Privacy Policy

1. Introductions

SkillsCV B.V. (hereinafter referred to as “SkillsCV,” “we,” or “us”) attaches great importance to protecting your privacy and personal data. This Privacy Notice explains how we process your personal data in accordance with the EU General Data Protection Regulation (GDPR), the EU AI Act, and other applicable laws.

1.1 Scope

This Notice applies to:

• The SkillsCV platform: www.skillscv.nl (candidate platform)
• Related services: The Talentpool Community (employer platform)
• Mobile applications: SkillsCV apps (if available)
• Communications: Emails, newsletters, notifications

1.2 Data Controller Contact Information

SkillsCV B.V.
Woestduinlaan 57
3941 ZJ Doorn
Nederland
Chamber of Commerce number: 77922190

Contact:
E-mail: [email protected]
Phone: +31 (0)6 2256 2671

Data Protection Officer::
E-mail: info @skillscv.nl
Postal address: As above, attention: DPO

2. What Personal Data Do We Collect?

2.1 Data You Provide Directly

A. Registration & Profile Information

• Contact details: Name, email, phone, address
• Personal info: Date of birth, gender, nationality
• Professional info: CV, work experience, education, certifications
• Skills: Competencies, languages, proficiency levels
• Preferences: Desired role, salary, location, availability
• Optional: Hobbies

B. Communication Logs

• Platform messages
• Email correspondence
• Support chat interactions
• Feedback and survey responses

C. Bias Prevention & Fairness Measures

• Monitoring: Audit logs to monitor discrimination or bias
• Diverse datasets: Use of diverse datasets for fairness training
• Protected characteristics: Exclusion of protected attributes (gender, ethnicity, age) in matching
• Feedback loops: Feedback loop for algorithm improvement
• Regular audits: Annual external fairness audits

D. AI Decision-Making Rights

• Right to an explanation: On-request access to general matching criteria
• Right to human review: Support team review available
• Right to correction: Edit profile in case of inaccurate match
• Opt-out option: Disable AI-based matching (with limited service)

E. No Fully Automated Decisions

• We do not make legally binding decisions without human involvement
• Employers retain ultimate decision-making authority (hiring or rejection)
• Rol AI: AI serves solely as a supportive tool, providing recommendations, not final rulings

F. Profiling for Matching

• Purpose: Enhance match relevance
• Legal basis: Contract performance & legitimate interest
• Safeguards: No effect on legal rights without consent
• Controls: Users can adjust profiling preferences

3. Your Rights as a Data Subject

3.1 Right of Access (GDPR Article 15)

What: Details of personal data processed

How: Request at [email protected] with ID copy

Timeline: Within 1 month (up to 3 months for complex requests)

Includes:

• Data overview
• purposes
• legal basis
• recipients
• retention

3.2 Right to Rectification (GDPR Article 16)

What: Correct inaccurate/incomplete data

How:

• Via account settings
• or email to [email protected]

Timeline: Immediate via account, within 1 month via email

We will inform third parties of corrections

3.3 Right to Erasure (GDPR Article 17)

You may request deletion in cases such as:

• Data is no longer necessary
• Consent is withdrawn
• Processing is objected to
• Data is unlawfully processed
• Required by law

Exceptions include:

• Freedom of expression
• Legal retention obligations (e.g., tax for 7 years)
• Ongoing legal claims

Procedure:

• Full deletion: via account settings
• Partial deletion: via email [email protected]
• Confirmation within 30 days

3.4 Right to Restrict Processing (GDPR Article 18)

Available when:

• Challenge of accuracy data (during verification)
• Processing is unlawful but you want to retain data
• Data is no longer needed but required for legal claims
• Processing is objected to

Consequence: Store data only, do not process further

Dissolution: Automatic after expiration reason or upon request

3.5 Data Portability (GDPR Article 20)

Conditions:

• Processing based on consent or contract
• Processing will be automated

Delivery:

• Delivered in JSON or CSV format
• Direct transfer to other service provider if technically possible

Includes:

• Profile data, CV information, preferences
• Communication
• Matching History

3.6 Right to Object (GDPR Article 21)

For legitimate interest processing:

• You can object, and we must stop unless we have compelling reasons
• We stop processing unless compelling legitimate grounds

For direct marketing:

• Absolute right to object
• Processing immediately stops
• Clear information on this right

3.7 Right to Withdraw Consent (GDPR Article 7)

Wat: Toestemming even gemakkelijk intrekken als geven

How:

• Marketing: Uitschrijflink in elke e-mail
• Cookies: cookie settings
• General: Through account settings or [email protected]

Effect: Immediate stop of processing based on consent

No impact: Lawfulness of processing before withdrawal

3.8 How to Exercise Your Rights

1. Submit Request:

o E-mail: [email protected]

o Post: Woestduinlaan 57, 3941 ZJ Doorn, t.a.v. Privacy Officer

o Include name, email, requested action

2. Identification:

o copy (photo and SSN redacted)

o log in for verification

3. Handling:

o We respond within 3 workdays

o comply within 1 month (up to 3)

o Free of charge unless request is excessive

4. Data Retention

4.1 Active Users

4.2 Inactive Users

4.3 Statutory Retention Obligations

4.4 Special Categories

5. Cookies and Tracking

For detailed information about our use of cookies, please refer to our separate Cookie Policy.

Short summary:

5.1 Essential Cookies

• Purpose: Technical functionality of the platform
• Legal Basis: Legitimate interest
• Consent: Not required

5.2 Analytical Cookies

• Purpose: Website-optimalisatie en gebruikersinzichten
• Legal Basis: Consent
• Control: Opt-in/opt-out via cookie banner

5.3 Marketing Cookies

• Purpose: Personalized advertising
• Legal Basis: Consent
• Control: Full control via cookie settings

6. Minors

6.1 Age Restriction

SkillsCV is not intended for individuals under the age of 13. We do not knowingly collect personal data from children under 13. However, secondary school students seeking internships or part-time jobs may in principle use SkillsCV.

6.2 Discovery of Minor Users

If we discover that we have collected personal data from a child under 13:

• All data will be deleted immediately.

7. Changes to This Privacy Notice

7.1 Reasons for Updates

• Introduction of new features or services
• Legal changes (e.g., GDPR, AI Act)
• New technologies or purposes of data processing
• Feedback from users or regulators

7.2 Notification of Changes

Significant changes:

• Email notification to all active users (30 days in advance)
• Prominent notice on the platform
• Option to object or close the account

Minor changes:

• Notification on the website
• Update of version date
• Optional email notification

7.3 Acceptance of Changes

• Continued use after the effective date = acceptance
• Objection leads to free account closure
• New users automatically accept the latest version

8. Complaints and Contact

8.1 Contact the Data Protection Officer (DPO)

For all privacy-related questions:

E-mail: [email protected]
Phone: +31 (0)6 2256 2671
Post: SkillsCV B.V., t.a.v. Privacy Officer
Woestduinlaan 57, 3941 ZJ Doorn

Response time: Acknowledgment within 3 business days, substantive reply within 2 weeks

8.2 Complaint Procedure

1. Initial contact: Try to resolve the issue via [email protected]
2. Escalation: If unsatisfied, escalate again via [email protected]
3. External complaint: Contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at www.autoriteitpersoonsgegevens.nl

8.3 Dutch Data Protection Authority

Website: www.autoriteitpersoonsgegevens.nl
Phone: 0900-200 0020
Post: Autoriteit Persoonsgegevens
Postbus 93374, 2509 AJ Den Haag

8.4 Other Contact Options

General inquiries: [email protected]
Technical support: [email protected]
Legal matters: [email protected]

9. Relationship with The Talentpool Community

9.1 Shared Infrastructure

SkillsCV and The Talentpool Community are both services of SkillsCV B.V. and share:

• Technical infrastructure
• Privacy and security safeguards
• Staff and expertise
• Data processing agreements with third parties

9.2 Separate Purposes

• SkillsCV: Candidate platform for profile building and matching
• TPC: Employer platform for accessing anonymized candidate profiles
• Data Separation: Strict separation between identifiable and anonymized data

9.3 Cross-Platform Rights

Your data protection rights apply across both platforms:

• Access to data on both systems
• Corrections reflect in both systems
• Deletion affects both platforms
• Objection applies to all processing activities

10. International Aspects

10.1 Applicable Law

Dutch implementation of the GDPR applies to all our data processing activities.

10.2 Cross-Border Transfers

See section 5.2 for details on the international transfer of data.

10.3 Adequacy Decisions

We monitor updates to the European Commission’s adequacy decisions and adjust our practices accordingly.

11. Technical and Organisational Measures

11.1 Detailed Security Measures

See section 6 for a complete overview of our technical and organizational security measures.

11.2 Certifications

• None currently held.

11.3 Vendor Management

All processors are vetted for:

• Adequate technical and organizational measures
• GDPR compliance
• Regular security assessments
• Contractual safeguards through data processing agreements

Last updated: 14 juni 2025
Effective date: 14 juni 2025
Next review due: No later than14 juni 2026

Next review due:: www.skillscv.nl/privacy.