Privacy statement

Are you a candidate, registered as a jobseeker or registered as an employer with Winsearch? Then we have personal data about you. For example, to send clients an invoice. But also when you visit Winsearch.nl or make a contact request through this website, personal data is processed.

Profile data at Winsearch

When you fill in a form or leave data on the Winsearch website, for example when applying for a job, we link your surfing behaviour to this data.

For candidates, we collect data required for registration and further processing during the term of an employment contract or placement process. This includes:

• Name and contact details
• Profile photo
• Age
• Education and work experience

Visitor profile on the website

When you visit Winsearch's website, you build a (anonymous) visitor profile. This profile contains, for example:

• The device you use to visit the website (computer, mobile or tablet)
• Your browser and operating system
• Your privacy settings

This information ensures that the website is displayed optimally on your device and that we only process your data for the purposes for which you have given your consent.

Special personal data

Winsearch does not in principle process any special personal data, unless this is necessary for the purposes described. In some cases, such as registration, it may be necessary to process a copy of your identity document. If special personal data are processed, it is only in the context of:

• Occupational health assessment
• Assessment of fitness for work and employability
• Medical diagnosis and healthcare provision

This data is always processed by an independent occupational health and safety service bound by confidentiality.

Website behaviour (anonymous)

We analyse anonymous data about website usage, such as:

• Which pages are visited
• Where visitors click
• How visitors found our website (e.g. via Google or directly).

This data helps us to continuously improve the website. Without this information, we miss important insights, which can make optimisations take longer. Anonymous website data is processed via Google Analytics.

Website behaviour (not anonymous)

In addition to anonymous data, we also use data on browsing behaviour and demographic characteristics (as collected by Google) for further analysis. This enables us to continuously improve the application and matching process and better tailor it to the needs of our users.

Internal use at Winsearch

The personal data collected and processed by Winsearch can only be accessed by employees of Winsearch and any sister or subsidiary companies if this is necessary for the performance of their duties.

Sharing data with clients

Winsearch shares your personal data with clients where you are employed or where you could potentially start working. This is done exclusively in the context of the provision of services and job placement.

Sharing data with government institutions

Sometimes Winsearch is legally obliged to share personal data with government bodies, such as:

• The Tax Office
• The UWV
• Control bodies for collective labour agreement compliance (such as SNA, SNCU, SFU).

In addition, personal data may occasionally be shared with external parties on the basis of a legal obligation or in the event of legal disputes.

Sharing data with third parties

Winsearch cooperates with external service providers, for example for the development and maintenance of Winsearch.nl. Third parties that process personal data on behalf of Winsearch are carefully selected and must comply with applicable privacy legislation.

Winsearch has concluded processing agreements with these parties - the so-called processors. These stipulate that they take appropriate measures to ensure the protection of your personal data and only process them in accordance with laws and regulations.

Place of processing

Winsearch processes personal data within the Netherlands or within the European Union. If data is transferred to countries outside the EU, this is only done to countries with a similar level of protection as the EU.

Retention period of personal data

Winsearch retains your personal data in accordance with legal retention periods. How long this data is kept depends on your activities:

• Have you worked through Winsearch? Then certain data must be kept for 2, 5 or even 7 years due to tax and administrative obligations.
• Did you only visit the website or create a profile? Then your personal data will be kept for a maximum of 1 year.

Legal compliance and supervision

Winsearch processes personal data in accordance with the General Data Protection Regulation (AVG) and other relevant laws and regulations. We apply the following principles:

• Protection of your privacy: We take measures to protect your data from unlawful processing, loss or misuse.
• Limited processing: Personal data is only used for the purpose for which it was collected and is not processed further without reason.
• Transparency: We inform you clearly about how we process your data and what rights you have.

Security measures

Winsearch takes both technical and organisational security measures to protect personal data against loss, theft or unlawful processing. These measures are tailored to:

• The latest technological developments
• The costs of implementation
• The nature, scope and context of the data processing
• The risks to your rights and freedoms.

In addition, we limit the collection and further processing of personal data to what is strictly necessary.

Storage location of personal data

Personal data is securely stored in digital (personnel and payroll) administration systems on secure servers. These systems are hosted by external processors that comply with strict security standards, such as NEN, SNF, ABU and VCU.

Security incidents and data breaches

Despite our security measures, a security incident may occur in which personal data is compromised. In that case:

• The incident is documented, including the cause, consequences and measures taken.
• The Personal Data Authority is informed if there is an increased risk to your rights and freedoms.
• Does Winsearch have a data breach procedure to deal with incidents quickly and appropriately.

Register of processing activities

Winsearch maintains a processing register recording:

• What categories of personal data are processed
• The purpose and basis of the processing
• The data subjects and recipients of the data
• The retention periods and possible transfer outside the EU
• The technical and organisational security measures
• The contact details of Winsearch and the Data Protection Officer.