Privacy Policy

Article 1 – Data Controller

Personal data collected on the JobCroissant website is processed by:

Article 2 – Personal Data Collected

2.1. Employer (Advertiser) Data

When posting job listings, we collect the following data:

• Email address
• Phone number
• Company name
• Name of the person posting the job
• Billing information (if applicable)

2.2. Candidate Data

JobCroissant does not collect any non-anonymized data about candidates.

Candidates acknowledge and accept that their contact and identification information will be transmitted to employers when they apply for a job through the platform (via email, WhatsApp, phone, or external link provided by the advertiser).

JobCroissant is not responsible for the processing of personal data carried out by employers after receiving applications. Candidates are advised to consult the privacy policy of each relevant employer.

Article 3 – Purpose of Processing

Personal data is collected and processed exclusively for the following purposes:

3.1. For Employers

• Publication and management of job listings
• Processing of orders and payments
• Service-related communications (publication notifications, alerts, etc.)
• Invoicing and accounting
• Compliance with legal obligations

3.2. For Candidates

• Enable job applications to employers through the provided contact channels

Article 4 – Legal Basis for Processing

The processing of personal data is based on the following legal grounds:

• Contract performance: processing is necessary for the performance of the job listing publication services ordered by the employer.
• Consent: when candidates voluntarily choose to transmit their contact details to employers.
• Legal obligation: compliance with accounting and tax obligations.
• Legitimate interest: service improvement and fraud prevention.

Article 5 – Data Recipients

Personal data may be disclosed to the following recipients:

• Technical service providers: hosting provider (Vercel), payment solution (Stripe), email service (Mailgun).
• Employers: candidate contact details are transmitted when a candidate applies for a job.
• Competent authorities: in case of legal obligation or judicial requisition.

Data is never sold to third parties for commercial purposes.

Article 6 – Data Retention Period

Personal data is retained for the following periods:

Article 7 – User Rights

In accordance with applicable data protection regulations, you have the following rights:

• Right of access: obtain confirmation that data concerning you is being processed and obtain a copy.
• Right to rectification: request the correction of inaccurate or incomplete data.
• Right to erasure: request the deletion of your personal data.
• Right to restriction: request the restriction of processing in certain cases provided by law.
• Right to data portability: receive your data in a structured, commonly used format.
• Right to object: object to the processing of your data for legitimate reasons.

To exercise these rights, contact us at: jobcroissant@rolework.com

You also have the right to lodge a complaint with a supervisory authority (in France: CNIL – www.cnil.fr).

Article 8 – Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, modification, disclosure, or destruction, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure hosting with Vercel (SOC 2 certified)
• Secure payments via Stripe (PCI DSS Level 1 certified)
• Restricted data access on a need-to-know basis

Article 9 – Cookies

The JobCroissant website uses cookies that are strictly necessary for the operation of the service. These cookies do not require prior consent.

We do not use advertising tracking or profiling cookies.

Article 10 – Contact

For any questions regarding this privacy policy, the exercise of your rights, or the protection of your personal data, you can contact us: