Last updated: 2026

This policy explains how [legal company name], [address], Chamber of Commerce number [number] (“we”, “us”) handles personal data of candidates who use The Field Service Jobs website ([website URL]).

1. Who to contact

For any question about your personal data, or to use your rights, email [privacy email] or write to [postal address]. [If appointed: Our Data Protection Officer can be reached at [DPO contact].]

2. What personal data we collect

  • Account details: name, email address, password (stored encrypted), phone number if you add it.
  • Profile and CV: the CV file you upload, work experience, education, skills, discipline, languages, location and any other details you choose to add.
  • Applications: which vacancies you applied for, the date, and any message you send with your application.
  • Consent records: whether you gave consent for future vacancies, when, and the exact wording shown to you.
  • Technical data: data needed to keep you logged in and the site secure (session cookies, server logs).

3. Why we use your data and on which legal basis

PurposeLegal basis (GDPR / AVG)
Creating and running your candidate accountPerformance of a contract (Art. 6(1)(b))
Processing your application for a specific vacancy and sharing it with the employer of that vacancySteps taken at your request before entering into a contract (Art. 6(1)(b))
Keeping your data for up to one year after the recruitment process to contact you about suitable future vacanciesYour consent (Art. 6(1)(a)). This is optional and you can withdraw it at any time.
Sending job alerts you signed up forYour consent (Art. 6(1)(a))
Keeping the website secure and preventing misuseLegitimate interest (Art. 6(1)(f))
[Any other purpose, e.g. legal obligations][Basis]

Not giving consent for future vacancies never affects your application for the current vacancy.

4. How long we keep your data

  • With consent for future vacancies: up to one year after the end of the recruitment process. After that period your data is flagged and deleted, including your CV files.
  • Without that consent: [X weeks/months] after the end of the recruitment process for the vacancy you applied to, after which it is deleted.
  • If you withdraw consent: we stop using your data for future vacancies and delete it, unless we must keep specific data for a legal reason.
  • Your account: until you delete it or ask us to delete it.
  • Backups: deleted data can remain in backups for up to [backup retention period] before the backups themselves are overwritten. Backups are not used for recruitment.

5. Who can access your data

  • Authorised staff of [company name] who manage the job board.
  • The employer of a vacancy you apply to. That employer handles your application as an independent controller under its own privacy policy.
  • Some vacancies send you to the employer’s own application system (for example Workday). Data you enter there is handled by that employer and its provider, not by us.
  • Service providers that process data on our behalf under a processing agreement:
    • [Hosting provider, e.g. Hostinger International Ltd., location of servers]
    • [Email delivery provider, if any]
    • [Payment provider for employer packages, if any]
    • Google Translate (via GTranslate), only for translating page text when you choose another language.

[State whether any data is transferred outside the EEA and which safeguards apply.]

6. Your rights

You have the right to access, correct, delete or receive a copy of your data, to restrict or object to its use, and to withdraw consent at any time. Withdrawing consent does not affect processing done before the withdrawal.

You can withdraw your consent for future vacancies yourself under Dashboard > Privacy & consent, or by emailing [privacy email]. We respond to requests within one month.

You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or the supervisory authority in your own country.

7. Security

Your data is stored on secured servers, sent over an encrypted (HTTPS) connection, and only accessible to authorised people with their own login.

8. Changes

We may update this policy. The date at the top shows the latest version.