Privacy Statement

1. Personal data we process

Brum & Keizer Dienstverlening processes your personal data because you use our services and/or because you provide it to us yourself. Below you will find an overview of the personal data we process:

• First and last name
• Gender
• Date of birth
• Address details
• Phone number
• Email address
• CV and work experience
• Educational background
• BSN number (only when legally required)
• Copy of ID (only when legally required)
• Bank details (for payroll processing only)
• IP address and browser data
• Answers you provide to the intake assistant on our website (place of residence, languages, desired work, hours, shifts and transport)

2. Why we process data

Brum & Keizer Dienstverlening processes your personal data for the following purposes:

• Executing the temporary employment or placement agreement
• Mediating between job seekers and employers
• Processing salary payments
• Complying with legal obligations (including tax and occupational health and safety legislation)
• Sending relevant vacancies and information
• Improving our services
• Analysing website usage through anonymised data

3. Legal basis for processing

Brum & Keizer processes personal data on the basis of the following legal grounds in accordance with the GDPR:

• Performance of a contract: The processing is necessary for the performance of the temporary employment or placement agreement.
• Legal obligation: The processing is necessary to comply with a legal obligation (including tax legislation and Waadi).
• Legitimate interest: The processing is necessary for the purposes of the legitimate interests of Brum & Keizer or a third party.
• Consent: You have given consent for the processing, for example to receive vacancy updates.

4. Retention period

Brum & Keizer Dienstverlening does not keep your personal data any longer than is strictly necessary to achieve the purposes for which your data is collected. We apply the following retention periods:

• Application data (EasyFlex and email): Maximum 4 weeks after the end of the application procedure, unless you give consent for longer retention of a maximum of 1 year.
• Application overview in our admin environment: Name, contact details and motivation are stored for 56 days (8 weeks) in a secure admin database so that Marloes and Jacqueline can contact you in time. After that, they are automatically deleted. CV files are NOT stored here, they are only sent via email to work@brumenkeizer.nl.
• AI matching suggestions: Based on your motivation, an AI system (Claude by Anthropic) generates a match score with open vacancies, for consideration by our recruiters. These suggestions are NOT an automated decision within the meaning of GDPR Article 22; a human assesses each candidate manually. You have the right to request the human assessment and to object to automated processing. The match output is deleted together with the application data within 56 days.
• Temporary workers: During the employment period and up to 2 years after its end, unless legal obligations require longer retention.
• Tax data: 7 years in accordance with the statutory retention obligation.
• Website analytics: Maximum 26 months.
• Intake assistant on the website: The conversation with the intake assistant is processed by an AI service (Claude by Anthropic), so that the assistant understands your answers and can show suitable vacancies. We do not store the conversation itself. Only when you press send at the end do we receive a summary: name, place of residence, languages, desired work, hours, shifts and transport, and if you provide them your phone number, email address and CV. We keep that summary just like an application for 56 days in our admin environment. If you choose WhatsApp, you send the message yourself from your own WhatsApp and it then appears in our WhatsApp chat. The assistant does not make decisions about you: Marloes and Jacqueline assess each candidate themselves.

5. Sharing with third parties

Brum & Keizer Dienstverlening only provides your data to third parties if this is necessary for the performance of our agreement with you or to comply with a legal obligation. With companies that process your data on our behalf, we conclude a processing agreement to ensure the same level of security and confidentiality of your data.

Data may be shared with:

• Clients (employers) in the context of recruitment
• Payroll and accounting
• Occupational health service
• Tax authorities and UWV
• Pension provider (StiPP)
• Anthropic (Claude), for the AI functions on our website: the intake assistant and the matching suggestions. Anthropic does not use this data to train AI models.

6. Cookies and website use

Brum & Keizer Dienstverlening uses functional and analytical cookies to analyse the use of the website and to improve the website. Cookies are small text files that are stored on your computer, tablet or smartphone when you first visit this website.

You can opt out of cookies by setting your internet browser not to store cookies anymore. In addition, you can also delete all information that was previously stored via the settings of your browser.

7. Security

Brum & Keizer Dienstverlening takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorised access, unwanted disclosure and unauthorised modification. If you have the impression that your data is not properly secured or there are signs of misuse, please contact us at work@brumenkeizer.nl.

8. Your rights

You have the right to view, correct or delete your personal data. In addition, you have the right to withdraw your consent to the processing of data or to object to the processing of your personal data. You have the following rights:

• Right of access: You can submit a request to view your personal data.
• Right to rectification: You can request to have your data adjusted or supplemented.
• Right to erasure: You can request to have your data deleted.
• Right to restriction: You can request to restrict the processing of your data.
• Right to data portability: You can request to transfer your data to another party.
• Right to object: You can object to the processing of your data.

You can submit a request for access, correction, deletion or data transfer of your personal data to work@brumenkeizer.nl. We will respond to your request as quickly as possible, but within four weeks at the latest.

9. Complaints

Brum & Keizer Dienstverlening would also like to inform you that you have the option to file a complaint with the national supervisory authority, the Autoriteit Persoonsgegevens (Dutch Data Protection Authority). You can do so via the following link: autoriteitpersoonsgegevens.nl.

10. Changes

Brum & Keizer Dienstverlening reserves the right to make changes to this privacy statement. We therefore advise you to consult this privacy statement regularly so that you are aware of any changes.