including our Privacy Policy — Synk & Sign B.V.
1. Who We Are
Synk & Sign B.V. ("Synk & Sign", "we", "us", "our") operates a digital recruitment platform connecting candidates with employers. We act as the data controller for personal data processed through our platform in accordance with the General Data Protection Regulation (GDPR) and Dutch implementation standards.
Company details:
- Legal entity: Synk & Sign B.V.
- Registered address: [INSERT ADDRESS]
- Chamber of Commerce (KvK): [INSERT KvK NUMBER]
- VAT number: [INSERT VAT NUMBER]
Contact (privacy matters): privacy@synkandsign.com
We have not appointed a Data Protection Officer (DPO). For all privacy-related matters, you can contact us using the details above.
2. Scope of This Policy
This Privacy Policy applies to all users of the Synk & Sign platform, including candidates and company representatives.
3. Personal Data We Collect
3.1 Account Data
- Name
- Email address
- Phone number
- Educational background
3.2 Profile Data
- Bio / personal description
- Profile photo (avatar)
- School / university details
- Work preferences and interests
3.3 Video Introductions
- Short (e.g., 15-second) video recordings voluntarily uploaded by users
3.4 Usage and Platform Data
- Interaction data (clicks, matches, applications)
- Log data (IP address, device type, browser type)
- Session activity
3.5 Communication Data
- Messages between users and employers (if applicable)
- Support inquiries
4. Purposes and Legal Bases for Processing
We process personal data only when we have a valid legal basis under Article 6 GDPR:
| Data Type | Purpose | Legal Basis |
|---|
| Account data | Account creation and management | Contract (Art. 6(1)(b)) |
| Profile data | Matching candidates with employers | Contract (Art. 6(1)(b)) |
| Video data | Sharing with employers | Consent (Art. 6(1)(a)) |
| Usage data | Platform improvement, analytics | Legitimate interest (Art. 6(1)(f)) |
| Security data | Fraud prevention and system security | Legitimate interest (Art. 6(1)(f)) |
| Communication data | Customer support | Contract (Art. 6(1)(b)) |
Where processing is based on consent, you may withdraw your consent at any time.
5. How We Use Video Data
Video introductions are:
- Voluntarily provided by users
- Stored securely on encrypted servers within the EU
- Shared only with employers you match with or express interest in
- Never sold or used for marketing purposes
- Deleted upon withdrawal of consent or account deletion (within 30 days)
6. Profiling and Automated Decision-Making
We use algorithmic matching to suggest relevant candidates and employers based on profile data and preferences.
- This constitutes profiling under GDPR
- It does not produce legal or similarly significant effects
- Final hiring decisions are always made by employers
7. Data Sharing and Recipients
7.1 Employers
- Only when you match with them or apply for a position
7.2 Service Providers (Processors)
We use trusted third-party providers for:
- Cloud hosting and infrastructure
- Data storage
- Analytics and platform performance
All processors:
- Act under Data Processing Agreements (DPAs)
- Process data only on our instructions
- Are GDPR-compliant
We do not sell personal data to third parties.
8. International Data Transfers
If personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Transfers only to countries with adequate protection levels
9. Data Retention
We retain personal data as follows:
- Active accounts: data retained while account is active
- Inactive accounts: deleted or anonymized after 12–24 months of inactivity
- Video data: deleted within 30 days of account deletion or consent withdrawal
- Legal obligations: certain data may be retained longer where required by law
We may retain aggregated or anonymized data for analytical purposes.
10. Data Security
We implement appropriate technical and organizational measures, including:
- Encryption (in transit and at rest)
- Access controls and authentication systems
- Role-based data access
- Secure server infrastructure within the EU
- Monitoring and logging of system activity
11. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Ensure platform functionality
- Analyze usage and improve performance
Where required, we obtain your consent for non-essential cookies.
12. Your Rights Under GDPR
You have the following rights:
- Right of access – obtain a copy of your data
- Right to rectification – correct inaccurate data
- Right to erasure – request deletion of your data
- Right to restriction – limit processing
- Right to object – object to certain processing
- Right to data portability – receive your data in structured format
- Right to withdraw consent – at any time
To exercise your rights, contact: privacy@synkandsign.com.
13. Complaints
You have the right to lodge a complaint with a supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens: autoriteitpersoonsgegevens.nl.
14. Children and Age Requirements
Our platform is not intended for individuals under the age of 16. We do not knowingly collect personal data from minors.
15. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated date.
16. Contact
For any privacy-related questions:
Synk & Sign B.V.
Email: privacy@synkandsign.com