Privacy policy

Recruitment-Online.nl is a recruitment-as-a-service provider for clients and employers in the Netherlands. The controller for the processing described in this privacy policy is: Recruitment-Online.nl B.V., trading as Recruitment-Online.nl, located at Poststraat 8-10, 6135 KR Sittard, the Netherlands.

Chamber of Commerce (KvK) number: 93035209. For questions about privacy or to exercise your privacy rights, you can contact us via [email protected], for the attention of Dennis Tiems.

From clients and employers we process, among other things, name, company name, job title or role, business contact details, communication data, vacancy data, campaign information, service agreements and payment and invoice data. Payments and payment data may be processed via Stripe.

From candidates we process, among other things, name, phone number, email address, answers from forms, information about availability, motivation, experience, wishes and preconditions, recorded telephone screening calls, transcripts of these calls, screening notes and status information about the application or match.

When a client purchases an additional service for online research or extra candidate enrichment, we may also process publicly available online information insofar as it is relevant for recruitment, matching or screening within the assignment.

We process personal data to perform our agreement with clients, including setting up and running recruitment campaigns, following up on candidate responses, screening candidates, sharing suitable candidate profiles with the client and handling invoicing and administration.

We also process personal data on the basis of our legitimate interest, such as recruitment, matching, quality control, campaign optimisation, fraud prevention, security, reporting and improving our services. In doing so, we always take the interests of the people concerned into account.

For certain processing we ask for consent, for example for recording telephone calls where consent is required, for contact via WhatsApp or similar messaging channels where this is not necessary to handle the request, and for receiving marketing communications.

Telephone screening calls with candidates may be recorded. We do this to assess responses carefully, to prepare screening notes and transcripts, to monitor the quality of the screening and to share relevant information correctly with the client concerned.

For call recordings we rely on consent where this is legally required. If a candidate does not consent to recording, the screening can, where possible, take place without a recording. Recordings are kept until no later than 4 weeks after the end of the application procedure, or for a maximum of 1 year with the candidate's consent, and are then deleted or anonymised, unless longer retention is necessary because of a legal obligation or dispute.

We share candidate data with the employer or client concerned when this is necessary for assessing, following up on or possibly filling the vacancy. This may include contact details, form answers, motivation, availability, transcripts, screening notes and our assessment of the basic fit.

We use third parties and processors for parts of our services. This includes in any case Meta for advertising, tracking, attribution and the Conversions API, with data sent in hashed form where possible; GoHighLevel for CRM, forms, workflows and lead follow-up; Stripe for payments and invoicing; our WhatsApp or messaging provider for communication; and a transcription service for converting call recordings into text.

Where necessary, we conclude data processing agreements with processors. Third parties may only process personal data for the agreed purposes, unless they are themselves an independent controller for certain parts of their services.

Some suppliers we use, such as Meta and certain CRM, advertising, communication or transcription suppliers, may process personal data outside the European Economic Area, including in the United States.

When personal data is transferred outside the EU or EEA, we use appropriate safeguards where necessary, such as the European Commission's Standard Contractual Clauses (SCCs) and additional measures where reasonably necessary.

We do not keep personal data longer than necessary for the purposes for which it was collected, unless we are legally required to keep data longer or the data is needed to handle a dispute.

We keep client and employer data for the duration of the cooperation and up to 1 year after it ends. Candidate profiles, leads and form data, transcripts and screening notes and call recordings are kept until no later than 4 weeks after the end of the application procedure. If the candidate consents, we keep this data for a maximum of 1 year, so that we can approach the candidate for other suitable vacancies. WhatsApp and message history is kept for a maximum of 1 year after the last contact; messages with candidates follow the same periods as candidate data. Invoice and payment data is kept for 7 years, in line with the statutory tax retention obligation.

Campaign data is kept for 3 months after a campaign is paused, so that a campaign can practically be resumed and reporting remains available. After that, we keep campaign data for a maximum of 1 year, unless longer retention is necessary for administration, accountability or a dispute.

Our website and landing pages may use cookies, pixels and similar techniques for functionality, analysis, ad measurement and attribution. Among other things, we use the Meta Pixel to measure whether ads lead to visits, form starts and leads.

When someone arrives on our website via an ad, we may process attribution data, such as the URL, UTM parameters, the Meta click identifier (fbclid), browser information and technical identifiers such as _fbp and _fbc. This data may also be shared via the Meta Conversions API, with contact details sent in hashed form where possible.

If we publish a separate cookie policy, it will contain more information about the cookies and settings used. As long as there is no separate cookie policy, this section serves as the explanation of cookies and tracking on our website.

Under the GDPR you have various rights regarding your personal data. You can request access, rectification, erasure, restriction of processing, data portability and object to processing. When processing is based on consent, you can withdraw that consent at any time.

You can submit your request via [email protected]. We may ask for additional information to verify your identity before responding to a request. We respond within the period prescribed by the GDPR.

If you feel that we are not handling your personal data with due care, we would like to hear from you so that we can look into it. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.

We may amend this privacy policy when our services, working methods, suppliers or legal obligations change. The most up-to-date version is always available on this page. In the event of important changes, we may actively inform the people concerned where appropriate.