Privacy

Controller

The controller responsible for processing personal data on this website and in our business is:

Valinor UG (haftungsbeschränkt)Husemannstraße 1510435 BerlinGermany

Represented by the managing director Jonathan Sueldo Guevara Ratzeburg.
Email: info@valinor-agency.com

We have not appointed a data protection officer, as we are not legally required to. Please send any question about data protection to the address above.

In short

• We use no analytics, tracking or advertising tools and embed no social media plugins.
• The website’s fonts are served from our own server. Loading the page makes no connection to Google or any other font provider.
• We set no cookies of our own on the public website. Only someone who enters the password to a closed area gets exactly one cookie.
• The team calculator runs in your browser. What you enter there only reaches us when you book a call.

Hosting and server logs

The website runs on Cloudflare Workers, operated by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. On every request Cloudflare processes, on our behalf, the data your browser sends for technical reasons:

• IP address
• date and time of the request
• requested address (URL) and referrer
• browser, operating system and language setting
• status code and amount of data transferred

We need this data to deliver the website, protect it from attacks and find errors. The legal basis is our legitimate interest in running it securely and reliably (Art. 6(1)(f) GDPR). The logs are deleted automatically after seven days at the latest.

We have a data processing agreement with Cloudflare (Art. 28 GDPR). Cloudflare is certified under the EU-US Data Privacy Framework, so transfers to the USA are covered by the European Commission’s adequacy decision (Art. 45 GDPR). More: cloudflare.com/privacypolicy.

Cookie

The home page and these legal notices are open to everyone and set no cookie. Some areas of the website are only accessible with a password. When you enter the right one there, we set the cookie valinor_gate. It holds only which part of the website the password opens and until when, signed so nobody can forge it. It contains nothing about you, is not linked to any other data and expires after 14 days. Clicking the logo deletes it immediately.

The cookie is strictly necessary for you to use the closed area after signing in, so it needs no consent (Section 25(2) no. 2 TDDDG, the German telecommunications and digital services data protection act). The legal basis for the processing is Art. 6(1)(f) GDPR.

Team calculator

The department, role, seniority, salary and headcount you choose in the team calculator are calculated only in your browser and are not sent to us. On the home page the team you build is also written into the address bar, so you can share it as a link. That link holds only roles, salaries and headcounts, nothing about you. When it is opened, it appears in the server logs like any other address.

Booking a call with Cal.com

“Hire my team” lets you book a call with us. We use Cal.com, a service of Cal.com, Inc., USA, for this. The calendar opens in a window over our page, served by Cal.com.

So the calendar opens without delay, the page loads Cal.com’s booking script (from app.cal.com) as soon as the calculator holds a team — that is, as soon as you add a role or an example team, or open a link to a ready-made team. This happens before you click “Hire my team”. Cal.com receives your IP address, our website’s address and your browser’s technical details. The script itself stores nothing on your device. As long as there is no team, the page makes no connection to Cal.com.

The booking window only opens when you click “Hire my team”. Inside it, Cal.com may set its own cookies needed for the booking.

When you book a call, Cal.com processes on our behalf:

• your name and email address
• the time you chose and your time zone
• the booking note. It is prefilled with the team from the calculator — roles, headcount and the calculated saving — and you can change or delete it before you submit.
• anything else you choose to enter in the form

We use this data to arrange and prepare the call. The legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR). For loading the script in advance, it is our legitimate interest in a booking that works without waiting (Art. 6(1)(f) GDPR). Cal.com sends you a confirmation email and adds the call, with a Google Meet link, to our Google Calendar (see below). We delete the booking data once it is no longer needed for the call and a possible collaboration, unless we are legally required to keep it.

We have a data processing agreement with Cal.com (Art. 28 GDPR). Transfers to the USA are covered by the European Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR). More: cal.com/privacy.

You can also book a call without Cal.com: just send us an email.

Google Workspace: email, calendar and Meet

For email, calendar and video calls we use Google Workspace (Gmail, Google Calendar and Google Meet), provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you join a call on Google Meet, Google processes on our behalf your name, email address, IP address, device details, when you joined and left, and your video, audio and chat messages if you use camera, microphone or chat. We do not record calls. The legal basis is taking steps before a contract or performing it (Art. 6(1)(b) GDPR), and otherwise our legitimate interest in communicating with customers and freelancers wherever they are (Art. 6(1)(f) GDPR).

We have a data processing agreement with Google (Art. 28 GDPR). Google may also process data in the USA; Google LLC is certified under the EU-US Data Privacy Framework (Art. 45 GDPR), and the European Commission’s Standard Contractual Clauses apply in addition. More: policies.google.com/privacy.

Contact by email or phone

When you write to us or call us, we process what you tell us (such as your name, contact details and your request) to answer you. We send and receive email through Gmail (see above). Where it concerns a possible or existing contract, the legal basis is Art. 6(1)(b) GDPR; otherwise it is our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete the data once the request is dealt with, unless we are required to keep it.

Customers and prospects

We place professionals from Egypt with companies in Europe. For the contact people at our customers and prospects we process names, business contact details, job titles, our correspondence, the requirements for the roles being filled, and contract and billing data.

We do this to prepare offers, propose suitable professionals, and conclude and perform contracts (Art. 6(1)(b) GDPR, where you are the contracting party yourself), and otherwise out of our legitimate interest in the business relationship with the company you work for (Art. 6(1)(f) GDPR). We keep invoices and business letters for as long as German commercial and tax law requires, usually six to eight years (Art. 6(1)(c) GDPR in conjunction with Section 257 HGB and Section 147 AO).

Data we do not collect from you directly comes from publicly available sources such as company websites and professional networks (for example LinkedIn), or from referrals.

Once we work together, the professionals placed with you and our partner who employs them in Egypt receive the contact details they need to work with you.

Professionals and applicants

When you apply to us as a professional, or we approach you, we process the information you give us: name, contact details, CV, qualifications, work samples, availability and salary expectations. We use it to see which roles suit you, to present your profile to interested customers, and to prepare and carry out a placement (Art. 6(1)(b) GDPR).

If we approach you first, your data comes from publicly available professional profiles (for example LinkedIn) or from referrals. The legal basis for that first contact is our legitimate interest in finding suitable professionals for open roles (Art. 6(1)(f) GDPR). If you do not want to be contacted again, a short message is enough and we delete your data.

Your profile only goes to customers who want to fill a matching role, and only with your knowledge. Once a placement is agreed, our partner in Egypt receives the data it needs for your contract and payroll.

If no placement comes about, we delete your documents no later than six months after the process ends. If you would like us to consider you for future roles, we keep your profile longer, but only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

Transfers to Egypt and the USA

Egypt is a country outside the EU for which the European Commission has not issued an adequacy decision. We only transfer data there where it is necessary to arrange and perform the contract you have concluded with us, or that is concluded in your interest (Art. 49(1)(b) and (c) GDPR).

For transfers to the USA to Cloudflare, Cal.com and Google, see above.

Your rights

You have the right to

• access your data (Art. 15 GDPR)
• have incorrect data corrected (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• withdraw consent you have given, with effect for the future (Art. 7(3) GDPR)

An email to info@valinor-agency.com is enough.

Right to object

Where we process your data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then stop processing it, unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims.

Right to lodge a complaint

You may complain to a data protection supervisory authority, in particular in the EU member state where you live or work or where the alleged infringement took place (Art. 77 GDPR). The authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, Germany.

Do you have to give us data?

No. Without your name and email address, though, we cannot book a call with you, and without your documents we cannot place you. We do not make automated decisions, including profiling (Art. 22 GDPR).