Privacy policy for candidates

Version dated 27 April 2026


The French version shall always prevail in case of any discrepancy or inconsistency between the French version and its English translation.


1. PREAMBLE AND SCOPE

This Privacy Policy sets out the rules applicable to the collection and processing of your personal information (hereinafter referred to individually or collectively as “Personal Data”) via our website www.welcometothejungle.com and its subdomains (hereinafter referred to as the “Website” or our “Services”).

Our Privacy Policy details the Personal Data we collect and process via the Website, the reasons for processing your Personal Data, how we use it, and the features available to you, including to access and update your Personal Data.
It applies to candidates and individuals who browse the Website without having created an account (hereinafter “Visitors”), and to individuals who create a member account and have provided their personal information (hereinafter “Members”), collectively referred to as “Users”.

This Policy applies to our three markets: France, the United Kingdom, and the United States. It has been drawn up in compliance with:

  • The General Data Protection Regulation (GDPR — EU 2016/679) for users residing in the European Union
  • The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 for users residing in the United Kingdom
  • The applicable data protection laws in the relevant States of the United States, including the California Consumer Privacy Act (CCPA) and similar legislation in force in other States

Certain provisions of this Policy apply only to specific markets; these are expressly indicated where applicable.

This Privacy Policy does not apply to our prospects and clients who are employment and recruitment professionals. If you are a client or prospect, we invite you to refer to the dedicated privacy policy.

This Privacy Policy does not apply to services offered by third-party companies operating websites and tools belonging to our partners, or other websites or tools accessible from our Services. We are not responsible for how those websites use your Personal Data.


2. ACCEPTANCE AND UPDATES TO OUR PRIVACY POLICY

By using our Services on the Website, you confirm that you have read and understood our Privacy Policy and that you accept it without restriction or reservation. If you disagree with any of its terms, you are free not to use our Services.

We may need to amend the terms of this Privacy Policy, in particular when a new processing activity is implemented. You are invited to consult this page regularly to ensure that you are in agreement with any amendments. In the event of significant changes, you will be informed either by a prominent notice on our Website or by email notification.


3. DATA CONTROLLER AND DATA PROTECTION OFFICER

💡 A data controller is an entity that determines the purposes and means of the processing of your personal data and is responsible to you for compliance with applicable data protection legislation, including the GDPR and the UK GDPR.

We act as data controller for all processing carried out on our Website, except where you apply for positions offered by our clients. In that case, WTTJ acts as a data processor on behalf of the company to which you are applying.

We have appointed a Data Protection Officer (DPO) who will be your point of contact for any questions relating to the processing of your Personal Data. They can be reached by email at privacy@welcometothejungle.com.


4. PERSONAL DATA COLLECTED AND PROCESSED

💡 Personal data means any information relating to an identified or identifiable natural person.

How do we collect your Personal Data?

We use a variety of methods to collect your data:

  • Direct interactions. You provide us with your identification, contact, and professional profile data and, where applicable, your special category data, by completing forms on our Website, creating your Member account, uploading your CV, or by contacting us by email or via our support form.
  • Automated technologies. As you interact with our Website, we automatically collect technical and usage data via cookies and similar technologies. Please see our Cookie Policy for further details.
  • Third-party or publicly available sources. We may receive data about you from third parties or public sources, in particular when you import your profile from a professional social network such as LinkedIn, or when you log in via a third-party account. Such data is collected within the limits of the permissions you have granted to those platforms.

What data do we process?

Technical data relating to Website usage
📊 Data collected:

  • IP address
  • Cookies
  • Logs
  • Connection data
  • Navigation and behavioural data on the Website

Please see our Cookie Policy for further details.

👥 Data subjects: Visitors; Members

User identification data
📊 Data collected:

  • Title
  • First name
  • Surname
  • Email address
  • Telephone number
  • Date of birth
  • City or region
  • Profile photo

👥 Data subjects: Members

Data relating to Users’ professional lives
📊 Data collected:

  • Education
  • Professional experience
  • Industry sector
  • CV
  • Cover letter
  • Documents uploaded by the Member
  • Sought position and employment characteristics
  • Professional skills
  • Links to professional social networks and information extracted from shared links

👥 Data subjects: Members

Special Category Data
⚠️ This collection applies only to the United Kingdom and United States markets. It is disabled for users residing in France.

As part of our commitment to diversity and inclusion, and in accordance with local practices applicable in the United Kingdom and the United States, we may collect, with your explicit consent, data relating to your ethnic origin, sexual orientation, and gender identity. Special Category Data includes details about your ethnicity, sexual orientation, and gender identity. By providing this data, you consent to it being processed as further described in this Privacy Policy.

This data is under no circumstances used in connection with any artificial intelligence-powered features (matching, sourcing, or automatic profile completion). You may withdraw your consent at any time from your account settings, without affecting the lawfulness of any processing carried out prior to such withdrawal.

📊 Data collected: Ethnic origin, sexual orientation, gender identity
👥 Data subjects: Members (United Kingdom and United States only)
⚖️ Lawful basis: Explicit consent


5. MANDATORY AND OPTIONAL DATA

Personal Data that is essential for WTTJ to achieve the purposes of the relevant processing activities is marked with an asterisk in the relevant collection forms.
Should you choose not to complete these mandatory fields, we will be unable to provide our Services to you.

Personal Data not marked with an asterisk is optional; it enables us to better understand you and to improve your experience and our Services.

With regard to Personal Data collected when you browse the Website, please refer directly to our Cookie Policy.


6. PURPOSES OF PROCESSING

💡 Processing of personal data refers to any operation or set of operations performed on personal data, regardless of the means used. The purpose of processing refers to the primary objective for which personal data is used.

The different uses of your Personal Data will depend on the features you use and the options set in your preferences.

Creating and managing your Member account

🎯 Sub-purposes:

  • Creating a Member profile on our Website
  • Handling enquiries and providing assistance in connection with your use of our Services

⚖️ Lawful bases: Performance of a contract; Legitimate interests

Finding employment opportunities, actively or passively

🎯 Sub-purposes:

  • Applying for, saving, importing, managing, and tracking your applications within your Member account
  • Being contacted directly by recruiters by making your information visible and enabling them to identify relevant candidates based on Member profile information and their use of the Website

⚖️ Lawful bases: Performance of a contract; Legitimate interests; Consent

Receiving communications relating to our Services

🎯 Sub-purposes:

  • Sending email communications regarding your use of our Services, including your Member account and applications
  • Sending email communications about product updates or other important information from Welcome to the Jungle
  • Sending the Media newsletter, which features various articles and current affairs topics
  • Sending transactional communications, including legal and security updates

⚖️ Lawful bases: Legitimate interests; Consent

Developing our Services and improving your experience

🎯 Sub-purposes:

  • Conducting satisfaction surveys and collecting feedback with a view to improving our Services, including offering you a better, more intuitive, and personalised experience
  • Using your data to produce results that do not directly identify you, including statistics on our Members and their use of our Services
  • Using your Personal Data to develop, train, and improve our features and Services related to recruitment, including those based on artificial intelligence

⚖️ Lawful bases: Consent; Legitimate interests of Welcome to the Jungle in developing and improving its features in order to make its Services more appealing and useful

Technical management and use of the Website

🎯 Sub-purposes:

  • General administration of the Website to ensure its proper functioning and security
  • Handling enquiries submitted via the various forms available on our Website
  • Producing statistics, monitoring activity, and analysing traffic and pages visited
  • Improving the Website and Services and delivering content that performs well for you and your device
  • Setting cookies in accordance with choices made via our cookie banner
  • Resolving any disputes or anomalies in connection with the use of our Services, including combating online fraud

⚖️ Lawful bases: Legitimate interests; Consent


7. USE OF ARTIFICIAL INTELLIGENCE

Welcome to the Jungle incorporates artificial intelligence-powered features to enhance your job search experience. A detailed description of how these features work, their benefits, their limitations, and the controls available to you is set out in our AI and Candidates Information Notice, which we invite you to read.

Sub-processor — OpenAI

In connection with all of these features, Welcome to the Jungle engages OpenAI as a sub-processor. Prior to entering into this arrangement, we conducted thorough due diligence and entered into a specific Data Processing Agreement (DPA) with OpenAI in order to govern our relationship on a contractual basis and to ensure an adequate level of protection for your data. We ensure in particular that your data is not used by OpenAI to train or improve its models. For further information, please refer to OpenAI’s privacy policy.

AI-powered features and associated personal data processing

  • Automatic profile completion
    When you upload your CV or share the URL of your professional social network profile, an automated analysis tool extracts and structures key information to pre-fill your profile. The extracted information must be reviewed and confirmed by you before it is saved.

  • Data processed: Uploaded CV and documents; third-party professional social network profile data (experience, education, skills, preferences)

  • Lawful basis: Performance of a contract

  • Recipients: Internal teams; OpenAI as sub-processor

  • Personalised job recommendations (matching)
    An algorithm analyses the information in your profile in order to recommend the most relevant job opportunities based on your experience, skills, and professional preferences.

  • Data processed: Professional profile data; preference data; usage data

  • Lawful basis: Performance of a contract

  • Recipients: Internal teams; technical service providers; OpenAI as sub-processor

  • Candidate sourcing by recruiters
    Where your profile is set to visible, our algorithm may match your profile against searches conducted by Welcome to the Jungle’s recruiter clients, on the basis of your professional background, seniority level, skills, and declared preferences. You may change your visibility status at any time by setting your profile to “Not available” in your account settings.

  • Data processed: Professional profile data; preference data; usage data

  • Lawful bases: Legitimate interests; Consent (via the management of your profile visibility)

  • Recipients: Welcome to the Jungle’s recruiter clients, within the limits of your visibility settings; internal teams; OpenAI as sub-processor

Profiling and algorithmic processing

💡 Profiling means, within the meaning of Article 4(4) of the UK GDPR, any form of automated processing of personal data consisting of the use of that data to evaluate certain aspects relating to a natural person, in particular to analyse or predict aspects concerning their professional situation.

The matching and sourcing features constitute profiling. In practice:

  • Logic applied: These processes are based on a semantic similarity analysis between your profile (target job title, experience, skills, education, preferences) and the characteristics of available job opportunities or recruiters’ requirements.
  • Consequences for you: Profiling may influence which job opportunities are presented to you as a priority, and the visibility of your profile to recruiters. It does not result in any solely automated decision: you remain free to apply for any position of your choosing, and recruiters remain the sole decision-makers in their own recruitment processes.
  • Your right to object: Pursuant to Article 21 of the UK GDPR, you may object to profiling at any time by contacting us at privacy@welcometothejungle.com or by setting your profile to “Not available” for the sourcing feature.

High-risk AI systems — EU AI Act

The matching and sourcing features are likely to fall within the category of high-risk AI systems within the meaning of Annex III of Regulation (EU) 2024/1689 on artificial intelligence (the AI Act), which covers AI systems used in the field of employment and access to work. Accordingly, Welcome to the Jungle is committed to complying with the transparency and human oversight obligations set out in that Regulation, the provisions of which relating to high-risk systems are entering into force progressively until August 2026. Human oversight is maintained at each stage of processing that may affect you.


8. RETENTION OF YOUR PERSONAL DATA

Your Personal Data is retained only for a period that is strictly necessary and proportionate to the purpose of the relevant processing activity.

Visitors

The retention periods for cookies and other trackers are set out in our Cookie Policy.

Your contact details collected when you subscribe to our newsletter are retained until you request their deletion via the unsubscribe link included in our communications.

In the event of a period of inactivity — meaning no positive action on your part for more than 3 years — we reserve the right to send you a communication asking whether you wish to continue receiving our communications. In the absence of a response, we reserve the right to delete your Personal Data.

Members

Personal Data entered in your Member account (identification data, professional data, contact details, photo, history, etc.) is retained for the duration of your use of the Services and until the closure of your account. In the event of a period of inactivity exceeding 5 years, we reserve the right to send you a communication asking whether you wish to retain your Member account.

Where you apply for positions with Welcome to the Jungle via our Website: your application data is retained for 2 years from the date of your application.
Where you apply for positions listed on our Website (other than Welcome to the Jungle vacancies): we act as a data processor on behalf of our recruiter clients and comply with the retention periods applied by them.

Prior to the expiry of these periods, we may contact you to ask whether you wish to extend the retention period, in which case the periods set out above will recommence.

Upon the expiry of these periods and the effective closure of your account, your Personal Data will be irreversibly anonymised, in accordance with the standards set out under applicable data protection law (with reference to Opinion 05/2014 of the Article 29 Working Party on anonymisation techniques). Data anonymised in this way no longer constitutes personal data within the meaning of the UK GDPR and is no longer covered by this Policy. It may then be used exclusively for statistical purposes or for the training and improvement of our algorithms or artificial intelligence systems.


9. RECIPIENTS OF YOUR PERSONAL DATA

Sharing with third parties

The Personal Data you provide to us in connection with your use of our Website may be disclosed to:

Our clients (recruiters), where you apply for a vacancy via our Services or where you consent to making your profile visible. In the latter case, you may withdraw your consent at any time, and your profile will never be visible to your current employer.

Our processors and partners, for example in connection with hosting, maintenance, satisfaction surveys and statistics, audits, fraud detection, marketing, security incident management, and the development and improvement of our Services. These third parties have access to your Personal Data only to the extent necessary to carry out these tasks on our behalf and are contractually prohibited from disclosing or using it for any other purpose.
In connection with all of its artificial intelligence-powered features, Welcome to the Jungle engages OpenAI as a sub-processor. Prior to entering into this arrangement, we conducted thorough due diligence and entered into a specific Data Processing Agreement (DPA) with OpenAI in order to govern our relationship on a contractual basis. We ensure in particular that your data is not used by OpenAI to train or improve its models. For further information, please refer to OpenAI’s privacy policy.

For legal reasons, your information and Personal Data may be disclosed to a third party where WTTJ is required to do so by law, a regulatory provision, or a court order, or where such disclosure is necessary for the purposes of an investigation, injunction, or legal proceedings, whether in the United Kingdom or abroad.

International transfers

Personal Data processed in connection with your use of our Website is stored on servers located within the European Union.

Where WTTJ engages service providers located outside the UK or the EU, appropriate safeguards are put in place to ensure the protection and security of your data transfers. Such recipients are either located in a country that benefits from an adequacy decision, or Standard Contractual Clauses approved by the relevant authority have been entered into. You may obtain a copy of the applicable transfer instruments by contacting our Data Protection Officer.


10. SECURITY OF YOUR PERSONAL DATA

We implement organisational and technical measures to protect the security of your Personal Data against any unauthorised access, disclosure, alteration, damage, or destruction.

In particular, our teams receive dedicated training in information security and confidentiality management. We also implement encryption of data in transit and at rest.

Welcome to the Jungle and its technical and hosting service providers have deployed appropriate measures to ensure the integrity, confidentiality, and security of your Personal Data.


11. YOUR RIGHTS

You have the right to access the Personal Data held about you, the right to request its rectification, erasure, or portability, as well as the right to request the restriction of processing of your data, to withdraw your consent, and to provide instructions regarding the handling of your data following your death.

You also have the right to object, at any time:

  • To processing carried out for direct marketing purposes by WTTJ
  • On grounds relating to your particular situation, to processing based on the legitimate interests of WTTJ
  • To profiling carried out in connection with the matching and sourcing features (see Section 7)

Right to explanation and human intervention

Where algorithmic or AI-powered features produce recommendations that may affect your access to employment opportunities, you have the right:

  • To obtain a meaningful explanation of the logic applied and the envisaged consequences for you
  • To request human intervention to review a recommendation or ranking
  • To contest any algorithmic recommendation that you consider to be inappropriate

These requests may be directed to privacy@welcometothejungle.com.

You may exercise your rights of rectification and erasure directly within your Member account (for further information on this process, please refer to our Terms and Conditions of Use).

You may also submit requests to us at any time, including regarding the way in which we use and develop artificial intelligence features, via our dedicated contact form or by contacting our Data Protection Officer (DPO) at privacy@welcometothejungle.com.

You may withdraw your consent to the sourcing feature at any time by setting your status to “Not available” within your Member profile. In that case, your profile data — including data resulting from the automatic profile completion feature — and your Website usage data will no longer be processed for the purpose of enabling recruiters to identify you as a relevant candidate.

Rights specific to United Kingdom residents

Under the UK GDPR and the Data Protection Act 2018, you benefit from the same rights as those described above. For any question specific to your market, please contact our DPO at privacy@welcometothejungle.com.

Rights specific to United States residents

Under the laws applicable in your State of residence, including the California Consumer Privacy Act (CCPA) and similar legislation in force in other States, you have the following rights:

  • Right to know: the right to be informed of the categories of data collected, the purposes for which it is used, and the categories of third parties to whom it is disclosed
  • Right to deletion: the right to request the deletion of your personal data, subject to certain legal exceptions
  • Right to opt out of sharing: the right to opt out of the sharing of your data for cross-context behavioural advertising purposes
  • Right to limit use of sensitive personal information: the right to limit the use of your sensitive personal information to purposes that are strictly necessary for the provision of the service
  • Right to non-discrimination: you will not be subject to any discrimination for having exercised your rights under applicable law

To exercise these rights: privacy@welcometothejungle.com

Competent supervisory authorities

If, having contacted us, you consider that your rights have not been respected, you have the right to lodge a complaint with the supervisory authority competent in your country of residence:

  • France and the European Union: Commission Nationale de l’Informatique et des Libertés (CNIL) — 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr
  • United Kingdom: Information Commissioner’s Office (ICO) — Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF — www.ico.org.uk
  • United States: Depending on your State of residence, you may contact the competent data protection authority. California residents may exercise their rights under the CCPA by contacting us at privacy@welcometothejungle.com.