Privacy Statement

1. Who are we

Collabridge B.V.
Address: Draaiweg 133
Postal Code and City: 3515 EL Utrecht
CoC-number: 98460668
E-mail: info@collabridge.nl

1. Privacy Policy Collabridge B.V.

(“Collabridge”) respects the privacy of all candidates, clients, suppliers, and visitors to our website. We process personal data strictly in accordance with the General Data Protection Regulation (GDPR).

Collabridge acts as the data controller for the processing of personal data of candidates and business contacts. As soon as personal data is provided to clients, they become independent data controllers. General agreements are made with each client regarding the handling of personal data, retention periods, and security. These agreements form an integral part of the cooperation agreement between the parties.

2. What personal data we process

Collabridge processes personal data necessary for recruitment, relationship management, and the performance of agreements.

We may process the following data of candidates:

Full name
Place of residence
Telephone number
Email address
Availability (start date and number of hours per week)
Availability for interviews
Ongoing application procedures
Current job title and employer (optional)
Salary indication (including holiday allowance)
Reason for availability
Motivation for the role
Relevant experience relating to the vacancy
Language proficiency
Education and certificates
References (optional)
Any specific preferences (e.g. willingness to travel or preferred location)
Link to or attachment of the CV
Technical and website data such as IP address, click behaviour, and cookies (see Cookie Policy)

We also receive personal data via partner recruiters or suppliers. These parties are responsible for correctly informing candidates and obtaining valid consent to share personal data with Collabridge. When uploading or submitting candidate data, Collabridge may assume that the recruiter has obtained this consent lawfully.

Collabridge does not contact candidates directly. If a suitable vacancy becomes available within the retention period, all communication goes through the recruiter who submitted the candidate.

We do not process special categories of personal data (such as data concerning health, ethnicity, or religious beliefs), unless strictly necessary and explicit consent has been provided by the data subject.

3. Purposes and legal bases

We process personal data solely for specific, legitimate purposes:

Recruitment, selection, and placement (legitimate interest and/or consent)
Performance of agreements with clients, suppliers, and recruiters
Administration and relationship management (legitimate interest)
Compliance with legal obligations
Communication and marketing based on consent or legitimate interest (opt-out available at all times)
Analysis and improvement of services and website use

Collabridge processes data only for the aforementioned purposes and never for incompatible purposes.

4. Sharing personal data

We share personal data only when necessary:

Clients – Only after explicit consent from the candidate
Recruiters and suppliers – Only for the performance of cooperation agreements
IT and software providers – Always with a valid Data Processing Agreement (DPA)
Government authorities – Only when required by law
Transfers outside the EEA – Collabridge exclusively uses European suppliers. Data is not stored or processed outside the European Economic Area.

5. Security

Collabridge takes appropriate technical and organisational measures to protect personal data against loss or unlawful processing.

Our security measures include:

Access control and authorisation policies
Restricting access to authorised employees on a business need-to-know basis
Logging access to personal data
Strong passwords and two-factor authentication
Encrypted storage and transmission of data
Regular updates and system audits
Pseudonymisation of candidate data during internal processing

Collabridge maintains an internal data breach protocol. In the event of a security incident, an assessment is conducted to determine whether notification to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) and/or data subjects is required.

6. Retention periods

Collabridge does not retain personal data longer than necessary for the purposes for which it was collected.

Candidate data without a match: maximum of 1 year, even where the candidate has granted consent. The recruiter is responsible for obtaining this consent. Upon receiving the data, Collabridge may assume that this consent has been validly obtained.
Candidate data upon placement (match): for as long as necessary to perform the agreement and comply with legal obligations.
Client and supplier data: for as long as legally required (e.g. 7 years for invoices and financial records).

After the retention period expires, personal data is securely deleted or anonymised.

7. Your rights

You can exercise your privacy rights by contacting info@collabridge.nl. We will respond to any request within one month.

You have the right to:

Access your data
Rectify inaccurate data
Erasure of data (“right to be forgotten”)
Restrict processing
Data portability
Object to processing

To prevent misuse, Collabridge may request proof of identity before processing your request.

8. Automated decision-making

Collabridge does not use automated decision-making or profiling that produces legal effects for data subjects.

9. Complaints and amendments

If you have a complaint about how your personal data is processed, please contact us via info@collabridge.nl. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via www.autoriteitpersoonsgegevens.nl.

Collabridge reserves the right to amend this privacy statement. The current version can always be found on our website.

10. Cookie Policy

For information regarding the use of cookies, please refer to our separate Cookie Policy available on our website.

Version: 23 October 2025