Introduction and Who We Are
Follow HR Jobs B.V. ("Follow HR Jobs", "we", "us") is a Dutch payroll recruitment agency based in Maastricht, the Netherlands. We act as an employer for candidates we place (we pay wages directly) and operate a web-based platform with portals for candidates and client companies.
We are committed to protecting your privacy and handling your personal data in a safe and secure manner. All personal data is collected, processed, and secured in accordance with the EU General Data Protection Regulation (GDPR) and applicable Dutch laws.
Follow HR Jobs B.V., located at Mergelweg 209, 6212 XD Maastricht, Netherlands (Chamber of Commerce no. 97055573), is the data controller for the personal data described in this Privacy Policy. We have not appointed a Data Protection Officer (DPO) (not required given our size and processing activities), but you can contact us with any privacy questions or requests at info@followhrjobs.com.
Summary of Key Points
- We only use your data for legitimate business purposes (recruitment, employment, providing services to clients) and legal obligations.
- We do not sell your data to third parties, and we do not transfer your data outside the European Economic Area intentionally.
- We ensure any third-party processors (like IT providers) safeguard your data via contracts.
- You have rights to access, correct, or delete your data, among others.
- We secure your data with appropriate measures and will report any significant data breaches to authorities and affected individuals.
Please read this Privacy Policy carefully to understand our practices. By using our services or website, or by submitting personal data to us, you acknowledge that your personal data will be processed as outlined here. If you do not agree with this policy, please do not provide us with your personal information.
1. Personal Data We Collect and Process
We collect different categories of personal data depending on your relationship with us (candidate, client, or employee) and how you interact with our website and services. We limit collection to what is necessary for the purposes set out in this Policy (data minimization principle).
Website Visitors and Users
- •Device and Browsing Information: IP address, browser type, operating system
- •Cookies and similar technologies
- •Information from online forms you fill out
Job Applicants and Candidates
- •Identification and contact details
- •Personal details like date of birth, nationality
- •CV and application information
- •Job preferences and availability
- •Right to work and identity verification (only when hired)
- •Onboarding and payroll data (for placed candidates)
Client Contacts
- •Contact details: name, business email, phone, job title
- •Communications and service requests
- •Account information for client portal
- •Billing/contract information
Follow HR Jobs Employees
- •HR/personnel data
- •Employment contract details
- •Payroll and benefits information
- •Performance evaluations
How We Collect Candidate Data: In most cases, we collect this data directly from you - for example, when you fill out our registration form or apply to a job on our website, when you upload your CV, or during interviews and communications with our recruiters. All forms will explain what data is needed and why.
In some cases, we may also collect candidate data from third-party sources like job boards or professional networking sites where you've made your information public for job-seeking purposes, or if you are referred to us by someone.
2. Purposes and Legal Bases for Processing Personal Data
We process personal data only for clear and legitimate purposes, and pursuant to a valid legal basis under GDPR (Articles 6 and 9). Below we explain why we use your data (the purposes) and on what legal grounds.
Main Purposes of Processing
Recruitment & Job Placement
Matching candidates with job openings, assessing suitability, and presenting candidates to client companies.
Legal Basis: Consent, legitimate interests, or steps prior to entering a contract.
Employment Administration
Onboarding, payroll processing, time tracking, and managing the employment relationship.
Legal Basis: Performance of contract and legal obligations.
Client Services
Managing contracts, discussing candidate proposals, and delivering staffing services.
Legal Basis: Legitimate interests or performance of contract.
Website Operation
Providing functionality of our portals, ensuring security, and improving user experience.
Legal Basis: Legitimate interests or consent (for non-essential cookies).
No Automated Decision-Making: We do not make any recruitment or employment decisions about you purely by automated means (without human involvement) that would have legal or similarly significant effects.
3. How We Share Your Personal Data (Recipients)
We treat your personal data with care and confidentiality. Within Follow HR Jobs, your data is only accessed by authorized personnel who need it to perform their duties. We do not sell or rent your personal information to third parties.
| Recipient | Purpose | Data Shared |
|---|---|---|
| Client Companies | Presenting candidates for job opportunities | CV, contact info, qualifications (with consent) |
| Service Providers | IT hosting, payroll processing, email services | Necessary data for each service (under contract) |
| Government Bodies | Tax reporting, social security, legal compliance | Required identifiers and employment data |
| Professional Advisors | Legal, audit, or compliance matters | Limited data needed for specific advice |
We ensure that all external service providers who handle personal data on our behalf sign agreements obligating them to process data in compliance with GDPR and this Policy.
4. International Data Transfers
Follow HR Jobs primarily processes and stores personal data within the European Economic Area (EEA). The majority of our core IT systems, databases, and service providers are located in the Netherlands or elsewhere in the EEA.
Whenever personal data is transferred or accessed outside the EEA, we ensure that a valid transfer mechanism is in place as required by the GDPR. This may include verifying that the destination country has an adequacy decision or implementing the European Commission's Standard Contractual Clauses (SCCs) with the non-EEA recipient, along with additional safeguards if necessary.
Currently, all our third-party processors are either located in the EEA, in countries with an EU adequacy decision, or are bound by contracts that provide GDPR-level protection.
5. Data Retention – How Long We Keep Your Data
We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, or to comply with applicable laws and regulations. Retention periods will vary depending on the type of data and the data subject category (candidate, client, or employee).
| Data Category | Retention Period |
|---|---|
| Candidates (not placed) | Up to 2 years from last activity |
| Placed candidates (employees) | 7 years for payroll/tax records, 5 years for basic employment details |
| Client contacts | Duration of business relationship + 7 years for financial records |
| Internal employees | 7 years for payroll/tax records, 2 years for other HR data |
| Website analytics | 14 months for raw logs |
Once the retention period expires or if you request deletion (and no overriding reason to keep the data exists), we will either securely delete your personal data or anonymize it (so it can no longer be linked to you).
6. Your Rights as a Data Subject
Under the GDPR and Dutch privacy laws, you have a number of rights regarding your personal data. Follow HR Jobs is committed to upholding these rights and ensuring you can exercise them effectively.
Access
Request a copy of your personal data
Rectification
Correct inaccurate or incomplete data
Erasure
Request deletion of your data ('right to be forgotten')
Restriction
Limit how we use your data in certain circumstances
Data Portability
Receive your data in a structured, machine-readable format
Object
Object to certain processing activities
Withdraw Consent
Withdraw previously given consent
To exercise any of these rights, please contact us using the contact details in Section 8 below. We may need to verify your identity before fulfilling your request (to ensure we don't disclose data to the wrong person).
We will respond to your request as soon as possible, and at most within one month as required by GDPR. If we cannot comply with your request fully (due to a legal obligation or another valid reason), we will explain the reasons to you.
7. Data Security and Protection Measures
We take security of personal data very seriously. Follow HR Jobs has implemented a range of technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure.
Our Security Measures
Encryption of data in transit and at rest
Strict access controls and role-based permissions
Firewalls and network security protections
Physical security for offices and documents
Vendor due diligence for third-party processors
Privacy by design in system development
Employee training on data protection
Incident response plan for data breaches
In the unlikely event of a personal data breach (such as unauthorized access to our systems or accidental disclosure of data), we have an incident response plan. We will contain and investigate the issue immediately. If the breach is likely to result in a risk to your rights and freedoms, we will notify the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) within 72 hours of discovery, as required by law. We will also inform affected individuals without undue delay, especially if the breach could pose a high risk.
8. Questions, Concerns, and Contact Information
We hope this Privacy Policy provides a clear understanding of how Follow HR Jobs handles your personal data. If you have any questions or concerns about this Policy or about how your data is used, please do not hesitate to reach out to us.
Contact for Privacy Matters
Address
Mergelweg 209, 6212 XD Maastricht, Netherlands
Supervisory Authority
If you are not satisfied with our response or believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the relevant supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).
