Folksnest UG

Privacy Policy

Last updated: 12 April 2026

1

Data Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Folksnest UG (haftungsbeschränkt), represented by Alicia Dick Wahlberg, info@folksnest.com.

2

Scope of This Policy

This Privacy Policy explains how we process personal data when you:

  • Visit our website
  • Submit information through our forms
  • Upload documents (e.g., CVs)
  • Communicate with us
3

Categories of Personal Data

We process personal data that you voluntarily provide. This may include:

  • First and last name
  • Email address
  • Contact details
  • Information contained in uploaded documents (e.g., CVs, résumés, cover letters, certificates)
  • Professional experience and qualifications
  • Educational background
  • Any other information you provide

Uploaded documents may contain additional personal data such as photographs or personal details included at your discretion.

We request that you do not submit special categories of personal data (Art. 9 GDPR), such as health information or political beliefs, unless strictly necessary.

4

Purposes and Legal Bases of Processing

We process personal data for the following purposes:

  • Reviewing candidate profiles
  • Matching candidates with potential clients
  • Forwarding candidate profiles to selected clients
  • Communicating with candidates
  • Operating and securing our website

Legal bases

  • Art. 6(1)(b) GDPR — pre-contractual measures
  • Art. 6(1)(a) GDPR — consent
  • Art. 6(1)(f) GDPR — legitimate interest in operating our services

If special categories of data are included, processing is based on Art. 9(2)(a) GDPR (explicit consent).

Consent may be withdrawn at any time.

5

Sharing

Where relevant for a potential opportunity, candidate data may be shared with selected clients for evaluation purposes.

Clients receiving such information act as independent controllers under GDPR.

We do not sell personal data.

Personal data may also be processed by service providers supporting our business operations (e.g., hosting and email providers) under data processing agreements pursuant to Art. 28 GDPR.

6

International Transfers

Our website is hosted by Vercel Inc., San Francisco, USA. Vercel processes server logs that may include IP addresses and request metadata. Data transfers to the United States are covered by Standard Contractual Clauses pursuant to Art. 46 GDPR.

We use Cookiebot by Usercentrics A/S, Copenhagen, Denmark, for consent management. Cookiebot is an EU-based service and processes data within the EU.

We use Google Analytics provided by Google Ireland Limited, Dublin, Ireland. Analytics data is only collected after your explicit consent. Data may be transferred to the United States under Standard Contractual Clauses and the EU–US Data Privacy Framework.

We use Google Workspace services provided by Google Ireland Limited, Dublin, Ireland, for communication and document handling.

Where data is transferred outside the EU/EEA, appropriate safeguards are implemented in accordance with Art. 44–49 GDPR.

7

Cookies

Our website uses cookies and similar technologies. We use:

  • Essential cookies (required for website functionality)
  • Analytics cookies (if activated)
  • Marketing cookies (if activated)

Non-essential cookies are only set after your explicit consent via our cookie banner.

The legal basis for processing via non-essential cookies is Art. 6(1)(a) GDPR (consent).

You may withdraw or modify your consent at any time via the cookie settings on our website.

8

Data Retention

We retain personal data only as long as necessary for the purposes described above. Candidate data is generally stored only for the duration of the matching process unless:

  • A contractual relationship is established
  • Legal retention obligations apply
  • You have consented to longer storage

You may request deletion at any time.

9

Your Rights

Under GDPR, you have the right to:

  • Access your personal data (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Withdraw consent at any time

You also have the right to lodge a complaint with a supervisory authority.

10

Updates

We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. The current version will always be available on our website.