1.0 Definitions

"Applicable Law" – means any Law overseeing the administration of this Privacy Policy. Users located in the EEA (meaning European Union, Island, Norway, and Lichtenstein) and Switzerland have additional privacy rights that are dictated by the Regulation (EU) 2016/679 ("General Data Protection Regulation," "GDPR").

"End Users" – your employees, agents, consultants or independent contractors, affiliates, and job applicants that are allowed by you to use the Services by following our Terms of Use and Privacy Policy.

"Controller" means the natural or legal person, public authority, agency or other bodies which, alone or jointly with others, determines the purposes and means of the processing of Personal Information. You act as a data controller in our relationship.

"Processor" means a natural or legal person, public authority, agency or another body which processes Personal Information on behalf of the Controller. We act as your data processor.

"Processing" – is any operation or set of services which are made on Personal Information or on sets of Personal Information, whether or not by automated means (managing, saving, aggregating, sharing, etc.).

"Employees" means any natural person or legal entity employed or contracted by us (including, but not limited to employees, interns, contract employees, consultants, and volunteers).

"Third Party" means a natural or legal person, public authority, agency or body other than the Yourself, End User, Controller or Processor.

2.0 Summary

In this segment we will explain how we gather, utilize, and distribute your personal Information and personal information belonging to End Users.

We are held accountable as a data Processor for the information that lives on our Platform and as a data controller for our Website and visitor data (collected by cookies or similar technologies and different contact forms and sign-ups).

As a Controller, we decide the purposes and means of the Processing of Personal Information while as a Processor we Processes Personal Information on your behalf.

This Privacy Policy is will help you understand:

3.0 How we collect and use personal information

When you visit our Website, we may collect information about your visit from your device (i.e. desktop, mobile etc.), store cookies and similar technologies on your device and browser or try to reach out in some way. This data helps us to determine information about how you discovered our website, how you use our website, how to adjust your experience etc. We collect this information to update and improve the functionality and security of our websites.

When you obtain entrance to our Platform, we may use your personal information and personal information belonging to End Users to provide you with our service, offer support and make your experience more enjoyable and secure.

3.1 Personal Information You Choose to Provide

We process personal information gathered from different target groups (website visitors, interested parties, customers, applicants and employees) and for different purposes. We use the information to execute our contracts, for our legitimate business interest and to comply with legal obligations. The data is only shared with the third parties contracted for this purpose, unless we are required to do so, for example through a court order or judgment. We receive the information that we store because it has been provided to us directly or because we have obtained it from authorized bodies.

If you request information via the website or via our various request forms, we store the information provided in our CRM system. We process this information to inform you about our offers and to answer your enquiries. We will delete this information after 2 years or upon your request for deletion.

If you register and gain access to the Platform, we will expand the data with the information required for contractual and administrative obligations. We store customer data in accordance with the tax retention obligation for 7 years.

As a job applicant you will be asked to provide us with the personal information so that we can assess your application. We will ask you to provide the following data:
‍
* Name
* Address
* Telephone number
* E-mail address
* Educations
* Work experience
* References
* Contact and telephone notes

If your job application is not successful, we will delete this data within 4 weeks of our last contact (unless you give us permission to keep it longer for future vacancies for example, in which case we will keep your data for a maximum of 1 year).

If you are employed by us as an employee, we will expand the personal data with the information required for the employment contract:
‍
* BSN number;
* Date of birth;
* Sex;
* Copy of identification;
* Copy of work permit, residence permit;
* Possibly copies of policies, diplomas and other documents;
* Employment contract;
* Reviews;
* Holiday and absence registration.

We will process this information only for the purposes of our labour contract and applicable employment and tax laws. If we require your information for any other purpose that is not linked to our terms of services, we will ask for consent first. We will never sell your data to others.

As a growing organization, we may use your information and metadata obtained from your use of Services to better ourselves and offer you new features. Other than for provisions of our services, general correspondence, and analytics, we may use your information in the following ways:
‍
* To preserve the safety of anybody from death or severe injury.
* To stop fraud or mishandling of us or our Users.
* To protect our property rights.
* To enforce the Terms of Service, including investigation of likely violations.
* If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you (for example, via email and/or a prominent notice on the Website) of any change in control or use of your Personal Information. We will also notify you of choices you may have regarding the information.
* We may disclose information that we collect when we have a good faith belief that disclosure is reasonably necessary.

3.2 Personal information collected automatically

We wish to provide you with the comfort of use while you are on our Platform. For this purpose, we are continually producing new features and improving your user experience while at the same time strictly monitoring for safety and privacy concerns. For us to keep you and End Users safe and well we may automatically gather certain personal information.

Cookies

When visiting our website, we may use cookies on or in relationship with our website to save information about you. A cookie is a small text document, which often includes a unique anonymous identifier and additional information. Cookies are used to aid in collecting data associated with the use of the website, such as which web pages are visited and the duration your stay.

We use Google Analytics to record how website visitors use our Services. If you don’t fell comfortable with us using your data for this purpose, you can block the placement of cookies through your browser settings.

‍You will receive cookies when you visit this website. These are small text files that make it possible to track which parts of the website are visited, how often and with which devices (PC, tablet, telephone, etc.) and from which IP address. The information stored therein can be sent back to our own secure servers or those of the relevant third parties on a subsequent visit.

We use the following cookies:

Functional cookies: these necessary cookies are necessary for the functioning of the website. This does not require user permission.
Analytical cookies: the analytical cookies are set in such a way that no user data is collected. This does not require the visitor's permission.
We may use third-party Service Providers to monitor and analyze the use of our Service.

Google Analytics

Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: http://www.google.com/intl/en/policies/privacy/

For more information on how Google uses the collected information, please visit the “How Google uses data when you use our partners’ sites or app” page: http://www.google.com/policies/privacy/partners/ or visit the Privacy Policy of Google: http://www.google.com/policies/privacy/

Delete cookies

Many cookies have an expiration date. If an expiry date has been set, the cookies are automatically deleted when the expiry date expires. You can also choose to delete the cookies manually before the expiry date. This can be achieved through your browser settings.

To find out more please visit allaboutcookies.org

Clear GIFs

When you visit our Websites, we may also use “Clear GIFs” (a.k.a. “web beacons” or “pixel tags”) or similar techniques in our website and/or in our interactions with you. A clear GIF is typically a one-pixel, clear image placed on a web page or other type of information that helps us to verify an individual’s viewing or receipt of a web page or message. Clear GIFs enable us to know whether you have viewed a web page before visiting our website and may allow us to associate such information to other information, including your personal information. We use information provided from clear GIFs to allow more detailed reporting, increase the effectiveness of our marketing and make our Services better for everyone. We will never place this type of tracking without prior notice and/or your permission.

‍

3.3 API Integrations

1. Google login API
‍
The purpose of the Google login API is for users / clients to link their Google Account (profile) with the Jobrock system.
‍
What type of data is collected:
The client’s primary Google (Ad) Account email address and the Ad Accounts names & ID’s that the email address has access to.
‍
2. Reporting / statistics import API :
‍
The purpose of this Google Service API is to allow the Jobrock application to extract the client’s campaign performance data to Jobrock’s database.
‍
What type of data is collected:
‍
Google Ads campaign performance data.
‍
3. Campagne management (pause campaigns) API  :
‍
The purpose of this API is to manage client’s Google Ads campaigns.What type of data is collected:
‍
Campaign code data & campaign statuses (On/ Off) are collected.
‍
4. Customer list API
‍
The purpose of the Customer list API is to create custom audiences in Jobrock and export these customer lists to the Google Audience manager.
‍
What type of data is collected:
‍
Required: First name, last name, email address and phone number.
‍
Optional: country or ZIP.
‍
5. Upload server-side events to Google via AdWords API
‍
The purpose of the Adwords API is to upload server-side events to Google’s database to enrich audience quality and improve targeting.
‍
What type of data is collected:
‍
User_data is collected and shared with Google. This may include one or more of the following data parameters: Email, phone, gender, date of birth, last name, first name, city, state, zip, country, external ID, client IP address, client user agent, click ID, browser ID, lead ID.
‍
Also, custom_data is collected and shared with Google. This may include one or more of the following parameters: Hire, AI lead score, new lead, status, tagging, candidate pool.

4.0 How we share personal data that we collect

Service providers

We may use third-party associates to help us run and manage our website and deliver our goods and services. We may also share your information with our service providers and other third parties (“Third Parties”) that provide products or services for or within this website or for our Services (such as website or database hosting companies, address list hosting companies, communications providers, e-mail service providers, third-party consultants / feedback drivers, analytics companies, distribution companies, fulfilment companies, credit card processing companies and other similar service providers that use such information on our behalf).

Third-party service providers are contractually restricted from using or disclosing the information, except as necessary to perform services on our or your behalf or to comply with legal requirements. Data may be processed in the European Union, the United States or India depending upon contractual responsibilities and by legal authorities, for the region(s) we are subject to.

Full list of our current service providers and link to their Privacy Policies:

Intercom: https://www.intercom.com/terms-and-policies#privacy
Microsoft Azure: https://www.microsoft.com/en-us/trust-center/privacy
Unbounce: https://unbounce.com/privacy/
Google API: Google's API Services User Data Policy.
‍
Please not that deceptive use of Google API Services is prohibited. Service’s  use of information received from Gmail APIs will adhere to Google's Limited Use Requirements. ‍

5.0 How we store and secure the personal data we collect

We know how valuable your personal data is. As a result, we have implemented appropriate physical, technical and organizational measures designed to ensure the integrity and security of all information we collect. We take reasonable and appropriate steps to protect all applications or systems against unauthorized or unlawful access, use, destruction, loss, alteration, or disclosure. We also use Secure Sockets Layer (SSL) encryption when transmitting sensitive information. Due to the nature of the Internet as an open global communications carrier, we cannot guarantee information, either during transmission through the Internet or while stored on our systems or otherwise in our care, will be completely safe from intrusion by others, such as hackers.

Our systems and Service providers are monitored for vulnerabilities and audited at least once a year.

We employ only profoundly vetted reliable teams to work with your personal information. We have introduced strict confidentiality and contractual duties on our teams and they are receiving by yearly privacy and security trainings to maintain the highest level on confidentiality and privacy.

Your data is only available to persons within Jobrock BV who must gain access to it from their position. In some cases these are people from outside Jobrock BV (think of audits, checks). We then ensure that they adhere to the same strict conditions as we do and that the data is not used for other purposes.

We do everything to optimally protect your personal data against unauthorized use. We do this on the basis of an extensive set of organizational and technical measures. If we provide data to a processor that provides a service to us, we have made them sign data processing agreement that is contractual obligating them to respect privacy and protect your personal information.

6.0 How we transfer personal data we collect internationally

We may store and process your data in the EEA, Switzerland, United States, India, or any other country in which our service providers or we have facilities.

Bear in mind that such countries may have laws which are different, and possibly not as protective, as the laws of your own country.

Whenever we share Personal Information originating in the EEA or Switzerland, we use appropriate safeguards (Standard Contractual Clauses developed by the European Commission and/or EU-U.S. and Swiss-U.S. Privacy Shield Frameworks).

If you reside in the EEA, Switzerland or other regions with Law governing data transfers, please note that you are agreeing to the transfer of your Personal Information with suitable protection to the United States, India and other jurisdictions in which we operate.

7.0 How to access and control your personal data

Service providers

You have the opportunity to choose whether you would like to receive communication from us and/or third-party service providers (e.g., newsletter subscription). Your personal information will not be shared with third-party service providers without your consent. Every promotional email you receive from us will have the “opt-out” or “unsubscribe” link in the email you receive.

Please note that if you opt-out of receiving promotional messages from us, we may still contact you in connection with your activities, transactions, invoicing and communications with us (if you contact our support and request assistance).

If you are our Customer

You can correct and update your Personal Information by logging into your account and editing your account profile. You can also delete your account through the Platform.

If you terminate your account, we may retain some Personal Information connected with your account to comply with our legal responsibilities, meet regulatory obligations, resolve disputes, stop fraud and abuse or execute our Terms of Service.

Information stored in routine backups may also be retained for the period those backups are kept in the regular course of business.

If you Reside in the European Economic Area or Switzerland

You have additional rights accessible to you under the GDPR and your Applicable Law, including:

Right to access

You have the right to know if we possess and process your personal information. Of course, we want to be sure that we only give the personal data to the right person. That is why we may request additional information from you to establish your identity.

Right of erasure

You can ask, under certain circumstances, that we erase your Personal Data. We reserve the right to refuse if we must keep your information for record-keeping, to complete purchases or to comply with our statutory or contractual obligations, among other things.

Rights to object and restrict Processing

If you marketing emails from us you can opt out from further emails by clicking unsubscribe button located in the footer. If you believe that the Personal Information, we hold about you is inaccurate or unlawfully held you can ask us to stop processing to your Personal Information until you take appropriate legal actions or provide us with correct data.

Right to data portability

Upon request we will provide you with your personal information in a structured, machine-readable and commonly used format. To protect your privacy and security, we may take steps to verify your identity before complying with the request.

Right to file a complaint with Data Protection Authority

If you feel that we are not handling your data properly, you can submit a complaint to info@jobrock.com and to the reporting point of the Dutch Data Protection AuthorityIf you want to exercise your rights or receive additional information contact us at 020-8100964 or info@jobrock.com.

Breach Notification

In the event of data breach that might result high risk or harm to a natural person, we will immediately investigate the matter and notify you of such breach.
We are responsible for informing you and, as appropriate, any other individuals of any security breach in accordance with Applicable Law.

8.0 Other important privacy information

Third Parties

When you are on this website there might be links to third party websites. If you choose to click on these links, bare in mind that third party websites may collect personal information about you, and (because this privacy policy does not address the information practices of those other websites) you should review the privacy policies of such other websites to see how they treat your personal information.

Our Policy Toward Children

This website is not directed at children under the age of thirteen. We do not knowingly collect personal information from children under the age of thirteen on our website.

If we become aware that we have inadvertently received personal information from a visitor under the age of thirteen on our website, we will delete the information from our records. If you want to notify us that we have collected data of a child under the age of thirteen please contact us at 020-8100964 or info@jobrock.com.

Changes to our Privacy Policy.

We will periodically update this policy. You will be notified about significant changes by email or by placing a prominent notice on our Websites.

Notice to End Users

Our Services are intended for use by businesses that are our users. Where the Services are made available to an End User through our customer (e.g. an employer, someone asking for feedback, sharing link for questionnaire), our User is the administrator of the Services and is responsible for the accounts and/or Services over which it has control. End Users should direct data privacy questions to their administrators, as their use of the Services is subject to that business’s policies. If we receive privacy related requests from End Users, we will promptly notify administrators and enable them to act accordingly.

Contacting Us

If you have any inquiries or comments regarding this privacy policy, or if you would like to review, delete or update personal information we have about you or your preferences, please contact us at:

‍info@jobrock.com or +31 (0)20-8100964