Who We Are

We are an Amsterdam-based recruitment and headhunting agency that connects candidates with potential employers and assists with their job searches. We also process limited personal data about our clients (employers), for example, your contact and company registration details, when providing recruitment services. We take your privacy seriously and comply with the EU General Data Protection Regulation (GDPR) and Dutch law in handling your personal data.

What We Collect

Candidate Information: We collect details from your CV or application, such as work history, education, skills, and professional qualifications.

Contact Information: We collect your name, email address, phone number, mailing address, and other contact details.

Identification & Legal Documents: With your permission, we may collect copies of identification (like a passport or ID card) or business documents (such as Chamber of Commerce registration extracts) to verify your identity or comply with legal requirements.

Additional Information: This may include references, background check details, or any other information you provide during the recruitment process.

Client Data: For our corporate clients, we collect personal data such as contact person names, emails, and business registration details needed to manage recruitment assignments.

Why We Use Your Data

We use your personal data to facilitate your job search and to match you with suitable positions. Every processing activity has a lawful basis under the GDPR. Legitimate interests (Art.6(1)(f)) is a key legal basis for our work: it allows us to use your data to find job opportunities for you and to run our recruitment operations. In practice, when you provide your CV or make it available on a professional platform, you generally expect it to be shared with potential employers. This aligns with your interests as a jobseeker.

We also obtain consent under the GDPR (Art.6(1)(a)) when needed, for example, when you expressly agree to share your CV with a specific client or to undergo a background check. You have the right to withdraw consent at any time, and we will stop processing data based on that consent once withdrawn.

Additionally, in some cases we rely on legal obligations (Art.6(1)(c)) to justify our processing. For instance, Dutch law requires businesses to keep certain records (such as assignment confirmations, passport copies, Chamber of Commerce extracts, and similar data) for 7 years. To comply with this requirement, we retain the respective extracts for that period.

How We Share Your Data  

We do not sell your personal data. We only share information as necessary for the purposes above, and always with appropriate safeguards:

Employers and Clients: With your permission, we send your CV and relevant details to prospective employers and clients who are recruiting for positions. We transmit data via secure channels (such as encrypted email or messaging services).

Service Providers: We use trusted third-party services (e.g. Recruiter Flow) to manage recruitment data. These processors are contractually obligated to keep data confidential and secure in accordance with the GDPR (Art.28).

Legal & Regulatory Authorities: We will disclose personal data to authorities only if legally required (for example, to comply with a court order or statutory obligation). This could include the Dutch tax or commerce authorities if necessary.

Internal Use: Only authorized employees within our company can access your personal data, and only for the purposes described here.

Data Security

We implement appropriate technical and organizational measures to protect your personal data. This includes storing data in secure, access-controlled systems using encryption and strong passwords, and training our staff on data protection best practices. Any electronic communication of personal data (for example, sending a CV) is done over secure, encrypted channels.

Data Retention and Review

We keep your personal data only for as long as necessary to fulfill the purposes described above. In practice, we review candidate records at least every two years and delete or anonymize information that is no longer needed. This helps us maintain up-to-date records and limits excessive storage.

However, some information is retained longer when required by law. For example, Dutch regulations require certain business records (such as assignment confirmations, passport copies, Chamber of Commerce extracts, and similar data) to be kept for 7 years. We will securely delete or anonymize all other personal data once it is no longer needed for recruitment or legal compliance.

Your Rights

You have various rights under the GDPR regarding your personal data:

• Access your personal data;
• Request that your personal data be supplemented, corrected, or deleted;
• Object to the processing of your personal data;
• Request the restriction of processing your personal data;
• Request the transfer of your personal data to yourself or a third party.

The Headhunter Group will inform you within 1 month whether and how your request will be fulfilled, and if not, provide the reasons for refusal. If necessary, the response period may be extended by an additional month. In such a case, you will be notified within one month of the extended timeline.

If you have a complaint regarding how we handle your personal data or your rights, you may submit a complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via their website.

Contact Information

If you have any questions about this privacy statement or want to exercise your data protection rights, please contact us at research@theheadhuntergroup.com. We strive to respond to your requests within one month, as required by law. For more information about data protection, you may visit the website of the Autoriteit Persoonsgegevens (the Dutch DPA).