Privacy statement
Introduction
Felix Works B.V. (registered with the trade register under number 82835918, hereinafter: ‘Felix Works B.V.’) maintains a strict privacy policy. We take privacy extremely seriously and treat personal information with care and confidentiality. This privacy statement outlines how we handle the data of our job seekers, candidates, employees, and business clients and relations.
Personal data includes all information characteristic of an individual (also referred to as the data subject) or which can be traced back to an individual (natural person). There are many types of personal data, such as name and address details, but also phone numbers or data regarding race, religion, or health.
Below, we further detail which personal data we process, for what purpose, for how long, and with whom we share personal data. It also states the rights of data subjects and how they can exercise them.
Which personal data do we process and for how long?
We process personal data of the following persons:
- Job seekers and candidates;
- Employees;
- Business relations, such as suppliers and clients (insofar as they are natural persons);
- Contact persons of business relations such as suppliers and clients.
We only process personal data that is necessary for the purposes described here. We strive for minimal data processing, which means that wherever possible, we process less or no personal data and do not store personal data longer than necessary for the purposes mentioned below and in accordance with statutory retention periods. Personal data will be destroyed after the relevant retention periods have expired.
We process at least the following personal data of the (natural) persons mentioned below:
Job seekers and candidates
- Name and address details, email address, phone number, and other contact details.
- Birth details, age, gender.
- Copy of identity document.
- Curriculum vitae (CV), information about education, internships, and work experience.
- Data regarding training, courses, and/or tests that the candidate has followed or taken personally or through us.
- Data regarding availability and leave.
- Data that is or may be relevant in the context of assessing the suitability of the candidate, such as references and certificates and data regarding work experience.
- Data by which the candidate presents themselves (video, photo).
We delete this data if the job seeker or candidate indicates this themselves or if we do not make use of the offer. Only with the consent of the data subject do we store the data for a longer period, up to a maximum of one year.
Employees
- Name and address details, email address, phone number, bank account number, and other contact details.
- Birth details, age, gender.
- Curriculum vitae (CV), information about education, internships, and work experience.
- Data regarding training, courses, and/or tests that the data subject has followed or taken personally or through us.
- Data regarding availability and leave.
- Nationality, BSN (Citizen Service Number), copy of identity document, and any residence and work permits.
- Data in the context of a (necessary) screening.
- Data regarding the nature and content of previous employment mediation, as well as its termination.
- Data related to personnel, salary, and absence registration.
- Data by which the data subject presents themselves (video, photo).
Insofar as we must retain this data based on a statutory obligation, we destroy the data after the statutory retention period has expired. All other data is deleted after two years, with the exception of visual material (video, photos), which we delete upon the first request of the data subject.
(Contact persons of) clients and other business relations
- Name and address details, email address, phone number, and other contact details.
We are obliged to retain data relevant to our administration for the duration of the legally prescribed retention periods. All other personal data will be deleted at the latest two years after the end of the business relationship or after the departure of the contact person from the business relation.
What do we use the personal data for?
We primarily use the aforementioned personal data to comply with our legal obligations and to perform our services as effectively as possible. Additionally, we use personal data for the reasons listed below.
Personal data of job seekers and candidates
- Assessment of suitability and availability of data subjects in connection with mediation for permanent or temporary work or an assignment, which may also involve the use of test results.
Personal data of employees
- Registration and processing of hours worked in our payroll system.
- Entering into and maintaining an employee or personnel/mediation relationship with the data subject and performing the relevant administration, including the payment of wages.
- Compliance with reintegration obligations and meeting (government-imposed) obligations to help individuals with a significant distance to the labor market find work.
- Processing personal data in the context of a screening.
- Promoting the personal development and employability of data subjects, including training, education, and testing.
- Applying for personnel-related subsidies.
Personal data in connection with business relations
- Sending quotes and/or informing business relations about our services following a request to that effect.
- Recording the agreement with the client, maintaining and complying with that agreement with the client, and invoicing.
- Recording the agreement with suppliers and advisors, maintaining and complying with that agreement with suppliers and advisors.
Other reasons for processing personal data
- Compliance with laws and regulations, including those regarding identification, labor law, tax and social security legislation, and anti-fraud measures. This also includes the necessary services provided to us in this regard by parties with specific expertise, such as tax advisors, accountants, legal advisors, and quality improvement advisors.
- Approaching data subjects for commercial offers, newsletters, and promotional actions of Felix Works B.V. that may be of interest to them, exclusively if they have signed up for these.
- For communication purposes.
- Quality purposes such as certification.
On what grounds do we process the personal data?
To process personal data, there must be a legal basis. We process personal data on the following bases:
Job seekers and candidates
- Consent granted to us.
Employees
- Execution of an agreement with the data subject.
- Compliance with legal obligations (including tax regulations).
- Consent of the data subject for sending marketing communications and using visual material.
- Legitimate interest, including assessing employees for integrity, suitability, and reliability (screening), developing quality systems, and facilitating audits.
(Contact persons of) clients and other business relations
- Execution of an agreement with the data subject.
- Compliance with legal obligations (including tax regulations).
- Consent of the data subject.
General
Other situations may arise in which we process personal data based on a legitimate interest of Felix Works B.V. (for example, if this is necessary for the execution of our daily business operations).
If we process your personal data based on a legal or contractual obligation or to execute an agreement with you, it is important that you provide the requested data to us. If you do not, we cannot execute the agreement with you, or you may be in violation yourself.
If we process your personal data based on your consent, you have the right to withdraw that consent at any time. From that moment on, we will immediately stop processing those personal data.
Sharing personal data
We only share the collected personal data with third parties to support the aforementioned purposes or if legally required. To whom and which personal data is provided depends on the situation.
Job seekers and candidates
We only share personal data with potential clients or supervisory authorities if this follows from the nature of our relationship with the data subject and/or is legally permitted for us to share the personal data with them.
Employees
We are obliged to provide personal data to competent authorities and agencies, such as:
- Tax authorities, social insurance agencies, and the labor inspectorate.
- Occupational health services (Arbodienst).
- Advisors and other suppliers of expertise services whom we engage in connection with correct compliance with our legal obligations.
- Institutions charged with monitoring compliance with collective labor agreement (CAO) obligations.
- Other relevant government institutions and regulators, such as the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
(Contact persons of) clients and other business relations
We are obliged to provide personal data to competent authorities and agencies, such as:
- Tax authorities.
- Advisors and other suppliers of expertise services whom we engage in connection with correct compliance with our legal obligations.
- Other relevant government institutions and regulators, such as the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
We ensure that agreements are made with these third parties where necessary regarding the requirements that data exchange must meet, specifically that the third party also complies with the GDPR (AVG). The collected personal data will not be loaned, rented, sold, or otherwise disclosed other than in the manners mentioned above. Without a legal basis, we will not transfer data to a country outside the European Union.
Security of personal data
We consider proper security of your personal data to be very important. We have taken technical and organizational measures to protect your personal data against (cyber)crime, destruction, loss, or any other unlawful processing. The measures taken meet at least the general requirements set for information security for an organization like ours. We periodically evaluate the measures taken and adjust them as necessary. If we use the services of third parties, such as an IT supplier, we will make agreements regarding adequate security measures.
We ensure that employees do not have more insight or access to personal data than is strictly necessary for the proper performance of their duties.
We agree on a confidentiality obligation with everyone who gains access to the personal data processed by us and who is not already bound by a duty of confidentiality by virtue of their profession, position, or legal requirement.
Privacy rights of data subjects
Under the GDPR, you as a data subject have rights that you can exercise against organizations that process your personal data. These are the following rights:
Right of access and/or rectification
With a request for access or rectification, you can ask which data we process about you, for what purpose, how we obtained this data, and which retention periods we apply. Additionally, you can request to supplement or correct your personal data.
Right to restriction of processing
If the personal data we process about you is possibly incorrect, is processed unlawfully, is no longer necessary, or if you object to the processing as described below, we will (temporarily) stop the processing of your personal data or process your personal data only in a limited number of cases upon your request.
Right to erasure (right to be forgotten)
If your relationship with us has ended, you can request that we delete your personal data; we will always honor this request if the data processing is based solely on consent. In all other cases, we assess whether there are reasons that prevent complete or partial erasure, such as statutory retention obligations.
Right to data portability
If we process your personal data solely based on consent granted by you or in the context of an agreement concluded with you, you have the right to request us to transfer that data to yourself or to a third party designated by you. In the case of an agreement with you, such a transfer is only possible if the agreement with you has ended. Please note that data we process on another basis, such as a legal obligation or legitimate interest, is not eligible for transfer.
Right to object
If we process your personal data based on a legitimate interest of Felix Works B.V. (including for screening, direct marketing, or profiling), you can request us to stop doing so. We will then assess whether we will comply with your request.
Right to lodge a complaint with the Data Protection Authority
If you believe that we are processing your personal data in violation of the GDPR, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at any time. For the formalities of lodging such a complaint, we refer to the website of the Data Protection Authority.
Amendments to the privacy statement
Felix Works B.V. has the right to change the content of this privacy statement at any time without prior notice. Adjustments to the privacy statement will be published on the website of Felix Works B.V. None of the provisions in this privacy statement are intended to establish any obligation or agreement between Felix Works B.V. and you as a data subject.
Cookies
Felix Works B.V. uses cookies on www.felixworks.nl to ensure the website functions correctly and to analyze its use. We only place functional cookies and analytical cookies (Google Analytics) for statistics and the improvement of our services. Google Analytics is configured according to GDPR guidelines: IP addresses are anonymized, and there is a processing agreement with Google. Google participates in the Data Privacy Framework for transfers to the USA. For non-essential cookies, we request prior consent via the cookie banner; this consent can be withdrawn at any time. Cookies have a limited validity period and can be manually removed via browser settings. Refusing cookies may affect the functioning of the website.
Questions and contact
For questions or comments about the processing of your personal data and this privacy statement, or in connection with exercising the aforementioned rights, you can contact Felix Works B.V. via the following contact details:
- Email address: administratie@felixworks.nl
- Phone number: 085-1091255
- Address: Beukenlaan 135, 5616 Eindhoven
The current version of this privacy statement was drafted on 01-01-2026.