Privacy Policy

1. GENERAL INFORMATION

This Privacy Notice contains information about how Kaymack processes your personal data when you visit and use the website www.kaymack.careers.

When you visit this website, Kaymack processes your personal data. As we are committed to privacy, we pay particular attention to personal data processing.

When processing personal data, we observe the following principles: (i) lawfulness, fairness, and transparency; (ii) purpose limitation; (iii) data minimisation; (iv) accuracy; (v) storage limitation; (vi) integrity and confidentiality; and (vii) accountability.

This Privacy Notice aims to provide you with information about how we process — that is, how we collect, use, disclose, transfer, and store — your personal data when you use our website.

2. OUR CONTACT DETAILS

Data Controller: Kaymack DOO, Radnička 16, 21000 Novi Sad, Serbia, PIB: 115654105, MB: 22188968. Email: info@kaymack.careers.

3. DEFINITIONS

4. WHAT PERSONAL DATA WE PROCESS, FOR WHAT PURPOSES, ON WHAT LEGAL BASIS, AND RETENTION PERIODS

4.1  CANDIDATES (job seekers)  —  Registration and use of services

We process the following personal data for the purpose of registration on the website and use of our services: identification data, password, contact data, and resume/CV data. Legal basis: performance of contract. Retention: for the duration of your active account.

4.2  EMPLOYER REPRESENTATIVES  —  Registration and use of services

We process the following personal data of employer representatives: identification data (name), contact data (business email address), company name, company website, and job descriptions. Legal basis: performance of contract and legitimate interests (providing and managing hiring services). Retention: for the duration of the account or the contractual relationship. Note: Employer contact persons’ names and business email addresses constitute personal data under applicable law and are processed solely for the purpose of delivering the contracted services. They are not used for any other purpose and are not shared with third parties beyond what is necessary to perform the services.

4.3  ALL USERS  —  Customer support

We process identification data, contact data, and data about your interaction with us (email, telephone, messages) for the purpose of providing customer support. Legal basis: performance of contract. Retention: for the duration of the account, or until the issue is resolved.

4.4  ALL USERS AND VISITORS  —  Newsletter

We process your email address for the purpose of sending newsletters and updates. Legal basis: consent. Retention: until consent is withdrawn or the account is deleted.

4.5  ALL USERS AND VISITORS  —  Marketing, analytics, and personalisation

We process your IP address and cookie data for marketing, website personalisation, and analytics purposes. Legal basis: consent. Retention: until consent is withdrawn or the account is deleted. For more information on cookie processing, please refer to our Cookie Notice.

4.6  EMPLOYERS  —  Payment processing

Payments are processed via Banca Intesa’s certified payment gateway (PCI-DSS compliant). Kaymack does not collect, view, store, or have access to any payment card information. The bank’s payment system handles all card data directly. Kaymack receives only a payment status notification. Legal basis: performance of contract.

5. RECIPIENTS OF PERSONAL DATA (WITH WHOM WE SHARE YOUR DATA)

We do not sell, rent, or otherwise disclose personal data collected in the manner described above, except as described in this Privacy Notice.

Website development and maintenance: Lunaria Digital, a company based in Serbia, maintains the Kaymack website. The website is built on WordPress, a platform operated by Automattic Inc. (USA). Both are considered recipients of personal data to the extent necessary for the provision of their services.

Hosting: The website is hosted by HOSTINGER, UAB, a private limited liability company registered in Lithuania (company code 302710386), registered address: Švitrigailos str. 34, LT-03230 Vilnius, Lithuania. Servers are located in the United States (North Carolina); backup servers are located in the United States (Boston). Hostinger acts as a data processor under a Data Processing Addendum available at hostinger.com/legal/dpa.

Candidate resumes shared with employers: We share a candidate’s resume/CV only with employers whose specific job posting that candidate has applied to. Resumes are not shared with any employer unless the candidate has actively applied for that employer’s listed position. No employer has access to resumes of candidates who have not applied for their role.

Email marketing: For the purpose of sending newsletters, we use the services of Mailchimp (The Rocket Science Group LLC), based in the United States.

Analytics: If you consent to analytics cookies, personal data is shared with Google LLC (Google Analytics), based in the United States.

Advertising pixels: If you consent to marketing cookies, data is shared with Meta Platforms Ireland Ltd. (Meta/Facebook Pixel) and LinkedIn Ireland Unlimited Company (LinkedIn Insight Tag). These tools are used to measure the performance of advertisements and enable targeted advertising.

Legal obligation: If your conduct on the website exhibits elements of prohibited or criminal activity, your personal data may be shared with competent state authorities for the purpose of sanctioning such conduct and/or criminal prosecution.

If we share your personal data with any additional recipient not listed above, we will update this Privacy Notice and ensure that such recipients process data in accordance with our instructions and to the highest standards of personal data protection.

6. TRANSFER OF PERSONAL DATA TO OTHER COUNTRIES

Personal data is stored on servers operated by HOSTINGER, UAB, located in the United States (North Carolina), with backup servers in the United States (Boston). The transfer to the United States is carried out on the basis of appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, as incorporated in Hostinger’s Data Processing Addendum.

When you consent to analytics or marketing cookies, data is transferred to Google LLC and/or Meta Platforms and/or LinkedIn Ireland, all of which operate on the basis of Standard Contractual Clauses or other appropriate safeguards for international data transfers.

When you consent to receiving a newsletter, your personal data is transferred to Mailchimp (The Rocket Science Group LLC, USA), on the basis of Standard Contractual Clauses.

Candidate resumes may be transferred to countries where the employer is located, including the United States and EU member states. Such transfers are carried out on the basis of the candidate’s explicit consent given at the time of job application.

The website is built on WordPress, operated by Automattic Inc., USA. Data is processed in the United States on the basis of Standard Contractual Clauses.

In all cases where personal data is transferred to a third country, the transfer is made only where there is a sufficient basis for such transfer under applicable data protection law, including by the application of adequate safeguards.

7. YOUR RIGHTS REGARDING THE PROCESSING OF PERSONAL DATA

In connection with the processing of your personal data, you have the following rights under applicable data protection law:

• Right of access
• Right to rectification and completion
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object (where processing is carried out for direct marketing purposes)

If you submit an objection to processing for direct marketing purposes, your personal data may no longer be processed for such purposes.

To exercise any of the above rights, please submit a request to: info@kaymack.careers. We are obliged to act upon your request within 30 days, which period may be extended by a further 60 days in justified cases, of which you will be duly notified. Acting upon your requests is entirely free of charge.

You also have the right to lodge a complaint at any time with the Commissioner for Information of Public Importance and Personal Data Protection (Bulevar kralja Aleksandra 15, Belgrade; email: office@poverenik.rs; tel: +381 11 3408 900). Lodging a complaint with the Commissioner does not affect your right to seek protection through appropriate judicial or administrative proceedings.

8. CONSENT AND WITHDRAWAL OF CONSENT

Where we process your personal data on the basis of consent, providing your personal data for the stated purposes is entirely voluntary and is not a legal or contractual requirement, nor a precondition for using the website.

You may withdraw your consent at any time by submitting a withdrawal request to: info@kaymack.careers. Please note that withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal.

9. OBLIGATION TO PROVIDE PERSONAL DATA

Providing data for the purpose of registration is mandatory if you wish to register on our website. In the absence of such data, you will not be able to use our platform services.

10. AMENDMENTS TO THIS PRIVACY NOTICE

Kaymack reserves the right to update, supplement, amend, and/or adapt this Privacy Notice at its own discretion. If changes to this Notice occur, you will be notified in a timely manner before such changes take effect.

11. FINAL PROVISIONS

This Privacy Notice, and all amendments thereto, is published on the Kaymack website.

Last version: April 23, 2026.

BY TICKING THE CHECKBOX NEXT TO THIS PRIVACY NOTICE, THE USER CONFIRMS THAT THEY HAVE READ AND UNDERSTOOD ITS CONTENTS.