Privacy Policy
This is an English translation provided for convenience. The Dutch version is the legally binding one: Privacyverklaring.
What we do with your data, why, and what you can ask of us. Written in plain language, because a privacy policy that nobody reads serves no purpose.
Last updated: October 2026
Who we are
De Vacature Expert is a trading name of Maxxmarketing Solutions Ltd (ul. Akademik Andrey Saharov 11B, ap. 52, 9000 Varna, Bulgaria, EIK 207497934, VAT BG207497934; correspondence address Hurkestraat 64, 5652 AL Eindhoven, the Netherlands). We are the data controller for the data described below. You can reach us at administratie@devacatureexpert.nl; we respond to questions about your data within one month.
Whose data we hold
There are two groups. Clients: companies that contact us or purchase a campaign from us. And candidates: people who respond to a vacancy that we publish online on behalf of a client.
Clients
If you complete our contact form, we store your name, company name, email address, telephone number, the vacancy concerned and your message. We do so in order to answer your enquiry and, if it leads to a working relationship, to carry out the assignment. The legal basis is the performance of a contract, or our legitimate interest in responding to an enquiry you have made yourself.
If you become a client, you receive an account for our client portal. It holds your name, email address and the candidates we have spoken to for your vacancy.
Candidates
If you respond to a vacancy, we receive your name, telephone number and usually your email address via the advertising platform on which you responded. We call you back and record what was discussed in that conversation: your experience, your availability, the kind of work you are looking for and whether you match the vacancy. We also keep any CV you send us.
If you match the vacancy, we share your data with the client for whom we are recruiting. That is the reason you responded, so we do not need to ask for this separately.
If we would additionally like to introduce you to another company, or keep you on file for a future vacancy, we ask for your explicit consent over the telephone. If you say no, it does not happen. If you say yes, you can withdraw that consent at any time by emailing us.
Who we share data with
With the client for whose vacancy you responded and, if you have given consent, with the recruiter who works with us to help you find other work. We also work with a number of suppliers who process data on our behalf and may not use it for their own purposes:
Railway (hosting of our website and our portal), Resend (sending our email), GoHighLevel (our CRM, where applications are received), Meta (Facebook and Instagram, where our job advertisements run) and the PDOK Location Server (converting a postcode into a place name, a service of the Dutch government).
Some of these parties are based in the United States. Those transfers are covered by the standard contractual clauses adopted by the European Commission for that purpose, or by the EU-US Data Privacy Framework. We never sell your data to anyone.
How long we keep it
We retain the data of candidates who have not been placed for up to two years after our last contact, so that we can approach you if something suitable comes along. If you have not given consent for this, we delete it within four weeks of the campaign ending. We retain client data for as long as the working relationship lasts and for seven years thereafter, because the tax authorities require this of our records.
What you can ask of us
You may at any time ask us which data we hold about you, have it corrected, have it deleted, object to its use, or receive it in a readable file. A single email to administratie@devacatureexpert.nl is sufficient, and you will hear from us within one month.
If we cannot resolve the matter together, you can lodge a complaint with the supervisory authority in the country where you live. In the Netherlands this is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens); in Belgium it is the Data Protection Authority (Gegevensbeschermingsautoriteit).
Security
Our portal can only be accessed with a personal account and password, and traffic to and from our site is encrypted. Every member of our team has their own login, so it is possible to trace who did what. Passwords are stored encrypted and cannot be read, even by us.
Cookies
This website does not use tracking cookies. What we do use is set out in our cookie policy.
Changes
If anything changes in the way we handle data, we will amend this policy and place the new date at the top.