent to the processing of personal data, which you grant by clicking the “Subscribe” button when you fill out the relevant form.
Also, when you create an account, we will also send you marketing communication and other newsletters, if you give us your consent.
For this purpose, we use your Contact Details, mainly e-mail address.
The legal basis for this processing is your consent that you can give us when registering account.
You can cancel commercial communications at any time, in each communication you receive. Data will be retained until your consent is withdrawn, but no longer than 5 years after the end of our contractual relationship. Withdrawing consent does not affect the lawfulness of any data processing that took place before your withdrawal.
Website Visitors
Whether you are an Advertiser, working nomad, or simply browsing our Website, we process personal data for the following purposes:
B.8 Ensuring Communication
We also process your personal data to facilitate mutual communication, provided that you use our contact form and select the reason for the communication.
For this purpose, we process Contact information gathered through our contact form.
The legal basis for this processing is our legitimate interest in ensuring communication between us and you, or in ensuring that you can exercise your rights. The legal basis may also be the performance of a contract if your message relates to a contractual relationship between us.
Personal data are stored for as long as necessary to ensure this communication.
B.9 A/B Testing
From time to time, we may use your personal data for A/B testing. That means that your data will be used for testing of functionalities of the Website.
For this purpose, we process Technical Information.
The legal basis for this processing is our legitimate interest in making our Website better.
Personal data are stored for as long as necessary for testing purposes.
B.10 Website Operation and Security (Essential)
We process your personal data to operate our Website and ensure its security, i.e., to enable the use of all functionalities and ensure that everything works correctly. This includes:
-
- Allowing you to log in and navigate between pages without having to re-enter data.
- Protecting the site from malicious attacks (e.g. CSRF).
- Storing user consent to cookies.
For this purpose, we process Information from Cookies and Technical Information.
The legal basis for this processing is our legitimate interest in the proper functioning and secure operation of our Website. Data are generally processed for the duration of your visit to the Website, at most for 2 years from the date of collection or as long as each cookie is set.
B.11 Analysis of Website Traffic (Analytics)
We process your personal data to understand how visitors use our Website. Under this purpose, we may monitor the traffic on our Website, optimize it, and generally make the Website visit more seamless and user-friendly.
For this purpose, we process Information from Cookies, based on your consent to the use of cookies. Under our legitimate interest, we may also use your Technical Information for better understanding of how you use our Website.
Your personal data may also be shared with third parties. The legal basis for this processing is your consent, which you provide through the cookie banner. Personal data is processed until you withdraw your consent, but in any case, no longer than the period specified for each cookie in a cookie bar available on the Website.
B.12 Tracking of users and personalization (Tracking and Personalization)
We process your personal data to learn about your usage of the Website for better personalization of advertisements. Better personalization of content on the Website also helps your user experience.
For this purpose, we process Information from Cookies, based on your consent to the use of cookies.
Your personal data may also be shared with third parties. The legal basis for this processing is your consent, which you provide through the cookie banner. Personal data are processed until you withdraw your consent, but in any case, no longer than the period specified for each cookie in a cookie bar available on the Website.
C. SHARING OF PERSONAL DATA
We share your personal data with the following recipients of personal data:
- Provider of hosting (DigitalOcean Holdings, Inc. which is registered under Data Privacy Framework)
- Google for analytics purposes (Google Ireland Limited is registered under Data Privacy Framework)
- Advertisers or job seekers in cases where we need to address a dispute or otherwise protect our interests
- Zendesk for customer service, forms etc. (Zendesk, Inc. is registered under Data Privacy Framework)
- Providers of software for sending emails (such as AWS)
- Providers of external accounting services
- Providers of payment gateway (such as Stripe and PayPal)
Additionally, under the purpose “Compliance with legal obligations” we may share your personal data with certain third parties in the position of data controllers if we are legally required to do so (in particular, government authorities, law enforcement authorities, and judicial authorities). Similarly, we may be required to share your personal data with persons who claim to have been harmed by your actions.
If we share your personal data with controllers or processors in third countries (outside the EEA), we only do so if the European Commission has determined that a given non-EEA country provides an adequate level of data protection. This includes situations where controllers or processors have implemented additional data protection measures, such as Binding Corporate Rules (BCR) or Standard Contractual Clauses (SCC). In such cases, we also prepare any necessary documentation.
D. YOUR RIGHTS
In connection with the processing of personal data, you have the rights set out below, which you can exercise. To exercise your rights, you may use the following email: hello@workingnomads.com.
Your request will be processed without undue delay, and at the latest within 1 month. In exceptional cases, especially due to the complexity of your request, we may extend this period by another 2 months. Naturally, we will inform you of any such extension and its reasons.
D.1 Right of Access
The right of access means that you have the right to obtain from us a confirmation as to whether or not we are processing your personal data (the first part). For example, you may exercise this if you are unsure whether you have already registered or whether you have certain preferences saved.
If we are processing your personal data, you also have the right to request access to information about the purpose and scope of processing, recipients of the data, the duration of the processing, the right to rectification, erasure, restriction of processing, and the right to object to processing, as well as the right to file a complaint with a supervisory authority, and information about the sources of personal data. We effectively provide this information in this Privacy Policy, but of course, we will also provide you with more detailed information if you require it (for instance, if you want to know the specific scope of your data we are processing).
You may also request a copy of the personal data we process. The first copy is free of charge; subsequent copies may be subject to a fee. The scope of the data provided may be limited to ensure that the rights and freedoms of others are not compromised.
D.2 Right to Withdraw Consent
You have the right to withdraw your consent to the processing of personal data at any time. The withdrawal of consent does not affect the legality of processing carried out before such withdrawal and does not lead to the end of processing for data that has already been anonymized.
D.3 Right to Rectification
You have the right to request that we rectify inaccurate personal data concerning you. Depending on the purpose of the processing, you may also have the right to complete incomplete personal data, including by providing a supplementary statement.
D.4 Right to Erasure (Right to be Forgotten)
You have the right to request the erasure of your personal data if:
- your personal data are no longer necessary for the purposes for which they were collected or processed;
- you withdraw consent on which the processing was based, and there is no other legal ground for processing;
- you object to the processing and there are no overriding legitimate grounds for the processing, or you object to processing for direct marketing purposes;
- the personal data are processed in violation of legal regulations.
However, you cannot exercise this right if the processing is necessary for us to fulfill our legal obligations or tasks performed in the public interest, or for the establishment, exercise, or defense of legal claims. In other words, erasure of personal data occurs only if the data are no longer needed for any of the above-listed purposes (e.g., if we have overlooked deleting the data).
D.5 Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data if:
- you contest the accuracy of your personal data, for a period enabling us to verify the accuracy of the personal data;
- the processing is unlawful, and instead of erasure, you request a restriction of the processing of your personal data;
- we no longer need your personal data for the intended purposes, but you require them for the establishment, exercise, or defense of legal claims;
- you have objected to the processing of your personal data, pending verification of whether our legitimate grounds override yours.
You might use this right, for example, in extraordinary situations when you want to obtain copies of your personal data but also want to temporarily ensure that the data is not further processed. You can thus request a restriction of the processing.
D.6 Right to Data Portability
You have the right to obtain a copy of your personal data that we process by automated means, based on your consent or for the performance of a contract. We will provide these data to you or to a controller designated by you in a commonly used and machine-readable format, if technically feasible. The scope of the data provided may be limited to ensure that the rights and freedoms of others are not compromised.
D.7 Right to Object
You have the right to object to the processing of your personal data, which we process based on our legitimate interest. We will cease processing your data unless there are compelling legitimate grounds for the processing, or unless the processing is necessary for the establishment, exercise, or defense of legal claims. Please note that your objection must be clearly specified and justified. If you object to processing for direct marketing purposes, we will stop the processing immediately, without further consideration.
E. COMPLAINT
In addition to the possibility of exercising your rights with our company, you can also file a complaint with the relevant supervisory authority, which is the Office for Personal Data Protection located at Pplk. Sochora 27, 170 00 Prague 7.
F. CHANGES
We may change this Privacy Policy from time to time. As soon as the Privacy Policy is updated, Our Website will post an updated version of the Privacy Policy on the Website, the new Privacy Policy becomes effective from the moment it is posted or updated on our Website.
Previous version of the Privacy Policy is available at [https://www.workingnomads.com/privacy-policy-2024].