Last updated: 14 June 2026
JobWave.it ("JobWave", "we", "our") respects the privacy of its users and visitors. This Privacy Policy describes how we collect, use, store and protect personal data, in compliance with Regulation (EU) 2016/679 (GDPR), Legislative Decree 101/2018, the guidelines of the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), as well as the requirements of the Apple App Store and Google Play Store.
Please read this Privacy Policy carefully before using the website www.jobwave.it, the pages linked to it, and the JobWave.it mobile application available for iOS and Android.
1. Data controller
The controller of personal data is:
- Antonino Scardina
- Registered office: Via Romagnano 30, Torino
- Privacy email: mail@jobwave.it
2. Personal data subject to processing
We process personal data that you provide to us directly, data that we collect automatically and, where applicable, data collected through third parties.
2.1 Data voluntarily provided by the user
- Registration and account data: email address, name or username, phone number, WhatsApp, Telegram, website, links to social media profiles (Facebook, LinkedIn, X/Twitter).
- Listing data: text, title, description, duties, requirements, certifications, languages, availability, images, company logo, contact details published by the advertiser (email, phone, social media).
- Application data: name, email, cover message, curriculum vitae and attachments sent through the application form.
- Contact data: name, email, subject and content of the message sent through the contact form.
- Comments and reactions: texts, reactions and replies published on News-type listings.
- Payment data (Star): JobWave does not store bank or credit card data; payments are handled exclusively by PayPal.
2.2 Automatically collected data
- Browsing and device data: IP address (anonymised or full for security purposes), User-Agent, browser type, operating system, screen resolution, language, referrer, pages visited.
- Mobile app data: Firebase Cloud Messaging (FCM) token for push notifications, device model and operating system version (only when required for support or debugging), notification badge count.
- Security data: access logs, login attempts, spam reports, suspicious activity.
2.3 Special categories of data
JobWave does not actively request special categories of data (health, religious beliefs, political opinions, trade union membership, genetic or biometric data). If a user voluntarily enters such data within listings, CVs or messages, they do so under their own exclusive responsibility. JobWave will not make any specific use of such data and will not process it for its own purposes.
3. Purposes and legal bases of processing
| Purpose |
Legal basis |
| Registration, authentication (magic link/OTP), account management |
Performance of a contract / service subscription (art. 6.1.b GDPR) |
| Publication, display and management of listings |
Performance of a contract (art. 6.1.b GDPR) |
| Sending applications to advertisers |
Performance of a contract / legitimate interest of the user (art. 6.1.b and f GDPR) |
| Sending technical, administrative and security communications |
Performance of a contract and legal obligation (art. 6.1.b and c GDPR) |
| Push notifications (only with the operating system's consent) |
Consent (art. 6.1.a GDPR) |
| Anonymous browsing statistics and aggregated analytics |
Consent for profiling/analytics cookies; legitimate interest for anonymous data (art. 6.1.a and f GDPR) |
| Direct marketing and newsletters (where provided) |
Explicit and separate consent (art. 6.1.a GDPR) |
| Security, fraud prevention, rate limiting, content moderation |
Legitimate interest (art. 6.1.f GDPR) |
| Tax, accounting and legal compliance |
Legal obligation (art. 6.1.c GDPR) |
4. Cookies and tracking technologies
The website uses cookies and similar technologies. The first time you access the site, a banner is displayed that allows you to manage your preferences on an opt-in basis. Cookies are divided into the following categories:
4.1 Necessary / technical cookies
These cookies are essential for the operation of the website and cannot be disabled.
- PHPSESSID – session – maintains the user's session.
- jwreg – 7 days – stores the login state.
- jw_cc_cookie – 182 days – stores cookie preferences.
- csrf_token / security token – session – CSRF attack prevention.
4.2 Preference and functionality cookies
- hide_news_popup – 30 days – stores the closing of the news popup.
- jw_comments_user – session / short-term – guest comment management.
- devicePixelRatio – session – image adaptation to screen resolution.
4.3 Analytics cookies (require consent)
- Google Analytics 4 / Universal Analytics (provided by Google LLC) – session and persistent cookies – collection of aggregated browsing data; IP anonymised where possible.
- jw_rettime, jw_returns – 30 days – internal statistics on returning visitors.
You can manage or disable Google Analytics via the browser add-on.
4.4 Marketing / targeting cookies (require consent)
- Google Ads / Google Tag Manager / AdSense (provided by Google LLC) – persistent cookies – personalised advertising and conversion measurement.
4.5 Other technologies
- Cloudflare Turnstile – antispam verification in forms; may use technical cookies.
- Firebase Cloud Messaging – push token on the mobile device.
- LocalStorage / SharedPreferences in the app – secure local storage of JWT tokens and preferences.
5. Recipients and third parties
Personal data may be shared with third parties, to the extent strictly necessary for the stated purposes:
- Technology and hosting service providers: companies that host the JobWave website, databases and APIs, appointed as data processors.
- Google LLC / Firebase (Google): analytics, advertising, Firebase Cloud Messaging for push notifications. Google acts in part as an independent controller for its own services and in part as a data processor under the applicable agreements.
- Cloudflare, Inc.: DDoS protection, DNS, Turnstile antispam verification.
- Imgur, Inc.: hosting of images uploaded to listings.
- PayPal Holdings, Inc.: management of JobWave Star donations on the website.
- Apple Inc. / Google LLC: management of In-App purchases (where enabled) and of the app stores.
- Email service providers (PHPMailer / Mailgun / SMTP): sending of transactional emails.
- Competent authorities: when required by law or to protect JobWave's rights.
6. Transfer of data outside the European Economic Area (EEA)
Certain third-party providers (e.g. Google, Cloudflare, Imgur, PayPal, Apple) may transfer data to countries outside the EU (in particular the United States). Such transfers take place only in the presence of appropriate safeguards provided for by the GDPR, such as adequacy decisions of the European Commission, standard contractual clauses (SCC), certifications or other recognised legal mechanisms.
7. Data retention period
Personal data is retained for the time strictly necessary for the purposes for which it was collected:
- Account data: until the account deletion request.
- Listings: until the user deletes them or the term set for the service's purposes expires; they may be retained in anonymised form for statistics.
- Applications: the CV is deleted after being sent; application metadata may be retained for security for limited periods.
- Security logs: up to 12 months, unless evidentiary needs require otherwise.
- Accounting/tax data: according to legal obligations (generally 10 years).
- Analytics data: raw data is retained for limited periods (e.g. 14 or 26 months for Google Analytics; 48 hours for detailed internal statistics).
8. Data subject rights
As a data subject, you have the following rights:
- Right of access (art. 15 GDPR): to obtain confirmation of processing and a copy of your data.
- Right to rectification (art. 16 GDPR): to request the correction of inaccurate data.
- Right to erasure (art. 17 GDPR): to request the deletion of your data ("right to be forgotten").
- Right to restriction (art. 18 GDPR): to obtain the restriction of processing in certain circumstances.
- Right to data portability (art. 20 GDPR): to receive your data in a structured, commonly used and readable format (the app offers a data export feature).
- Right to object (art. 21 GDPR): to object to processing based on legitimate interest, including profiling for marketing purposes.
- Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
- Right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
You can exercise your rights by contacting us at mail@jobwave.it or through the features available in the app (data export, account deletion) and on the website.
9. Data security
We adopt adequate technical and organisational measures to protect personal data from unauthorised access, loss, destruction or alteration, including:
- HTTPS/TLS connections across the entire website and APIs;
- JWT tokens with refresh in secure storage in the app (keychain/keystore);
- CSRF protection on web forms;
- Cloudflare Turnstile antispam verification;
- restricted access to servers and databases;
- encrypted backups and recovery procedures.
10. Account, deletion and portability
- Account deletion: you can request deletion at any time from the app (Profile > Delete account) or by contacting us. Deletion is generally irreversible and entails the removal of account, listings, comments, reactions, tokens, devices and push subscriptions.
- Portability: a personal data export feature is available. You can send a request to mail@jobwave.it.
- Indexed content: after deletion, content may remain temporarily visible on search engines until the next index update; this process is not directly controllable by JobWave.
11. Minors
JobWave is intended for adult users or, where permitted by applicable law, for users aged 16 or over with the consent of the holder of parental responsibility. We do not knowingly collect data from children under the age of 16. If we become aware of the processing of data relating to unauthorised minors, we will promptly proceed to delete it.
12. Changes to this Privacy Policy
JobWave may update this Privacy Policy at any time to reflect regulatory, technological or service changes. Changes will be published on this page with the updated date indicated. We invite you to review this Privacy Policy periodically.
13. Contacts
For any questions, requests or exercise of privacy-related rights, you can contact us at the following addresses:
