Privacy policy

Who is responsible

[Company name – added before launch], [Address]. Email: [Email address]. You can also contact us at this address with any question about data protection.

What this is about

You use this portal to apply for freelance roles and to complete the tests for them. We only process your data to decide about working together and to keep the tests fair.

What data we process and why

• Sign-in: email address, one-time codes, invitation links – so you can sign in. Legal basis: Art. 6(1)(b) GDPR (steps before entering into a contract).
• Application: name, email, phone number, how you prefer to be contacted, Telegram and Instagram (optional), country, time zone, hours and availability, experience, platforms, expected rate and start date (optional) – to reach you about your application and to see whether the role fits. Art. 6(1)(b) GDPR.
• Reminder: if you do not finish an application, we send you one reminder by email. Art. 6(1)(b) GDPR.
• Tests: your answers, texts, uploaded videos and links, results and timing – to assess your suitability. Art. 6(1)(b) GDPR.
• Fair tests: signals such as switching windows, leaving full screen, pasted text, typing rhythm, device type and connection type (Wi-Fi or mobile data, if your browser reports it) – so that the tests are done by you. Art. 6(1)(f) GDPR (legitimate interest in a fair selection).
• Camera: see below. Art. 6(1)(f) GDPR.
• Check against block lists: see below. Art. 6(1)(f) GDPR (protecting creators and the team from people with documented misconduct).
• ID check and contract: see below. Art. 6(1)(b) and (f) GDPR (we only work with adults).
• Technical data: IP address, browser and time of access in the server logs – for security and troubleshooting. Art. 6(1)(f) GDPR.

Camera

Your camera is on during the tests. Once per second, your browser checks on your own device whether exactly one person is in view; no image leaves your device for this. We save a small still image when a test starts and when something unusual happens, for example nobody or a second person in view.

There is no video recording, no face recognition (who someone is) and no emotion analysis. Only team members who state a reason can view the images, and every access is logged. No signal counts as proof on its own – a person reviews anything unusual.

For the speaking sample, we record audio and a small camera image. Software on our own server transcribes what you say and estimates fluency, how easy you are to understand and your accent; the recording does not leave our server for this. Our team listens to the recording and decides.

Connection test

To measure your internet connection, your browser connects directly to Cloudflare (speed.cloudflare.com), which receives your IP address. We only store the measured values.

Check against block lists

We check your email, phone or handle and – after the ID check – your name and date of birth against block lists: our own entries and lists from other agencies that we have reviewed first. We only hold other agencies’ lists as an encrypted check value. A match never leads to an automatic rejection: a person reviews it, and you can respond first. On request, we tell you the source.

ID check and contract

After you pass the tests, we ask for photos of an ID. A person checks your name, age (18+) and that the document is valid. We mark the images as copies, do not store the ID number and delete the images no later than 7 days after the check. Only a note remains: who checked it and when, document type, country and result.

For the electronic signature, we store the exact contract text with a checksum, the name you type, the time, your browser identifier and an encrypted value of your IP address.

No AI scoring

People currently evaluate your answers. If we later use an AI service to suggest a score, we will say so here first – and a person will still make the decision.

Talent pool (optional)

If you agree in the form, we keep your application for up to 12 months and may contact you about other suitable roles. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time; the normal deletion periods then apply.

Cookies

We only use cookies the portal needs: one for your sign-in (7 days) and one for your language choice (1 year). No analytics, advertising or tracking cookies and no third-party content. Because these cookies are strictly necessary, they do not require consent.

Who receives your data

• The people on the team who handle applications – only as far as needed.
• Hetzner Online GmbH, Germany: servers and storage (processor).
• Cloudflare: only for the connection test; your browser connects directly.

We do not sell data or share it for advertising.

Transfers outside the EU

We do not transfer data to countries outside the EU, except that your browser connects to Cloudflare itself during the connection test.

Automated decisions

Each test has a minimum score, and the system shows whether it was reached. A person decides about rejections, interview invitations and working together. You can ask at any time for a person to review your result again (Art. 22 GDPR).

How long we keep data

• Applications without an offer: deleted 6 months after the rejection.
• Unfinished applications: deleted after 90 days without activity.
• Camera pictures and uploaded videos: no later than 60 days after they were taken.
• ID images: no later than 7 days after the check.
• In the talent pool (only with your consent): up to 12 months.
• If we work together: the contract and the check note for the duration of the collaboration and afterwards for as long as legal retention periods require.
• Server logs: at most 14 days.

Do you have to provide data?

Without the required details and tests, we cannot review your application. Optional fields are marked as optional.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18) and data portability (Art. 20). You can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests (Art. 21). To do so, write to [Email address].

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example in the country where you live.

Minimum age

The portal is only for adults aged 18 and over.

Changes

We update this notice when the portal or the law changes. The version shown here applies.