DefenceJobs.org

Privacy Policy

Operator

DefenceJobs.org is operated by Lux Perpetua OÜ, a private company registered in Estonia (registry code 17462223). Contact: [email protected]. The full legal details are on the Legal notice page.

Last updated: 22 September 2026.

Overview

DefenceJobs.org (operated by Lux Perpetua OÜ; "we," "us," or "our") is purely an informational website that promotes career opportunities in the European defence technology sector. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR). This policy explains how we collect, use, process, and protect your personal information when you use our informational platform.

Important: We do not process job applications or handle employment-related transactions. All job applications are redirected to and processed entirely by external employer websites.

Data Controller

Lux Perpetua OÜ is the data controller for personal information collected through DefenceJobs.org. For questions about data processing, contact us at [email protected].

Information We Collect

Job Seekers (Visitors)

  • No Registration Required: Browsing and applying need no account. We only hold personal data from job seekers who sign up for job alerts (see below)
  • Local Storage: Bookmark preferences stored locally on your device only
  • Analytics: Anonymous usage data (page views, search queries, IP addresses for security)
  • Technical Data: Browser type, device information, referrer URLs

Employers & Job Submitters

  • Company name and website
  • Contact email address
  • Job posting information and requirements
  • Submission metadata (IP address, timestamp for fraud prevention)

Employers who use the employer portal sign in with a one-time code sent to their work email address; we store no passwords. For the portal we keep the email addresses allowed to manage a company, sign-in sessions (with IP address and browser type, kept for 30 days or until revoked), and an activity log of changes made in the portal (who published, hid, added or edited a role, and when, with the IP address). The log lets us and the employer trace changes to their listings. Portal records are kept for as long as the company uses the portal and for 12 months afterwards.

Automatically Collected Information

  • Server logs and access records
  • Security monitoring data
  • Performance and error tracking

Legal Basis for Processing

We process your data based on:

  • Legitimate Interest: Operating our job board service and improving user experience
  • Contract Performance: Processing job submissions and providing services to employers
  • Legal Obligations: Compliance with applicable laws and regulations
  • Consent: Job alert emails (GDPR Article 6(1)(a) and the ePrivacy rules on email marketing)

How We Use Your Information

Information is used exclusively for:

  • Processing, reviewing, and moderating job submissions
  • Displaying approved job listings on our platform
  • Job alerts: Sending the weekly job alert emails people signed up for
  • Platform security, fraud prevention, and abuse detection
  • Analytics and service improvement
  • Communication regarding job submissions and platform updates
  • Compliance with legal and regulatory requirements

Job alerts

Job alerts are an optional weekly email with new jobs that match the countries and roles you choose. This section explains what we do with your data when you sign up.

What we collect

  • Your email address and your choices (countries, roles, whether you want entry-level roles only)
  • A record of your consent: the exact wording you agreed to, the page you signed up on, the time and IP address of the sign-up, when we sent the confirmation email, and the time and IP address of your confirmation
  • A log of changes: when you changed your choices, unsubscribed or asked us to delete your data. This log never contains your email address

Giving your email address is needed to receive the alerts. Everything else is optional.

Why and on what legal basis

  • Sending the alerts: your consent (GDPR Article 6(1)(a)). The alerts may include jobs that employers pay to promote, marked as sponsored, and links to DefenceJobs articles
  • Keeping proof of your consent after you unsubscribe: our legal obligation to be able to prove consent and our legitimate interest in defending legal claims (GDPR Articles 6(1)(c), 6(1)(f) and 7(1))
  • Blocking automated sign-ups: our legitimate interest in keeping the service safe and not sending email to people who never asked for it (GDPR Article 6(1)(f)). We use Cloudflare Turnstile on the sign-up form and on the confirmation page for this

Matching jobs to your choices uses only the countries and roles you picked. We do not build a profile of you, and no decision with legal or similar effects is made automatically. We do not track whether you open our emails or which links you click as an individual.

Double opt-in

After you sign up we email you a link to confirm your address. Nothing else is sent until you confirm. The link works for 48 hours. Sign-ups that are not confirmed are deleted after 7 days.

Changing, stopping and deleting

Every job alert email has a link to change your choices or unsubscribe. Withdrawing your consent is as easy as giving it and does not affect anything sent before. From the same page you can ask us to delete your data. We then email you a confirmation link, so someone who receives a forwarded email cannot do it for you.

How long we keep it

  • Active alerts: for as long as the alert is on
  • Unconfirmed sign-ups: deleted after 7 days
  • After you unsubscribe or ask for deletion: your choices are deleted at once. Your email address and the record of your consent are kept for 3 years from the end of that year, the period in which claims about consent can be made, and are then deleted automatically

Age

Job alerts are for people aged 16 or over.

Data Storage and Security

Personal data is stored in the European Union. We protect it with technical and organisational measures suited to the risk, including encryption in transit and at rest, strict access controls and regular backups.

Data Sharing and Third Parties

We do not sell, rent, or trade your personal information. Limited sharing occurs only:

  • Service providers (processors): companies that host our database and website, deliver our pages and emails, protect our forms against bots and count page views without cookies. They act only on our instructions under data processing agreements. Bot protection on our forms is Cloudflare Turnstile (see the Turnstile privacy addendum). You can ask us for the list of providers at [email protected].
  • Legal Requirements: When required by law, court order, or to protect legal rights
  • Business Protection: To investigate fraud, security breaches, or Terms of Service violations
  • With Your Consent: Only when explicitly authorized by you

International Data Transfers

Our database and website servers are in the EU. Some of our service providers are based in the United States, so personal data may be accessed from or transferred to the United States. These transfers rely on the EU-US Data Privacy Framework adequacy decision where the provider is certified, and on the European Commission's Standard Contractual Clauses otherwise. You can ask us for a copy of the relevant safeguards at [email protected].

Your Rights Under GDPR

You have comprehensive rights regarding your personal data:

  • Right of Access: Obtain confirmation and copies of your data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data ("Right to be Forgotten")
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a structured format
  • Right to Withdraw Consent: Stop job alerts at any time with the link in every email
  • Rights Related to Automated Decision-Making: Protection against automated profiling

Right to object: where we rely on legitimate interests, you can object at any time on grounds relating to your particular situation. You can object to direct marketing at any time without giving a reason, which for job alerts means unsubscribing.

To exercise these rights, contact us at [email protected]. We may ask you to confirm that the email address is yours.

Cookies and Local Storage

We use minimal data storage technologies:

  • Essential Cookies: Required for basic site functionality
  • Local Storage: Job bookmarks stored locally on your device
  • No Tracking: We do not use advertising or third-party tracking cookies
  • Analytics: Anonymous usage analytics for service improvement

Data Retention

  • Job Listings: Retained while active plus 12 months for historical purposes
  • Contact Information: Retained for 24 months or until deletion requested
  • Job alerts: see Job alerts above
  • Analytics Data: Aggregated and anonymized, retained for 36 months
  • Security Logs: Retained for 12 months for security purposes

Children's Privacy

DefenceJobs.org is for adults and for students aged 16 or over. Job alerts are only for people aged 16 or over. We do not knowingly collect personal information from anyone younger. If we learn that we have, we delete it.

Data Breach Notification

If a personal data breach occurs, we notify the Estonian Data Protection Inspectorate within 72 hours of becoming aware of it where required, and we tell you without undue delay if the breach is likely to put your rights and freedoms at high risk.

Contact and Complaints

For privacy-related questions, to exercise your rights, or to file complaints:

  • Email: [email protected]
  • Supervisory authority: you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or to the data protection authority where you live or work

Changes to This Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. The date at the top shows the latest version. If a change affects how we use the data of job alert subscribers, we tell them by email before it takes effect, and we ask for new consent where the law requires it.

Governing Law

This privacy policy is governed by and construed in accordance with European Union data protection law and the laws of the Republic of Estonia.

Content removal

Companies may request removal or correction of any listing or profile referencing them at any time, for any reason, by contacting [email protected]. We process legitimate requests within 7 business days. See our Legal notice for the full takedown procedure.