At Haagsch Recherchebureau, we attach great importance to protecting your privacy. In this privacy statement, we explain what personal data we collect, how we use, store and protect it.
1. Data controller
Haagsch Recherchebureau, located at Alexanderveld 5, 2585 DB The Hague, is responsible for processing personal data as set out in this privacy statement.
We respect your privacy and handle your personal data carefully and confidentially. We comply with applicable privacy laws, including the General Data Protection Regulation. Do you have questions about this? Please feel free to contact our Data Protection Officer (DPO).
Contact details:
Haagsch Recherchebureau
Alexanderveld 5
2585 DB The Hague
070 20 42 7 42
dpo@haagschrecherchebureau.nl
2. Personal Data
Below is an overview of the personal data that we process:
- First and last name
- Gender
- Birthdate
- birthplace
- Address details
- Phone number
- E-mail address
- IP address
- Cookies
- Residential address
- Information about your activities on our website
- Internet browser, software version and device type
- Surveillance footage with date, time and location recording when you visit our office or one of our meeting locations
- Other personal data that you actively provide, in correspondence and by phone
3. Purposes of processing
Before sending the vacancy alert and during the application process, we ask you for personal data, such as name, address and place of residence. But also information about courses and diplomas, employment history and referees. We use this information for:
- To be able to send you the vacancy alert.
- To be able to screen you to prevent fraud and abuse.
- To assess your data with a view to possibly entering into an employment relationship.
- To be able to verify your information.
- Process your data if we are legally obliged to do so.
4. Legal basis for processing
The basis for processing the personal data that we use about you is based on article 6 of the General Data Protection Regulation (GDPR). The processing is necessary for the possible conclusion of the employment contract.
5. Retention periods
We do not keep personal data longer than necessary. The retention periods are as follows:
- Application data, 4 weeks after the end of the application process, unless longer agreed with permission, up to a maximum of 1 year.
- Financial administration, 7 years, in accordance with the legal fiscal retention obligation.
- Correspondence and other communications, 1 year after completion of the investigation, unless this information is part of a procedure.
6. Sharing personal data
We only share personal data when it is necessary:
- The managers and employees involved in the selection.
- With legal authorities, in case of court orders or legal obligations.
- With involved third parties, external experts or specialists for specific tasks, within confidentiality.
- With lawyers, for legal proceedings or disputes.
In each of these cases, the personal data will only be shared to the extent necessary and with due regard to the confidentiality and security of the data. Sharing always takes place within the framework of the AVG and other relevant laws and regulations. We do not provide personal data to other third parties without explicit consent from the person concerned, unless this is required by law.
7. Personal data security
We take extensive technical and organizational measures to protect your personal data against loss, unauthorized access, unlawful processing or disclosure. Some of the most important security measures we use include:
- Two-factor authentication (2FA): We use two-factor authentication to access our systems. This means that, in addition to a password, an additional verification step, such as a code on your mobile device, is also required to gain access.
- Single Sign-On (SSO): We use a Single Sign-On system, allowing employees to log in securely and efficiently with a single set of credentials for multiple applications, while their access is monitored and managed.
- Encryption (SSL): Sensitive information exchanged via our website is protected by Secure Sockets Layer (SSL) encryption. This ensures that data is transferred securely between your device and our servers.
- Data breach protocol: We have a strict data breach protocol that provides procedures for reporting, investigating and dealing with data breaches. If necessary, we will inform you and the Data Protection Authority in a timely manner about a data breach, in accordance with legal requirements.
- Password protocol: We use a strict password protocol, where passwords must meet high security requirements, such as minimum length, complexity and regular renewal. Employees only have access to the systems and data that are necessary for their work.
- Access to data limited to authorized employees: Access to personal data is strictly limited to employees who are authorized to process that data. This is regulated through authorization management and the principle of minimal access, where employees only have access to the data they need for their specific tasks.
- Regular data protection checks: We carry out regular checks and audits to ensure that our data protection measures comply with the latest security standards and that there are no vulnerabilities in our systems. This helps us to continuously ensure the confidentiality, integrity and availability of your personal data.
Through these measures, we can guarantee the security of your personal data and ensure that it does not fall into the wrong hands or is processed unlawfully.
8. Rights
You have the following rights with respect to your personal data:
- Right to access, you can request a copy of the personal data we hold about you.
- Right to rectification, you can have incorrect or incomplete data corrected.
- Right to be forgotten, in certain cases, you can ask us to delete your personal data.
- Right to restrict processing, you can ask us to restrict the processing of your data in specific situations.
- Right to object, you can object to the processing of your data based on legitimate interests.
- Right to data portability, you can request that your data be received in a structured, commonly used and machine-readable format.
You can exercise your privacy rights through us GDPR request form. To ensure that the request for inspection has been made by you, we ask you to perform an ID check.
If you are not satisfied with how your personal data is or has been processed by Haagsch Recherchebureau, you can make use of our legal obligations complaints procedure.
If your complaint has not been dealt with satisfactorily, you can contact the national supervisor, the Personal Data Authority.
