Privacy notice

Last updated: 6 October 2026

This notice explains how MUKO Global OÜ handles personal data when you contact us, send us your CV or visit this website. We collect as little personal data as we can and use it only for the purposes described here.

1. Who we are

MUKO Global OÜ is the controller of the personal data described in this notice. You can contact us at the address above with any question about your data.

2. What data we process

• Enquiries. When you email us, we receive your name, email address, organisation and whatever you choose to include in your message.
• CVs and expert profiles. When you send us your CV, we receive the information it contains, typically your contact details, education, work history, languages and areas of expertise.
• Website visits. This website is hosted by Cloudflare, Inc., which processes technical data such as IP addresses to deliver the site and protect it against abuse. We use Cloudflare Web Analytics to count visits. It does not use cookies or similar technologies, does not track you across websites and gives us only aggregated statistics, such as page views, referring websites, country and device type. The website uses no cookies and no other analytics or tracking tools, and its fonts are served from our own domain.

Please do not send us special categories of data, such as health information, in your CV or messages.

3. Why we use it and on what legal basis

• Answering your enquiry and preparing cooperation, such as a consortium partnership or a service contract. Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in responding to business enquiries (Article 6(1)(b) and (f) GDPR).
• Keeping your CV in our expert pool so that we can contact you about suitable assignments. Legal basis: your consent, given by sending us your CV for this purpose (Article 6(1)(a) GDPR). You can withdraw it at any time.
• Proposing you for a specific project or tender. We will only include your CV or name in a proposal to a funding body or contracting authority after asking you and receiving your agreement for that specific proposal.
• Operating, securing and measuring the use of the website. Legal basis: our legitimate interest in running a secure website and understanding, in aggregate, how it is used (Article 6(1)(f) GDPR).

4. How long we keep it

• Enquiries and related correspondence: for as long as needed to handle them, and no longer than two years after our last contact, unless they lead to a contract, in which case we keep them for as long as the law and the contract require.
• CVs in the expert pool: for three years, or until you ask us to delete them, whichever comes first. We may ask you to confirm you want to stay in the pool.
• CVs submitted as part of a funded project or contract: for as long as the funding rules or the contract require, as project documents may be audited.
• Server logs: for the short period set by our hosting provider. Website statistics are aggregated and do not identify individual visitors.

5. Who we share it with

We do not sell personal data. We share it only with:

• service providers that act on our behalf, such as our email and website hosting providers, under data processing agreements;
• funding bodies, contracting authorities and consortium partners, only where you have agreed that we include you in a specific proposal or project;
• authorities, where the law requires it.

Some of our service providers may process data outside the European Economic Area. Our website host (Cloudflare, Inc.) and our email provider (Google) are based in the United States and certified under the EU-US Data Privacy Framework, which is covered by a European Commission adequacy decision. Any other transfer is covered by an adequacy decision or by the Standard Contractual Clauses approved by the Commission.

6. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to our processing of your data;
• receive your data in a portable format;
• withdraw your consent at any time, without affecting processing that took place before.

To use any of these rights, email info@mukoglobal.com. We will reply within one month.

You also have the right to lodge a complaint with a data protection authority. In Estonia this is the Data Protection Inspectorate (Andmekaitse Inspektsioon), www.aki.ee. You may also contact the authority in the EU country where you live or work.

7. Changes to this notice

We may update this notice when our activities or the law change. The date at the top shows when it was last revised.