Privacy statement

Carrière values your trust in our company. In this privacy statement we inform you about how we handle personal data. When we refer to Carrière in this statement we mean Carrière Personeelsdiensten B.V., Carrière Bemiddeling B.V., Carrière Franchise B.V., Carrière Service Center B.V. and Carrière International B.V., all located at Morsestraat 16, 2652 XG in Berkel en Rodenrijs.

How do we collect and process personal data and for what purpose

Our aim is to provide you with the best possible service. We want to offer you targeted and personalised service and to do so we need your personal data. Among other things, Carrière mediates temporary and agency workers, freelancers and recruits and selects permanent staff.

1. Website visitor

When you visit our website, we process technical data associated with the use of the website. The data enables us to manage our website and improve the accessibility of certain parts of the website. The information on the website is then quick and easy for you to find. Cookies are used for this purpose. You can find out more about the use of cookies in our cookie statement.

    2. Registering as a jobseeker

When you register on the website as a jobseeker, we collect the following data:

• Name and address, date of birth, gender, contact details, resume;
• Other data provided as part of the registration (desired position, number of hours, and location of establishment).

Your personal data will be used to match you with jobs that suit you best, based on the information you have provided to us. These data are also used to create an account for you and find suitable positions. It is also used to match you with job offers or other types of assignments and possibly introduce you to potential clients. Further, Carrière uses your data to contact you about the vacancy you may have applied for or other information we need to provide you with.

    3. Job application

We collect the following (personal) data when you respond to a vacancy:

• Name and address details, e-mail address and other contact details;
• Birth data, gender;
• Resume, information on education, motivation, position, internships and work experience;
• Data on training and education you have attended or done;
• Data on availability and leave;
• Other data that are or may be important in the context of assessing the candidate's suitability, e.g. references and certificates;
• Passport photograph (or other visual material) on a voluntary basis.

    4. Agreement

At the time you can start working/working/have worked for Careers, we process the following data:

• Your nationality, citizen service number (BSN), copy ID proof, work permit (if applicable), payroll deduction form, bank account details, any personal data of family members if necessary, any documents relevant to a specific job such as certificate of conduct (VOG), Safety, Health and Environment Checklist Contractors (VCA), diplomas that include your personal data, references, etc.;
• Medical data if you have passed it on to us because it is necessary to know about it, for example in connection with dealing with an epileptic fit, allergic reaction or if you need an adapted workplace or otherwise;
• Other data related to personnel, salary and absence registration, such as availability, leave registration, data concerning social contributions and provisions we can invoke, salary data, personnel file with performance and assessment forms, complaints, changes of positions, changes of employment conditions, any complaints, warnings or other matters that are necessary to process in the context of the agreement and employability.

We do not process BSN and copy of ID for self-employed people who are going to work, already work and/or have worked, but a copy of the extract from the Chamber of Commerce, VAT number, insurance policy and proof of payment and professional liability insurance.

We only process medical or other sensitive or special data in those situations where this is explicitly permitted under the GDPR. For example, if we have your explicit consent, if it is necessary to protect your vital interests or those of someone else and you are physically or legally unable to give consent, if it is necessary to file, exercise or defend legal claims, or if it is for reasons of substantial public interest.

    5. Other

We process the following personal data from customers, suppliers and other relations:

• Name, business contact details and position.

    6. Personal data we receive from other sources

We may also use personal data from other sources, such as from specialised companies providing information, from our partners or from public records. Your insurance company, their intermediaries and medical staff may exchange relevant personal data and special categories of personal data with us if we need to act on your behalf, for example in an emergency.

    7. Social media

If you log in via social networks to access our platforms and online services, you consent to sharing your user data with us. This includes, for example, your name, e-mail address, date of birth, location and other information you voluntarily share with us.

    8. Quality and quality standards

Career is affiliated with various quality standards such as Stichting Normering Flexkrachten, Stichting Normering Arbeid, NEN 4400, Pay OK label and VCU. We are also a member of the ABU (Algemene Bond Uitzendondernemingen). In this context, we are periodically audited by various parties and it is checked, among other things, whether we record the files of our employees and flex workers properly, pay them on time, etc. Personal data may be processed in this process.

Grounds for processing personal data

We process your personal data based on the GDPR and there are six grounds for this.

• Consent

For example, if you have given your consent to the processing of personal data when creating an account, when subscribing to the newsletter or when processing your passport photo on your resume. If you have granted permission for certain processing, you can also withdraw this permission at any time.

• Fulfilling an agreement

We need your personal data to prepare and fulfil an agreement. We may also process your personal data as part of our obligation based on the agreement we conclude with you. This includes our obligations as an employer or intermediary towards you, but also towards the client where you will be working.

• Legal obligation of Carrière

Carrière may be legally obliged to process personal data, for example under several Dutch laws as Wet op het minimumloon, Wet op de identificatieplicht, Wet arbeid vreemdelingen and Wet op de loonbelasting. Examples include processing your BSN, a copy of your ID card or your work and/or residence permit. Therefore, this data may also be shared with the client.

• Protection of vital interests

For example, when it is essential for your life or health and we cannot ask you for permission. Think of an allergic reaction or condition where first aid has to be provided and we have to exchange data with care providers or your client.

• In the performance of a task of public interest or the exercise of public authority

For example, the use of personal data in the event of accidents, safety incidents or similar incidents.

• Legitimate interest

For example, when in our interest we try to predict which other positions or employers you might be interested in. However, it is also in the context of checks of the labels and memberships of Carrière and internal checks that it is important for us to process your personal data. In addition, we may process personal data in the context of reports which carefully consider our business interest and your rights under the GDPR.

Sharing personal data with third partie

In principle, your personal data will not be shared unless necessary for the position. Own employees and franchisees and their employees have access to personal data in various systems. At job level, personal data are protected and we have safeguards in place so that people do not have unnecessary access to certain data.

When we share your personal data, this is always done on a legal basis and because it is necessary. For example, in the context of the agreement we have with you. You can think of potential clients but also government bodies such as the Tax Administration and the UWV or an occupational health and safety service. We may also share your data in the context of training courses or in our interest with business relations such as a lawyer in connection with proceedings or an accountant in the case of internal audits. We may also be required to provide personal data to supervisory authorities, investigative bodies and tax authorities.

Your personal data may be shared outside the Netherlands, within the European Union, with parties we work with. All EU Member States must comply with the GDPR and we ensure that we cooperate with parties where appropriate organisational and technical measures are in place to ensure the security of the transfer.

Retention periods

We need your personal data to serve you well. This also primarily determines the period we keep your personal data. Our basic principle is that we keep personal data only for as long as is necessary to provide you with the service. After this, we will delete your personal data.

In some cases, we are legally obliged to keep personal data for longer. For example, tax law requires us to keep tax-relevant personal data for seven years.

Personal data may be deleted at an earlier point in time if Carrière receives notice from you to delete your personal data, except where Carrière is still required to retain such data by law and/or regulation or, for example, in connection with ongoing proceedings.

As a rule we retain personal data that we process in the context of an (employment) agreement for 7 years for tax purposes, 5 years if it concerns employee data in the context of absence administration where we carry the own risk, 5 years for absence data, up to one year where consent is obtained for job application data and 2 years for other personal data after the end of employment.

Protection of personal data

We take appropriate organisational and technical security measures to protect your data against accidental loss and unauthorised access, use, alteration and disclosure. You yourself are also responsible when it comes to protecting your data by, for example, not sharing your account data with third parties.

An example of a technical measure is that your data is sent via a secure connection when you use our online registration form. Another example of an organisational measure is that certain employees have access to personal data to the extent necessary to perform their job.

There are occasions when we transfer and/or store your personal data outside the Netherlands or the EEA. This data is processed by organisations working for us or one of our suppliers. Even then, we have taken appropriate measures to protect your personal data and process it in accordance with this statement. These protective measures include contractual provisions and appropriate security measures.

Rights of data subjects

Any person whose data we process have the following rights:

• Right to access your personal data;
• Right of data portability;
• Right to rectification and completion;
• Right to data minimisation;
• Right to be forgotten;
• Right to object to data processing.

For data subjects with an account in EasyFlex; through this environment you have access to a large part of your personal data. Here you can change and/or delete data yourself. Should you wish to exercise any of these rights, please submit a request via the e-mail address privacy@carriere.com.

We do our best to handle your personal data as well as possible. If you nevertheless have a complaint about the way we collect, store or use your personal data, please let us know by sending your written question or complaint to the Legal Affairs department and/or Data Protection Officer at privacy@carriere.com or by post at Morsestraat 16, 2652 XG, Berkel en Rodenrijs.

If you are not satisfied with the way your request has been handled, you can of course always contact the Data Protection Authority via the website www.autoriteitpersoonsgegevens.nl.

Modifications

As we cannot rule out the possibility that our services may change in the future, this privacy statement could also change in certain respects. We encourage you to consult this privacy statement regularly so that you are aware of any changes.

This version was drafted in November 2023.