Privacy Policy – ShakeTheMap

Last Updated: January 31, 2026

This Privacy Policy (“Policy”) informs users (“User”, “you”) of the ShakeTheMap platform and website (“ShakeTheMap”, “we”, “us”, or “the Company”) about the collection, processing, use, retention, and protection of their personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Luxembourg legislation.

By using the Platform, you acknowledge that you have read this Policy and consent to the processing of your personal data as described below.

1. Data Controller

  1. The data controller is NAAS S.à. r.l.-S, 370, route de Thionville L-5884 Hesperange, e-mail: contact@shakethemap.com

2. Data Collected

We collect different types of data depending on your role on the Platform (candidate or recruiter) and the features used:

2.1 Candidate Data

When creating an account and using the Platform, we collect:

  • First name and last name
  • Email address
  • Password (encrypted)
  • Personal address
  • Job search preferences: industry sector, search radius, alert preferences (email or WhatsApp)
  • Phone number, date of birth
  • Years of experience, diplomas, skills
  • Job title, professional experience (start and end dates), motivations, strengths, career expectations
  • CVs and documents provided when applying to jobs

2.2 Recruiter Data

When creating a company account and using the Platform, we collect:

  • Company name, commercial registration number
  • Company address, website, logo
  • Recruitment contact details: first name, last name, title, phone number
  • Job offer information: job title, number of positions, job description, industry sector, required experience, contract type, work location, qualifications, languages, etc.

2.3 Geolocation Data

  • Candidates: displayed approximately on the map visible to recruiters; optional precise geolocation for personal use to view nearby jobs.
  • Recruiters: exact address displayed on the candidates’ map; optional precise geolocation to view nearby candidates.

2.4 Automatically Collected Data

  • Browsing data and connection logs
  • IP address
  • Cookies and analytics tools used on the Platform

3. Purpose of Data Processing

Personal data is collected and processed for the following purposes:

  1. Connecting candidates and recruiters via the Platform features.
  2. Profile personalization and sending relevant job alerts to candidates.
  3. Account management and authentication of Users.
  4. Management of paid services and credits for recruiters.
  5. Platform security, fraud detection, and legal compliance.
  6. Statistical analysis and improvement of the Platform (data anonymized or aggregated).

4. Legal Basis for Processing

Data processing is based on:

  1. Explicit consent for account creation, use of cookies, and precise geolocation.
  2. Performance of a contract (account creation, posting and managing job offers, applying to jobs).
  3. Legitimate interest of ShakeTheMap for security, service improvement, connecting users, and fraud prevention.

5. Data Sharing

  1. Personal data is never sold to third parties.
  2. Information is shared only:
    • between candidates and recruiters via the Platform for connection purposes;
    • with technical service providers, hosting providers, or payment providers strictly necessary for Platform operation;
    • when required by law or in response to legal proceedings.

6. Data Retention

  1. Candidate and recruiter data is retained as long as the account is active or according to legal obligations.
  2. Unused credits are valid for 12 months and may be retained until expiration.
  3. Anonymized or aggregated data may be retained indefinitely for statistical purposes.

7. Users’ Rights

Under the GDPR, you have the following rights:

  1. Right of access: to know which personal data is collected about you.
  2. Right to rectification: to correct or complete inaccurate or incomplete data.
  3. Right to erasure (“right to be forgotten”): to request the deletion of personal data.
  4. Right to restriction of processing: to temporarily suspend the processing of your data.
  5. Right to object: to oppose certain processing of your data (marketing, alerts, geolocation).
  6. Right to data portability: to receive your data in a structured and machine-readable format.

To exercise your rights, you may contact ShakeTheMap at: contact@shakethemap.com.

8. Data Security

  1. ShakeTheMap implements appropriate technical and organizational measures to protect personal data against loss, alteration, unauthorized access, or any disclosure.

9. Cookies and Tracking

  1. The Platform uses cookies to:
    • analyze traffic and improve the service;
    • manage user sessions and preferences;
    • provide content adapted to Users.
  2. Users can configure their consent to cookies via the dedicated banner or browser settings.

10. Data Processing for Paid Services

  1. Payment data (credit cards) are processed by a secure payment provider and are not stored by ShakeTheMap.
  2. Credit, offer, and transaction data are retained for accounting and invoicing purposes in accordance with legal obligations.

11. Data Transfers

  1. No data is transferred outside the European Union except to service providers located in countries offering a level of protection equivalent to the GDPR.

12. Changes to the Policy

  1. ShakeTheMap may update this Policy. Any changes will be published on the Platform and the “last updated” date will be modified. Users are encouraged to review the Policy regularly.
    Privacy Policy – ShakeTheMap | ShakeTheMap