Privacy and Cookie Policy
Toppr B.V.
Effective date: January 1st, 2025
Your privacy is of great importance to Toppr B.V. We comply with all relevant privacy laws and regulations, including the General Data Protection Regulation (GDPR). This means that we:
- Clearly state our purposes before processing your personal data, as explained in this privacy statement;
- Store as little personal data as possible and only retain the data necessary for our purposes;
- Explicitly request consent before processing your personal data, where required;
- Take necessary security measures to protect your personal data and require the same from third parties that process data on our behalf;
- Respect your rights, such as your right to access, correct, or delete your personal data.
Your data is safe with us, and we will always handle it responsibly. This privacy statement explains what we do with the personal data we collect about you.
If you have any questions or want to know exactly what data we hold about you, please contact Toppr B.V.
Legal Grounds for Processing
Under the GDPR, every processing activity must be based on lawful ground. Our processing activities are based on the following grounds:
- Consent: For example, for sending newsletters and storing application data for longer than four weeks.
- Performance of a contract: Such as facilitating recruitment and placement between job seekers and employers.
- Legal obligation: For example, compliance with tax laws and other statutory requirements.
- Legitimate interest: Such as improving our services using analytical cookies, while always balancing our interests against your privacy rights.
Job Applications
When you apply for a vacancy through our website, your data is stored in our Recruitment & Selection system. This includes:
- Name, address, email, and other contact details
- CV, educational background, internships, and work experience
- Cover letter, reference details, or certificates
During the online application process, we will ask for your explicit consent to store your data for up to 12 months (opt-in). After this period, your data is automatically deleted. If you do not provide consent, we will store your data for a maximum of 4 weeks.
Your application data will only be used for the recruitment process and never for other purposes.
Newsletters
We offer a newsletter to which you can subscribe with your explicit consent. The newsletter contains news, tips, and updates about our services.
- Personal data collected: Email address
- Legal basis: Consent
- Retention period: Until you unsubscribe
The newsletter is sent twice a year via email. You can unsubscribe at any time by clicking the unsubscribe link in the email.
Contact Form
You can use our contact form to ask us questions or make requests. We collect:
- Phone number
- Email address
These details are necessary to fulfil the contract with you. We retain this information until we are sure you are satisfied with our response.
Sharing with Third Parties
We do not share your personal data with other companies or organizations unless it is necessary for the services described above, or if we are legally required to do so (e.g., if law enforcement requests data as part of a criminal investigation).
Statistics
We keep anonymous statistics on the use of our platform to improve our services.
Cookies
Our website uses cookies. Cookies are small files that store information to improve your browsing experience.
You can disable cookies via your browser settings, but this may affect the functionality of our website.
We have agreements with third parties that place cookies, but we do not have full control over what they do with the collected data. Please review their privacy policies for more details.
Google Analytics
We use Google Analytics to track visitor behaviour on our platform. We have not permitted Google to use this data for other Google services, and we do not anonymise IP addresses.
Data Security
Protecting your personal data is of great importance to us. We implement appropriate security measures to prevent unauthorised access, loss, or alteration of your data.
We continuously monitor our security measures and update them when necessary.
Data Breach Procedure
We take personal data security very seriously. If a data breach occurs, we follow a strict reporting procedure:
- We assess the severity of the breach.
- If the breach poses a risk to your rights, we notify the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) within 72 hours.
- If the breach poses a high risk to your privacy, we also inform you directly.
- We document all breaches and the actions taken to resolve them.
Changes to This Privacy Policy
As our company evolves, this privacy statement may need updates. Please check the date at the top and revisit this policy periodically.
We will make reasonable efforts to notify you of significant changes.
Your Rights
You have the right to:
✔ Receive an explanation about what personal data we hold and how we use it.
✔ Access the exact personal data we store about you.
✔ Correct any errors in your personal data.
✔ Request deletion of outdated personal data.
✔ Transfer your data to another organization.
✔ Withdraw your consent at any time.
✔ Restrict processing of your personal data.
✔ Object to certain types of processing.
To exercise these rights, please clearly state your identity so we can verify your request.
We aim to respond within one month. If an extension is necessary due to complexity, we will inform you in advance.
Complaints
If you have a complaint about how we handle your data, please contact us at krijn@toppr.nl.
We take all complaints seriously and will work with you to resolve the issue.
If you are not satisfied with our response, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Contact Details
📍 Toppr B.V.
Blankenstraat 364 B,
1018 SK Amsterdam
✉ Email: krijn@toppr.nl
📞 Phone: +31 20 6161350