Post job

Privacy Policy

Last updated: August 4, 2026

This policy covers medjoblist.com. The site collects little, and everything it collects is on this page.

Who runs the site

Medjoblist.com is run by Andrei Protasevich PR Specijalizovane Dizajnerske Delatnosti Beograd, a sole proprietor registered in Serbia and the data controller under the Serbian Law on Personal Data Protection (Official Gazette of RS, no. 87/2018). Full requisites are at the bottom of this page. For any privacy question, write to mail [at] protasevich.com.

Browsing without an account

You can search and read every listing without signing up, and browsing stores nothing that identifies you. The site sets no cookies until you sign in, and its visit counting works without them (see Analytics below).

What an account stores

Here is everything an account stores:

  • A hashed version of your email address. Hashing is one-way: the stored value lets us recognize the address when you type it again, and it can't be turned back into the address itself. We never store the address in readable form.
  • The username and avatar the site generated for you.
  • When the account was created and when you last signed in.
  • The jobs you saved and the jobs you hid: for each one, which posting it is and when you added it. An entry disappears when the posting behind it is deleted.

Nothing else is stored.

Signing in

Sign-in works with a 6-digit code we email you. The code expires in 10 minutes, is stored only as a hash, and stops working after a few wrong tries. The address you type is used to send the code and to compute the hash we compare against; it isn't saved.

We log sign-in attempts with their IP address to slow down abuse, and delete that log after 72 hours. Once you're in, one cookie keeps you signed in for up to 30 days. It's the only cookie the site sets.

Email from us

The only email we send is the sign-in code. We keep no readable address, so there is no list to add you to. If we ever add optional email features, we'll ask for your address and your consent then, and update this page first.

Legal basis

We process account data to provide the account itself; the legal basis is the contract you accept when you create one (see the Terms of Service). Where a law obliges us to process or disclose something, the basis is that obligation. The one thing that rests on your agreement is the processing in the United States, described below. Beyond that, nothing runs on consent today; if a future feature needs one, we'll ask for it separately.

Who can access your data

  • The operator, named above and below.
  • Serbian state bodies, when a law entitles them to the data.
  • Three companies that process data for us under data processing agreements: DigitalOcean (hosting, US), Cloudflare (network, DNS, and the delivery network that serves each page, US), and Resend (delivers the sign-in codes, US). All three are certified under the EU-U.S. Data Privacy Framework.

We don't sell personal data or share it with anyone else.

Where your data lives

The site runs on servers in the United States, so account data is processed there rather than in Serbia. The processors above handle it under data processing agreements and hold EU-U.S. Data Privacy Framework certifications. By creating an account, you agree to that processing in the United States.

How long we keep data

  • Sign-in codes: 10 minutes.
  • Sign-in attempt log: 72 hours.
  • A session: up to 30 days after you sign in.
  • Account data: until you delete the account. Accounts with no sign-in for 24 months are deleted.

When you email us

If you write to us, we keep your message and address to reply and for our records. We don't add you to any mailing list.

Your rights

Serbian law gives you the right to access, correct, delete, restrict, and receive your data, and to object to processing. For most of that you won't need to write to us: your profile has a button that downloads everything stored on your account and a button that deletes the account on the spot. For anything else, email mail [at] protasevich.com; we answer within 30 days. If you believe we process your data unlawfully, you can complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs).

Analytics

We count visits with privacy-friendly analytics to see which pages people find useful. It runs without cookies, doesn't store your raw IP address, and identifies a visit with an anonymous hash instead of a lasting identifier. It's never linked to accounts, which is why the site shows no cookie or consent banner.

Leaving the site to apply

Every listing links to the employer's own application page. Once you follow that link, you're on the employer's site and their privacy policy applies.

Changes

When this policy changes, we'll update this page and the date at the top before the change goes live.

Operator

Andrei Protasevich PR Specijalizovane Dizajnerske Delatnosti Beograd
Registration number (MB): 67233476
Tax ID (PIB): 113980681
Bulevar despota Stefana 15, 11000 Belgrade, Serbia
mail [at] protasevich.com