At Haagsch Recherchebureau, we attach great importance to protecting your privacy. In this privacy statement, we explain what personal data we collect, how we use, store and protect it.
1. Controller
Haagsch Recherchebureau, with its registered office at Alexanderveld 5, 2585 DB The Hague, registered with the Chamber of Commerce under registration number 74655736, is the controller within the meaning of Article 4 (7) GDPR.
We respect your privacy and handle your personal data carefully and confidentially. We comply with applicable privacy laws, including the General Data Protection Regulation. Do you have questions about this? Feel free to contact our Data Protection Officer (DPO).
Contact details:
Haagsch Recherchebureau
Alexanderveld 5
2585 DB The Hague
070 20 42 7 42
fg@haagschrecherchebureau.nl
FG number: FG0017215
2. Personal Data
We only process personal data that is necessary to assess your suitability for a position with us. Depending on the procedure, this may include:
- identification and contact details (name, address, email, telephone);
- information about education, work experience, references;
- any interview reports or test results;
- security footage during a physical visit;
- technical data (IP address, browser type) only when using our website.
We process no special personal data (such as data about health, criminal history or biometrics) unless this is strictly necessary and based on a legal basis (Articles 9 and 10 GDPR).
3. Purposes of processing
We process your data exclusively for the following purposes:
- processing your application or open application;
- communication about the progress of the procedure;
- eligibility assessment and reference checks;
- compliance with legal obligations (such as identification requirements or reporting obligations).
We will not use your data for other purposes without your consent (Article 5 (1) (b) GDPR).
4. Legal basis for processing
The processing of personal data is based on Article 6 (1) (b) GDPR (necessary for taking pre-contractual measures) and, where applicable, Article 6 (1) (c) GDPR (legal obligation). When we ask for your consent to keep data longer or use it for future vacancies, we base this on Article 6 (1) (a) GDPR.
5. Retention periods
We keep application data no later than four weeks after completion of the application process. With your explicit consent, we will keep this data for a maximum of one year for future vacancies (art. 5 (1) (e) GDPR) .At the end of the period, the data will be securely deleted or anonymized.
6. Sharing personal data
We only share your personal data with:
- internal staff involved in the selection;
- external service providers (such as assessment agencies) that act as processor within the meaning of Art. 4 (8) GDPR, with whom a processing agreement has been concluded (Art. 28 GDPR);
- competent authorities if we are legally obliged to do so.
We do not provide data to third parties outside the EEA without appropriate safeguards (art. 44—46 GDPR).
7. Personal data security
We take appropriate technical and organizational measures (art. 32 GDPR) to protect your personal data. We regularly test these measures for effectiveness. Some of the most important security measures we use include:
- Two-factor authentication (2FA): We use two-factor authentication to access our systems. This means that, in addition to a password, an additional verification step, such as a code on your mobile device, is also required to gain access.
- Single Sign-On (SSO): We use a Single Sign-On system, allowing employees to log in securely and efficiently with a single set of credentials for multiple applications, while their access is monitored and managed.
- Encryption (SSL): Sensitive information exchanged via our website is protected by Secure Sockets Layer (SSL) encryption. This ensures that data is transferred securely between your device and our servers.
- Data breach protocol: We have a strict data breach protocol that provides procedures for reporting, investigating and dealing with data breaches. If necessary, we will inform you and the Data Protection Authority in good time about a data breach, in accordance with legal requirements.
- Password protocol: We use a strict password protocol, where passwords must meet high security requirements, such as minimum length, complexity and regular renewal. Employees only have access to the systems and data that are necessary for their work.
- Access to data limited to authorized employees: Access to personal data is strictly limited to employees who are authorized to process that data. This is regulated through authorization management and the principle of minimal access, where employees only have access to the data they need for their specific tasks.
- Regular data protection checks: We carry out regular checks and audits to ensure that our data protection measures comply with the latest security standards and that there are no vulnerabilities in our systems. This helps us to continuously ensure the confidentiality, integrity and availability of your personal data.
Through these measures, we can guarantee the security of your personal data and ensure that it does not fall into the wrong hands or is processed unlawfully.
8. Rights
You have the following rights with respect to your personal data:
- Right to access, you can request a copy of the personal data we hold about you.
- Right to rectification, you can have incorrect or incomplete data corrected.
- Right to be forgotten, in certain cases, you can ask us to delete your personal data.
- Right to restrict processing, you can ask us to restrict the processing of your data in specific situations.
- Right to object, you can object to the processing of your data based on legitimate interests.
- Right to data portability, you can request that your data be received in a structured, commonly used and machine-readable format.
You can exercise your privacy rights through us AVG request form. To ensure that the request for inspection has been made by you, we ask you to perform an ID check.
If you are not satisfied with how your personal data is or has been processed by Haagsch Recherchebureau, you can make use of our legal obligations complaints procedure.
If your complaint has not been dealt with satisfactorily, you can contact the national supervisor, the Personal Data Authority.
We reserve the right to amend this privacy statement. You can always find the most current version on our website.
