Introduction
This is the Privacy Statement of YER Nederland B.V. (VAT: NL808783713B01, Chamber of Commerce: 34131598) and its subsidiaries YER Professionals B.V. and YER Engineering B.V. (hereinafter jointly referred to as: YER Group). YER Group is responsible for data processing (Controller within the meaning of the General Data Protection Regulation).
YER Group is an organization that connects candidates and employers. For this purpose, YER Group processes personal data of both candidates and clients. YER Group guarantees careful and confidential handling of this data, taking into account the interests of all parties involved. We also take the utmost care in safeguarding the privacy of visitors to this website. You are welcome to visit our website as often as you like, free of obligation. This Privacy Statement explains which personal data is collected and for what purpose. Personal data is processed and secured with the utmost care in accordance with applicable laws, including the General Data Protection Regulation (EU Regulation 2016/679).
Why we collect your personal data
We process your personal data to provide our services, including secondment, staffing, personal development, employability, and payroll administration.
More specifically, we process your data to:
- Verify your identity
- Provide you with offers and/or information about our services and tailor them to your preferences and qualifications (partly automated, e.g. job alerts)
- Assess your suitability and availability for permanent or temporary positions or assignments (including tests, references, and relevant social media)
- Establish and maintain an employment or mediation relationship and related administration
- Record and execute agreements with clients
- Support your development and employability (training, education, assessments)
- Contact you and respond to your inquiries
- Handle information requests and complaints
- Perform management activities (reporting, audits, internal controls, security)
- Ensure quality standards (e.g. certification)
- Apply for subsidies or benefits
- Comply with legal obligations (e.g. labor law, tax law, fraud prevention, sanctions)
- Contact you for events or competitions
Legal basis for processing
We process personal data based on:
- Your explicit consent
- The necessity to perform or enter into a contract
- Compliance with legal obligations
- Protection of vital interests
- Legitimate interest (unless overridden by your rights)
Legitimate interests include:
- Ensuring your safety
- Quality and training purposes
- IT management and security improvements
- Website and service optimization
- Service development and analysis
- Communication with you and our network
- Fraud prevention and misuse detection
When we collect your data
We collect your personal data when you provide it via our website or otherwise register for our services.
We may also collect data from public sources (e.g. LinkedIn, job boards) if you appear open to career opportunities. In that case, we may contact you in line with this Privacy Statement.
What personal data we process
We process only data necessary for our services. Some data is required, while additional data helps tailor our services.
We generally do not process sensitive data unless required by law.
Examples include:
For candidates:
- Name, address, email, and contact details
- Date of birth, age, gender
- CV, motivation letter, education, experience
- Training and course data
- References and assessments
If you work for YER:
- Nationality, BSN, ID, work permit
- Payroll and absence data
- Certificates (e.g. VOG, WFT, PES)
For business relations:
YER processes personal data of individuals who work for organizations we do business with. This communication relates to making offers, providing information about our services, maintaining business relationships, and concluding and managing service agreements. For this purpose, YER processes:
- Name, role, contact details
- Company-related information
With whom we share your data
We only share your personal data with third parties when necessary, for example when they perform activities on behalf of YER, and solely for the purposes described in this Privacy Statement. If a third party is engaged, YER ensures that this party applies the same level of security and confidentiality as we do. YER remains responsible for the processing of personal data and enters into agreements with third parties to ensure your data is properly protected.
YER may share your personal data with a third party in the event of a merger, acquisition, or sale of (part of) its organization, such as with a potential buyer or seller. In such cases, we will inform you via email and/or a clearly visible notice on the website, and inform you of your rights in this situation.
If you wish to be placed or have been placed (candidates):
YER may share your personal data within its own entities, with its clients, suppliers (such as CV data processors) who provide services or carry out assignments on its behalf, government authorities, and other business partners. This also applies in all other cases where we may be required to do so, for example by court order or legal judgment.
If you work, have worked, or will work for YER:
The same applies as described above for candidates.
The sharing of personal data is based on a legitimate interest, legal obligation, and/or the performance of an agreement, in line with the purposes described under “Why do we collect your personal data?”
If you are a business relation of YER (client/supplier):
YER may share personal data obtained from its business relations if this is necessary to achieve the objectives of the business relationship or for staffing purposes. This data may be shared within YER entities, with applicants or candidates, business partners, and subcontractors (e.g. data processors) who provide services on its behalf, and in all other cases where YER may be required to do so, for example by court order or legal judgment.
To measure the business use of our website, we use the services of Leadinfo. This service shows us company names and addresses based on the IP addresses of our visitors. The IP address itself is not stored.
How long do we retain your personal data
Retention periods vary depending on the nature of the services provided and applicable legal requirements. YER never retains personal data longer than necessary for the purpose of processing. We retain your personal data for as long as needed to provide our services, enable your use of the website, comply with applicable laws, resolve disputes, and otherwise as required to conduct our business operations.
If you wish to be placed or have been placed (candidates):
YER deletes your placement data (CV, work experience, education, test results, etc.) no later than 4 weeks after the end of the application process, unless you have given consent to retain your data for a longer period. In that case, we will delete your personal data after two years.
If you work, have worked, or will work for YER:
Your personal data remains available for (re)placement purposes for up to two years after the end of your employment.
Certain personal data may be retained for a longer period for purposes such as claims, audits, and tax obligations, in accordance with statutory retention periods. This data is only accessible to a limited number of YER employees.
If you are a business relation of YER (client/supplier):
Your name and contact details are retained for as long as they remain relevant to the purpose for which they were collected. Business contact data will be updated or deleted once it is no longer relevant.
What are your rights
- You have the right to request access to all personal data we process about you. Requests for access that are clearly intended to cause disruption or harm will not be processed.
- You have the right to request that any incorrect or inaccurate personal data about you be corrected free of charge. If such a request is submitted, you must include proof that the data in question is incorrect.
- You have the right to withdraw your previously given consent for the processing of your personal data. You can withdraw your consent at any time by sending an email to dpo@yer.nl.
- You have the right to request the deletion of your personal data if you withdraw your consent. Please note that such requests will be assessed in light of legal or regulatory obligations, or administrative or judicial orders that may prevent us from deleting the data.
- Instead of deletion, you may also request that we restrict the processing of your personal data if (a) you contest the accuracy of the data, (b) the processing is unlawful, or (c) the data is no longer needed for the stated purposes but you require it for legal claims.
- You have the right to object to the processing of your personal data if you can demonstrate serious and legitimate grounds relating to your specific situation. If the processing concerns direct marketing, you have the right to object free of charge and without justification.
- If your personal data is processed based on consent or a contract and is carried out by automated means, you have the right to receive the personal data you provided to us in a structured, commonly used, and machine readable format. Where technically feasible, you also have the right to have this data transferred directly to another service provider. Technical feasibility is determined solely by us.
- You have the right to data portability, meaning the right to transfer your personal data to another party.
- You have the right not to be subject to a decision based solely on automated processing.
Security
YER takes all appropriate measures to protect your personal data against unlawful use. We implement suitable physical, administrative, organizational, and technical safeguards. For example, only authorized individuals have access to the data. Where data is shared with processors acting on our behalf, we ensure that a data processing agreement is in place requiring them to apply the same high level of security. Access by our employees and those of our processors is subject to strict confidentiality obligations.
Where we process data
We and our external processors will only process your identifiable personal data outside the European Economic Area (EEA) where there is a legitimate basis for doing so.
If such a transfer occurs, we ensure appropriate safeguards are in place to protect the security and integrity of your personal data. All rights you are entitled to under applicable law will be guaranteed, and the necessary legal protection mechanisms will be implemented.
Automated decision making
YER may, where necessary, make decisions based on automated processing that can have significant consequences for you. These are decisions made by computer systems without human intervention. For example, in cases of suspected fraudulent activity, we may block access to our websites.
Questions, comments, complaints or (suspected) data breach
If you have questions, comments, or complaints about the protection of your personal data, you can contact YER in writing or by email via:
YER Nederland
Attn. Legal Department
Hogehilweg 16
1101 CD Amsterdam
If you remain dissatisfied with our response, you are free to file a complaint with the competent data protection authority, the Autoriteit Persoonsgegevens.
If you suspect a data breach, please report it immediately via yer.nl/en/report-data-breach/.
Changes
YER may update this Privacy Statement from time to time for various reasons. The most up to date version is always available on the website at yer.nl. We recommend checking this policy regularly.
Last updated: 01-05-2023