Folksnest UG
Privacy Policy
Last updated: 12 April 2026
Data Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Folksnest UG (haftungsbeschränkt), represented by Alicia Dick Wahlberg, info@folksnest.com.
Scope of This Policy
This Privacy Policy explains how we process personal data when you:
- Visit our website
- Submit information through our forms
- Upload documents (e.g., CVs)
- Communicate with us
Categories of Personal Data
We process personal data that you voluntarily provide. This may include:
- First and last name
- Email address
- Contact details
- Information contained in uploaded documents (e.g., CVs, résumés, cover letters, certificates)
- Professional experience and qualifications
- Educational background
- Any other information you provide
Uploaded documents may contain additional personal data such as photographs or personal details included at your discretion.
We request that you do not submit special categories of personal data (Art. 9 GDPR), such as health information or political beliefs, unless strictly necessary.
Purposes and Legal Bases of Processing
We process personal data for the following purposes:
- Reviewing candidate profiles
- Matching candidates with potential clients
- Forwarding candidate profiles to selected clients
- Communicating with candidates
- Operating and securing our website
Legal bases
- Art. 6(1)(b) GDPR — pre-contractual measures
- Art. 6(1)(a) GDPR — consent
- Art. 6(1)(f) GDPR — legitimate interest in operating our services
If special categories of data are included, processing is based on Art. 9(2)(a) GDPR (explicit consent).
Consent may be withdrawn at any time.
Sharing
Where relevant for a potential opportunity, candidate data may be shared with selected clients for evaluation purposes.
Clients receiving such information act as independent controllers under GDPR.
We do not sell personal data.
Personal data may also be processed by service providers supporting our business operations (e.g., hosting and email providers) under data processing agreements pursuant to Art. 28 GDPR.
International Transfers
Our website is hosted by Vercel Inc., San Francisco, USA. Vercel processes server logs that may include IP addresses and request metadata. Data transfers to the United States are covered by Standard Contractual Clauses pursuant to Art. 46 GDPR.
We use Cookiebot by Usercentrics A/S, Copenhagen, Denmark, for consent management. Cookiebot is an EU-based service and processes data within the EU.
We use Google Analytics provided by Google Ireland Limited, Dublin, Ireland. Analytics data is only collected after your explicit consent. Data may be transferred to the United States under Standard Contractual Clauses and the EU–US Data Privacy Framework.
We use Google Workspace services provided by Google Ireland Limited, Dublin, Ireland, for communication and document handling.
Where data is transferred outside the EU/EEA, appropriate safeguards are implemented in accordance with Art. 44–49 GDPR.
Cookies
Our website uses cookies and similar technologies. We use:
- Essential cookies (required for website functionality)
- Analytics cookies (if activated)
- Marketing cookies (if activated)
Non-essential cookies are only set after your explicit consent via our cookie banner.
The legal basis for processing via non-essential cookies is Art. 6(1)(a) GDPR (consent).
You may withdraw or modify your consent at any time via the cookie settings on our website.
Data Retention
We retain personal data only as long as necessary for the purposes described above. Candidate data is generally stored only for the duration of the matching process unless:
- A contractual relationship is established
- Legal retention obligations apply
- You have consented to longer storage
You may request deletion at any time.
Your Rights
Under GDPR, you have the right to:
- Access your personal data (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
- Withdraw consent at any time
You also have the right to lodge a complaint with a supervisory authority.
Updates
We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. The current version will always be available on our website.