Privacy statement | Evers Soerjatin

1. Who is responsible?

Evers Soerjatin N.V., located at Koningslaan 31, 1075 AB Amsterdam, the Netherlands, is the controller for the processing described in this statement.

For privacy questions, contact us at info@everssoerjatin.com.

2. Which personal data do we process?

Depending on how you use the website and contact us, we may process the following data:

contact details, such as your name, email address and telephone number;
the content of correspondence you conduct with us by email or telephone;
information you provide when applying for a position, such as your CV, motivation, education and work experience;
your email address and attendance choice when responding to an invitation through an RSVP link;
technical data, such as your IP address, browser type, device and session data and information from server logs;
your cookie preferences and data collected with your consent through cookies or similar technologies;
data relating to employees and business contacts required for our services, website and administration.

3. Why do we use personal data?

to answer your question or message and maintain contact with you;
to prepare, provide and administer our legal services;
to assess applications and conduct recruitment procedures;
to register attendance for events;
to operate and secure the website and prevent misuse;
to measure website use and display external content, subject to consent where required;
to comply with legal obligations and establish, exercise or defend our rights.

4. What are our legal bases?

We only process personal data where there is a valid legal basis. Depending on the situation, this is the performance of a contract or steps before entering into a contract, compliance with a legal obligation, your consent or a legitimate interest. Our legitimate interests include a secure website, careful communication, the organisation of events and efficient business operations.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing lawfully carried out before withdrawal.

5. With whom do we share personal data?

We only share personal data where this is necessary for the stated purpose, required by law or based on your consent. Recipients may include our hosting and IT suppliers, email provider, website administrator and professional advisers.

The website uses Cookiebot for the cookie banner and the cookie overview. That service receives technical data, including your IP address. All other parts of the website, such as fonts, images, stylesheets and scripts, are served from our own domain.

Where a party acts as our processor, we make arrangements concerning security and confidentiality.

6. Transfers outside the European Economic Area

Some suppliers may process personal data outside the European Economic Area. Where this occurs, we use a valid transfer mechanism, such as an adequacy decision or standard contractual clauses approved by the European Commission, and apply additional safeguards where required.

7. How long do we retain personal data?

We do not retain personal data longer than necessary for the purpose for which it was collected, unless a statutory obligation or legitimate necessity requires a longer period.

technical application logs are generally retained for 14 days;
website sessions generally expire after 120 minutes of inactivity;
password reset links for administrators remain valid for 60 minutes;
RSVP data is retained for as long as necessary to organise and conclude the relevant event;
application data is deleted after the recruitment procedure unless a longer period has been agreed with the applicant;
data in business files and records is retained in accordance with applicable statutory and professional retention periods.

8. How do we secure personal data?

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration and disclosure. No digital processing is entirely risk-free, so we review our measures periodically.

9. Your privacy rights

You may request access to, rectification or erasure of, or restriction of processing of your personal data. In certain cases you may also object, withdraw consent or request data portability. We may ask you to confirm your identity before processing a request.

You also have the right to lodge a complaint with the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl.

10. Cookies

Our cookie statement explains which cookies and similar technologies the website uses and how to change your preferences.

11. Changes

We may update this privacy statement when our practices, the website or applicable law changes. The most recent version is always available on this page.