Privacy Policy

1. Who we are

Workfield (workfield.eu) is a B2B tender marketplace connecting companies that need subcontractors with service companies across Europe.

For any privacy-related questions, contact us at: info@workfield.eu

2. What data we collect and why

When you register

• Company name
• Your name and job title
• Email address
• Country and region
• Role on the platform (client or service provider)

We collect this to create and manage your account and to display your company in the platform.

When you post a tender

• All tender information you enter: title, description, category, location, requirements, point of contact details

This information is stored and displayed to registered service companies on the platform.

When you submit an application

• Cover message, pricing, timeline, certifications, team size, and any other fields you complete
• File attachments you upload (PDF or image, max 10MB each)

This information is shared with the client who posted the tender and with Workfield administrators.

Automatically collected data

• Basic usage data collected by Lovable (our platform provider) and Supabase (our database provider), including IP address, browser type, and session data

We do not use Google Analytics or any third-party advertising trackers.

3. Legal basis for processing (GDPR)

We process your data under the following legal bases:

• Contract performance: to provide the services you signed up for
• Legitimate interest: to operate and improve the platform
• Legal obligation: to comply with applicable laws in the EU

4. Who we share your data with

We do not sell your data to third parties. We share data only with:

• Supabase (database and authentication provider, data stored in the EU)
• Lovable (platform and hosting provider)
• Other users of the platform, as required for the tender and application process (for example, your application is visible to the client who posted the tender)

5. How long we keep your data

• Account data: as long as your account is active
• Tender and application data: up to 3 years after the tender closes
• If you request account deletion, we will delete your personal data within 30 days

6. Your rights under GDPR

As a person based in or operating within the EU, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Request a copy of your data in a portable format
• Lodge a complaint with your national data protection authority

To exercise any of these rights, contact us at info@workfield.eu. We will respond within 30 days.

7. Cookies

Workfield uses only essential cookies required for authentication and session management. We do not use advertising or tracking cookies.

8. Data security

We use Supabase with Row Level Security (RLS) policies to ensure that users can only access data they are authorized to see. All data is transmitted over HTTPS.

9. Changes to this policy

We may update this policy as the platform evolves. We will notify registered users of significant changes by email. The date at the top of this page reflects the most recent update.

10. Contact

For any questions about this Privacy Policy, contact us at: info@workfield.eu