Privacy Policy
Last updated: 2026-09-29
1. Introduction & Data Controller
At Jobsties Academy, we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, process, and safeguard your personal information when you visit our website, interact with our content, or use our services, or work with us as a member of our coaching team — except the Jobsties Platform, which has its own Privacy Policy (see section 12 below).
We process your data in accordance with the General Data Protection Regulation (GDPR), the Spanish Organic Law 3/2018 on Data Protection (LOPDGDD), and applicable European Union data protection laws.
By using our website or services, you agree to the terms of this Privacy Policy.
Data Controller: Ana Maria Nedelcu (trading as Jobsties Academy)
Status: Self-employed (autónomo), registered in Spain
Address: Cortina del Muelle 11, 1st Floor, 29015 Málaga, Spain
Email: service@jobsties.com
2. Information We Collect
Information you provide directly
- Name and email address when you fill out forms, quizzes, or contact us
- Professional and career-related information you choose to share (experience, goals, current situation)
- Responses to our Career Persona Quiz
- Messages you send us through our website, including bug reports
- Testimonials, reviews, or feedback (only published with your explicit consent)
If you work with us
We keep a list of our coaching team: your name and email address, when you were added and by whom. It is how we know who is currently part of the team. Holding a place on that list is separate from having a Jobsties Platform account, and the list entry stays if an account is closed.
Payment information
Payments are processed through secure third-party providers (e.g. via Skool or integrated payment processors). We do not store or have access to your full payment details such as card numbers.
Automatically collected information
- Device and browser information
- IP address: used to tell which country you are in and to stop repeated form submissions. We keep the country, and a one-way code made from the address, which we do not yet delete on a schedule
- Website usage data (pages visited, interactions, time spent)
- Download activity (which resources you download, from which page of our site, and any campaign parameters in the link)
- Cookies and tracking technologies (see Cookie Policy)
3. Legal Basis & Purpose of Processing
We process your data in accordance with GDPR Art. 6. Where we rely on legitimate interest, we ensure it does not override your rights.
| Purpose | Data | Legal Basis |
|---|---|---|
| Delivering free resources | Name, email, country | Consent — Art. 6(1)(a) |
| Career quiz results | Name, email, quiz responses, country | Consent — Art. 6(1)(a) |
| Sending news & updates, if you ticked the box | Name, email, the wording you agreed to | Consent — Art. 6(1)(a) |
| Contact inquiries | Name, email, subject, message, country | Legitimate interest — Art. 6(1)(f) |
| Bug reports | Name, email, your message, and device details if you choose to include them | Legitimate interest — Art. 6(1)(f) |
| Analytics (Google Analytics 4) | Pages visited and how the site is used | Consent — Art. 6(1)(a) |
| Testimonials | Name, role, company, review | Consent — Art. 6(1)(a) |
| Paid services delivery | Name, email, payment via provider | Contract — Art. 6(1)(b) |
| Download analytics & growth insight | Resource, the page and campaign parameters, country | Legitimate interest — Art. 6(1)(f) |
| Keeping a record of our coaching team | Name, email | Legitimate interest — Art. 6(1)(f) |
| Launch waitlist (app.jobsties.com) | Name, email, country, and whether you want news & updates | Consent — Art. 6(1)(a) |
| Recording consent choices | Your consent choices, country, and a daily one-way code made from your IP address (not the address itself) | Legal obligation — Art. 6(1)(c) |
| Handling a request to delete your data | Email, what you asked for, a one-way code made from your email | Legal obligation — Art. 6(1)(c) |
| Protecting our forms from bots and repeated submissions | Your IP address, and a one-way code made from it | Legitimate interest — Art. 6(1)(f) |
4. Cookies and Tracking
We use cookies and similar technologies to ensure the proper functioning of our website and to improve user experience. Essential cookies are necessary for core functionality. Analytics cookies are used only with your consent. No non-essential cookies are activated without your prior consent. You can manage or withdraw your consent at any time via the cookie settings available on our website. For full details, see our .
5. Data Processors & Third Parties
We do not sell, rent, or trade your personal data. We may share your data with trusted third-party service providers necessary to operate our services, including:
- Website hosting providers (Vercel — USA, EU Standard Contractual Clauses)
- Database (Supabase — EU region, Frankfurt, Germany)
- CMS hosting (Contabo — Germany)
- Transactional email delivery (Resend — EU, Ireland)
- Error monitoring (Sentry — EU data region, Frankfurt, Germany) — when something on the site breaks, receives a technical report: the error, where in our code it occurred, the page address without its parameters, the pages you visited just before it, and your browser, operating system and device type. Reports are stripped of email addresses, sign-in and deletion-link tokens, cookies and form contents before they leave our servers or your browser, IP addresses are not stored, and it sets no cookies
- Bot protection (Cloudflare Turnstile) — checks that our forms are being filled in by a person rather than a bot. It receives your IP address and technical details of your browser and connection, and Cloudflare also uses them to improve its own bot detection. Cloudflare’s network is global, so unlike our other providers this check is not guaranteed to take place inside the EU; it is covered by Cloudflare’s data processing agreement. It sets no cookies on our site
- Analytics (Google Analytics 4, Google — USA, EU-US Data Privacy Framework) — only with your consent
- Video player (YouTube, Google — USA, EU-US Data Privacy Framework) — only when you press play on one of our videos. YouTube then receives your IP address and may store its own cookies
- Community and membership platform (Skool)
All providers process data under appropriate data processing agreements in accordance with GDPR.
6. International Data Transfers
Some of our service providers may process personal data outside the European Economic Area (EEA), particularly in the United States. In such cases, we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework. Your CMS data is stored on servers in Germany (Contabo). Personal data submitted through our forms is stored within the European Union (Supabase, Frankfurt, Germany).
7. Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy:
| Data Category | Retention Period |
|---|---|
| Lead data (forms, quizzes) | 24 months after capture |
| Contact & bug-report submissions | 12 months after we receive them |
| Analytics data | According to provider settings (typically up to 14 months) |
| Testimonials | Until consent is withdrawn |
| Consent records | 36 months, kept as evidence of the consent choices we relied on |
| Coaching-team record | While you are part of the team. We remove your entry when you leave. |
| Launch waitlist | 24 months after you join |
| Ambassador invitations | Unused invitations: 6 months after they are sent. A used invitation is kept with the testimonial it produced. |
| Ambassador testimonial submissions | Unpublished submissions: 3 years. A published testimonial, and our record of it, stays until you withdraw consent. |
| Data-deletion requests (your email address and when you asked) | 3 months |
| Download activity | 14 months, used for marketing analysis and to identify potential growth markets |
8. Your Rights (GDPR & LOPDGDD)
Under GDPR and the Spanish LOPDGDD, you have the following rights:
- Right to Access (Art. 15): Request a copy of your personal data
- Right to Rectification (Art. 16): Correct inaccurate or incomplete data
- Right to Erasure (Art. 17): Request deletion of your data (“right to be forgotten”)
- Right to Restriction (Art. 18): Limit how we process your data
- Right to Data Portability (Art. 20): Receive your data in a machine-readable format
- Right to Object (Art. 21): Object to processing based on legitimate interest
- Right to Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of prior processing
Deleting your data
You can request deletion of your data directly via the Delete My Data link in our footer. If we hold data under that address, you’ll receive an email with a secure link (valid 7 days). Confirming erases what we hold under that address automatically, with an option to download a copy first. You can also always email service@jobsties.com. This does not delete a Jobsties Platform account — see the Platform Privacy Policy for that.
Deleted data is removed from live systems immediately and from encrypted backups as they expire from the backup cycle.
To exercise any of these rights, contact us at service@jobsties.com. We will respond within 30 days.
9. Right to Complain
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in your country of residence. You may also contact:
- Germany: the data protection authority of your federal state (Land)
- Spain: Agencia Española de Protección de Datos (AEPD) — www.aepd.es
10. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including secure (TLS/HTTPS) connections, controlled access to systems, and standard security practices designed to prevent unauthorized access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
11. Children's Privacy
Our services are intended for adult professionals. We do not knowingly collect personal data from individuals under 14 years of age (minimum age under Spanish law) or under 16 years of age in Germany. If you believe that a minor has provided us with personal data, please contact us immediately and we will take appropriate steps to remove such information.
12. Jobsties Platform Accounts
This policy covers our website and our marketing. The Jobsties Platform, at app.jobsties.com, has its own Privacy Policy and Terms of Service. If you have a Platform account, those explain how your account data is handled.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page, and the “Last updated” date will be revised accordingly. Continued use of our services after such changes constitutes acceptance of the updated policy.
Questions?
If you have any questions regarding our policies or want to exercise your data rights, our team is here to help.
We are not obligated and not willing to participate in dispute resolution proceedings before a consumer arbitration board.