Data Protection & Subprocessors
Last updated: 3 September 2026
1. Who we are
Work Across Europe, Zmaj Ognjena Vuka 24, Novi Sad, Serbia (registration number 21935204, tax/VAT 113850129) operates workacrosseurope.com. For personal data of job seekers using the platform we act as the data controller. Where we transmit a candidate profile to an employer at the candidate's request, the employer is an independent controller for its own use of that data. Contact: support@workacrosseurope.com.
2. What we process and why
- Account data (email, name, country) — to provide the service (contract).
- Profile and document links you upload — to complete your application (contract).
- Payment and order records — to fulfil purchases and meet tax obligations (contract / legal obligation).
- Support messages — to answer you (legitimate interest).
- Aggregated usage statistics — to improve the product (legitimate interest).
We do not sell personal data, do not use it for automated decisions with legal effect, and we do not ask for passport scans, biometric data or other special-category data.
3. Subprocessors
| Category | Purpose | Location |
|---|---|---|
| Cloud hosting & database provider | Application hosting, database, authentication | EU / US (SCCs) |
| Payment provider (merchant of record) | Payment processing, invoicing, tax | EU / US (SCCs) |
| Email delivery provider | Transactional and notification emails | EU / US (SCCs) |
| Analytics provider | Aggregated, privacy-friendly traffic statistics | EU |
All subprocessors are bound by written data processing agreements. Transfers outside the EEA rely on the EU Standard Contractual Clauses.
4. Security
Data is encrypted in transit (TLS) and at rest, access is restricted by row-level security and role-based permissions, administrative access is limited to named accounts, and we keep audit logs of administrative actions. We notify affected users and, where required, the supervisory authority within 72 hours of becoming aware of a personal data breach.
5. Retention
Account and profile data is kept while your account is active and deleted within 30 days of a deletion request. Payment and invoice records are retained for the statutory accounting period (up to 10 years).
6. Your rights
You may request access, rectification, erasure, restriction, portability, or object to processing, and you may withdraw consent at any time. Email support@workacrosseurope.com; we respond within 30 days. You can also lodge a complaint with your local data protection authority.
7. Related documents
See our Privacy Policy, Terms of Service and Refund Policy.