Privacy Policy
Last updated: 5 October 2026
This policy explains how Salary Check (howmuchtoask.com) processes personal data, in line with the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
Who is responsible (controller)
Crossroads Media GmbH, Lindengasse 56/18-19, 1070 Vienna, Austria · office@theinternational.at
What we process
- The CV file you upload and the text extracted from it (extraction happens in your browser)
- The job ad text and/or link you provide
- The country and city of the job
- The estimate we generate
- Your browser-reported language and time zone (used to pre-select a country)
- Technical data needed to serve the page, such as browser type. We do not store your IP address.
No account is created and we do not ask for your name or email.
Why, and on what legal basis
- Generating your estimate — Art. 6(1)(b) GDPR, performance of the service you requested. Your CV text and the job ad are processed in memory to produce the result and are not retained.
- Storing your CV and job link for quality checks — Art. 6(1)(a) GDPR, your separate and optional consent (the "Optional" box). If you tick it, we store the CV file, its extracted text, file details (type, size, page count), the job ad and link, the full estimate, and an AI-generated summary of your CV (skills, education, certifications, languages, industries, recent job titles and employers, experience, management experience, location) and of the job (sector, company size, contract type, work mode). You can withdraw it at any time.
- Keeping anonymous usage counts — Art. 6(1)(f) GDPR, our legitimate interest in keeping the service working. For every request we keep only non-identifying data: date, country, city, detected role and seniority, years of experience, the salary figures, confidence, and technical status. No CV, no job ad text, no link.
- Advertising cookies — Art. 6(1)(a) GDPR, your consent via the cookie banner.
Who receives the data
We use processors acting on our behalf under data processing agreements: our hosting and database provider (Supabase, via Lovable infrastructure) and the AI provider that generates the estimate (Google Gemini models, accessed through the Lovable AI gateway). If you accept ad cookies, Google (AdSense) may also process data under its own terms. Some processing may take place outside the EU/EEA; such transfers rely on an EU adequacy decision (e.g. the EU-US Data Privacy Framework) or the EU Standard Contractual Clauses. We do not sell or share your data otherwise.
How long we keep it
If you do not tick the optional box, nothing from your CV or the job ad is retained; only the anonymous usage counts described above are kept. If you do tick it, your CV file, job ad and result are kept for 12 months from upload and are then deleted automatically by a daily cleanup job.
Your rights
- Access to your data (Art. 15 GDPR)
- Rectification (Art. 16)
- Erasure (Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Objection to processing based on legitimate interest (Art. 21)
- Withdrawal of consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3))
The fastest route is to email office@theinternational.at quoting the reference code shown on your result (e.g. SC-7K3QD9). Because we do not collect names or emails, the code is how we find your data. We answer within one month.
Right to complain
You can complain to the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, dsb@dsb.gv.at, or to the authority in your EU country of residence.
Automated processing
The estimate is generated automatically by an AI model. It is informational only, produces no legal or similarly significant effect, and no decision about you is made by us. It is therefore not automated decision-making within the meaning of Art. 22 GDPR.
Please do not upload
Documents containing special category data under Art. 9 GDPR (health, religion, trade union membership, ethnic origin, sexual orientation and similar) or other people's personal data. If your CV contains a photo, date of birth, home address or similar, consider removing it before uploading. Do not upload a CV containing data you do not want processed.
Not for children
The service is intended for adults.
Cookies
We use no analytics and no tracking. Fonts are served from your own device, not from third-party servers. The only non-essential cookies are advertising cookies, which are set only after you click "Accept" in the cookie banner. Your banner choice itself is stored in your browser's local storage. To change it, clear this site's data in your browser.
Changes to this policy
We may update this policy when the service changes. The date at the top shows the latest version.