1. Who we are

Data Conductors B.V.
Randstad 22-46, 1316 BZ Almere, The Netherlands
Email: info@dataconductors.com
Phone: +31 6 30 58 58 30
Chamber of Commerce (KvK): 84574461

2. Who this policy applies to

This privacy policy applies to everyone whose personal data we process, including:

• visitors to our website
• individuals who contact us via the contact form or by email
• prospects, clients and business contacts
• individuals who submit an open application

3. What personal data we process

Depending on how you interact with us, we may process the following data:

• first and last name
• company name and job title/role
• email address
• phone number
• content of messages and correspondence
• data from open applications (CV, motivation, work experience)
• IP addresses and server log files (automatically generated by the web server for security and maintenance purposes)

4. How we obtain personal data

We obtain personal data in the following ways:

• directly from you, for example via the contact form, by email or by phone
• automatically when you visit our website (server log files containing IP address, browser type and timestamp)
• through business correspondence

5. Purposes and legal bases

We process personal data for the following purposes, based on the indicated legal bases under the GDPR:

6. Web Analytics

We use a Matomo instance managed by us for web analytics. It runs on hosting provided by Cloud86 in the Netherlands. The collected analytics data is not shared with external advertising or analytics platforms. Matomo is only activated after you have given consent via our cookie banner.

We process:

• Anonymised IP addresses (last 2 bytes masked)
• Pages visited and session duration
• Referring website and search engine
• Browser, operating system and device type
• Country and region (based on anonymised IP)

Legal basis: consent (Article 6(1)(a) GDPR).
Retention period: 14 months.

7. Who we share personal data with

We only share personal data when this is necessary. The following parties may be involved in the processing:

• Hosting provider — Cloud86 B.V., as hosting provider of the website, with hosting infrastructure in the Netherlands
• Microsoft 365 — for email and business communication
• Contact form — processed entirely on our own hosting infrastructure (Cloud86, the Netherlands)
• Google — for map functionality (Google Maps), only with your consent
• Competent authorities — if we are legally required to do so
• Other processors such as accountants or IT service providers, insofar as necessary

Where necessary, we enter into data processing agreements with parties that process personal data on our behalf.

8. Transfers outside the EEA

Our website hosting is located in the Netherlands (within the EU). Some processors may process personal data outside the European Economic Area (EEA):

• Microsoft 365 — Microsoft is certified under the EU-U.S. Data Privacy Framework (DPF).
• Contact form — processed on our own hosting infrastructure in the Netherlands. No transfer outside the EEA takes place for this component.
• Google Maps (with consent) — transfers outside the EEA may occur, depending on Google's infrastructure and safeguards.

9. Retention periods

• Contact requests and correspondence: a maximum of 24 months after the last substantive contact
• Open applications — evaluation: as short as necessary for the evaluation of your application
• Open applications — talent pool (with consent): a maximum of 12 months after the last contact or procedure
• Administrative and tax records: for as long as legally required
• Server logs and IP addresses: a maximum of 90 days
• Other data: no longer than necessary for the relevant purpose

10. Are you required to provide data?

You are not required to provide personal data to us. However, without contact details we cannot respond to your enquiry. Without certain data we may not be able to perform an agreement with you.

11. Automated decision-making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects for you.

12. Your rights

Under the GDPR, you have the following rights:

• Access — you can request to see what data we process about you
• Rectification — you can have incorrect data corrected
• Erasure — you can request the deletion of your data
• Restriction — you can request that processing be temporarily restricted
• Data portability — you can request to receive your data in a common format
• Objection — you can object to processing based on legitimate interest
• Withdrawal of consent — you can withdraw previously given consent at any time, without affecting the lawfulness of prior processing

You can submit a request via info@dataconductors.com. We will respond within 30 days.

If you disagree with how we process your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

13. Security

Data Conductors B.V. takes the protection of your data seriously and takes appropriate technical and organisational measures to prevent abuse, loss, unauthorised access, unauthorised disclosure and unauthorised modification.

14. Children

Our services are aimed at business clients and are not intended for persons under 16 years of age. We do not knowingly collect personal data from minors.

15. External links

Our website may contain links to external websites, such as LinkedIn. When following those links, the privacy policy of the respective platform applies. We are not responsible for the privacy policies of external websites.

16. Changes

We may update this privacy policy from time to time. The most current version is always available on this page. We recommend that you review this policy regularly.

Last updated: March 2026