Introduction and Data Controllers
We are a group of individuals (the "Team") operating this platform. Since we collectively determine why and how your personal data is processed, we act as Joint Controllers under the EU General Data Protection Regulation (GDPR).
The Team consists of:
- Adam Baczek
- Hubert Szymanowski
- Mikołaj Sapek
In this privacy policy you can find information about the purposes for which we process personal data, how we store the data and how and when data may be disclosed to third parties as well as what rights you have as a registered person.
For any privacy-related inquiries or to exercise your rights, please contact: support@apron.work.
Data We Collect and Why
We collect only the information necessary to facilitate the connection between professionals and employers.
For Professionals: Name, contact details (email/phone), education, work experience, profile photo, bank account number, CPR number, as well as other information given in your application and CV.
For Employers: Name of contact person, work email, work phone number, and company affiliation.
Ratings & Feedback: To maintain platform quality, users may rate their experiences with one another.
Technical Data: IP address, browser type, and usage behavior via cookies to ensure a functional website.
Cookies and Website Tracking
When you visit our platform, we collect information about you using cookies to ensure the website functions correctly and to improve your experience.
What we collect: Cookies may collect your IP address, browser type, search terms, network location, and the duration of your visit to specific pages.
Types of Cookies:
- Necessary Cookies: These are essential for the platform to function (e.g., keeping you logged in) and cannot be opted out of.
- Analytical/Marketing Cookies: We use tools like Vercel Analytics to understand how users move through our site. These are only activated if you provide consent.
You can change or withdraw your consent at any time through our cookie banner or by blocking cookies in your browser settings.
Legal Basis for Processing
We process your data based on the following GDPR principles:
- Contractual Necessity (Art. 6(1)(b)): To provide the intermediary services you requested by creating a profile.
- Consent (Art. 6(1)(a)): For specific actions like marketing notifications or non-essential cookies.
- Legitimate Interests (Art. 6(1)(f)): To maintain platform security, prevent fraud, and facilitate communication between users.
Sharing Your Data
As a marketplace, the core function of the platform is to share relevant information between parties:
With Other Users: When a professional applies for a role, their profile details and CV (excluding private contact info until a match is made) are visible to the employer.
Service Providers: We may use third-party tools for hosting (e.g., Vercel (Stockholm, EU) and Supabase (EU)) or support services under strict confidentiality.
No Sale of Data: We do not disclose your personal data to external companies for marketing purposes without your explicit consent.
Data Retention & Deletion
We store your data only as long as it is necessary for the purposes for which it was collected:
- Active Profiles: Data is kept while your account is active.
- Inactivity: We typically delete or anonymize data 2 years after your last activity unless legal obligations require otherwise.
- Account Deletion: You may delete your profile at any time via settings, which will trigger the erasure of your personal data, subject to any legal storage requirements.
Security Measures
We have implemented technical and organizational measures to protect your data against unauthorized access, loss, or alteration. This includes encryption, password protection, and restricted access—only the Team controllers have access to the backend systems.
Your Rights
Under the GDPR, you have the following rights:
- Right of access: Request a copy of the data we hold about you. You can see most of the information we process about you on your profile.
- Right for rectification: You have the right to have information that is incorrect corrected.
- Right to erasure: Request deletion of your data ("Right to be forgotten").
- Right to restriction of processing: Object to certain types of processing.
- Right to object: You have the right at any time to object to the processing of your personal data that we carry out based on our legitimate interests.
- Right to withdraw consent: Withdraw any consent previously given at any time.
Complaints
If you believe we are processing your data in breach of regulations, you have the right to lodge a complaint with your local Data Protection Authority (e.g., the Danish Data Protection Agency).
How to delete your account
On the web app:
- Go to settings
- Go to account
- Type "DELETE" to confirm
- Press "Delete my account"
Or send us an email at support@apron.work
The policy was last updated on: 19.03.2026