Find a Space Job Logo

Privacy Policy

Last Updated: June 2026

1. Who We Are

Welcome to Find a Space Job ("we", "us", "our"). We provide a job board and talent pool for the European space industry. This policy explains what personal data we collect, why we use it, who we share it with, and the choices and rights available to you.

2. The Data We Collect

We collect and process the following types of information:

  • Identity and Contact Data: If you create an account, post a job, join a company account, or create a candidate profile, we may collect your name, email address, account role, company name, and related account details.
  • Candidate Profile Data: If you create a job seeker profile, we may collect your headline, bio, current role, current company, location, years of experience, preferred work modes, relocation preference, links to professional profiles, CV filename, CV upload status, and other information you choose to add.
  • CV and Application-Related Data: If you upload a CV or make your profile visible to employers, we store the CV file and related metadata so the feature can work. Employers with talent pool access may be able to view your visible profile and open your CV through a short-lived secure link.
  • Employer and Job Posting Data: If you use employer features, we may collect company profile information, team membership data, job postings, job status, payment status, and talent pool access or entitlement information.
  • Talent Pool and Invite Data: We may process talent pool search, profile view, CV open, and invitation events, including employer user IDs, company IDs, candidate IDs, job IDs, invite status, timestamps, and short employer messages where the invite feature allows them.
  • Transaction Data: If you purchase a job posting, we collect details about the transaction. Please note, we do not store your full credit card details; this is handled securely by our payment processor.
  • Technical Data: This includes technical information necessary to maintain the security and integrity of our service. This may include data derived from your IP address used for abuse prevention and for anonymous analytics.
  • Usage Data: This includes information about how you use our website and product features, such as pages visited, links clicked, profile completion state, visibility changes, and employer talent pool activity. Some analytics are stored in aggregated form, and some operational events are linked to an account so we can provide paid features, prevent abuse, and understand product usage.

3. How and Why We Use Your Data

We use your data for the following purposes, relying on specific legal grounds (lawful basis) as required by GDPR:

  • To Provide Our Service: We use account, company, job posting, profile, CV, transaction, and invite data to manage accounts, publish jobs, operate dashboards, process payments, show eligible candidates in the talent pool, and send talent pool invitations. (Lawful Basis: Performance of a Contract)
  • To Make Candidate Profiles Visible to Employers: If your job seeker profile is set to be visible to employers, you are open to opportunities, and your profile meets the talent pool readiness criteria, verified and entitled employers can discover your profile in the talent pool. You can change your visibility settings from your dashboard. (Lawful Basis: Performance of a Contract and Legitimate Interests)
  • To Improve Our Platform: We analyze usage and technical data to understand what users need, fix bugs, measure feature performance, and improve the user experience. (Lawful Basis: Legitimate Interests or Consent where required for analytics cookies)
  • For Security: We use Technical data to protect our services from fraud and abuse. (Lawful Basis: Legitimate Interests)
  • To Communicate With You: We may use your contact data to send account messages, verification emails, service updates, talent pool invitations, and support replies. (Lawful Basis: Performance of a Contract or Legitimate Interests)

4. Talent Pool Visibility

The talent pool is designed to let employers discover job seekers who have chosen employer visibility and completed the required profile fields. Depending on what you provide, visible employer-facing profile information may include your name, headline, bio, location, current role, current company, years of experience, preferred work modes, relocation preference, professional links, profile freshness, and whether a CV is available.

Your CV is not listed publicly. If you upload a CV and your profile is available in the talent pool, employers with authorized talent pool access may be able to open the CV for recruitment purposes. If you make your profile private or remove required information, your profile should no longer be eligible for the employer talent pool.

5. Cookies and Consent

We use two types of cookies:

  • Essential Cookies: These are necessary for the website to function (e.g., keeping you logged in). They do not require consent.
  • Analytics Cookies: These help us understand user behavior. We will only use these cookies if you provide your consent via our cookie banner.

6. Who We Share Your Data With

We do not sell your personal data. To operate our service, we may share information with the following categories of third parties:

  • Authorized Employers: If your profile is visible in the talent pool, eligible employers may view your employer-facing profile information, open your CV where available, and send you invitations to apply.
  • Payment Processors: To handle secure payments for job postings.
  • Cloud Hosting, Database, and Authentication Providers: To host our website, database, authentication, file storage, and related infrastructure.
  • Email Providers: To send transactional emails, account messages, and talent pool invitations.
  • Analytics and Security Providers: To measure product usage, improve the platform, prevent fraud, and protect sign-up and login flows, subject to consent where required.
  • Government Authorities: If required to do so by law.

These providers are bound by contract to protect your data and only use it for the purposes we specify.

7. International Data Transfers

Our service providers may be located outside the European Economic Area (EEA). When we transfer your data outside the EEA, we ensure it is protected by implementing appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

8. Data Security and Retention

We implement technical and organizational measures to protect your data. However, no system is 100% secure. We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including for any legal or accounting requirements.

Candidate profiles and CVs are generally retained while your account remains active or until you update, remove, or delete the relevant information. Talent pool invite and usage records are retained for operational, security, entitlement, analytics, and dispute-resolution purposes. Payment and accounting records may be retained for the periods required by law.

9. Automated Decision-Making

We may use profile fields and filters to determine whether a job seeker profile is eligible to appear in the talent pool and to help employers search candidates. We do not make hiring decisions for employers, and we do not use solely automated processing to make decisions that produce legal or similarly significant effects about candidates.

10. Your Legal Rights

Under GDPR, you have the following rights regarding your personal data:

  • The right to access: You can request a copy of the data we hold about you.
  • The right to rectification: You can ask us to correct any inaccurate data.
  • The right to erasure ("right to be forgotten"): You can ask us to delete your data in certain circumstances.
  • The right to restrict processing: You can ask us to suspend the processing of your data.
  • The right to data portability: You can request your data in a structured, machine-readable format.
  • The right to object: You can object to our processing of your data where we are relying on a legitimate interest.
  • The right to withdraw consent: Where processing is based on consent, you can withdraw that consent at any time.

To exercise any of these rights, please contact us at hello@findaspacejob.com.

You also have the right to lodge a complaint with your local data protection authority. If you are in Spain, you can contact the Agencia Espanola de Proteccion de Datos (AEPD).

11. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page, and we encourage you to review it periodically.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at hello@findaspacejob.com.