Privacy Policy Expnd BV

Introduction

This Privacy Policy applies to personal information collected through our websites: expnd.be, expnd.net, expnd.nl, expandgtm.com, expndgroup.com, and through candidates booking meetings via Calendly, operated by Expnd BV ("Expnd", "we", "us", or "our"). It outlines our practices regarding the collection, use, protection, and disclosure of your personal data, in compliance with the General Data Protection Regulation (GDPR).

1. Information Collection and Use

We collect personal information through forms on our website and when candidates book meetings via Calendly, primarily for the purpose of providing recruitment services. This information includes:

  • Name
  • Email address
  • Phone number
  • Employer name
  • Curriculum Vitae (CV)
  • LinkedIn profile
  • Job position preferences
  • Any additional information you voluntarily provide

Providing your personal data is voluntary. However, if you choose not to provide certain information, we may not be able to offer you our recruitment services or respond to your inquiries.

2. Purpose and Legal Basis for Processing

We collect and process your personal data for the following purposes:

  • To arrange and conduct scheduled meetings
    Legal Basis: Performance of a contract (Article 6(1)(b) GDPR)
  • To match your profile with potential job opportunities
    Legal Basis: Legitimate interests (Article 6(1)(f) GDPR)
  • To share your profile, including your personal data, with our clients who are seeking candidates for job opportunities
    Legal Basis: Consent (Article 6(1)(a) GDPR)
  • To communicate with you about the recruitment process and updates on relevant job opportunities
    Legal Basis: Legitimate interests (Article 6(1)(f) GDPR)
  • To provide marketing communications, if you have opted in
    Legal Basis: Consent (Article 6(1)(a) GDPR)

3. Consent and Right to Withdraw

If we process your personal data based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. To withdraw consent, please contact us at privacy@expnd.be.

4. Data Sharing and Joint Controllers

We may share your personal data with:

  • Our clients who are seeking candidates for job positions.
  • Third-party service providers who assist us in our business operations, such as:
    • Google Analytics
    • RB2B
    • Leadinfo
    • Apollo.io

These providers may process your data outside the EEA, and we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or reliance on adequacy decisions.

Joint Controllers:
In certain cases, we and our clients act as joint controllers of your personal data. We have agreements in place to determine our respective responsibilities for compliance with GDPR obligations.

5. International Data Transfers

While we operate within the European Union, some of our third-party service providers may process personal data outside the EEA. When we transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

6. Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, including:

  • Candidate Data: Retained for up to 2 years after our last interaction unless you request deletion sooner.
  • Marketing Data: Retained until you unsubscribe or withdraw consent.
  • Website Analytics Data: Retained for 14 months.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right to Access: Request confirmation whether we process your personal data and access to it.
  • Right to Rectification: Request correction of any inaccuracies in your personal data.
  • Right to Erasure: Request deletion of your personal data, subject to legal obligations.
  • Right to Restrict Processing: Request limitation on how we process your personal data.
  • Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Object: Object to our processing based on legitimate interests or for direct marketing purposes.
  • Right to Withdraw Consent: Withdraw your consent at any time.

Exercising Your Rights:
To exercise any of these rights, please contact us at privacy@expnd.be. We will respond to your request within one month. Please provide sufficient information to identify yourself and the information you are requesting.

8. Right to Lodge a Complaint

If you believe that our processing of your personal data infringes data protection laws, you have the right to lodge a complaint with the Belgian Data Protection Authority.

Belgian Data Protection Authority
Rue de la Presse 35, 1000 Brussels, Belgium
Phone: +32 (0)2 274 48 00
Email: contact@apd-gba.be
Website: www.dataprotectionauthority.be

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, ensuring:

  • Confidentiality: Data is accessed only by authorized personnel.
  • Integrity: Safeguards to prevent data alteration.
  • Availability: Data remains accessible when needed.

Security measures include encryption, access controls, secure servers, and regular security assessments.

10. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies for various purposes:

  • To provide a great experience for our visitors and customers.
  • To monitor and analyze website performance and user behavior.
  • To enhance our marketing and lead-generation efforts.

Types of Cookies Used:

  • Essential Cookies: Necessary for the functioning of our website.
  • Analytics Cookies: Used by Google Analytics to analyze website traffic.
  • Marketing Cookies: Used by RB2B, Leadinfo, and Apollo.io for marketing automation and lead tracking.

Cookie Consent:
Upon your first visit to our website, you will be asked to consent to the use of cookies. You can manage your cookie preferences at any time through our Cookie Settings (Insert link to cookie management tool).

Managing Cookies:
For detailed instructions on how to manage cookies in various browsers, please refer to the following links:

To opt out of being tracked by Google Analytics across all websites, visit Google Analytics Opt-out.

11. Automated Decision-Making and Profiling

We do not use personal data for automated decision-making that produces legal effects concerning you or similarly significantly affects you.

Profiling:
We may use profiling to personalize your experience and provide relevant job opportunities. This will not have any legal or significant impact on you.

12. Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee compliance with this policy. You can contact the DPO at privacy@expnd.be.

13. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you are under 16, please do not provide any personal information to us.

14. Hosting and Data Storage

Our website is hosted on the Webflow platform. Your data may be stored through Webflow's data storage, databases, and general applications, on secure servers behind a firewall.

15. Data Breach Notification

In the event of a data breach, we will follow necessary procedures to assess and address the situation, notifying affected individuals and regulatory authorities as required by law.

16. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our information practices or legal obligations. We will notify you of significant changes by email or by placing a prominent notice on our website prior to changes becoming effective.

17. Third-Party Service Providers

We use third-party service providers to enhance our services:

These providers may process your data outside the EEA, and we ensure appropriate safeguards are in place.

18. Processing for New Purposes

If we intend to use your personal data for a new purpose not covered by this policy, we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions.

19. Provision of Personal Data

Providing your personal data is not a statutory requirement; however, it is necessary for us to provide our recruitment services. Failure to provide certain data may prevent us from offering our services to you.

20. Contact Information

For any questions or concerns regarding this policy or your personal data, please contact us at:

Expnd BV
Mustsaardstraat 5
2000 Antwerpen
Belgium
Email: privacy@expnd.be