Privacy Policy

1. Data Controller

The data controller within the meaning of Article 4(7) of the General Data Protection Regulation (GDPR) is:

2. Scope of This Privacy Policy

This Privacy Policy explains how we collect, process, and protect personal data when you:

• Visit our website
• Contact us via email, forms, or other communication channels
• Use our freelance platform
• Act as a freelance consultant on our platform
• Act as a client seeking freelance consultants
• Enter into a contractual relationship with us

We process personal data strictly in accordance with the GDPR and applicable German data protection laws.

3. Categories of Personal Data We Process

3.1 Personal & Contact Data

• Name
• Email address
• Phone number
• Postal address
• Company name and position (if applicable)

3.2 Freelancer Data

• CVs, profiles, portfolios
• Professional experience and skills
• Education and certifications
• Availability, rates, contract preferences
• Communication and cooperation history

3.3 Client Data

• Business contact details
• Project requirements
• Communication records
• Contractual and billing data

3.4 Technical & Usage Data

• IP address
• Browser type and version
• Operating system
• Referrer URL
• Pages visited and timestamps

3.5 Cookies & Tracking Data

Information collected via cookies and similar technologies (see Section 11).

4. Purposes of Processing & Legal Bases (Art. 6 GDPR)

We process personal data only when legally permitted and for the following purposes:

• Operating the freelance platform — Art. 6(1)(b) GDPR
• Connecting clients with freelance consultants — Art. 6(1)(b) GDPR
• Communication and inquiries — Art. 6(1)(f) GDPR
• Contract management and billing — Art. 6(1)(b) GDPR
• Platform improvement and security — Art. 6(1)(f) GDPR
• Marketing communications (e.g. newsletters) — Art. 6(1)(a) GDPR
• Legal and tax obligations — Art. 6(1)(c) GDPR

Consent may be withdrawn at any time with effect for the future.

5. Freelance Consultant Data

If you register or cooperate with Agile Talents as a freelance consultant:

• Your data is processed for the purpose of platform operation and project matching
• Consultant profiles may be shared with potential clients only with your consent
• No automated decision-making or profiling within the meaning of Art. 22 GDPR is used

You may request removal of your profile at any time

6. Data Sharing & Recipients

We share personal data only when necessary and lawful:

6.1 Clients

Freelance consultant data is shared with clients only to the extent required to evaluate cooperation opportunities and only with consent.

6.2 Service Providers (Processors)

We use selected service providers (e.g. hosting, email, CRM, platform infrastructure). All processors are bound by GDPR-compliant data processing agreements

6.3 Legal Obligations

Data may be disclosed where required by law, court order, or authorities.

6.4 Business Transfers

In the event of a business transfer or restructuring, personal data may be transferred in accordance with GDPR.

7. International Data Transfers

If personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards, including:

• EU Standard Contractual Clauses (SCCs)
• Adequacy decisions of the European Commission
• Additional technical and organizational measures

8. Data Retention Periods

Personal data is retained only as long as necessary:

• Freelancer profiles (inactive) — Up to 24 months
• Active freelancer cooperation — Contract duration + 6 months
• Client and contract data — Contract duration + 10 years
• Accounting and invoicing data — 10 years
• Website log data — Up to 90 days

9. Your Rights as a Data Subject

You have the following rights under GDPR:

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Right to withdraw consent (Art. 7(3))

Requests can be sent to: 📧 contact@agilets.de

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority.

Responsible authority for our business:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

https://www.lda.bayern.de

11. Cookies & Analytics

11.1 Necessary Cookies

Used to ensure website functionality and security.

11.2 Optional Cookies

Analytics or marketing cookies are used only with explicit consent via a cookie banner.

You may withdraw or change your consent at any time.

12. Data Security

We apply appropriate technical and organizational measures, including:

• Encrypted data transmission (SSL/TLS)
• Restricted access controls
• Data minimization principles
• Regular security reviews

Absolute security cannot be guaranteed.

13. No Data Protection Officer

Under current German law, we are not required to appoint a Data Protection Officer.

If this obligation arises, this Privacy Policy will be updated accordingly.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect legal or operational changes.

The latest version is always available on our website.

15. Contact