{"id":4267,"date":"2024-03-25T10:09:36","date_gmt":"2024-03-25T09:09:36","guid":{"rendered":"https:\/\/thetalentpoolcommunity.nl\/privacy-policy-2\/"},"modified":"2025-07-16T08:13:58","modified_gmt":"2025-07-16T07:13:58","slug":"privacy-policy-2","status":"publish","type":"page","link":"https:\/\/thetalentpoolcommunity.nl\/en\/privacy-policy-2\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"4267\" class=\"elementor elementor-4267 elementor-1408\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6f0fabf e-flex e-con-boxed e-con e-parent\" data-id=\"6f0fabf\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1bcc6b9 elementor-widget elementor-widget-heading\" data-id=\"1bcc6b9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Talentpool<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-495bec7 elementor-widget elementor-widget-heading\" data-id=\"495bec7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Privacy Policy <\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-f09df0c ttc-heading-black e-flex e-con-boxed e-con e-parent\" data-id=\"f09df0c\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a62e77d mi-table-of-content elementor-widget elementor-widget-text-editor\" data-id=\"a62e77d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3><span style=\"font-weight: 400;\">1. Introductions<\/span><\/h3><p>SkillsCV B.V. (hereinafter: \u201cSkillsCV,\u201d \u201cwe,\u201d \u201cus\u201d) operates The Talentpool Community (TPC), a professional platform that enables employers to find talent through AI-powered matching. This privacy notice explains how we handle personal data in accordance with the General Data Protection Regulation (GDPR), the EU AI Act, and other applicable laws. <\/p><h4>1.1 Scope<\/h4><p>This Notice applies to:<\/p><ul><li><b><\/b><strong><b>The Talentpool Community: <\/b><\/strong>cloudways-thetalentpoolcommunity.admin-developer.com (employer platform)<\/li><li><b><\/b><strong><b>Related Services:<\/b><\/strong> SkillsCV candidate platform (for matching functionality)<\/li><li><b><\/b><strong><b>Mobile Apps: <\/b><\/strong>TPC mobile applications (if available)<\/li><li><b><\/b><strong><b>Communications: <\/b><\/strong> Emails, notifications, newsletters<\/li><\/ul><h4>1.2 Data Controller Contact Information<\/h4><p><strong><b>SkillsCV B.V.<\/b><\/strong><br>Woestduinlaan 57<br>3941 ZJ Doorn<br>Nederland<br>Chamber of Commerce number: 77922190<\/p><p><strong><b>Contact:<\/b><\/strong><br>E-mail: info@skillscv.nl<br>Phone: +31 (0)6 2256 2671<\/p><p><strong><b>Data Protection Officer::<\/b><\/strong><br>E-mail: info@skillscv.nl<br>Postal: Attn: DPO at above address<\/p><h3>2. What Personal Data Do We Collect?<\/h3><h4>2.1 Employer Data (Directly Provided)<\/h4><h5>A. Company and Contact Details<\/h5><ul><li><b><\/b><strong><b>Company Data:<\/b><\/strong> Company name, Chamber of Commerce and VAT numbers, address<\/li><li><b><\/b><strong><b>Contact person:<\/b><\/strong> name, role, email, phone<\/li><li><b><\/b><strong><b>User accounts: l<\/b><\/strong>ogin details, preferences, permission levels<\/li><li><b><\/b><strong><b>Billing information:<\/b><\/strong> IBAN, billing address, payment history<\/li><\/ul><h5>B. Job and Recruitment Information<\/h5><ul><li><b><\/b><strong><b> Job postings: <\/b><\/strong>Descriptions, requirements, employment terms <\/li><li><b><\/b><strong><b>Skill requirements:<\/b><\/strong> experience and competencies<\/li><li><b><\/b><strong><b>Company culture:<\/b><\/strong>Values, work style, team descriptions<\/li><li><b><\/b><strong><b>Recruitment preferences:<\/b><\/strong>Location, salary, hours, contract type<\/li><li><b><\/b><strong><b>Contactinformatie:<\/b><\/strong>name, email, phone, other<\/li><\/ul><h5>C. Communication and Matching<\/h5><ul><li><b><\/b><strong><b>Messages: <\/b><\/strong>candidate communication through the platform<\/li><li><b><\/b><strong><b>Matching feedback: <\/b><\/strong>evaluations of suggested candidates<\/li><li><b><\/b><strong><b>Interview planning: <\/b><\/strong>scheduling, notes, evaluations<\/li><li><b><\/b><strong><b>Hiring decisions: <\/b><\/strong>recruitment outcomes<\/li><\/ul><h4>2.2 Candidate Data (Anonymized)<\/h4><p><strong><b>Based on The Matchbox algorithms: <\/b><\/strong><a href=\"https:\/\/www.thematchbox.ai\/nl\/\" target=\"_blank\" rel=\"noopener nofollow\"><strong><u><b>https:\/\/www.thematchbox.ai\/nl\/<\/b><\/u><\/strong><\/a><strong><b> <\/b><\/strong><\/p><h5>A. Skills and Competencies (Anonymized)<\/h5><p>Think about:<\/p><ul><li><b><\/b><strong><b>Technical skills: <\/b><\/strong>programming, certifications, tools<\/li><li><b><\/b><strong><b>Soft skills: <\/b><\/strong>communication, leadership, teamwork<\/li><li><b><\/b><strong><b>Experience:<\/b><\/strong> years of experience by skill category (no company names)<\/li><li><b><\/b><strong><b>Education:<\/b><\/strong> level and field (without institutions)<\/li><li><b><\/b><strong><b>Availability:<\/b><\/strong> full-time\/part-time, preferred location, start date<\/li><\/ul><h5>B. Matching Informations<\/h5><ul><li><b><\/b><strong><b>See: <\/b><\/strong><strong><b>The Matchbox: <\/b><\/strong><a href=\"https:\/\/www.thematchbox.ai\/nl\/\" target=\"_blank\" rel=\"noopener nofollow\"><strong><u><b>https:\/\/www.thematchbox.ai\/nl\/<\/b><\/u><\/strong><\/a><strong><b> <\/b><\/strong><\/li><\/ul><h4>2.3 Automatically Collected Data<\/h4><p>We may use tools like Google Analytics, Hotjar, and Amplitude to collect: <\/p><h5>A. Platform Usage<\/h5><ul><li style=\"list-style-type: none;\"><ul><li><b><\/b><strong><b>Login activity: <\/b><\/strong>timestamps, session length, last activity<\/li><li><b><\/b><strong><b>Feature usage:<\/b><\/strong> filters used, search behavior<\/li><li><b><\/b><strong><b>Job post management:<\/b><\/strong> number of listings, views, responses<\/li><li><b><\/b><strong><b>Matching activity:<\/b><\/strong> profile views, sent invitations<\/li><\/ul><\/li><\/ul><h5>B. Technical Data<\/h5><ul><li><b><\/b><strong><b>Device info: <\/b><\/strong>IP, browser, OS<\/li><li><b><\/b><strong><b>Performance:<\/b><\/strong> load times, errors, system responses<\/li><li><b><\/b><strong><b>Security:<\/b><\/strong> login attempts, incidents<\/li><li><b><\/b><strong><b>Cookies:<\/b><\/strong> see separate Cookie Policy<\/li><\/ul><h4>2.4 Data from Third Parties<\/h4><ul><li><b><\/b><strong><b>ATS integrations <\/b><\/strong>(with consent)<\/li><li><b><\/b><strong><b>Social media:<\/b><\/strong> Publicly available LinkedIn company page data<\/li><li><b><\/b><strong><b>Market intelligence:<\/b><\/strong> salary benchmarks (anonymized)<\/li><li><b><\/b><strong><b>References<\/b><\/strong>: feedback about employer reputation (anonymized)<\/li><\/ul><h3>3. Purposes and Legal Bases of Processing<\/h3><h4>3.1 Core Functionalities (Legal basis: Performance of Contract \u2013 Art. 6(1)(b) GDPR)<\/h4><h5>A. Account and Subscription Management<\/h5><ul><li><b><\/b><strong><b>Purpose:<\/b><\/strong> Creating, managing, and billing TPC employer accounts<\/li><li><b><\/b><strong><b>Data:<\/b><\/strong> Company, contact, and payment details<\/li><li><b><\/b><strong><b>Retention: <\/b><\/strong>Duration of subscription + 7 years (for tax compliance)<\/li><\/ul><h5>B. AI Matching and Candidate Suggestions<\/h5><ul><li><b><\/b><strong><b>Purpose: <\/b><\/strong>Automated matching of job postings with suitable candidates<\/li><li><b><\/b><strong><b>Data: <\/b><\/strong>Job requirements vs. anonymized candidate profiles<\/li><li><b><\/b><strong><b>Technology:<\/b><\/strong> Machine learning algorithms (see Section 4)<\/li><li><b><\/b><strong><b>Retention:<\/b><\/strong> Active during job listing period<\/li><\/ul><p><strong><b> <\/b><\/strong><\/p><h5>C. Talent Pool Access<\/h5><ul><li><b><\/b><strong><b>Purpose:<\/b><\/strong> Access to anonymized SkillsCV candidate profiles<\/li><li><b><\/b><strong><b>Data:<\/b><\/strong> Skills, experience, availability (fully anonymized)<\/li><li><b><\/b><strong><b>Safeguards:<\/b><\/strong> No identifiable data shown without candidate consent<\/li><li><b><\/b><strong><b>Retention: <\/b><\/strong>During active subscription<\/li><\/ul><h4>3.2 Communication Facilitation (Legal basis: Performance of Contract \u2013 Art. 6(1)(b) GDPR)<\/h4><h5>A. Employer-Candidate Contact<\/h5><ul><li><b><\/b><strong><b>Purpose:<\/b><\/strong> Enabling contact after mutual interest<\/li><li><b><\/b><strong><b>Condition: <\/b><\/strong>Explicit candidate consent required for identification<\/li><li><b><\/b><strong><b>Data:<\/b><\/strong> Full candidate details shared<\/li><li><b><\/b><strong><b>Retention:<\/b><\/strong> 2 years after last communication (for quality assurance)<\/li><\/ul><h5>B. Platform Messaging<\/h5><ul><li><b><\/b><strong><b>Purpose:<\/b><\/strong> In-platform messaging system for recruitment<\/li><li><b><\/b><strong><b>Data: <\/b><\/strong>Message content, timestamps, read receipts<\/li><li><b><\/b><strong><b>Encryption:<\/b><\/strong> End-to-end encryption<\/li><li><b><\/b><strong><b>Retention:<\/b><\/strong> Until user deletion or 3 years max<\/li><\/ul><h4>3.3 Credit System (Legal basis: Performance of Contract \u2013 Art. 6(1)(b) GDPR)<\/h4><h5>A. Credit Tracking<\/h5><ul><li><b><\/b><strong><b>Purpose:<\/b><\/strong> Tracking earned and spent credits<\/li><li><b><\/b><strong><b>Data:<\/b><\/strong> Candidate referrals, contact attempts, credit balance<\/li><li><b><\/b><strong><b>Transparency:<\/b><\/strong> Real-time credit transaction log<\/li><li><b><\/b><strong><b>Retention: <\/b><\/strong>3 years (financial recordkeeping)<\/li><\/ul><h5> B. Fair-use Monitoring<\/h5><ul><li><b><\/b><strong><b>Purpose:<\/b><\/strong> Prevent misuse of the credit system<\/li><li><b><\/b><strong><b>Data:<\/b><\/strong> Usage patterns, contact frequency, success rates<\/li><li><b><\/b><strong><b>Retention: <\/b><\/strong>1 year (trend analysis)<\/li><\/ul><h4>3.4 Service Optimization (Legal basis: Legitimate Interest \u2013 Art. 6(1)(f) GDPR)<\/h4><h5>A. Platform Improvement<\/h5><ul><li><b><\/b><strong><b>Purpose: <\/b><\/strong>Optimize algorithms and user experience<\/li><li><b><\/b><strong><b>Data: <\/b><\/strong>Aggregated usage stats, success rates, feedback<\/li><li><b><\/b><strong><b>Anonymization: <\/b><\/strong>Company-identifiable data removed<\/li><li><b><\/b><strong><b>Balancing Test:<\/b><\/strong> Improvement benefit vs. privacy impact<\/li><li><b><\/b><strong><b>Retention:<\/b><\/strong> 2 years (development purposes)<\/li><\/ul><h5>B. Market Research<\/h5><ul><li><b><\/b><strong><b>Purpose:<\/b><\/strong> Understand recruitment trends and skill demand<\/li><li><b><\/b><strong><b>Data:<\/b><\/strong> Anonymized job data, hiring statistics<\/li><li><b><\/b><strong><b>Output:<\/b><\/strong> Public labor market reports<\/li><li><b><\/b><strong><b>Retention: <\/b><\/strong>3 years (longitudinal study)<\/li><\/ul><h4>3.5 Marketing and Communication (Legal basis: Consent \u2013 Art. 6(1)(a) GDPR)<\/h4><h5>A. Newsletters and Updates<\/h5><ul><li><b><\/b><strong><b>Purpose: <\/b><\/strong>Informing users about features and best practices<\/li><li><b><\/b><strong><b>Data<\/b><\/strong>: Email, company type, platform usage<\/li><li><b><\/b><strong><b>Opt-in:<\/b><\/strong> Consent at registration<\/li><li><b><\/b><strong><b>Opt-out:<\/b><\/strong> Unsubscribe via link in every message<\/li><li><b><\/b><strong><b>Retention: <\/b><\/strong>Until user unsubscribes<\/li><\/ul><h5>B. Personalized Recommendations<\/h5><ul><li><b><\/b><strong><b>Purpose:<\/b><\/strong> Provide relevant recruitment optimization tips<\/li><li><b><\/b><strong><b>Data: <\/b><\/strong>Job types, hiring success, platform behavior<\/li><li><b><\/b><strong><b>Retention: <\/b><\/strong>During active use of platform<\/li><\/ul><h4>3.6 Legal Obligations (Legal basis: Legal Obligation \u2013 Art. 6(1)(c) GDPR)<\/h4><h5>A. Tax Compliance<\/h5><ul><li><b><\/b><strong><b>Purpose:<\/b><\/strong> Compliance with tax regulations<\/li><li><b><\/b><strong><b>Data:<\/b><\/strong> Invoices, payments, subscription details<\/li><li><b><\/b><strong><b>Retention:<\/b><\/strong> 7 years (per Dutch Civil Code)<\/li><\/ul><h5>B. Anti-Discrimination Monitoring<\/h5><ul><li><b><\/b><strong><b>Purpose:<\/b><\/strong> Ensure fair hiring practices<\/li><li><b><\/b><strong><b>Data: <\/b><\/strong>Job descriptions, hiring patterns, complaints<\/li><li><b><\/b><strong><b>Monitoring:<\/b><\/strong> Automated detection of discriminatory patterns<\/li><li><b><\/b><strong><b>Retention:<\/b><\/strong> 5 years (labor law compliance)<\/li><\/ul><h3>4. AI Systems and Matching Technology<\/h3><h4>4.1 AI Matching System (EU AI Act Compliance)<\/h4><p>This system relies on both TPC\u2019s and The Matchbox\u2019s compliance: <a href=\"https:\/\/www.thematchbox.ai\/nl\/\" target=\"_blank\" rel=\"noopener nofollow\"><u>https:\/\/www.thematchbox.ai\/nl\/<\/u><\/a><\/p><h5>A. System Classification<\/h5><ul><li><b><\/b><strong><b>Risk level: <\/b><\/strong>Limited risk (Article 52, EU AI Act)<\/li><li><b><\/b><strong><b>Type:<\/b><\/strong>Supervised machine learning for skill-job matching<\/li><li><b><\/b><strong><b>Training data: <\/b><\/strong>Past successful matches, skill taxonomies<\/li><li><b><\/b><strong><b>Update frequency:: <\/b><\/strong>Weekly updates with new training data<\/li><\/ul><h5>B. How the Matching Algorithm Works<\/h5><p><b><\/b>1. See The Matchbox<\/p><h5>C. Transparency Measures (Article 52, EU AI Act)<\/h5><ul><li><b><\/b><strong><b>Notification: <\/b><\/strong>Users are informed about AI use upon first interaction<\/li><li><b><\/b><strong><b>Explanation: <\/b><\/strong>General explanation of matching criteria is available<\/li><li><b><\/b><strong><b>Human oversight:<\/b><\/strong> Employers can review all suggested matches<\/li><li><b><\/b><strong><b>Feedback integration: <\/b><\/strong>Matching algorithm evolves based on user feedback<\/li><\/ul><h4>4.2 Bias Prevention and Fairness<\/h4><h5>A. Protected Characteristics<\/h5><p><strong><b>The system does not use the following personal attributes:<\/b><\/strong><\/p><ul><li>Gender, age, ethnicity<\/li><br><li>Religion, political beliefs<\/li><br><li>Family situation, pregnancy status<\/li><br><li>Disability or health information<\/li><br><li>Sexual orientation<\/li><\/ul><h5>B. Bias Detection<\/h5><p>(via The Matchbox) <\/p><ul><li><b><\/b><strong><b>Regular audits: <\/b><\/strong>Periodic bias-detection analysis<\/li><li><b><\/b><strong><b>Statistical parity:<\/b><\/strong> Equal matching chance for all demographics<\/li><li><b><\/b><strong><b>Equalized odds: <\/b><\/strong>Consistent accuracy across groups<\/li><li><b><\/b><strong><b>Calibration:<\/b><\/strong> Standardized interpretation of scores<\/li><li><b><\/b><strong><b>External review:<\/b><\/strong> Annual third-party fairness audits<\/li><\/ul><h5><strong><b>C. Corrective Measures<\/b><\/strong><\/h5><ul><li><b><\/b><strong><b>Data rebalancing: <\/b><\/strong>Representatieve training-datasets<\/li><li><b><\/b><strong><b>Algorithmic debiasing: <\/b><\/strong>Fairness constraints in model-training<\/li><li><b><\/b><strong><b>Post-processing: <\/b><\/strong>Adjusted output scoring for fairness<\/li><li><b><\/b><strong><b>Continuous monitoring: <\/b><\/strong>Real-time bias-detection systems<\/li><\/ul><h4>4.3 User Control over AI<\/h4><h5>A. Matching-preferences<\/h5><p>Employers can customize matching criteria based on:<\/p><ul><li><b><\/b><strong><b>Skills<\/b><\/strong><\/li><li><b><\/b><strong><b>Role or job type<\/b><\/strong><\/li><li><b><\/b><strong><b>Education level<\/b><\/strong><\/li><li><b><\/b><strong><b>Location<\/b><\/strong><\/li><li><b><\/b><strong><b>Availability<\/b><\/strong><\/li><li><b><\/b><strong><b>Working style and flexibility<\/b><\/strong><\/li><li><b><\/b><strong><b>Availability<\/b><\/strong> (full-time\/part-time)<\/li><li><b><\/b><strong><b>Salary preferences<\/b><\/strong><\/li><\/ul><h5>B. Algorithm Transparency<\/h5><ol><li><b><\/b>See The Matchbox<\/li><\/ol><h5>C. Human Override<\/h5><ul><li><b><\/b><strong><b>Manual search: <\/b><\/strong>Browse profiles outside AI recommendations<\/li><li><b><\/b><strong><b>Custom filters: <\/b><\/strong>Set your own matching criteria<\/li><li><b><\/b><strong><b>Blacklist skills:<\/b> <\/strong>Exclude unwanted skill matches<\/li><li><b><\/b><strong><b>Expert mode:<\/b><\/strong> Advanced configuration of AI parameters<\/li><\/ul><h3>5. Candidate Privacy and Anonymization<\/h3><h4>5.1 SkillsCV Data Anonymization Proces<\/h4><h5>A. Data Minimization for TPC<\/h5><p><strong><b>Kandidaten hebben geheel zelf regie op de identificatoren die ze laten zien. By default staan ze uit.  Think about:<\/b><\/strong><\/p><ul><li>Personal details: Name, address, phone number, email<\/li><br><li>Unique identifiers: Citizen Service Number (BSN), ID numbers, account IDs<\/li><br><li>Employer-specific data: Company names, projects, references<\/li><br><li>Timestamps: Specific dates or identifiable time data<\/li><\/ul><p><strong><b> <\/b><\/strong><\/p><p><strong><b>The following non-identifiable data is retained for matching purposes:<\/b><\/strong><\/p><ul><li>Skills and competency levels (aggregated)<\/li><li>Experience categories (e.g., junior, medior, senior)<\/li><li>Education level (without specifying institutions)<\/li><li>Location preferences (at city or regional level)<\/li><li>Availability and contract preferences (e.g., full-time, part-time)<\/li><li>Preferences regarding working hours, flexibility, hybrid work, etc.<\/li><\/ul><h5>B. Ensuring K-Anonymity<\/h5><p><b><\/b>1. See The Matchbox<\/p><h5>C. Re-identification Prevention<\/h5><p><strong><b>Technical measures:<\/b><\/strong><\/p><ul><li><b><\/b>See The Matchbox<\/li><\/ul><p><strong><b>Organizational safeguards:<\/b><\/strong><\/p><ul><li><b><\/b>See The Matchbox<\/li><\/ul><h4>5.2 Candidate Consent Management<\/h4><h5>A. Opt-in Process<\/h5><p>Candidates using SkillsCV can choose their visibility and contact preferences:<\/p><ul><li><b><\/b><strong><b>Fully anonymous: <\/b><\/strong>Only skills are shown, no contact possible<\/li><li><b><\/b><strong><b>Contact upon match:<\/b><\/strong> Contact information is shared only after a mutual match<\/li><li><b><\/b><strong><b>Direct contact allowed:<\/b><\/strong> Employers may reach out directly (with consent)<\/li><\/ul><h5>B. Granular Controls<\/h5><ul><li><b><\/b><strong><b>By job type: <\/b><\/strong>Different visibility levels for each type of vacancy<\/li><li><b><\/b><strong><b>By region:<\/b><\/strong> Limit visibility to certain geographic areas<\/li><li><b><\/b><strong><b>By time:<\/b><\/strong> Set temporary visibility (e.g., during active job search only)<\/li><li><b><\/b><strong><b>By seniority:<\/b><\/strong> Choose visibility based on career level<\/li><li><b><\/b><strong><b>Context- and skills-based: <\/b><\/strong>Additional logic governed by The Matchbox<\/li><\/ul><h5>C. Revocation Rights<\/h5><ul><li><b><\/b><strong><b>Immediate withdrawal: <\/b><\/strong>Profile visibility is stopped instantly<\/li><li><b><\/b><strong><b>Graceful degradation:<\/b><\/strong> Existing matches are finalized; new exposure stops<\/li><li><b><\/b><strong><b>Data deletion: <\/b><\/strong>Complete removal from the TPC database within 48 hours<\/li><li><b><\/b><strong><b>Audit trail:<\/b><\/strong> All changes in consent are logged and traceable<\/li><\/ul><h3>6. Sharing of Personal Data<\/h3><h4>6.1 Within the SkillsCV Ecosystem<\/h4><h5>A. SkillsCV <strong><b>\u2194<\/b><\/strong> TPC Data Exchange<\/h5><ul><li><b><\/b><strong><b>Anonymous Profiles: <\/b><\/strong>Transferred from SkillsCV to TPC (fully anonymized)<\/li><li><b><\/b><strong><b>Match Results: <\/b><\/strong>Matching scores from TPC are returned to SkillsCV<\/li><li><b><\/b><strong><b>Consent Status: <\/b><\/strong>Real-time updates of candidate permissions<\/li><li><b><\/b><strong><b>Analytics:<\/b><\/strong> Aggregated statistics on matching success<\/li><\/ul><h5>B. Shared Infrastructure<\/h5><ul><li><b><\/b><strong><b>Cloud providers: <\/b><\/strong>Amazon Web Services (EU-datacenters)<\/li><li><b><\/b><strong><b>Security services: <\/b><\/strong>Cloudflare for DDoS-bescherming<\/li><li><b><\/b><strong><b>Analytics: <\/b><\/strong>Google Analytics (IP-anonymization)<\/li><li><b><\/b><strong><b>Communication: <\/b><\/strong>SendGrid for transactional emails<\/li><\/ul><h4>6.2 With Service Providers (Processors)<\/h4><h5>A. Technical Service Providers<\/h5><table><tbody><tr><td><strong><b>Provider<\/b><\/strong><\/td><td><strong><b>Service<\/b><\/strong><\/td><td><strong><b>Datatype<\/b><\/strong><\/td><td><strong><b>Location<\/b><\/strong><\/td><td><strong><b>Safeguards<\/b><\/strong><\/td><\/tr><tr><td>Amazon Web Services<\/td><td>Cloud hosting<\/td><td>All platform-data<\/td><td>EU (Frankfurt)<\/td><td>DPA, ISO 27001, SOC 2<\/td><\/tr><tr><td>Cloudflare<\/td><td>CDN, Security<\/td><td>IP-adresses, logs<\/td><td>EU\/US<\/td><td>DPF, SCC&#8217;s<\/td><\/tr><tr><td>SendGrid<\/td><td>E-mail delivery<\/td><td>E-mailadresses, content<\/td><td>US<\/td><td>DPF, DPA<\/td><\/tr><tr><td>Stripe<\/td><td>Payments<\/td><td>Payment details<\/td><td>EU\/US<\/td><td>PCI DSS, DPA<\/td><\/tr><\/tbody><\/table><p><strong><b> <\/b><\/strong><\/p><h5>B. Analytics and Monitoring Providers<\/h5><table><tbody><tr><td><strong><b>Provider<\/b><\/strong><\/td><td><strong><b>Service<\/b><\/strong><\/td><td><strong><b>Datatype<\/b><\/strong><\/td><td><strong><b>Retention<\/b><\/strong><\/td><td><strong><b>Controls<\/b><\/strong><\/td><\/tr><tr><td>Google Analytics<\/td><td>Web analytics<\/td><td>Anonymized usage data<\/td><td>26 months <\/td><td>IP-masking, opt-out<\/td><\/tr><tr><td>Hotjar<\/td><td>UX analytics<\/td><td>Anonymized sessions<\/td><td>12 months<\/td><td>Sensitive data masking<\/td><\/tr><tr><td>Sentry<\/td><td>Error monitoring<\/td><td>Error logs, metadata<\/td><td>90 days<\/td><td>Data scrubbing<\/td><\/tr><\/tbody><\/table><p><strong><b> <\/b><\/strong><\/p><h4>6.3 International Data Transfers<\/h4><h5>A. Adequacy Decisions<\/h5><p><strong><b>Data is only transferred to countries with adequate protection levels, including:<\/b><\/strong><\/p><ul><li>United Kingdom (post-Brexit adequacy decision)<\/li><br><li>Switzerland, Norway, Iceland (EEA-plus countries)<\/li><br><li>Other countries recognized by the European Commission<\/li><\/ul><h5>B. Safeguards for US Transfers<\/h5><ul><li><b><\/b><strong><b>EU-US Data Privacy Framework: <\/b><\/strong>For providers certified under DPF<\/li><li><b><\/b><strong><b>Standard Contractual Clauses (SCCs): <\/b><\/strong>For providers not covered by DPF<\/li><li><b><\/b><strong><b>Binding Corporate Rules (BCRs):<\/b><\/strong> For multinationals with EU-approved BCRs<\/li><li><b><\/b><strong><b>Specific Exceptions: <\/b><\/strong>Art. 49 GDPR, where necessary<\/li><\/ul><h5>C. Monitoring and Review<\/h5><ul><li><b><\/b><strong><b>Quarterly Reviews:<\/b><\/strong> Evaluation of international transfer practices<\/li><li><b><\/b><strong><b>Legal Monitoring: <\/b><\/strong>Keeping track of adequacy decision changes<\/li><li><b><\/b><strong><b>Incident Response:<\/b><\/strong> Protocols in case protection levels change<\/li><li><b><\/b><strong><b>Contract Updates: <\/b><\/strong>SCCs are updated according to the latest legal versions<\/li><\/ul><h4>6.4 No Sale of Personal Data<\/h4><p><strong><b>We never sell personal data.<\/b><\/strong> Data is shared only:<\/p><ul><li>For delivering services to employers<\/li><li>With explicit consent from candidates for contact<\/li><li>When legally required (e.g., court orders)<\/li><li>With processors under strict contractual safeguards<\/li><\/ul><p><strong><b> <\/b><\/strong><\/p><h3>7. Security of Personal Data<\/h3><h4>7.1 Technical Security Measures<\/h4><h5>A. Data Encryption<\/h5><ul><li><b><\/b><strong><b>In transit: <\/b><\/strong>TLS 1.3 is used for all client-server communication<\/li><li><b><\/b><strong><b>At rest: <\/b><\/strong>AES-256 encryption is applied to database contents<\/li><li><b><\/b><strong><b>Application level:<\/b><\/strong> Additional encryption for sensitive data fields<\/li><li><b><\/b><strong><b>Key management:<\/b><\/strong> Centralized key management via AWS KMS<\/li><\/ul><h5>B. Access Controls<\/h5><ul><li><b><\/b><strong><b>Multi-factor authentication (MFA):<\/b><\/strong> Required for all TPC accounts<\/li><li><b><\/b><strong><b>Role-based access control (RBAC): <\/b><\/strong>Access based on the principle of least privilege<\/li><li><b><\/b><strong><b>Session management: <\/b><\/strong>Automatic timeouts, concurrent session limits<\/li><li><b><\/b><strong><b>API security: <\/b><\/strong>OAuth 2.0, rate limiting, request validation<\/li><\/ul><h5>C. Infrastructure Security<\/h5><ul><li><b><\/b><strong><b>Network segmentation:<\/b><\/strong> Logical separation between various platform services<\/li><li><b><\/b><strong><b>Firewall configuration: <\/b><\/strong>Restrictive rules, regular audits<\/li><li><b><\/b><strong><b>Intrusion detection: <\/b><\/strong>Real-time monitoring van suspicious activity<\/li><li><b><\/b><strong><b>DDoS protection: <\/b><\/strong>Cloudflare enterprise protection<\/li><\/ul><h4>7.2 Organizational Measures<\/h4><h5>A. Personnel and Training<\/h5><ul><li><b><\/b><strong><b>Background checks: <\/b><\/strong>Conducted for all staff with access to personal data<\/li><li><b><\/b><strong><b>Privacy training:<\/b><\/strong> Mandatory annual training for all employees<\/li><li><b><\/b><strong><b>Confidentiality agreements:<\/b><\/strong> Included in all employment contracts<\/li><li><b><\/b><strong><b>Access reviews: <\/b><\/strong>Quarterly audits of access rights<\/li><\/ul><h5>B. Procedures and Protocols<\/h5><ul><li><b><\/b><strong><b>Data handling procedures: <\/b><\/strong>Documented processes for data operations<\/li><li><b><\/b><strong><b>Incident response plan: <\/b><\/strong>24\/7 security incident response team<\/li><li><b><\/b><strong><b>Change management: <\/b><\/strong>Controlled deployment procedures<\/li><li><b><\/b><strong><b>Vendor management: <\/b><\/strong>Due diligence and monitoring of all service providers<\/li><\/ul><h5>C. Compliance and Auditing<\/h5><ul><li><b><\/b><strong><b>Internal audits: <\/b><\/strong>Monthly audits for both security and privacy compliance<\/li><li><b><\/b><strong><b>External audits: <\/b><\/strong>Annual security reviews by third-party experts<\/li><li><b><\/b><strong><b>Penetration testing: <\/b><\/strong>Ethical hacking tests conducted quarterly<\/li><li><b><\/b><strong><b>Compliance monitoring: <\/b><\/strong>Continuous review of compliance requirements<\/li><\/ul><h4>7.3 Data Breach Procedures<\/h4><h5>A. Detection and Containment<\/h5><ul><li><b><\/b><strong><b>Automated monitoring: <\/b><\/strong>Real-time alerts for unusual access or data anomalies<\/li><li><b><\/b><strong><b>Incident classification: <\/b><\/strong>Rapid assessment of the severity and scope of a breach<\/li><li><b><\/b><strong><b>Containment measures: <\/b><\/strong>Immediate isolation of affected systems<\/li><li><b><\/b><strong><b>Forensic preservation:<\/b><\/strong>Evidence collection of evidence for investigation<\/li><\/ul><h5>B. Notification Procedures<\/h5><p><strong><b>Notification timeline (depending on severity and legal obligation):<\/b><\/strong><\/p><ul><li><b><\/b><strong><b>Within 1 hour:<\/b><\/strong> Internal incident response team activation<\/li><li><b><\/b><strong><b>Within 24 hours:<\/b><\/strong> Completion of initial assessment and containment<\/li><li><b><\/b><strong><b>Within 72 hours:<\/b><\/strong> Notification to the Dutch Data Protection Authority (if high risk)<\/li><li><b><\/b><strong><b>Without delay:<\/b><\/strong> Notification to affected individuals (if high risk)<\/li><\/ul><h5>C. Recovery and Lessons Learned<\/h5><ul><li><b><\/b><strong><b>System restoration: <\/b><\/strong>Secure recovery of affected systems from clean backups<\/li><li><b><\/b><strong><b>Root cause analysis: <\/b><\/strong>Thorough investigation of breach origin and contributing factors<\/li><li><b><\/b><strong><b>Process improvements: <\/b><\/strong>Adjustments to procedures based on findings<\/li><li><b><\/b><strong><b>Staff retraining: <\/b><\/strong>Additional training based on the nature of the breach<\/li><\/ul><h3>8. Your Rights as a Data Subject<\/h3><h4>8.1 Rights of Employers<\/h4><h5>A. Right of Access (Article 15 GDPR)<\/h5><p><strong><b>You may request access to:<\/b><\/strong><\/p><ul><li>An overview of all processed company and contact person data<\/li><li>The purposes of processing and the applicable legal grounds<\/li><li>Recipients of the data (e.g. service providers, authorities)<\/li><li>Retention periods per data category<\/li><li>Origin of the data (whether provided directly or by third parties)<\/li><\/ul><p><strong><b>Procedure:<\/b><\/strong><\/p><ul><li>Directly via your account settings (immediate access)<\/li><li>By emailing info@skillscv.nl (response within 1 month)<\/li><li>Please include a copy of the contact person&#8217;s ID for verification<\/li><\/ul><h5>B. Right to Rectification (Article 16 GDPR)<\/h5><p><strong><b>You may request correction of:<\/b><\/strong><\/p><ul><li>Company information (name, address, Chamber of Commerce number)<\/li><br><li>Contact person details (name, title, email, phone number)<\/li><br><li>Billing details (IBAN, invoice address)<\/li><br><li>Account preferences and settings<\/li><\/ul><p><strong><b>How to update:<\/b><\/strong><\/p><ul><li>Direct via TPC account dashboard<\/li><li>Bulk updates via CSV upload (for enterprise customers)<\/li><li>Complex changes can be requested via info@skillscv.nl<\/li><\/ul><p>C. Right to Erasure (Article 17 GDPR)<\/p><p><strong><b>You may request deletion in cases such as:<\/b><\/strong><\/p><ul><li>Termination of your subscription (after financial obligations are fulfilled)<\/li><li>Withdrawal of consent for marketing purposes<\/li><li>Objection to processing (if no overriding legitimate interest exists)<\/li><\/ul><p><strong><b>Exceptions include:<\/b><\/strong><\/p><ul><li>Legal retention requirements (e.g. 7 years for invoices)<\/li><br><li>Ongoing contractual obligations<\/li><br><li>Legal claims or disputes (until resolved)<\/li><br><li>Anonymized statistics (no longer personal data)<\/li><\/ul><h5>D. Other Rights<\/h5><ul><li><b><\/b><strong><b>Restriction of processing: <\/b><\/strong>During disputes or data verification<\/li><li><b><\/b><strong><b>Data portability:<\/b><\/strong> Export of structured data<\/li><li><b><\/b><strong><b>Objection:<\/b><\/strong> To processing based on legitimate interest<\/li><li><b><\/b><strong><b>Withdrawal of consent:<\/b><\/strong> For marketing and optional features<\/li><\/ul><h4>8.2 Candidate Rights (via SkillsCV)<\/h4><p>Although candidates exercise their rights directly through the SkillsCV platform, they may also contact The Talentpool Community (TPC) for:<\/p><p><strong><b>1. Information about anonymization<\/b><\/strong><\/p><ul><li>Explanation of which data is visible to employers<\/li><li>Insight into matching algorithms and scoring logic<\/li><li>Details on re-identification prevention measures.<\/li><\/ul><p><strong><b>2. Control over Visibility<\/b><\/strong><\/p><ul><li>Adjust visibility settings through the SkillsCV account<\/li><br><li>Blacklist specific employers within the TPC platform<\/li><br><li>Temporarily hide profiles or set availability periods<\/li><\/ul><p><strong><b>3. Complaints about Employers<\/b><\/strong><\/p><ul><li>Report inappropriate contact attempts from employers<\/li><br><li>File complaints about potential discrimination<\/li><br><li>Provide feedback on match quality or algorithmic bias<\/li><\/ul><h3>9. Retention Periods<\/h3><h4>9.1 Active Employers<\/h4><table><tbody><tr><td><strong><b>Datatype<\/b><\/strong><\/td><td><strong><b>Retention Period<\/b><\/strong><\/td><td><strong><b>Legal Basis<\/b><\/strong><\/td><td><strong><b>Action After Expiry<\/b><\/strong><\/td><\/tr><tr><td>Account and contact data<\/td><td>During subscription<\/td><td>Contract<\/td><td>Deletion after account closure<\/td><\/tr><tr><td>Job posting data<\/td><br><td>2 years after publication<\/td><br><td>Legitimate interest<\/td><br><td>Archiving and\/or anonymization<\/td><\/tr><tr><td>Communication logs<\/td><br><td>3 years after last message<\/td><br><td>Contract<\/td><br><td>Automatic deletion<\/td><\/tr><tr><td>Billing information<\/td><br><td>7 years after last invoice<\/td><br><td>Legal obligation<\/td><br><td>Deletion in accordance with tax law<\/td><\/tr><tr><td>Support tickets<\/td><br><td>3 years after resolution<\/td><br><td>Legitimate interest<\/td><br><td>Archiving<\/td><\/tr><\/tbody><\/table><h4>9.2 Matching and AI-data<\/h4><table><tbody><tr><td><strong><b>Datatype<\/b><\/strong><\/td><td><strong><b>Retention Period<\/b><\/strong><\/td><td><strong><b>Purpose<\/b><\/strong><\/td><td><strong><b>Privacy-Level<\/b><\/strong><\/td><\/tr><tr><td>Matching history<\/td><br><td>1 year<\/td><br><td>Algorithm improvement<\/td><br><td>Anonymized<\/td><\/tr><tr><td>AI-training data<\/td><td>2 years<\/td><td>Model development<\/td><td>Fully anonymous<\/td><\/tr><tr><td>Bias-monitoring data<\/td><td>3 years<\/td><td>Compliance auditing<\/td><td>Aggregated<\/td><\/tr><tr><td>Performance metrics<\/td><td>5 years<\/td><td>Longitudinal analysis<\/td><td>Statistical<\/td><\/tr><\/tbody><\/table><h4><strong><b> <\/b><\/strong>9.3 Compliance and Legal<\/h4><table><tbody><tr><td><strong><b>Situatie<\/b><\/strong><\/td><td><strong><b>Retention Period<\/b><\/strong><\/td><td><strong><b>Basis<\/b><\/strong><\/td><td><strong><b>Remarks<\/b><\/strong><\/td><\/tr><tr><td>Tax documents<\/td><td>7 years<\/td><td>Dutch Civil Code (Book 2)<\/td><td>Invoices, payments<\/td><\/tr><tr><td>Employment law claims<\/td><br><td>5 years<\/td><br><td>Labour law<\/td><br><td>E.g. discrimination complaints<\/td><\/tr><tr><td>Privacy complaints<\/td><br><td>3 years after resolution<\/td><br><td>GDPR compliance<\/td><br><td>For documentation of incidents<\/td><\/tr><tr><td>Security logs<\/td><br><td>1 year<\/td><br><td>Legitimate interest<\/td><br><td>For threat detection<\/td><\/tr><\/tbody><\/table><h4><strong><b> <\/b><\/strong>9.4 Automatic Deletion Procedures<\/h4><ul><li><b><\/b><strong><b>Daily cleanup:<\/b><\/strong> Removal of expired sessions and temporary files<\/li><li><b><\/b><strong><b>Weekly purge:<\/b><\/strong> Cleanup of outdated logs and cache data<\/li><li><b><\/b><strong><b>Monthly review:<\/b><\/strong> Assessment of compliance with retention schedules<\/li><li><b><\/b><strong><b>Annual audit:<\/b><\/strong> Full review of all retention periods<\/li><\/ul><h3>10. Specific Aspects of TPC<\/h3><h4>10.1 Credit System Privacy<\/h4><h5>A. Credit-tracking<\/h5><ul><li><b><\/b><strong><b>Transparency: <\/b><\/strong>Real-time insights into credit earnings and usage<\/li><li><b><\/b><strong><b>Audit trail: <\/b><\/strong>Complete transaction history of all credit activity<\/li><li><b><\/b><strong><b>Privacy: <\/b><\/strong>No credit data is shared with third parties<\/li><li><b><\/b><strong><b>Portability:<\/b><\/strong> Ability to export credit balance when migrating accounts<\/li><\/ul><h5>B. Fair-use Monitoring<\/h5><ul><li><b><\/b><strong><b>Pattern detection: <\/b><\/strong>Automated monitoring for unusual or abusive usage<\/li><li><b><\/b><strong><b>Privacy-preserving: <\/b><\/strong>Monitoring is conducted on an aggregated level<\/li><li><b><\/b><strong><b>Human review: <\/b><\/strong>Manual assessment of flagged accounts<\/li><li><b><\/b><strong><b>Due process: <\/b><\/strong>Clear escalation procedure for policy violations<\/li><\/ul><h4>10.2 Employer Reputation Management<\/h4><h5>A. Review System (Planning)<\/h5><ul><li><b><\/b><strong><b>Anonymous feedback: <\/b><\/strong>Candidates can review employers anonymously<\/li><li><b><\/b><strong><b>Aggregated scores: <\/b><\/strong>Public reputation scores based on multiple reviews<\/li><li><b><\/b><strong><b>Bias prevention: <\/b><\/strong>Anti-manipulation measures to block fake reviews<\/li><li><b><\/b><strong><b>Right of reply: <\/b><\/strong>Employers may respond to received feedback<\/li><\/ul><h5>B. Compliance Scoring<\/h5><ul><li><b><\/b><strong><b>Diversity metrics: <\/b><\/strong>Tracking vof inclusive hiring practices<\/li><li><b><\/b><strong><b>Response rates: <\/b><\/strong>How quickly employers respond to candidate messages<\/li><li><b><\/b><strong><b>Success rates: <\/b><\/strong>Completion rates of hiring processes<\/li><li><b><\/b><strong><b>Reputation impact: <\/b><\/strong>Scores can influence priority in candidate matching<\/li><\/ul><h4>10.3 Integration Management<\/h4><h4>A. ATS-Connectivity<\/h4><ul><li><b><\/b><strong><b>Data minimization: <\/b><\/strong>Only essential data is synchronized<\/li><li><b><\/b><strong><b>Encryption: <\/b><\/strong>End-to-end encryption for API communication<\/li><li><b><\/b><strong><b>Access controls: <\/b><\/strong>Role-based access to integration-features<\/li><li><b><\/b><strong><b>Audit logging: <\/b><\/strong>Complete traceability of all data exchanges<\/li><\/ul><h5>B. Third-party Compliance<\/h5><ul><li><b><\/b><strong><b>Vendor assessment: <\/b><\/strong>Due diligence on privacy and security measures<\/li><li><b><\/b><strong><b>Contractual requirements: <\/b><\/strong>Strict data processing agreements with all integration partners<\/li><li><b><\/b><strong><b>Regular audits: <\/b><\/strong>Periodic evaluations of third-party compliance<\/li><li><b><\/b><strong><b>Incident coordination: <\/b><\/strong>Joint procedures for responding to data breaches<\/li><\/ul><h3>11. Changes to the Privacy Statement<\/h3><h4>11.1 Reasons for Updates<\/h4><ul><li><b><\/b><strong><b>Legal updates:<\/b><\/strong> Changes in legislation (e.g., new AI Act provisions, amendments to the GDPR)<\/li><li><b><\/b><strong><b>Service expansion:<\/b><\/strong> Introduction of new TPC features and functionalities<\/li><li><b><\/b><strong><b>Technical changes: <\/b><\/strong>Updates to infrastructure or security measures<\/li><li><b><\/b><strong><b>User feedback: <\/b><\/strong>Improvements based on input from users<\/li><\/ul><h4>11.2 Communication-procedure<\/h4><p><strong><b>For significant changes (announced at least 30 days in advance):<\/b><\/strong><\/p><ul><li>Email notification to all account owners<\/li><li>Dashboard notification upon login<\/li><li>A detailed changelog available on the website<\/li><li>Option to terminate account if user disagrees with the changes<\/li><\/ul><p><strong>Minor updates:<\/strong><\/p><ul><li>Notification on the website<\/li><br><li>Updated version date<\/li><br><li>Mention in quarterly newsletter<\/li><\/ul><h4>11.3 Consent Management<\/h4><ul><li><b><\/b><strong><b>Implicit consent: <\/b><\/strong>Continued use of the platform constitutes acceptance of the updated policy<\/li><li><b><\/b><strong><b>Explicit consent: <\/b><\/strong>Required for any material changes that impact user privacy<\/li><li><b><\/b><strong><b>Granular choice: <\/b><\/strong>Users can opt out of specific changes<\/li><li><b><\/b><strong><b>Grace period: <\/b><\/strong>30 days to review and evaluate the changes before they take effect<\/li><\/ul><h3>12. Contact and Complaints<\/h3><h4>12.1 Privacy Contact<\/h4><p><strong><b>For all privacy-related questions:<\/b><\/strong><\/p><p><strong><b>Primary contact:<\/b><\/strong><br>E-mail: info@skillscv.nl<br>Response time: Within 3 business days<\/p><p><strong><b>Data Protection Officer:<\/b><\/strong><br>E-mail: info@skillscv.nl<br>For complex privacy issues or GDPR interpretation<\/p><p><strong><b>Executive escalation:<\/b><\/strong><br>For unresolved issues: info @skillscv.nl<\/p><h4>12.2 Employer Support<\/h4><p><strong><b>For account and billing questions:<\/b><\/strong><br>E-mail: info@skillscv.nl<br>Phone: +31 (0)6 2256 2671<\/p><p><strong><b>Technical integration support:<\/b><\/strong><br>E-mail: info@skillscv.nl<br>For API, ATS connectivity, troubleshooting<\/p><h4>12.3 Complaints Procedure<\/h4><ol><li><b><\/b><strong><b>First line:<\/b><\/strong>Contact via info@skillscv.nl<\/li><li><b><\/b><strong><b>Escalation:<\/b><\/strong>DPO via info@skillscv.nl If unsatisfied<\/li><li><b><\/b><strong><b>External complaint: <\/b><\/strong>File a complaint with the Dutch Data Protection Authority:<\/li><\/ol><ul><li>Website: www.autoriteitpersoonsgegevens.nl<\/li><li>Phone: 0900-200 0020<\/li><li>Postal address: Postbus 93374, 2509 AJ Den Haag<\/li><\/ul><h4>12.4 Candidate Complaints<\/h4><p>Candidates can file complaints regarding:<\/p><ul><li><b><\/b><strong><b>Inappropriate employer contact: <\/b><\/strong>Via SkillsCV platform<\/li><li><b><\/b><strong><b>Suspected discrimination: <\/b><\/strong>info@skillscv.nl<\/li><li><b><\/b><strong><b>Technical matching issues: <\/b><\/strong>info@skillscv.nl<\/li><li><b><\/b><strong><b>Re-identification attempts: <\/b><\/strong>Immediate escalation to info@skillscv.nl<\/li><\/ul><h3>13. Relationship with the SkillsCV Platform<\/h3><h4>13.1 Shared Responsibility Model<\/h4><ul><li><b><\/b><strong><b>SkillsCV:<\/b><\/strong> Responsible for candidate data and consent management<\/li><li><b><\/b><strong><b>TPC: <\/b><\/strong>Responsible for employer data and the matching platform<\/li><li><b><\/b><strong><b>Shared: <\/b><\/strong>Anonymization of candidate data and security of cross-platform data transfers and processes<\/li><\/ul><h4>13.2 Data Flow Governance<\/h4><ul><li><b><\/b><strong><b>Consent propagation: <\/b><\/strong>Real-time updates of candidate permissions across platforms<\/li><li><b><\/b><strong><b>Anonymization pipeline: <\/b><\/strong>Automated sanitization of data before use in TPC<\/li><li><b><\/b><strong><b>Audit coordination: <\/b><\/strong>Synchronized logging and monitoring across SkillsCV and TPC<\/li><li><b><\/b><strong><b>Incident response: <\/b><\/strong>Joint procedures protocols for any cross-platform data incidents<\/li><\/ul><h4>13.3 User Rights Coordination<\/h4><ul><li><b><\/b><strong><b>Cross-platform requests: <\/b><\/strong>All privacy rights apply to both services (SkillsCV and TPC)<\/li><li><b><\/b><strong><b>Unified response: <\/b><\/strong>One point of contact for handling privacy requests<\/li><li><b><\/b><strong><b>Consistent policies: <\/b><\/strong>Aligned procedures and standards across both platforms<\/li><li><b><\/b><strong><b>Data portability: <\/b><\/strong>Seamless export across platform-boundaries<\/li><\/ul><p><strong><b>Last modified:<\/b><\/strong> 13 juni 2025<\/p><p><strong><b>Effective from:<\/b><\/strong> 13 juni 2025<br><strong><b>Volgende evaluatie:<\/b><\/strong> Ongoing<\/p><p>For the most current version of this privacy policy, please visit: www.cloudways-thetalentpoolcommunity.admin-developer.com\/privacybeleid<\/p><p><strong><b>Related documents:<\/b><\/strong><\/p><ul><li><a href=\"https:\/\/thetalentpoolcommunity.nl\/privacybeleid\" target=\"_blank\" rel=\"noopener nofollow\"><u>Privacy Statement SkillsCV<\/u><\/a><\/li><li><a href=\"https:\/\/thetalentpoolcommunity.nl\/cookiebeleid\/\" target=\"_blank\" rel=\"noopener nofollow\"><u>Cookie Policy<\/u><\/a><\/li><li><a href=\"https:\/\/thetalentpoolcommunity.nl\/algemene-voorwaarden\/\" target=\"_blank\" rel=\"noopener nofollow\"><u>TPC Terms of Use<\/u><\/a><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Talentpool Privacy Policy 1. Introductions SkillsCV B.V. (hereinafter: \u201cSkillsCV,\u201d \u201cwe,\u201d \u201cus\u201d) operates The Talentpool Community (TPC), a professional platform that enables employers to find talent through AI-powered matching. This privacy notice explains how we handle personal data in accordance with the General Data Protection Regulation (GDPR), the EU AI Act, and other applicable laws. 1.1 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"content-type":"","footnotes":""},"class_list":["post-4267","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Privacy Policy - The Talentpool Community<\/title>\n<meta name=\"description\" content=\"Please read our privacy policy: SkillsCV B.V. processes personal data in accordance with this statement. Your privacy is our top priority.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/thetalentpoolcommunity.nl\/en\/privacy-policy-2\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Privacy Policy - The Talentpool Community\" \/>\n<meta property=\"og:description\" content=\"Please read our privacy policy: SkillsCV B.V. processes personal data in accordance with this statement. Your privacy is our top priority.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/thetalentpoolcommunity.nl\/en\/privacy-policy-2\/\" \/>\n<meta property=\"og:site_name\" content=\"The Talentpool Community\" \/>\n<meta property=\"article:modified_time\" content=\"2025-07-16T07:13:58+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"14 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/thetalentpoolcommunity.nl\\\/en\\\/privacy-policy-2\\\/\",\"url\":\"https:\\\/\\\/thetalentpoolcommunity.nl\\\/en\\\/privacy-policy-2\\\/\",\"name\":\"Privacy Policy - The Talentpool Community\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/thetalentpoolcommunity.nl\\\/en\\\/#website\"},\"datePublished\":\"2024-03-25T09:09:36+00:00\",\"dateModified\":\"2025-07-16T07:13:58+00:00\",\"description\":\"Please read our privacy policy: SkillsCV B.V. processes personal data in accordance with this statement. Your privacy is our top priority.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/thetalentpoolcommunity.nl\\\/en\\\/privacy-policy-2\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/thetalentpoolcommunity.nl\\\/en\\\/privacy-policy-2\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/thetalentpoolcommunity.nl\\\/en\\\/privacy-policy-2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/thetalentpoolcommunity.nl\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privacy Policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/thetalentpoolcommunity.nl\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/thetalentpoolcommunity.nl\\\/en\\\/\",\"name\":\"The Talentpool Community\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/thetalentpoolcommunity.nl\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/thetalentpoolcommunity.nl\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/thetalentpoolcommunity.nl\\\/en\\\/#organization\",\"name\":\"The Talentpool Community\",\"url\":\"https:\\\/\\\/thetalentpoolcommunity.nl\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/thetalentpoolcommunity.nl\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/thetalentpoolcommunity.nl\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/talentpool-community_new-logo.svg\",\"contentUrl\":\"https:\\\/\\\/thetalentpoolcommunity.nl\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/talentpool-community_new-logo.svg\",\"width\":325,\"height\":67,\"caption\":\"The Talentpool Community\"},\"image\":{\"@id\":\"https:\\\/\\\/thetalentpoolcommunity.nl\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Privacy Policy - The Talentpool Community","description":"Please read our privacy policy: SkillsCV B.V. processes personal data in accordance with this statement. Your privacy is our top priority.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/thetalentpoolcommunity.nl\/en\/privacy-policy-2\/","og_locale":"en_US","og_type":"article","og_title":"Privacy Policy - The Talentpool Community","og_description":"Please read our privacy policy: SkillsCV B.V. processes personal data in accordance with this statement. Your privacy is our top priority.","og_url":"https:\/\/thetalentpoolcommunity.nl\/en\/privacy-policy-2\/","og_site_name":"The Talentpool Community","article_modified_time":"2025-07-16T07:13:58+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"14 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/thetalentpoolcommunity.nl\/en\/privacy-policy-2\/","url":"https:\/\/thetalentpoolcommunity.nl\/en\/privacy-policy-2\/","name":"Privacy Policy - The Talentpool Community","isPartOf":{"@id":"https:\/\/thetalentpoolcommunity.nl\/en\/#website"},"datePublished":"2024-03-25T09:09:36+00:00","dateModified":"2025-07-16T07:13:58+00:00","description":"Please read our privacy policy: SkillsCV B.V. processes personal data in accordance with this statement. Your privacy is our top priority.","breadcrumb":{"@id":"https:\/\/thetalentpoolcommunity.nl\/en\/privacy-policy-2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/thetalentpoolcommunity.nl\/en\/privacy-policy-2\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/thetalentpoolcommunity.nl\/en\/privacy-policy-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/thetalentpoolcommunity.nl\/en\/"},{"@type":"ListItem","position":2,"name":"Privacy Policy"}]},{"@type":"WebSite","@id":"https:\/\/thetalentpoolcommunity.nl\/en\/#website","url":"https:\/\/thetalentpoolcommunity.nl\/en\/","name":"The Talentpool Community","description":"","publisher":{"@id":"https:\/\/thetalentpoolcommunity.nl\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/thetalentpoolcommunity.nl\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/thetalentpoolcommunity.nl\/en\/#organization","name":"The Talentpool Community","url":"https:\/\/thetalentpoolcommunity.nl\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/thetalentpoolcommunity.nl\/en\/#\/schema\/logo\/image\/","url":"https:\/\/thetalentpoolcommunity.nl\/wp-content\/uploads\/2024\/01\/talentpool-community_new-logo.svg","contentUrl":"https:\/\/thetalentpoolcommunity.nl\/wp-content\/uploads\/2024\/01\/talentpool-community_new-logo.svg","width":325,"height":67,"caption":"The Talentpool Community"},"image":{"@id":"https:\/\/thetalentpoolcommunity.nl\/en\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/thetalentpoolcommunity.nl\/en\/wp-json\/wp\/v2\/pages\/4267","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thetalentpoolcommunity.nl\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/thetalentpoolcommunity.nl\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/thetalentpoolcommunity.nl\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/thetalentpoolcommunity.nl\/en\/wp-json\/wp\/v2\/comments?post=4267"}],"version-history":[{"count":0,"href":"https:\/\/thetalentpoolcommunity.nl\/en\/wp-json\/wp\/v2\/pages\/4267\/revisions"}],"wp:attachment":[{"href":"https:\/\/thetalentpoolcommunity.nl\/en\/wp-json\/wp\/v2\/media?parent=4267"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}