Privacy Policy

1. Data controller

The controller of your personal data is:

You can contact the data controller for any matter concerning the processing of personal data and the exercise of your rights. BW BestWork operates as a construction-sector recruitment agency in the Kingdom of the Netherlands.

2. Scope of collected data

The scope of the data we process depends on your relationship with BW BestWork. We only collect data necessary for the purpose for which they are processed.

2.1. Job candidates

• Identification data: first and last name, date of birth
• Contact data: e-mail address, phone number, home address
• Professional data: professional experience, qualifications, certifications (e.g. VCA), languages, driving licence
• Documents: CV, copy of ID card or passport (at a later recruitment stage), A1 certificate, contract details
• Employee data (after cooperation begins): BSN number (Dutch tax identification number), bank account number, contract details

2.2. Clients (general contractors, construction firms)

• Company name, address, KvK number or equivalent
• First and last name of the contact person
• Work e-mail, phone number
• Information necessary to fulfil the recruitment assignment

2.3. Website users

• Data submitted via the contact form (name, e-mail, phone, enquiry content)
• Technical cookies necessary for the site to function (session, security) — details in section 11

3. Purposes and legal bases for processing

We process personal data only for specific, clearly defined purposes, on a concrete legal basis under Article 6 of the GDPR:

Withdrawing consent: If processing is based on consent (e.g. CV database), you may withdraw it at any time by sending a message to office@bw-bestwork.com. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

4. Data retention period

Data is kept only for the period necessary to fulfil the purposes of processing:

• Candidate CVs after a closed recruitment without hire: 12 months from the date the recruitment process closes, unless the candidate provides separate consent to a longer period
• Employee data after cooperation ends: 7 years in line with Dutch tax law (Algemene Wet inzake Rijksbelastingen)
• Accounting and tax records: 7 years (obligation under Dutch legislation)
• Contact-form correspondence without follow-up: 6 months
• Client data after the contract ends: 5 years (for evidentiary purposes in any disputes)
• Technical cookies: duration of the session or a maximum of 30 days

Once these periods lapse, data is irreversibly deleted or anonymised.

5. Data recipients

Your personal data may be shared with the following categories of recipients:

5.1. BW BestWork clients (general contractors)

To fulfil the recruitment process, we share the candidate’s CV and contact details with selected construction firms that have placed an assignment. The sharing takes place only after an initial verification that the profile matches and — where possible — after obtaining the candidate’s consent.

5.2. Processors

• Nazwa.pl S.A. (Poland, EEA) — website hosting services
• Google Ireland Limited / Google LLC (Ireland / USA) — Google Workspace services, including e-mail, calendar and work drive
• Accounting firm — accounting and tax services, under a data-processing agreement

5.3. Public authorities

To the extent required by law, data may be disclosed to public authorities (tax offices, social-security bodies, their Dutch equivalents), the police or the courts, upon their explicit and lawfully substantiated request.

6. Transfer of data outside the European Economic Area (EEA)

We use Google Workspace services (Gmail, Drive, Calendar) provided by Google LLC, based in the United States. This means that your data may be transferred to the USA.

This transfer takes place on the basis of:

• The European Commission decision of 10 July 2023 on the adequate level of data protection provided by the USA under the EU-U.S. Data Privacy Framework
• Standard Contractual Clauses (SCC) approved by the European Commission
• Additional technical and organisational safeguards applied by Google (encryption, access control)

Detailed information about Google’s privacy practices is available at policies.google.com/privacy.

7. Your rights

In connection with the processing of your personal data, you have the following rights:

• Right of access (Article 15 GDPR) — you may obtain a copy of your data and information about how it is processed
• Right to rectification (Article 16 GDPR) — you may request that inaccurate data be corrected or incomplete data completed
• Right to erasure (Article 17 GDPR, the “right to be forgotten”) — you may request the deletion of your data in the situations foreseen by the GDPR
• Right to restriction of processing (Article 18 GDPR) — you may request the temporary suspension of operations on your data
• Right to data portability (Article 20 GDPR) — you may receive your data in a structured format and transmit it to another controller
• Right to object (Article 21 GDPR) — you may object to the processing of data based on the legitimate interest of the controller
• Right to withdraw consent (Article 7(3) GDPR) — where the legal basis is consent, you may withdraw it at any time

To exercise any of these rights, send a message to office@bw-bestwork.com. You will receive a reply within a maximum of 30 days of receipt of your request. Exercising rights is free of charge, except in clearly abusive cases.

8. Right to lodge a complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority:

You can lodge a complaint with the supervisory authority of the EU Member State where you live, work or where the alleged infringement took place. We do recommend contacting us first — many matters can be resolved directly.

9. Profiling and automated decisions

BW BestWork does not make decisions about you based solely on the automated processing of data (including profiling) that produce legal effects concerning you or similarly significantly affect you.

Recruitment decisions (including matching a candidate to an offer) are always made by qualified BW BestWork staff, taking into account individual circumstances.

10. Data security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, modification or disclosure, including:

• Encryption of the connection to the website via HTTPS / SSL
• Encryption of e-mail communication (TLS) and two-step verification of Google Workspace accounts
• Access control to data — only authorised BW BestWork staff
• Regular data backups
• Updates to the server and website software
• A procedure for reporting data-protection breaches in line with Article 33 GDPR (notifying the supervisory authority within 72 hours)

11. Cookies and tracking technologies

The BW BestWork website uses only technical and functional cookies, necessary for the site to work correctly and to ensure security. We do not use analytical or advertising cookies (no Google Analytics, Facebook Pixel or similar tools).

11.1. Technical cookies

• WordPress session — maintaining the user session (login to the administrative panel)
• Form security cookies (Contact Form 7) — protection against CSRF attacks, valid: for the duration of the session

Technical cookies do not require user consent under Article 5(3) of the ePrivacy Directive.

11.2. Disabling cookies

You can disable or restrict cookies in your browser settings at any time. Full instructions for popular browsers are available at allaboutcookies.org. Disabling technical cookies may affect the functioning of some site features.

Detailed information can be found in a separate document: Cookie Policy.

12. Changes to this policy

BW BestWork reserves the right to periodically update this privacy policy in order to remain compliant with current legislation, service changes or industry practice.

We will inform you of material changes affecting your rights or the way your data is processed with reasonable notice — by e-mail (if we have your address) or by a clear notice on the home page.

The current version of this document is always available at bw-bestwork.com/en/privacy-policy. The date of the last update is shown at the top of the document.