Skip to content
Switch to Serbian

Privacy policy

Last updated: 1 November 2026

This policy explains what personal data Šljakam (sljakam.com) collects, why, how long it is kept and what your rights are. It is for candidates, employers and visitors.

Who is the controller

The controller is Stefan Matić PR veb portali WEBLEGION Niš (Medijana), Rentgenova 10/4, 18108 Niš, Serbia, registration number (MB) 67907442, tax ID (PIB) 114857284.

For any question about personal data, write to maticstefan1996@gmail.com.

What we collect

Every account: email address, password (we store only a cryptographic hash, never the password), account role (candidate, employer, staff), the date the account was created, and confirmations of your email address and of accepting the terms of use.

Candidates:

  • name, phone, a short headline and city, if you enter them;
  • the CV you build on Šljakam: work experience, education and skills;
  • CV files you upload (PDF, DOC or DOCX, up to 5 MB) and CVs you generate;
  • job applications: the job, the CV you attached, a cover letter if you write one, and the application's status;
  • saved jobs and saved searches, and which searches you want email alerts for.

Employers: company details (name, tax ID, registration number, address, bank account), billing contact (name, email, phone), the responsible person and their position, job ads, and the history of packages, proformas, invoices and payments.

New-job alerts without an account: if you leave your email address for alerts, we keep the address, the city and/or category you chose, your language, when you confirmed the sign-up and when we last sent you an alert.

Reported job ads: when you report an ad ("Report this ad"), we keep the reason, your note if you write one and your email address if you leave it, so we can check the ad and get back to you.

Technical data: to protect the site from abuse (for example password guessing) we briefly record IP addresses together with the number of sign-in, sign-up and similar attempts. These records delete themselves after at most one hour (for clicks on an external apply link, after at most seven days and without an IP address).

Analytics, only with your consent: if you choose "Accept" on the cookie bar, we use two tools on the public pages of the site (home, job ads, company pages, sign-up). Google Analytics counts visits and shows where they come from (search engines, social networks, direct), which pages are opened and how long they are read. Microsoft Clarity records how you use a page: clicks, scrolling and mouse movement. Both also see screen size, device and browser type and an approximate location from your IP address; Google Analytics does not store the IP address. What you type into fields is not recorded, and account pages, dashboards and job applications are never recorded. We use no advertising tools.

Why we use it, and on what basis

  • Performing a contract (Article 12(1)(2) of the Serbian Law on Personal Data Protection; Article 6(1)(b) GDPR): opening and running your account, applications and passing them to the employer, publishing job ads, packages and payment, and account emails (email confirmation, password reset, notices about applications and job ads, proformas and invoices).
  • Legal obligation (point 3; GDPR 6(1)(c)): keeping accounting documents (proformas, invoices, credit notes) and the data they require.
  • Consent (point 1; GDPR 6(1)(a)): new-job alerts by email, for saved searches in your account or without an account (then you confirm your address with a link); every alert has an unsubscribe link. Also analytics of how the site is used (Google Analytics and Microsoft Clarity). You can withdraw analytics consent at any time with the "Cookie settings" link at the bottom of the page; withdrawing does not affect processing before it.
  • Legitimate interest (point 6; GDPR 6(1)(f)): security and abuse prevention, checking reported job ads, database backups, handling disputes.

We do not sell personal data or use it for advertising. We make no automated decisions about you.

Who sees your data

  • The employer you apply to sees what is in that application: your email address, the CV you attached and your cover letter, if you write one. Other employers do not see your data; Šljakam has no candidate database for employers to search.
  • Šljakam staff (moderators and administrators) access data only as needed for support, checking job ads and billing.
  • Processors that provide technical services to us, under contract and only on our instructions:
  • Hetzner Online GmbH, Germany: servers, database, files and backups (data centre in Nuremberg);
  • Resend, Inc., USA: sending email (your email address and the message);
  • Google LLC, USA: analytics of how the site is used (Google Analytics), only if you have consented;
  • Microsoft Corporation, USA: analytics of how the site is used (Microsoft Clarity), only if you have consented.
  • Public authorities, when the law requires it.

The site's content is edited in the Sanity CMS; no user data is stored there.

How long we keep it

  • Account and profile: while the account is active. If you don't sign in for 24 months, we email you a warning; if you don't sign in within the next 30 days either, we delete the account.
  • Deleted account: you delete the account yourself, on the "Account" page. Deletion follows 30 days after the request (sign in during that time to keep the account), then it is permanent. Proformas and invoices stay as long as the law requires.
  • Applications (with cover letters): the employer sees an application for up to 12 months after the ad closes. 24 months after the application we remove the personal data (cover letter and CV) and keep only numbers (statistics).
  • New-job alerts: until you unsubscribe; a sign-up you don't confirm within 7 days is deleted.
  • Reported job ads: as long as the reported ad exists.
  • CV files: while they belong to an application or the account, at most as long as the application.
  • Proformas, invoices, payments and company details: 10 years (statutory).
  • Record of staff actions: indefinitely.
  • Database backups: up to 30 days.
  • Analytics: Google Analytics up to 14 months; Microsoft Clarity: session recordings up to 30 days, aggregated data (such as click maps) up to 13 months.

Your rights

You can ask for access to your data and a copy, correction of inaccurate data, erasure, restriction of processing, and data portability, and you can object to processing based on legitimate interest.

You delete your account yourself, on the "Account" page (sljakam.com/en/account) while signed in. For anything else, write to the address under "Who is the controller". We reply without delay and within 30 days at the latest.

If you believe the processing breaks the law, you can complain to the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11000 Belgrade, www.poverenik.rs.

Cookies and browser storage

Cookies and storage the site needs to work are used without asking; analytics cookies only if you accept them.

  • Sign-in cookies (hf_candidate_access, hf_candidate_refresh, hf_access, hf_refresh, hf_staff_access, hf_staff_refresh): keep you signed in; the short ones last 14 minutes, the long ones 14 days.
  • NEXT_LOCALE: remembers your language.
  • Browser storage: theme (light/dark), recently viewed jobs, whether you closed the sign-up bar, and an unfinished employer sign-up (so a page refresh doesn't lose it; removed once sign-up succeeds).
  • hf_analytics_consent: remembers your analytics choice for 6 months; after that we ask again.

Analytics cookies, only with consent:

  • _ga and _ga_<id> (tell visitors and visits apart, up to two years), set by Google Analytics on sljakam.com;
  • _clck (recognises the same browser, up to one year) and _clsk (joins page views into one visit, one day), set by Microsoft Clarity on sljakam.com; Microsoft may also set its own cookies on the clarity.ms domain (for example CLID, MUID, up to 13 months).

If you decline or later withdraw consent, neither tool is loaded, and we delete the _ga, _ga_<id>, _clck and _clsk cookies.

We use no advertising cookies.

Security

The site works only over HTTPS, passwords are stored as cryptographic hashes, only authorised staff can access data, and the database is backed up daily.

Minors

Candidate accounts are for people aged 15 or over.

Changes to this policy

When we change this policy, we update the "Last updated" date at the top of the page. We tell users about important changes by email.