Discretion is not a slogan

Last updated: 22 October 2026

Discretion is not a slogan here. It is the precondition for the model working at all. A leader in quiet motion can only entrust us with their ambition if we treat the information accordingly. This policy sets out what we collect, why, who sees it, and what you decide yourself. It is written to be read without a lawyer at your side.

1. Who is the data controller

Talent Attract Agency ApS
Danish company registration no. (CVR) 39266326
Østervangen 1B, 3230 Græsted, Denmark
E-mail: hej@stancein.com · Phone: +45 4072 4011

Stancein is a brand of Talent Attract Agency ApS. That is the company you contract with, and the company responsible for the processing of your personal data on stancein.com, in the Stancein platform (app.stancein.com) and in Stancein Audit (audit.stancein.com).

2. What data we process

It depends on how you use us. These are the typical situations:

• You visit stancein.com. Our hosting provider records technical information in server logs: IP address, time, pages requested, browser and operating system. The site sets no cookies and contains no analytics or advertising scripts (see section 9).
• You book a meeting or write to us. Name, e-mail, phone number, company and whatever you write. Meetings are booked through Calendly.
• You order a LinkedIn analysis (Stancein Audit). Your LinkedIn URL, your e-mail and the publicly available information on your LinkedIn profile that the analysis is based on. The result is a report with a score and recommendations.
• You become a client in The Power Move or buy LinkedIn or thought leadership services. Here we process career information in the broad sense: resume, LinkedIn profile, education, current and previous roles, salary expectations, preferences for your next role, geographic preferences, references, the material we build together (resume, bio, pitch, outreach texts), notes from conversations, which roles and companies you are in play for, and the status of those processes. Plus payment and invoicing details.
• You are a search partner, HR professional, board member or investor. Name, title, company, contact details and correspondence about candidates and roles.

We do not ask for special categories of data (health, trade union membership, political opinions and so on), and we have no need for them. If you choose to share such things in a conversation, we note them only where necessary for the engagement, and only with your consent.

3. What we use the data for, and on what legal basis

• To deliver what you bought (GDPR article 6(1)(b)): positioning material, market monitoring, role and company analyses, introductions and agent work.
• To answer enquiries and hold meetings (article 6(1)(b) and (f)).
• To invoice and keep accounts (article 6(1)(c), the Danish Bookkeeping Act).
• To run and secure the site and the platform (article 6(1)(f): our legitimate interest in a stable and secure system).
• To present you to search firms, companies, boards or investors (article 6(1)(b)). This happens only in engagements where it is part of the service, and never without your prior approval of the direction. You decide who may know you are in motion.
• To send you relevant professional content, only if you have opted in (article 6(1)(a)). You can withdraw consent at any time.

4. Who we share data with

We never sell data, and we do not share candidate data with companies you have not approved. Beyond that, we use suppliers who process data on our behalf (processors) under a data processing agreement:

• Simply.com A/S (Denmark): hosting of stancein.com and the platform, server logs and backup.
• Stripe: payments and subscriptions. Stripe is an independent controller for the card processing itself. We never see your full card number.
• Calendly: meeting bookings.
• Microsoft 365 and Google Workspace: e-mail, calendar and documents.
• Visma e-conomic: invoicing and bookkeeping, together with our external bookkeeper and auditor.
• AI providers (currently Anthropic): generating first drafts of resumes, bios, pitches and outreach texts, and analysing roles, companies and LinkedIn profiles. See section 5.
• LinkedIn: when we analyse or update your profile, it happens on LinkedIn's platform under LinkedIn's own terms.

Recipients who are not processors: the executive search firms, companies, boards and investors you have personally approved us to introduce you to. They become independent controllers of what they receive. Public authorities receive data only where the law requires it.

5. How we use AI

Stancein is built on the principle AI first, human on top. Concretely: AI builds the first draft of your material and does the heavy analysis, and a human reads, corrects and approves before anything leaves the building. When we use AI, we send the material the task requires (for example your resume and a role profile) to the provider's API. We use business agreements under which the provider may not train its models on your data. We never ask AI to make decisions about you; assessments, recommendations and introductions are always a human's responsibility.

6. Transfers outside the EU/EEA

Some of our suppliers (Stripe, Calendly, Microsoft, Google, Anthropic) are headquartered in the United States or may process data there. Transfers rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework where the supplier is certified, and otherwise on the Commission's standard contractual clauses with supplementary measures. You can request a copy of the basis by writing to us.

7. How long we keep data

• Enquiries and meetings with no subsequent agreement: deleted no later than 12 months after last contact.
• Stancein Audit (LinkedIn analysis): the report and the extract it is based on are deleted no later than 12 months after delivery, unless you become a client.
• Client engagements: kept during the engagement and the 90-day tail period, and thereafter for up to 3 years to document the agreement and any claims (Danish Limitation Act). Material we have built for you is yours, and you can ask to have it handed over before we delete.
• Invoices and accounting records: 5 years from the end of the financial year they relate to (Danish Bookkeeping Act).
• Server logs: deleted on a rolling basis after a short period by our hosting provider.

8. Your rights

You have the right to access the data we hold about you, to have inaccurate data corrected, to erasure, to restriction of processing, to data portability, and to object to processing based on our legitimate interest. Where you have given consent, you can withdraw it at any time with effect for the future. Write to hej@stancein.com and we will respond within a month. We will ask you to confirm your identity before handing anything over, for the same reason we do everything else: discretion.

9. Cookies and tracking on stancein.com

stancein.com sets no cookies and uses no analytics, advertising or tracking scripts. That is why there is no cookie banner. The site loads fonts from Google Fonts, which means your browser sends a request (including your IP address) to Google when the page loads. The platform (app.stancein.com) uses the strictly necessary cookies required to keep you logged in. Those do not require consent under the law.

10. Security

All traffic is encrypted (HTTPS/TLS). Access to client data is limited to the people working on your engagement, and everyone works under a confidentiality obligation. The platform keeps candidate profiles separated, so a partner sees only what you have approved them to see. If we discover a security breach that may pose a risk to you, you will be notified without undue delay.

11. Complaints

If you are unhappy with how we process your data, we would rather hear from you first. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, datatilsynet.dk.

12. Changes

We update this policy when our suppliers, services or the law change. The date at the top shows the current version. Material changes for clients in an ongoing engagement are notified by e-mail.