DIQQ B.V.

Privacy Statement

Introduction and scope

This is the privacy policy of DIQQ B.V. (DIQQ) and the organizations directly associated with it. We are a staffing agency specializing in mediating professionals. In addition, we help our clients source suitable candidates for their IT vacancies.

This privacy policy applies to all persons who have contact with DIQQ, except its employees. More specifically, this means that this privacy policy applies to the following:

Candidates, clients, visitors, job applicants, principals, contractors, and other contacts of DIQQ;
Visitors to the website of https://diqq.com/ or a domain name associated with this domain name.

From now on, these persons are referred to collectively by 'you' and 'your.' The words' we', 'us,' and 'our' refer to DIQQ. Chapter 1 defines several terms. Those terms are capitalized in the privacy policy.

It is important to us that your personal data is handled with all due care. We comply with all statutory rules, including the General Data Protection Regulation (GDPR), and exercise due care to secure your personal data adequately.

We ask you to review this privacy policy carefully. This privacy policy was most recently amended in February 2023.

‍

1. Definitions
2. The personal data pertaining to you, which we can process
3. Why do we process your personal data?
4. Grounds on which we process personal data
5. Sharing personal data with third parties
6. Sharing personal data outside the European Economic Area
7. Security
8. Your rights
9. Minors on DIQQ's website
10. Cookies and similar applications
11. Contact details/questions/complaints
12. Retention periods
13. Amendments and applicable law

DEFINITIONS

Data subject: A person whose personal data is processed.

Third parties: Natural or legal persons who are not data subjects or part of DIQQ, such as natural or legal persons with which DIQQ shares personal data pursuant to a contract. These third parties might be processors or co-controllers.

Personal data: All data related to an identified or identifiable person.

Processing: Everything that can be done with personal data, such as collection, recording, storage, alteration, retrieval, use, dissemination, and destruction.

Controller: The party who processes a data subject's data for a particular purpose. In this privacy policy, the controller is DIQQ.

‍

The personal data pertaining to you, which we can process

Below, we explain which of your personal data DIQQ can process.

Data you have provided yourself, such as:

Your contact details (name, address, city/town of residence, email address, telephone number, and function title);
Your gender and date of birth;
Data collected from you in a telephone conversation;
Data collected from an email from you;
Payment details;
Data from your CV or about your employment history.

Data we have received via our websites, newsletters, and emails:

Information about the device you used to visit our website;

Your surfing behavior on the website, such as:
Which data/which of our web pages you viewed;
How you navigate the website;
Whether you open a newsletter or email and which parts of it you click on;
The dates and times of your visit to the website;
The operating system you are using;
Your browser type and IP address;
The internet address of the website to which the link is made;
The geolocation;
The data you downloaded from the website.

Data we have received from other sources, such as:

Public sources available and made public by you, such as on social media and business websites;
The Trade Register of the Chamber of Commerce and the Land Registry.

‍

Why do we process your personal data?

We use your personal data for the following purposes:

To verify your identity;
To improve our services (and the safety of those services), including by conducting checks;
To inform you about news and developments at DIQQ and DIQQ'S products and services;
To enable us to evaluate, study, and develop our services;
To contact you for newsletters if you have signed up for them;
For internal quality purposes;
To manage, secure, adjust, and improve our websites;
For marketing/commercial purposes;
For recruitment and selection;
To comply with a statutory obligation imposed on DIQQ;
To be able to contact you and respond to any questions you have submitted;
To deal with your requests for information and to settle complaints;
To prevent theft, misuse, vandalism, or other criminal conduct;
To enable us to conduct satisfaction surveys.

‍

Grounds on which we process personal data

To use personal data, we must have grounds based on the GDPR.

We use the following grounds:

You have given DIQQ your explicit consent;
The use is necessary for performing or entering a contract with you;
The use is needed to comply with a statutory obligation;
In emergencies: the use is required to protect your vital interests or those of another person;

We have a legitimate interest in the use unless this interest is outweighed by your or a third party's interest in privacy.

DIQQ can invoke the following legitimate interests:

The protection of your safety;
The protection of the safety of our clients and/or others and the security of our buildings and property;
Quality and training;

The advancement of IT management and the improvement of security;
The analysis and improvement of the services and content of our websites;
The supply, improvement, adjustment, support, research, and analysis of our services;
The advancement of the quality and security of our services;
Communication with you and other contacts of DIQQ;

The prevention and combating of fraud and unauthorized use.
The prevention and combating of violations against our general terms and conditions, policy rules, or other harmful or illegal activities.

‍

Sharing personal data with third parties

‍We share your personal data with third parties only if necessary because those third parties perform work at the instruction of DIQQ and only for the purposes described in this privacy policy. If a third party is engaged, DIQQ will ensure that this third party maintains the same level of security and confidentiality as we do.

DIQQ may engage contractors from the following categories:

Organizations for which DIQQ provides recruitment services;
IT management;
Website management;
Website hosting.

DIQQ remains responsible for the processing of your personal data. DIQQ enters contracts with third parties to ensure your personal data is properly secured.

DIQQ may, as the result of a merger, acquisition, or sale of all or part of its organization, share your personal data with a third party, such as a potential buyer or seller. Naturally, we will inform you of this via email and/or a visible notification on our website, and we will notify you of your rights in such a situation.

‍

Sharing personal data outside the European Economic Area

It may sometimes be necessary to transfer your personal data to third parties established outside the European Economic Area (EEA). In accordance with the GDPR, DIQQ will only transfer your personal data to countries outside the EEA if:

1. The European Commission has decided that the third country offers an adequate level of protection; or

2. Appropriate safeguards are offered, you have enforceable rights, and you have effective legal remedies; or

3. The transfer is necessary for the performance of your contract with DIQQ; or

4. You have expressly consented to the transfer after being informed of the risks that such transfer entails; or

5. The transfer is necessary for important reasons of public interest; or

6. The transfer is occasional and required by the compelling interests of DIQQ, and we implemented appropriate safeguards and have informed the Dutch Data Protection Authority of these.

In situations where DIQQ transfers your personal data outside the EEA, we ensure that your personal data remains adequately protected.

‍

Security

At DIQQ, we take your privacy seriously and the security of your personal data. Strict safety measures are crucial, especially within the recruitment industry. We make it extra hard for malicious people to access our systems.

We have taken the following measures, among other things:

Access to personal data is restricted to authorized people, whereby this number is kept as low as possible;
All employees of DIQQ have signed a confidentiality agreement whereby they undertake to observe complete confidentiality regarding all information (including personal data);
The electronic transmission of personal data always takes place via a secure connection;
The website is secured via HTTPS;
We ensure that your personal data is only shared with third parties if we have agreed on appropriate security measures with these third parties.

‍

Your rights

If your personal data is processed, you have several rights, which you can find below. You may exercise these rights by submitting your request in writing to DIQQ or by sending an email to info@diqq.nl. DIQQ verifies your identity before they can meet your request.

DIQQ will respond to your request as soon as possible, by one month at the latest. DIQQ will only charge you for processing your aforementioned requests if your requests are excessive.

1. Access to personal data
You can ask us any time to indicate which (categories of) your personal data DIQQ processes, for which purposes, from which source the data comes, and which retention periods are applied.

‍2. Changing personal data
In addition, you can contact us at any time to complete or correct your personal data. In the unlikely event that DIQQ has processed and/or provided incorrect personal data about you, DIQQ will rectify this immediately. If DIQQ has changed your personal data, DIQQ will notify you accordingly.

‍3. Minimizing the processing of your personal data
If you disagree with the content of the personal data about you stored by DIQQ, you can submit a request to minimize the processing of your personal data temporarily.

‍4. Withdrawing consent
You can also withdraw the consent you have given for the processing of your personal data. Upon receipt of your letter or email, DIQQ will immediately cease processing your personal data for which you have given your consent. However, withdrawing your consent will not affect the processing operations that have already taken place.

5. Right to transfer personal data (right to data portability)
You can retrieve the personal data about you stored by DIQQ in a structured, commonly used, and machine-readable format. After receiving your personal data, you are free to transfer this information.

6. Right to be forgotten
If you no longer wish to make use of DIQQ's services, you may submit a request for the deletion of all your personal data.

7. Right to object
You have the right to object to processing your personal data, which DIQQ bases on the grounds of a legitimate interest of DIQQ or a third party or 'performance of a task carried out in the public interest.' If DIQQ bases itself on these grounds, DIQQ will weigh its interests against your privacy. The right to object entitles you to require DIQQ to repeat this weighing of interests.

8. Right to lodge a complaint/pursue a judicial remedy
We make efforts to join you in working to find a fair solution if you have a complaint or problem relating to our use of your personal data. However, suppose your position is that we cannot assist you with your complaint or concern. In that case, you can also lodge a complaint with the Dutch Data Protection Authority or institute judicial proceedings. You will find the contact details of the Dutch Data Protection Authority (Nederlandse Autoriteit Persoonsgegevens) by clicking here.

‍

Minors on DIQQ's website

Although visitors of all ages might visit our website, we do not collect personal data from children under 16 years of age without the consent of their parents/guardians. This means that if you are 16 years old or younger, you may only use our website under the supervision of your parent/guardian.

Cookies and similar applications

‍DIQQ uses cookies and similar applications on its website. Cookies are small pieces of information that are stored on your computer. We use cookies to provide services and ensure that our services function correctly. This enables DIQQ to see how its visitors use the website. In this way, DIQQ can customize its website according to user preferences. These small pieces will be recognized on a subsequent visit to DIQQ's website.

Contact details/questions/complaints

Our contact details are:

DIQQ B.V.

Rokin 46-1

1012KV Amsterdam

info@diqq.nl

+31 (0) 20 261 9182

‍

Retention periods

DIQQ only retains personal data for as long as is necessary for the processing. DIQQ maintains your personal data as long we consider this essential to provide you with services, enable you to use our website, comply with applicable laws, resolve disputes with parties, and for other purposes that allow us to conduct our commercial activities. DIQQ, in any case, retains your personal data during the period in which you are party to a contract with DIQQ. If you are a client of DIQQ, we will keep the company details and contact details stored on our systems.

After ending the client agreement, we might keep these details in our systems, for example, when a contact is linked to an agreement, invoice, or any other official document. We store data on (potential) candidates for three years. After this period, we will ask the (potential) candidate for permission to keep their personal data for another three years. Potential candidates can access their personal data that is stored in our systems. If a potential candidate no longer wishes to be approached by DIQQ, they can file a request for the deletion of their personal data.

If you have applied for any of our internal vacancies at DIQQ but are not invited for a job interview, or when we unexpectedly cannot agree on your contract, we will keep your personal data stored for four weeks. After this period, we will ask you for permission to store the personal data for three years. We do this to approach you again in the future, for example, when a new vacancy comes up that matches your profile.

‍

Amendments and applicable law

‍For example, we may modify our privacy policy in the future because legislation has been altered, we have extended our services, or because we believe our current privacy policy should be formulated differently. You will find any possible changes on this page.

None of the provisions of this privacy policy are intended to create any obligation or contract between you and DIQQ. Dutch law will apply to the provisions of this privacy policy and all disputes arising from there.