Privacy Policy

Last updated: 26 October 2026

Introduction

Freelancers Luxembourg ("we", "us", "our") operates the website freelancers.lu. The data controller is ABSYS SARL, 33, boulevard Prince Henri, L-1724 Luxembourg (RCS Luxembourg B292804), which operates and manages the platform under the Freelancers.lu brand. This privacy policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and Luxembourg data protection laws.

Data We Collect

We collect the following personal data when you use our platform:

Identity information: first name, last name
Contact information: email address, phone number
Professional information: skills, years of experience, daily rate, availability, location
Documents: CV/resume (PDF, Word or image), profile photo and portfolio visuals
Authentication data: email, password (encrypted), or third-party authentication data (Google, Microsoft)
Technical data: truncated IP address, device and browser type, pages visited, cookies (see the Cookies section)

Purpose of Data Processing

Your personal data is processed for the following purposes:

Creating and managing your user account
Connecting freelancers with recruiters and companies, including matching your profile with missions identified on the Luxembourg market (your profile is only sent to a company with your consent)
Processing your application to join the network
Communicating with you about opportunities and platform updates
Improving our services and user experience

Legal Basis

We process your data based on: your consent (Article 6(1)(a) GDPR), the performance of a contract (Article 6(1)(b) GDPR), and our legitimate interests (Article 6(1)(f) GDPR) in operating and improving the platform.

Data Storage and Security

Your data is hosted in the European Union (Frankfurt, Germany). The files you upload (photo, CV, portfolio visuals) and our backup copies are stored with our processor Cloudflare. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or alteration. Passwords are encrypted.

Data Sharing

We do not sell your personal data. When your freelancer profile is published, it is visible to all visitors of the site, without your email or phone number, and may appear in search engines: you can refuse this by unticking “Visible on the web” in your profile. We rely on the following processors, each limited to its purpose: Hostinger (website hosting and email delivery, Frankfurt, Germany); Cloudflare (storage of uploaded files and backups; Turnstile, bot protection on the sign-in and sign-up forms; Workers AI, AI analysis of your CV to pre-fill your profile, only if you use the CV import, and of your profile photo to spot a logo or an illustration, the decision always remaining with our team); Stripe (subscription payments, on payment pages hosted by Stripe); Mapbox (address suggestions when you type your location); Google and Microsoft (sign-in with your account, only if you choose this option; Google also hosts our team's mailbox, which receives a copy of the emails sent by the platform); Stack Exchange (skill suggestions as you type: your browser queries this service directly, which therefore receives your IP address); Darkbloom (AI formatting of mission listings and estimation of their rate: this service only receives the text of the listings, no data from your account). Where your data is transferred outside the European Union (Cloudflare, Stripe, Mapbox, Google, Microsoft), the transfer is governed by the European Commission's standard contractual clauses.

Your Rights

Under the GDPR, you have the following rights:

Right of access: obtain a copy of your personal data
Right to rectification: correct inaccurate data
Right to erasure: request deletion of your data
Right to data portability: receive your data in a structured format; you can download it yourself from your profile (Account section, “Download my data”)
Right to object: object to certain processing of your data
Right to withdraw consent at any time

To exercise your rights, contact us at: contact@freelancers.lu

Emails and communications

We distinguish service emails (account confirmation, profile status, moderation, applications, missions, billing — legal basis: performance of the contract) from optional emails. Based on our legitimate interest and switchable off in one click: reminders to complete your profile, availability requests and, for published freelancer profiles, mission alerts — at most once a week, new missions matching your profile, selected automatically by comparing your skills, experience, day rate and languages with those of the ads (this selection has no other effect). Based on your consent: guides and news, partner offers. Every optional email includes an unsubscribe link and a link to manage your choices category by category; your choices and their date are kept as proof. Sent emails are logged and a copy is kept by our team for support purposes.

Some reminders to complete your profile mention the active missions that match it, selected in the same way as for mission alerts. The links in these reminders are personal to you: if you click one of them, we record that click with your account (date, link followed, device and browser type) to measure how effective the reminder is. We do not track whether you open emails. These clicks are kept for at most 13 months and deleted with your account. Legal basis: our legitimate interest in measuring the effectiveness of our reminders (Article 6(1)(f) GDPR). You can object by unsubscribing from reminders or by writing to us.

Manage my email preferences

Cookies

A cookie is a small file stored on your device; browser local storage (localStorage, sessionStorage) is treated here in the same way as cookies. We use three families: strictly necessary cookies (sign-in, security), functional cookies that record a preference you have expressed (language, theme), and an internal audience measurement that is exempt from consent. None of them requires your consent, which is why the site shows no cookie banner. We do not use any advertising cookies, third-party analytics tools or social network trackers.

Name	Purpose	Category	Duration
`sb-freelancers-auth-token (+ .0, .1…)` freelancers.lu · cookie	Keeps you signed in (authentication tokens).	Strictly necessary	400 days
`sb-freelancers-auth-token-code-verifier` freelancers.lu · cookie	Secures the sign-in flow (PKCE); removed once you are signed in.	Strictly necessary	Session
`__cf_bm, cf_clearance` Cloudflare (Turnstile) · cookie	Bot protection on forms (sign-in, sign-up, forgotten password); set by Cloudflare on those pages only.	Strictly necessary	Set by the provider
`NEXT_LOCALE` freelancers.lu · cookie	Remembers the language you chose.	Functional (preference)	Session
`theme` freelancers.lu · localStorage	Remembers the light or dark theme.	Functional (preference)	Until you delete it
`profileEditorMode` freelancers.lu · localStorage	Remembers the profile editing mode you chose.	Functional (preference)	Until you delete it
`pv_sid` freelancers.lu · sessionStorage	Groups the page views of one visit for the internal statistic, without identification.	Exempt audience measurement	Session

We also keep an internal traffic statistic, without consent, under the "audience measurement" exemption: it is only used to produce aggregated statistics, the IP address is truncated before being recorded, no user identifier or full user agent is kept, the session identifier disappears when the tab is closed, and the data is deleted after 13 months.

We also use Umami, an open-source audience measurement tool installed on our own servers (Frankfurt, Germany): no data is passed to any third party. It sets no cookies and writes nothing to your device. It records the pages viewed, where the visit came from (referring site, campaign parameters) and a few anonymous actions (for example, submitting a form), without any account identifier, name or email address. Your IP address is not kept: it is only used to infer the country and city and, together with the browser type, to compute a visit identifier that changes every day, which prevents you from being followed from one day to the next. This data is deleted after 13 months. Legal basis: our legitimate interest in measuring traffic to our site in order to improve it (Article 6(1)(f) GDPR). You can object at any time by blocking the measurement script in your browser: an ad blocker is enough.

Data Retention

Your personal data is retained as long as your account is active. The CV you import and the result of its analysis are kept by our team as long as your account exists, to check the quality of the import, and deleted with it. If you request the deletion of your account, your data will be erased within 30 days, unless we are legally required to keep it. Internal (anonymised) traffic statistics are deleted after 13 months.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date.

Contact

For any questions regarding this privacy policy or your personal data, please contact us at: contact@freelancers.lu