Privacy and personal information

Privacy notice for Starvsportal.fo

We respect your privacy. This notice explains the information processed, purposes, safeguards, recipients and your rights. Relevant Faroese legislation is Act No. 80 of 7 June 2020 on the Protection of Personal Data, as amended. This draft requires final data-protection review before public launch.

1. Who is responsible?

The controller is Mediadesign Sp/f, Velbastavegur 42, FO-100 Tórshavn, Faroe Islands. V-tal: 00662445. Email: info@starvsportal.fo. Use the subject “Data protection” for privacy questions and rights requests.

2. What personal information do we process?

Starvsportal is a job platform for employers advertising vacancies and people finding jobs. Processing is limited to information necessary to provide, administer and protect the service.

Employers and ordering contacts

Information selected for the public listing becomes public on publication. Internal management-contact and billing fields are not published, unless the employer separately places those details in the public listing text.

Jobseekers

Information may relate to searches and filters, alert signup, browser bookmarks, contact messages and choosing an external application channel. The current version does not receive, store or forward CVs or application documents. Applications are sent using your own email client or an external application website. We do process information you send through contact messages; do not use them to submit CVs or sensitive information.

3. Purposes and legal bases

The following are the intended bases under section 8 of the Faroese Data Protection Act. Their applicability and supporting assessments must be finalised before public launch. The form checkbox acknowledges reading this notice; it is not blanket consent to all processing.

Information is not used for incompatible purposes without an appropriate new legal basis.

4. Public listings

Published listings are intended for public access and may eventually be indexed by search engines. The portal currently sends noindex instructions to search engines. Employers must have a lawful basis for publishing personal information in listings. We may correct, restrict or remove unlawful, misleading or unnecessary personal information.

Automatic English translation

When automatic translation is enabled, we send the public job title and advert text to OpenAI to produce an English translation. Internal contact and billing records are not included. Translations are cached for reuse; edits to the source require a new translation. The original remains available. Common salary wording and time units may be translated directly in the browser.

5. Applications and CVs

Starvsportal.fo helps jobseekers find vacancies and apply directly to employers. In the public service, applicants follow the employer’s application URL or use their own email client to contact the specified recipient. The application button opens the email app or the employer’s application site.

The current version has no CV database, does not collect CVs or applications into a database and does not retain copies for later use. We do not create personal applicant profiles or use CVs/applications for analytics, marketing or resale.

The current version does not receive or forward application documents. If forwarding is enabled later, information must be used only to deliver the application to the intended recipient, with temporary technical processing limited to what delivery requires. Provider, retention and legal-basis information must be updated and the feature reviewed before activation.

The receiving employer normally acts as an independent controller for subsequent processing and retention. Questions about CVs, applications, recruitment and deletion by the recipient should normally be addressed directly to that employer. Read any external application provider’s notice too. Do not send unnecessary sensitive information or use the contact form for application documents.

6. Management without an account

Employers use secure email links to manage the relevant listing. Do not share these access links with unauthorised people. Session cookies and access controls support management security. Jobseekers do not need an account for ordinary browsing.

7. Job alerts and saved jobs

Alerts are intended to notify you of matching vacancies. Stored information can include email, search words and filters, language, geographic choices, frequency, verification and subscription status. Verification is required. All-alert unsubscribe is available through a secure link or by contacting us. Individual-search management and daily/weekly delivery are not yet configured.

Saved jobs use localStorage in your browser on this device, without a personal account, and are not disclosed to employers. Remove bookmarks or clear the browser’s site data to delete them.

8. Card payments

Starvsportal.fo uses Stripe as its payment provider. Stripe-hosted Checkout handles card information. Card payments are not available yet.

Stripe may process the payer’s full name, email address, card details including card number and expiry date, amount, payment date, status, transaction identifier and other information necessary to authorise and document a payment. This does not mean that the portal stores all those details.

Starvsportal.fo does not store full card numbers or CVC codes in its own database. We may retain ordering/payer name and email, order reference, amount, MVG/VAT, payment date, status, transaction references and relevant billing information for order administration and applicable accounting duties.

Manual invoices are handled through the existing accounting system; the portal records references and payment status. Stripe processes payment information under its applicable terms and agreements. Read Stripe’s privacy notice.

9. Processors and external providers

External providers may support hosting/storage, email, payments, technical administration and security. Cloudflare is planned for version 2 hosting, database and security; Stripe is the payment provider. The email provider and final production arrangements remain to be confirmed. Necessary processor agreements and safeguards must be established where providers act on our behalf.

We do not sell personal information. Information may be disclosed to relevant recipients where necessary for the requested service. In the current application flow, applicants send their information directly to employers; the portal does not forward documents.

10. Processing outside the Faroe Islands

International providers may process information or provide access from other countries, potentially including Cloudflare, Stripe and email providers. Applicable Faroese requirements for international transfers must be met. Recipient countries, transfer grounds and safeguards must be established before the relevant transfer and reflected in the final provider information; this draft does not claim those arrangements are complete.

11. Retention and deletion

Implemented cleanup runs while the service operates. Final schedules and processes for payment data, audit logs, email logs, Trash and backups remain to be defined before launch. Moving a message to Trash is recoverable and is not permanent deletion.

Retention of jobseeker information

Starvsportal.fo has no CV database and does not retain job applications in its own database. Applications sent directly to employers or external systems are subject to the recipient’s privacy rules for their processing and storage. No application forwarding is currently implemented; any later temporary processing must be limited to necessary delivery as explained in section 5. Job alerts, saved jobs and contact messages are separate data covered by the retention rules above.

12. Security and protection

We aim to protect information against unauthorised access, loss, misuse and unlawful processing through restricted internal access, session/access controls, protection of administration and data minimisation. Only authorised people/providers with an appropriate need should have access. Production controls and individual staff roles are still being completed.

Any personal-data breach must be assessed and handled under applicable requirements, including notification to Dátueftirlitið and affected individuals where required.

13. Cookies and analytics

Necessary session cookies and browser storage support access and saved jobs. CookieYes manages and remembers your cookie choices. Google Ads (AW-1031998889) and Meta Pixel (2034224493339583) load only after you explicitly accept the Advertisement category. They can process page visits, browser/device information, online identifiers and advertising interactions for measurement and advertising. Google Analytics 4 (G-Y6RYE1ZFXC) is enabled only after Analytics consent, to measure website use.

You can reject optional cookies or change your choice through Consent Preferences. Withdrawal stops future consent-dependent tracking; it does not undo earlier processing. Google and Meta may process information outside the Faroe Islands. See Google privacy and Meta privacy.

14. Your rights

Depending on the circumstances, you may have rights to information, access, correction, deletion, restriction, objection, portability where its conditions are met, withdrawal of consent and protection concerning certain solely automated decisions. These rights are subject to legal conditions and other duties. The portal does not select candidates or make recruitment decisions.

Email info@starvsportal.fo with the subject “Data protection”. Requests will be assessed promptly within applicable statutory periods. Withdrawing consent does not undo processing that was lawful before withdrawal.

15. Complaints

Contact us if you believe processing does not comply with applicable law. You may also complain to Dátueftirlitið, Heiðavegur 25, FO-600 Saltangará, Faroe Islands. Email: dat@dat.fo · Telephone: +298 309100 · www.dat.fo.

16. Changes to this notice

This notice may change as the service, functionality and legal/security requirements evolve. The latest version will be available on Starvsportal. Affected users will be informed of material changes where required. This draft and its Faroese version must be approved and reconciled before public launch.

Controller: Mediadesign Sp/f – Starvsportal.fo

Ordering contact name, telephone and email.

Company and relevant business information.

Billing information, payment references and order records.

Listing text, logos, workplace, categories and publication dates.

Public application email or URL.

Communication and order history.

Listings and orders: creation, publication, corrections and management. Intended basis: section 8(1)(2), performance of a contract, or section 8(1)(6), legitimate interests where the contact is not personally the contracting party.

Payments and accounting: payment confirmation, order records and statutory duties; sections 8(1)(2) and 8(1)(3).

Job alerts: email and filters used for the alerts requested; consent under section 8(1)(1), withdrawable at any time.

Security: protecting access, preventing fraud and maintaining operation; legitimate interests under section 8(1)(6). Production providers may process IP/access information. The portal stores sessions and an Admin audit trail.

Communication: answering enquiries and resolving issues; section 8(1)(2) or 8(1)(6), depending on context.

Drafts: normally deleted 30 days after last save; the period can be changed in Admin.

Unverified alert signups: normally expire after 7 days.

Unsubscribed alerts: saved searches normally deleted 30 days after unsubscribing from all alerts.

CVs/applications: not received or forwarded by the current version. Contact messages must not be used to submit application documents.

Payment/accounting records: retained as required by applicable duties; the final schedule must be established.

Communication and security logs: retained only as justified by handling enquiries, operation and legal duties.