Privacy policy

Our privacy policy.

Effective Date: 06/02/2025

Thank you for visiting Outtask.nl (hereinafter referred to as “Outtask,” “we,” “us,” or “our”). We attach great importance to your privacy and are committed to protecting your personal data. This privacy statement describes how we collect, use, disclose, and safeguard your personal data in accordance with the General Data Protection Regulation (GDPR) and other relevant laws and regulations.

1. Who We Are

• Legal Entity: Outtask B.V.
• Registered Address: Concertgebouwplein 7, 1071LL Amsterdam
• Contact Email for Privacy Inquiries: info@outtask.nl
• Data Protection Officer (DPO): We currently do not have a designated DPO.

2. Scope and Applicability

This privacy statement applies to all individuals whose personal data we process in the context of our secondment and recruitment activities, including (but not limited to):

• Visitors to our website
• Potential or current candidates, professionals, and freelancers (ZZP-ers)
• Employees of our (potential) clients, suppliers, or subcontractors
• Anyone who contacts us for more information about our services

3. Which Personal Data We Collect

3.1 Data You Voluntarily Provide

We collect personal data that you voluntarily provide to us when you register with us, apply for a position, or otherwise communicate with us. This may include, but is not limited to:

• Identification and Contact Details: Name, address, phone number, email address
• Application Materials: CV, cover letters, references from previous employers, relevant assessment reports
• Work and Educational History: Education, certificates, diplomas, skills, work experience
• Compensation and Banking Details: (if necessary) bank account number, salary indications
• Other Data: Any other information you share in the context of recruitment or secondment

3.2 Data Collected Automatically

We also collect certain technical information when you use our website or digital services, such as:

• IP Address and Browser Information: IP address, browser type, device information
• Cookies and Tracking: Data collected via cookies or similar technologies for analytics or marketing

For more details, please refer to our Cookie Policy.

4. Why We Collect and Process Personal Data

We process personal data for purposes necessary for our secondment, recruitment, and related business activities:

1. Recruitment and Secondment Services

• Searching for suitable candidates for secondment assignments
• Matching candidates, professionals, or freelancers (ZZP-ers) with (potential) clients
• Managing applications and facilitating communication throughout the recruitment and secondment process

2. Contractual Obligations

• Entering into and fulfilling contracts with clients, professionals, or freelancers
• Conducting personnel and payroll administration
• Processing billing and other legitimate business processes

3. Legal and Regulatory Requirements

• Compliance with tax, social security, and other statutory obligations
• Management of work permits or visa requirements
• Cooperation with government agencies or other authorities when legally required

4. Business Operations and Improvements

• Analyzing performance, conducting audits, and ensuring quality control
• Improving our services, internal research, and optimizing user experience

5. Marketing and Relationship Management

• Informing about new services, trainings, or events that may be of interest
• Maintaining relationships with existing and potential clients, professionals, or candidates

6. Security and Fraud Prevention

• Protecting our systems and data against unauthorized access or misuse

5. Legal Bases for Processing

We process your personal data on one or more of the following legal grounds:

• Necessary for the Performance of a Contract: If processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract.
• Legal Obligation: If processing is necessary for compliance with a legal or regulatory obligation.
• Legitimate Interest: If processing is necessary for our legitimate interests or those of a third party (for example, for recruitment, secondment, or business operations), provided that your fundamental rights do not override those interests.
• Consent: In situations where you have given us explicit consent to process your data (e.g., for certain marketing communications or storing your CV for future vacancies). You have the right to withdraw this consent at any time.

6. Data Sharing and Recipients

We may share your personal data with third parties in the context of secondment, recruitment, or business operations. This includes:

• Clients and Potential Clients: To introduce candidates and enable secondment
• Service Providers and Suppliers: Who support our business operations (e.g., cloud hosting, payroll administration, assessments)
• Government Agencies or Regulatory Authorities: Where legally required
• Professional Advisors: Such as accountants or legal advisors, when necessary

We do not sell or rent your personal data. All parties that process personal data on our behalf are bound by contractual obligations to keep this information confidential and to process it only for the purposes we specify.

7. International Data Transfers

We do not actively transfer your personal data outside the European Economic Area (EEA). If it becomes necessary in the future, we will ensure appropriate safeguards, for example by using model contractual clauses or other valid transfer mechanisms as legally required.

8. Retention Periods

We do not retain your personal data longer than necessary for the purposes described in this privacy statement and to comply with legal, fiscal, or administrative requirements. In general:

• Candidate Data: Retained for the maximum period allowed by law. If local regulations do not specify a term, we may retain your data for up to 2 years after our last contact or until you request deletion.
• Employees or Contracted Persons: Data is retained for the duration of employment or contractual period and as long as legally required (often up to 7 years).
• Business Relationships (Clients/Suppliers): Data is retained as long as there is a contractual or business relationship.
• We regularly review our retention periods to ensure we do not store data longer than necessary.

9. Your Rights

Under the GDPR, you have certain rights with regard to your personal data. In particular, you may:

1. Withdraw Consent: Where processing is based on your consent.
2. Access: Request information about the personal data we hold about you.
3. Rectification: Request correction or updating of incorrect or incomplete data.
4. Erasure (Right to Be Forgotten): Request deletion of your personal data, subject to certain legal conditions.
5. Restriction: Request that we limit the processing of your personal data under certain circumstances.
6. Portability: Receive your personal data in a structured, commonly used, and machine-readable format.
7. Objection: Object to processing based on legitimate interest or for direct marketing.

To exercise any of these rights, you can send an email to info@outtask.nl. We may ask you to verify your identity to ensure we handle your request properly.

If you feel that we have not handled your request or complaint to your satisfaction, you have the right to lodge a complaint with the competent data protection authority.

10. Security Measures

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Access management and password policies
• Secure servers within the EU
• Encryption of data during transmission
• Firewalls and intrusion detection systems

However, no system is completely secure, and we cannot guarantee absolute security of your data.

11. Automated Decision-Making

We generally do not engage in fully automated decision-making that produces legal or similarly significant effects. If we do so in the future, we will comply with relevant legal requirements and inform individuals where required.

12. Cookies and Tracking Technologies

We use cookies and similar technologies to improve the user experience, analyze website traffic, and deliver targeted advertisements. Please refer to our Cookie Policy for more information on our use of cookies.

13. Changes to This Statement

We may update this privacy statement from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We encourage you to review this page regularly for the most up-to-date information. The updated version will be posted with a revised “Effective Date” at the top.

14. Questions or Complaints

If you have any questions, concerns, or complaints about our processing of your personal data, please contact us:

• Email: info@outtask.nl
• Address: Concertgebouwplein 7, 1071LL Amsterdam

We will do our best to address your concerns. You also have the right to file a complaint with the competent supervisory authority if you believe your rights have been violated.

Disclaimer: This privacy statement is intended as a general description of our data processing practices and does not constitute legal advice. If you have questions about the application of the GDPR or other relevant laws, please consult a qualified legal advisor.