PRIVACY STATEMENT

AllTech People B.V., registered with the trade register under number 94421137 (hereinafterreferred to as 'AllTech') has a strict privacy policy. We take privacy very seriously and treatpersonal information with care and confidentiality. This privacy statement indicates how wedeal with the data of our jobseekers, candidates, employees and (employed) temporaryagency workers and business clients and relations.

Personal data is any data that is characteristic of an individual (also called data subject) orthat can be traced back to an individual (natural person). There are many types of personaldata. Think for example of name and address details, but also a telephone number or details about race, religion or health.

AllTech is the data controller within the meaning of the General Data Protection Regulation(hereinafter referred to as the "AVG"). In this context, AllTech is responsible for the processing of personal data and determines how and for what purpose these personal dataare processed.

In the following, we explain in detail which personal data we process, for what purpose, forhow long and with whom we share personal data. It also states what rights those involvedhave and how they can exercise them.

WHAT PERSONAL DATA DO WE PROCESS AND FOR HOW LONG?

We process personal data of the following persons:

Applicants and candidates;
Employees and (employed) temporary agency workers;
Business relations, such as suppliers and clients (insofar as they are natural persons);
Contacts with business partners such as suppliers and clients;

We only process personal data that is necessary for the purposes described here. Westrive for minimal data processing, which means that where possible we process less or nopersonal data and keep the personal data no longer than necessary for the purposes ofdata processing listed below and in accordance with the legal retention periods. The personal data will be destroyed after the expiry of the relevant retention periods.

We process at least the following personal data of the (natural) persons listed below:

JOB SEEKERS AND CANDIDATES

Name and address details, e-mail address, telephone number and other contactdetails.
Birth data, age, gender.
Copy of identity document;
Curriculum vitae (CV), information on education, internships and work experience.
Data on training and education and/or tests that the candidate has attended or takenthrough us.
Availability and leave data.
Information that is or may be important in assessing the suitability of the candidate,for example references and testimonials and information concerning workexperience.
Data on which the candidate presents himself (video, photo).

We delete this data if the job-seeker or candidate indicates this himself or herself or if wedo not make use of the offer. Only with the consent of the person concerned do we keepthe data for a longer period, up to two years.

EMPLOYEES AND (EMPLOYED) TEMPORARY AGENCY WORKERS

Name and address details, e-mail address, telephone number, bank account numberand other contact details.
Birth data, age, gender.
Curriculum vitae (CV), information on education, internships and work experience
Data on training and education and/or tests that the person concerned has attendedor taken through us.
Availability and leave data.
Nationality, BSN, copy of identity document, residence and work permit if applicable.
Data in the context of a (necessary) screening
Data on the nature and content of previous employment relationships and on theirtermination.
Data related to personnel, salary and absence registration.
Data on which the person presents himself (video, photo).

If we have to retain this data due to a legal obligation, we will destroy the data after theexpiry of the legal retention period. All other data will be deleted after two years, with the exception of visual material (video, photos) which will be deleted at the first request of theperson concerned.

(CONTACT) PERSONS OF CLIENTS AND OTHER BUSINESS RELATIONS

Name and address details, e-mail address, telephone number and other contact details.

We are obliged to keep data relevant to our administration for the legally prescribed retention periods. We will delete all other personal data no later than two years after thebusiness relationship has ended or after the contact person at the business relationshiphas left.

WHAT DO WE USE THE PERSONAL DATA FOR?

We use the aforementioned personal data primarily to comply with our legal obligationsand to perform our services to the best of our ability. These services mainly consist ofmediating between jobseekers and clients and employing temporary employees with clients. In addition, we use the personal data for the reasons stated below.

PERSONAL DATA OF JOB SEEKERS AND CANDIDATES

Assessment of suitability and availability of the persons concerned in connectionwith intermediary activities for permanent or temporary work or an assignment,whereby test results can also be used.

PERSONAL DATA OF EMPLOYEES AND (EMPLOYED) TEMPORARY AGENCY WORKERS

Registration and processing of hours worked in our payroll system.
Entering into and maintaining an employee or staff/employee relationship with theperson concerned and carrying out the relevant administration for this purpose, including the payment of wages.
Fulfilment of reintegration obligations and fulfilment of an obligation (imposed by thegovernment) to help people with a large(er) distance to the labour market find work.
Processing of personal data for screening purposes at the request of our clients.
Promoting personal development and employability of those involved, includingtraining, education and testing.
Application for staff-related subsidies.

PERSONAL DATA IN CONNECTION WITH BUSINESS RELATIONS

Sending offers and/or informing business partners about our services following arequest to do so.
Establishing the agreement with the client, maintaining and complying with thatagreement with the client and invoicing.
Recording the agreement with suppliers and consultants, maintaining and complying with that agreement with suppliers and consultants.

OTHER REASONS FOR PROCESSING PERSONAL DATA

Compliance with laws and regulations, including identification, labour laws, tax andsocial security laws and fraud prevention. This also includes the necessary servicesprovided to us by parties with specific expertise, such as tax advisers, accountants,legal advisers and quality promotion advisers.
Approaching data subjects for commercial offers, newsletters and promotional activities of AllTech that may be of interest to them, only if they have signed up forthem.
For the purpose of communication.
Quality purposes such as certification.

ON WHAT BASIS DO WE PROCESS PERSONAL DATA?

In order to be able to process personal data, there must be a basis. We process personaldata on the following bases:

JOB SEEKERS AND CANDIDATES

Permission granted to us;

EMPLOYEES AND (EMPLOYED) TEMPORARY AGENCY WORKERS

Execution of an agreement with the person concerned;
Compliance with legal obligations (including tax regulations).
Data subject's consent to sending marketing communications and use of images.
Justified interest, including in assessing temporary employees' integrity, suitabilityand reliability (screening), to develop quality systems and to conduct audits.

(CONTACT PERSONS OF) CLIENTS AND OTHER BUSINESS RELATIONS

Execution of an agreement with the person concerned;
Compliance with legal obligations (including tax regulations).
Consent of the person concerned.

GENERAL

There may be other situations in which we process personal data on the basis of a legitimate interest of AllTech (e.g. if this is necessary for the performance of our daily business).

If we process your personal data on the basis of a legal or contractual obligation or in orderto execute a contract with you, it is important that you provide us with the requested data.If you do not do so, we will not be able to fulfil the agreement with you or you may be inbreach of it yourself.

If we process your personal data on the basis of your consent, you have the right to withdraw that consent at any time. From that moment on, we will immediately stop processingthat personal data.

SHARING OF PERSONAL DATA

We share the collected personal data with third parties only in support of the aforementioned purposes or if required by law. To whom which personal data is provided dependson the situation.

JOB SEEKERS AND CANDIDATES

We only share personal data with potential clients or supervisory authorities if this followsfrom the nature of our relationship with the data subject and/or if we are legally permittedto share the personal data with them.

EMPLOYEES AND (EMPLOYED) TEMPORARY AGENCY WORKERS

We are obliged to provide personal data to competent authorities and bodies, such as:

Tax authorities, social insurance agencies and the labour inspectorate;
Occupational health and safety service;
Consultants and other providers of expert services, whom we engage in connectionwith the proper fulfilment of our legal obligations;
Institutions charged with monitoring compliance with collective labour agreementobligations, such as Stichting Naleving CAO voor Uitzendkrachten (SNCU);
Other relevant government agencies and regulators, such as the Authority for theProtection of Personal Data (AP).

(CONTACT) PERSONS OF CLIENTS AND OTHER BUSINESS RELATIONS

We are obliged to provide personal data to competent authorities and bodies, such as:

Tax authorities;
Consultants and other providers of expert services, whom we engage in connectionwith the proper fulfilment of our legal obligations;
Other relevant government agencies and regulators, such as the Authority for theProtection of Personal Data (AP).

We ensure that, if necessary, agreements are made with these third parties regarding therequirements with which the data exchange must comply and specifically that the third partyin question also complies with the AVG. The personal data collected will not be lent, hiredout, sold or made public in any way other than that described above. We will not transferdata to a country outside the European Union without a legal basis.

SECURITY OF PERSONAL DATA

We believe that proper security of your personal data is very important. We have takentechnical and organisational measures to protect your personal data against(cyber)crime, destruction, loss or other unlawful processing. The measures taken meet atleast the general requirements of information security for an organisation like ours. Weevaluate the measures taken periodically and adjust them if necessary. If we make use ofthe services of third parties, such as an IT supplier, we will make agreements about adequate security measures.

We ensure that employees have no more access to personal data than is strictly necessary for the proper performance of their duties.

We agree on a confidentiality obligation with all persons who have access to the personaldata processed by us and who are not already bound to secrecy by virtue of their profession, position or legal regulations.

PRIVACY RIGHTS OF DATA SUBJECTS

Under the AVG, you as a data subject have rights that you can use against organisationsthat process your personal data. These are the following rights:

RIGHT OF ACCESS AND/OR RECTIFICATION

With a request for inspection or rectification, you can find out what data we process aboutyou, for what purpose, how we obtain this data and what retention periods we use. Youcan also request to supplement or correct your personal details.

RIGHT TO RESTRICTION OF PROCESSING

If the personal data that we process from you is possibly incorrect, is processed unlawfully, is no longer needed or you object to the processing as described below, we will atyour request (temporarily) stop the processing of their personal data or process your personal data only in a limited number of cases.

If your relationship with us has ended, you can ask us to delete your personal data, whichwe will always do if the data processing is based solely on consent. In all other cases, wewill assess whether there are reasons which prevent the complete or partial deletion ofdata, such as legal retention obligations.

RIGHT TO DATA ERASURE

If we process your personal data solely on the basis of consent granted by you or withinthe framework of a contract concluded with you, you have the right to ask us to transferthe data to yourself or to a third party designated by you. In the case of an agreementwith you, such a transfer is only possible if the agreement with you has been terminated.Please note that data which we process on a different basis, such as a legal obligation orlegitimate interest, is not eligible for transfer.

RIGHT TO DATA TRANSFER

RIGHT TO OBJECT

If we are processing your personal data on the basis of a legitimate interest of AllTech(including for screening, direct marketing or profiling purposes), you may request us tostop doing so. We will then assess whether to comply with your request.

RIGHT TO LODGE A COMPLAINT WITH THE PERSONAL DATA AUTHORITY

If you believe that we are processing your personal data in violation of the AVG, you canat all times lodge a complaint about this with the Personal Data Authority. For the formalities of submitting such a complaint, please refer to the website of the Personal Data Authority.

MODIFICATION OF THE PRIVACY STATEMENT

AllTech is entitled to change the content of this privacy statement at any time without priornotice. Any amendments to the privacy statement shall be published on the website ofAllTech. None of the provisions of this privacy statement is intended to create any obligation or agreement between [USO] and you as a data subject.

QUESTIONS AND CONTACT

If you have any questions or comments on the processing of your personal data and thisprivacy statement or in connection with exercising the aforementioned rights, please contact AllTech at the following contact details:

E-mail address: info@alltechpeople.com
Mention in subject line: AVG / GDPR

The current version of this privacy statement is on October 2024.