Privacy statement

Privacy statement Flexxy B.V.

Last updated: March 2026

Flexxy B.V. (“Flexxy”, “we”, “us”, “our”) respects the privacy of candidates, clients, website visitors, suppliers and other business contacts. In this privacy statement, we explain how we collect, use, store, share and otherwise process personal data in connection with our recruitment and talent advisory services and the use of our website.

We process personal data in accordance with the General Data Protection Regulation (“GDPR”) and other applicable privacy laws.

1. Who we are

Flexxy B.V. is a recruitment and talent advisory agency.

Controller
Flexxy B.V.
Haarlem, the Netherlands
Website: https://www.flexxy.nl
E-mail: info@flexxy.nl

Flexxy is the controller of the personal data described in this privacy statement.

2. To whom this privacy notice applies

This privacy notice applies to:

candidates and potential candidates;
clients and contacts of clients;
suppliers and other business contacts;
visitors to our website.

Because the way we process personal data depends on the relationship we have with you, some parts of this privacy statement are particularly relevant to candidates.

3. What personal data we may process

Depending on the situation, we may process the following categories of personal data.

Candidates and potential candidates

We may process, inter alia:

name, e-mail address, telephone number and other contact details;
CV, work experience, education, qualifications, skills and language knowledge;
professional profile information, including information on professional networks and other professionally relevant, publicly accessible sources;
salary indication, availability, location preferences and other recruitment-related preferences;
application details, interview notes, correspondence and evaluations;
reference data, where relevant and lawful;
other information that you yourself share with us in the context of a vacancy, application or career opportunity.

Clients and business contacts

We may process, inter alia:

name, business contact details and job title;
company details;
information on assignments, vacancies and recruitment needs;
correspondence and communication.

Website visitors

We may process, inter alia:

IP address;
browser, device and usage data;
cookie data;
information you enter via forms on the website.

4. How we obtain personal data

We may obtain personal data:

directly from you;
through applications you submit via our website, e-mail or other channels;
through professional networks, such as LinkedIn;
via job boards, CV databases, referrals and other recruitment channels;
via recruitment software, sourcing tools or enrichment tools that supplement professional profiles with contact or profile information;
through clients, business contacts, events or other professional interactions;
through publicly accessible professional sources.

Where we do not obtain personal data directly from you, we only process data relevant to our recruitment or business activities and to the extent permitted by law.

5. Purposes of processing

We may process personal data for the following purposes:

To identify, approach and assess candidates for current or future opportunities;
To manage recruitment and selection processes;
to match candidates with vacancies, projects or other relevant opportunities;
To introduce candidates to clients in the context of an actual recruitment assignment;
To communicate with candidates, clients and other contacts;
To maintain our candidate pool and business relationships;
to provide recruitment and talent advisory services;
To manage and improve our operations, website and systems;
to meet legal, tax, administrative or compliance obligations;
To establish, exercise or defend legal claims.

6. Grounds for processing

We process personal data on the basis of one or more of the following bases, depending on the situation.

Legitimate interest

We may process personal data when necessary for our legitimate interests, such as:

Running a recruitment and talent advisory business;
identifying and approaching professionals for relevant career opportunities;
Maintaining relationships with candidates, clients and business contacts;
managing our systems, services and website;
protecting our legal position and business interests.

When we invoke legitimate interest, we balance our interests against your rights and freedoms.

Permission

We process personal data on the basis of consent when appropriate or required, for example:

for certain cookies and similar technologies;
For longer retention of applicants' data for future opportunities after the end of an application process;
for requesting or sharing references, where consent is appropriate or required.

When consent is the basis, you can always withdraw that consent.

Execution of a contract or pre-contractual steps

We may process personal data where this is necessary to take steps at your request prior to entering into an agreement with you, or where the processing is necessary for the performance of an agreement to which you are a party.

Legal obligation

We may process personal data when necessary to comply with a legal obligation.

7. Candidates: how we use your data

Applying for an actual vacancy

When you apply for a specific vacancy, we process your personal data to assess your suitability, communicate with you, manage the application process and present your profile to our client where relevant in the context of that vacancy.

Sourced candidates

When we identify you through a professional network, job board, referral, recruitment platform, sourcing tool, publicly available professional source or other professional source, we may process limited personal data to assess whether a job opening or our services may be relevant to you.

When we obtain your personal data indirectly, we will provide you with the relevant privacy information, including the source of the data and whether it comes from publicly available sources, no later than at the time of our first contact with you or otherwise within the time period required by law.

Future opportunities and candidate network

Recruitment is not always limited to a single vacancy. If you have given your consent, we may keep your data to approach you for future vacancies, projects or assignments that may be relevant even after a completed procedure.

If we request consent for this purpose, you can withdraw it at any time.

Proposals to clients

We share candidate data with clients only when relevant in the context of a concrete recruitment assignment and when there is a valid basis for doing so. We always try to do this in a controlled and transparent manner.

8. Special personal data and sensitive information

In principle, we do not ask candidates for special personal data, such as data on health, religion, ethnic origin, political views or trade union membership, unless it is legally necessary or lawful in a specific case.

We ask candidates not to include such information in their CV or correspondence unless it is necessary and appropriate for the relevant procedure. If we do receive such data, we process it only to the extent permitted by law.

9. Provision of personal data

Providing personal data is in principle voluntary. In some cases, we need certain data to assess your application, contact you or present your profile to a client. If you do not provide these details, we may not be able to include you in a procedure, or not be able to include you fully.

10. Recipients of personal data

We may share personal data with:

clients as part of an actual recruitment assignment;
suppliers of recruitment software, CRM systems, hosting, e-mail, cloud storage and other IT services;
professional advisers, such as legal, tax, compliance or accounting advisers;
competent authorities, regulators, courts or investigative bodies when we are required to do so by law or when necessary to establish, exercise or defend legal claims;
other service providers who support us in our business operations.

We do not sell personal data to third parties.

When third parties process personal data on our behalf, we ensure that this is done on the basis of appropriate contractual agreements and security measures.

11. Security

We take appropriate technical and organisational measures to secure personal data against loss, misuse, unauthorised access, unauthorised disclosure, alteration or destruction. These measures may include access restrictions, authentication, monitoring, secure environments and encryption where appropriate.

12. Transfer outside the EEA

Personal data may be stored in or accessed from countries outside the European Economic Area. If this happens, we will provide appropriate safeguards in accordance with the AVG, for example by using an adequacy decision or appropriate contractual safeguards such as Standard Contractual Clauses.

For more information on applicable safeguards, please contact us at info@flexxy.nl.

13. Retention periods

We do not retain personal data longer than necessary for the purposes for which it was collected and processed, unless we are required by law to retain it longer.

Candidates in ongoing proceedings

If you participate in an ongoing application or recruitment procedure, we will retain your personal data during that procedure and for a limited period thereafter for administration, evaluation, follow-up, internal recording and dealing with any queries or disputes.

Rejected applicants

If you have applied for a specific vacancy and the procedure has been completed without recruitment or placement, we will in principle delete or anonymise your personal data no later than 4 weeks after the end of the proceedings, unless we have another valid basis for keeping them longer.

Saving for future opportunities

If you have given us your consent, we may keep your data for future vacancies or assignments. In that case, we will keep your data for a maximum of 1 year after the end of the relevant application process or after giving your consent, unless you withdraw your consent earlier.

Sourced candidates without an application

Where we have obtained your data indirectly in the context of sourcing and no application process follows, we will retain limited professional contact and profile data for no longer than necessary for the purpose for which we have collected it, and in principle a maximum of 12 months after our last meaningful contact moment, unless a shorter retention period is appropriate or you object earlier.

Clients, suppliers and business contacts

We retain personal data of clients, suppliers and other business contacts for as long as necessary for the relevant relationship and thereafter for as long as necessary for legal, tax, administrative or evidence purposes.

14. Automated decision-making

We do not make decisions about individuals based solely on automated processing that produce legal effects or otherwise significantly affect individuals.

15. Your rights

To the extent provided for by law, you have the right to:

request access to your personal data;
have incorrect or incomplete personal data corrected;
personal data to be deleted;
have the processing restricted;
object to processing based on legitimate interest;
receive your personal data in a structured, common and machine-readable form, as appropriate;
withdraw your consent when consent is the basis.

When we process your personal data on the basis of legitimate interest, you have the right to object. When we use your personal data for direct marketing, you always have the right to object.

You also have the right to file a complaint with the Personal Data Authority.

16. Contact

For questions about this privacy statement, the way we process personal data or to exercise your rights, please contact:

Flexxy B.V.
Haarlem, the Netherlands
E-mail: info@flexxy.nl

17. Amendments

We may change this privacy notice from time to time. The most up-to-date version is always posted on our website.

Flexxy Recruitment Solutions

Privacy statement