Privacy Policy – Freelancers

1. Data controller

Personal data collected via the Folkyn platform is processed by:

Folkyn SAS

7 allées de Chartres, 33000 Bordeaux, France

For certain operations carried out on behalf of enterprise customers using the platform, Folkyn may act as a data processor within the meaning of the General Data Protection Regulation (“GDPR”).

2. Data collected

In the context of using the platform, Folkyn may collect and process the following categories of data:

Identity and professional information

first and last name;
email address and phone number;
postal address;
legal status;
SIREN/SIRET registration number;
intra-community VAT number;
information relating to professional activity.

Administrative documents and supporting evidence

identity document;
company registration extract (Kbis);
URSSAF certificate;
insurance certificates;
certifications or administrative authorizations;
any document required for the Client's compliance obligations.

Financial and administrative information

bank details;
invoices;
expense reports;
accounting supporting documents;
payment information where applicable.

Activity data

activity reports;
mission history;
connection data and technical logs;
information relating to access and equipment provided in the context of missions.

3. Purposes of processing

Data is collected and processed in order to:

create and manage user accounts;
verify freelancer identity and documentary compliance (KYC/KYB);
administratively manage missions;
generate, sign, and archive contracts;
manage activity reports;
issue and track invoices and expense reports;
manage access and equipment made available by Clients;
comply with applicable legal, regulatory, and contractual obligations;
secure and improve the platform.

4. Legal bases for processing

Processing carried out by Folkyn relies in particular on:

performance of contractual relations between Folkyn, the Client, and the freelancer;
compliance with legal and regulatory obligations;
the legitimate interests of Folkyn and its Clients in ensuring compliance, security, and proper operation of the platform.

5. Access to data

Data may be accessible to:

enterprise customers who invited the freelancer to the platform;
authorized Folkyn SAS teams;
technical service providers involved in hosting, maintenance, security, or electronic signature;
commercial partners where the freelancer or Client activates an offer, referral, or service offered in partnership: strictly necessary data may then be transferred on the applicable legal basis and subject to the information provided at activation (for example: Orus, Indy, and Alan, depending on available integrations or programmes);
administrative or judicial authorities where required by law.

Folkyn strictly limits access to authorized persons within the scope of their duties.

6. Hosting and security

Data is hosted on Amazon Web Services (AWS) infrastructure located within the European Union.

Folkyn implements appropriate technical and organizational measures to ensure:

confidentiality of data;
integrity;
availability;
protection against unauthorized access, loss, destruction, or disclosure.

7. Retention period

Unless a legal or regulatory obligation, a request from a competent authority, or specific evidentiary needs require otherwise, the following periods apply from closure or deletion of the freelancer’s account or cessation of use of the relevant features:

technical data, login logs, and security traces: up to twelve (12) months;
data and documents processed for contractual purposes (missions, contracts, activity reports, exchanges related to performance of the service): five (5) years;
data and records with an accounting purpose: ten (10) years.

For the entire period of active use of the freelancer account, data are retained for the needs of the service and of Clients who invited the freelancer.

Inactive freelancer accounts may be deleted after twenty-four (24) months of inactivity, following reasonable notice where practicable.

Certain compliance documents may be archived for specific periods required by law.

8. Freelancers' rights

In accordance with applicable regulations, the freelancer has the following rights:

right of access;
right to rectification;
right to erasure;
right to restriction of processing;
right to object;
right to data portability where applicable.

The freelancer may exercise their rights by contacting:

dpo@folkyn.com

Proof of identity may be requested if there is reasonable doubt about the requester's identity.

9. Cookies and connection data

Folkyn may use cookies or similar technologies necessary for:

operation of the platform;
securing connections;
audience measurement and service improvement.

10. Changes to this privacy policy

Folkyn reserves the right to amend this Privacy Policy at any time, in particular to comply with legal, regulatory, or technical developments.

Users will be informed of any substantial change by any appropriate means.