Privacy Policy
Last updated: 30 July 2026
This policy explains what personal data GreenCareerBoard.com collects, why, and what you can do about it. It describes what the site does today, not what it may do in future — if our processing changes, this page changes first.
The data controller is The operator of GreenCareerBoard.com. For any question about this policy, or to exercise the rights described below, contact privacy@greencareerboard.com.
1. What we collect, and why
| Data | When | Why | Legal basis |
|---|---|---|---|
| Company name, contact email address, optional company website, and the content of the job listing | When an employer submits a job listing | To review the listing before publication and to contact the employer about it | Performance of a contract and our legitimate interest in operating a moderated job board |
| Email address and preferred language | When you subscribe to the newsletter | To send renewable energy job updates you asked for | Your consent |
| Name, email address, subject and message | When you use the contact form | To read and reply to your message | Our legitimate interest in responding to enquiries |
| IP address and browser user-agent | On every request, in short-lived server logs | To keep the site available, and to rate-limit submissions and sign-in attempts so the site is not abused | Our legitimate interest in the security and integrity of the service |
That is the complete list. We do not ask for, or store, CVs, dates of birth, national identifiers, payment details or any special category data.
2. What is published, and what is not
When a job listing is approved, the listing itself becomes public: the company name, job description, location, salary range if provided, and the application link. Search engines can index it.
The employer contact email address is never displayed on a public page. It is visible only to the site operator inside the password-protected review console, and is used to correspond about the listing.
Newsletter addresses and contact form messages are never published, and are not shared with employers or any third party.
3. Automated job seekers' data
You do not need an account to browse or search jobs, and you cannot create one. Applications are not handled by this site: the apply link takes you to the employer's own website, and anything you submit there is governed by that employer's privacy policy, not this one.
4. Cookies and tracking
We load no analytics, advertising or social media tracking scripts. Browsing sets a single functional cookie, NEXT_LOCALE, which stores nothing but the language you are reading in (en or pt) and expires when you close your browser. A second cookie, gcb_admin, is created only when the site operator signs in to the administration console; it is strictly necessary, holds no personal data, and cannot be read by JavaScript. The Cookie Policy lists both in full.
If we introduce analytics in future, we will ask for your consent before any non-essential cookie is set, and the Cookie Policy will be updated to describe it.
5. Who processes your data on our behalf
- Supabase — hosts the database in which the data above is stored, in the European Union.
- Vercel — hosts and serves the website, and produces the short-lived request logs described above.
Both are contractually bound to process data only on our instructions. Both are companies with United States parent entities, so some processing or support access may take place outside the European Economic Area; where that happens it is covered by the European Commission's Standard Contractual Clauses.
We do not sell personal data, we do not share it for advertising, and we do not use it to build profiles or to make automated decisions about you.
6. How long we keep it
- Job listings and the associated employer contact details: for as long as the listing is published, and afterwards for as long as needed to keep a record of what was published and to handle any dispute.
- Newsletter subscriptions: until you unsubscribe or ask us to delete the address.
- Contact form messages: until the enquiry is resolved and any follow-up period has passed.
- Server logs: retained by our hosting provider for a short, limited period and then discarded.
7. Your rights
Under the General Data Protection Regulation you have the right to:
- ask what personal data we hold about you, and receive a copy;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to our processing;
- receive your data in a portable format;
- withdraw consent at any time, where processing is based on consent — withdrawing it does not affect processing already carried out.
Write to privacy@greencareerboard.com and we will respond within one month. To unsubscribe from the newsletter, email us and the address will be removed — an automated unsubscribe link will be added when newsletter delivery begins.
If you believe we have handled your data unlawfully you may complain to your national supervisory authority. In Portugal that is the Comissão Nacional de Proteção de Dados (CNPD), https://www.cnpd.pt/.
8. Security
The site is served only over HTTPS. The database enforces row-level security so that unapproved listings are not readable by the public. Submissions and administrator sign-in attempts are rate-limited. The administrator password is stored only as a salted hash, never in plain text.
No system is perfectly secure. If a breach ever affects your personal data and is likely to present a risk to you, we will notify the supervisory authority within 72 hours and inform you where the law requires it.
9. Children
This site is intended for people seeking or advertising professional employment and is not directed at children. We do not knowingly collect data from anyone under 16.
10. Changes
If this policy changes materially we will update the date at the top of this page. Where the change affects processing based on your consent, we will ask for consent again rather than rely on the old one.