Cookie Policy
Last updated: 2026-10-20
This is an English translation of the Swedish original. If the versions differ, the Swedish version prevails.
Change log and version
| Version | Date | Change |
|---|---|---|
| 2.0 | 2026-10-20 | New cookie policy. Based on a review of the website on 19 October 2026. Sets out each technology with supplier, purpose, lifetime and third country transfer, as well as measurement via the form (Enhanced Conversions, Meta Conversions API and campaign data to Pipedrive). |
This policy applies to the website jobbs.se. How we handle personal data in the JOBBS app and admin is described in our privacy policy.
1. Controller and contact: who to turn to
| Controller | JOBBS AB, corporate ID no. 559378-9083 |
| Postal address | Mellbygatan 9, 531 31 Lidköping |
| support@jobbs.se | |
| Data protection officer | JOBBS has not appointed a data protection officer. Contact us at support@jobbs.se. |
For collection via Meta Pixel and Meta Conversions API, JOBBS and Meta Platforms Ireland Ltd are joint controllers (see section 7).
2. Cookies and similar technologies: what they are
A cookie is a small text file that the website stores in your browser. Similar technologies include, for example, local storage in the browser (localStorage and sessionStorage), pixels and scripts that read information from your device. In this policy we call all of this “cookies”.
- First-party cookies are set by jobbs.se.
- Third-party cookies are set by someone else, for example Google or Meta.
- Session cookies disappear when you close the browser or the tab.
- Persistent cookies remain for a set period or until you delete them.
3. Legal basis: when we may use cookies
- Under the Swedish Electronic Communications Act (lagen (2022:482) om elektronisk kommunikation, LEK), Chapter 9, Section 28, we may store or read information on your device only if you have consented. The exception is what is necessary to deliver the service you have asked for.
- When cookies involve processing of personal data, the General Data Protection Regulation (GDPR) also applies:
- Consent, Article 6(1)(a), for statistics, marketing, chat and embedded content.
- Legitimate interest, Article 6(1)(f), for necessary functions, for example remembering your cookie choice and protecting the website.
We use no cookies for statistics or marketing before you have said yes.
4. Categories: what you can choose
| Category | What it does | Requires consent? |
|---|---|---|
| Necessary | Makes the website work, remembers your cookie choice, protects against attacks | No |
| Statistics | Shows how the website is used, so that we can improve it | Yes |
| Marketing | Measures whether our ads work and shows relevant ads on Google, Meta and LinkedIn | Yes |
| Function and chat | Chat on the website (Pipedrive LeadBooster). Not in use today. | Yes, if it is turned on |
| Embedded content | Videos from YouTube. The video loads only when you click on it. | No, you choose yourself by clicking |
The banner has two equally prominent buttons, Accept and Reject, which apply to the Statistics and Marketing categories together.
5. The technologies: one table per category
“Lifetime” is given as the suppliers’ normal values. Where it says “up to approx.”, the value may vary.
5.1 Necessary
| Name | Supplier | Purpose | Lifetime | First or third party | Third country |
|---|---|---|---|---|---|
| jobbs_consent (localStorage) | JOBBS | Stores your cookie choice and which version of the policy you responded to | Until you change your choice or clear your browser. We ask again after 12 months. | First | No |
5.2 Statistics
| Name | Supplier | Purpose | Lifetime | First or third party | Third country |
|---|---|---|---|---|---|
| _ga | Google (Google Analytics 4, G-NF30V2X8E7) | Distinguishes visitors for statistics | Up to approx. 2 years | First | USA, see section 8 |
| _ga_NF30V2X8E7 | Google (Google Analytics 4) | Keeps track of the visit (the session) | Up to approx. 2 years | First | USA, see section 8 |
| Cloudflare Web Analytics (script, no cookie) | Cloudflare, Inc. | Statistics on page views and load times, without cookies and without tracking you across websites. Loaded only if you have accepted Statistics. | Stores nothing on your device | Third | USA, see section 8 |
5.3 Marketing
| Name | Supplier | Purpose | Lifetime | First or third party | Third country |
|---|---|---|---|---|---|
| _gcl_au | Google Ads (AW-11006313421) | Links visits to ad clicks to measure conversions | Up to approx. 90 days | First | USA, see section 8 |
| _gcl_aw, _gcl_gb | Google Ads | Stores click IDs (gclid, gbraid) from an ad | Up to approx. 90 days | First | USA, see section 8 |
| IDE, test_cookie (doubleclick.net) | Ad measurement and ad delivery | Up to approx. 13 months and approx. 15 minutes respectively | Third | USA, see section 8 | |
| _fbp | Meta (Pixel 727720879302296) | Distinguishes visitors for ad measurement at Meta | Up to approx. 90 days | First | USA, see section 8 |
| _fbc | Meta | Stores the click ID (fbclid) from an ad on Facebook or Instagram | Up to approx. 90 days | First | USA, see section 8 |
| fr (facebook.com) | Meta | Ad delivery and measurement | Up to approx. 90 days | Third | USA, see section 8 |
| li_fat_id | LinkedIn (Insight Tag, partner ID 7458218) | Stores the click ID from an ad on LinkedIn | Up to approx. 30 days | First | USA, see section 8 |
| li_sugr, bcookie, lidc, UserMatchHistory, AnalyticsSyncHistory (linkedin.com) | Ad measurement, matching against LinkedIn accounts, protection | From approx. 1 day (lidc) up to approx. 1 year (bcookie) | Third | USA, see section 8 | |
| jobbs_attribution (sessionStorage) | JOBBS | Stores campaign data (gclid, gbraid, wbraid, fbclid, li_fat_id, msclkid, UTM parameters, landing page and referring page) so that it can be sent with the contact form to our CRM | Until you close the tab | First | No, but sent to Pipedrive (EU) |
Google Consent Mode v2. We use Google’s Consent Mode v2. All signals (ad_storage, analytics_storage, ad_user_data and ad_personalization) are denied by default. The tags for Google Analytics, Google Ads, Meta and LinkedIn load only once you have accepted the relevant category.
jobbs_attribution is stored only if you have accepted Marketing. Otherwise the data stays only on the page you are on and disappears when you leave it.
5.4 Function and chat
| Name | Supplier | Purpose | Lifetime | First or third party | Third country |
|---|---|---|---|---|---|
| Pipedrive LeadBooster (chat) | Pipedrive OÜ | Chat with us on the website | Not in use today. If it is turned on, we will update the table and ask for consent. | Third | EU |
5.5 Embedded content
| Name | Supplier | Purpose | Lifetime | First or third party | Third country |
|---|---|---|---|---|---|
| YouTube via youtube-nocookie.com | Google (YouTube) | Show videos on the website. No contact with YouTube takes place until you click Play. When you play the video, YouTube may store data in your browser, for example in localStorage. | Third | USA, see section 8 |
6. Forms and measurement: what happens when you contact us
When you fill in the contact form, your name, your email, your phone number, your company and your message are sent to our CRM Pipedrive. We do this so that we can reply to you (legitimate interest or steps prior to entering into a contract). Read more in the privacy policy.
If you have accepted Marketing, the following is also sent:
| What | To whom | Why | How |
|---|---|---|---|
| Campaign data from jobbs_attribution | Pipedrive, together with the form | Understand which campaign led to the contact | Sent with the form |
| Hashed email and hashed phone number (Enhanced Conversions) | Measure whether an ad led to a contact | The data is hashed with SHA-256 in your browser before it is sent, and only if you have accepted Marketing. | |
| Hashed email and hashed phone number, IP address and browser (Conversions API) | Meta | Measure whether an ad led to a contact | The data is hashed on the JOBBS server and sent only if you have accepted Marketing. Meta Pixel receives no contact details. |
Important about hashing: Hashing means the data cannot be read directly, but Google and Meta can compare it with data they already hold about you. It is therefore still personal data, and we send it only with your consent.
If you have not accepted Marketing, only the form itself is sent to Pipedrive.
7. Joint responsibility with Meta: who is responsible for what
When we use Meta Pixel and Conversions API, JOBBS and Meta Platforms Ireland Ltd are joint controllers for collecting the data and sending it to Meta (judgment of the Court of Justice of the European Union in case C-40/17, Fashion ID). We have an agreement on this with Meta (Meta Controller Addendum).
- JOBBS is responsible for asking for consent and informing you.
- Meta is responsible for what Meta does with the data after it has been received. Read more in Meta’s privacy policy at facebook.com/privacy/policy.
- You can exercise your rights with both JOBBS and Meta.
LinkedIn. For LinkedIn Insight Tag, LinkedIn Ireland processes the data on behalf of JOBBS according to LinkedIn’s terms for marketing services.
8. Transfers outside the EU/EEA: by supplier
| Supplier | Country | Safeguard |
|---|---|---|
| Google (Analytics, Ads, YouTube) | Ireland and USA | EU-US Data Privacy Framework (DPF) |
| Meta | Ireland and USA | DPF |
| Ireland and USA | DPF and SCC | |
| Cloudflare | USA and globally | DPF and SCC |
| Pipedrive | EU (Frankfurt and Dublin) | No transfer outside the EU/EEA |
DPF means that the European Commission has decided that certified US companies provide an equivalent level of protection. The suppliers also often have standard contractual clauses (SCC) as additional protection.
9. Your choice: how to give, change and withdraw consent
- First visit: A banner is shown. You can accept or reject. No statistics or marketing cookies are used before you have made a choice.
- Change or withdraw: Click Cookie settings at the bottom of every page. Withdrawing consent is as easy as giving it.
- When you withdraw: The website deletes first-party cookies for statistics and marketing (for example _ga, _gcl and _fbp) and stored campaign data, and reloads the page so that the tags stop running. Cookies that third parties have set on their own domains may remain until they expire. You can delete them in your browser’s settings.
- In the browser: You can also block or delete cookies in your browser’s settings. Some functions may then stop working.
10. When we ask again: about your choice
We ask you again:
- after 12 months, or
- when we change the policy in a way that affects your choice, for example if we add a new supplier or category. We keep track of this with the version number in jobbs_consent.
11. Your rights: and where you can complain
You have the right to access your data, have it corrected or erased, restrict its use, object and withdraw consent. Read more in the section on your rights in our privacy policy. Contact us at support@jobbs.se. We respond within one month.
You can also lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.
12. Version history
| Version | Date | Change |
|---|---|---|
| 2.0 | 2026-10-20 | New cookie policy with tables per category, Consent Mode v2, measurement via forms and joint responsibility with Meta |
| 1.0 | 2024-04-29 | Previous cookie information on jobbs.se |