Privacy Policy for Candidates

Who is the data controller?

The data controller is Quistor Management B.V., with address at Steenbergsestraat 49, 4611 TD, Bergen op Zoom, the Netherlands, and e-mail: dpo@quistor.com.

We use the Workable Software Ltd. platform as an applicant management tool. Workable acts as a processor in accordance with Article 28 of the GDPR and only processes the data on our instructions.

How do we get your data and what do we use it for?

Your data may have been obtained through:

• Public profiles on LinkedIn or other professional platforms.
• Spontaneous applications submitted via our web form or link.
• CVs sent by email.

We use this information  CV,  contact, professional & educational details to:

• Evaluate your professional profile.
• Manage your participation in current or future hiring processes.
• Contact you for interviews or opportunities.

Before processing your data on our Workable platform, we ask you for your explicit consent.

What is the legal basis?

The legal basis for processing your data is your explicit consent (Article 6.1.a GDPR), requested prior to processing. You can withdraw your consent at any time, without affecting the lawfulness of the previous processing.

Who do we share your data with?

We share your information with our technology provider Workable Software Ltd., (see ANNEX I) who acts as a processor. This platform allows us to organize and manage selection processes efficiently and securely. No other third-party transfers, unless legally required. Workable does not perform automated decision making on candidate suitability, final decisions are always made by Quistor staff.

How long do we keep your data?

Your personal data will be retained:

•  During the validity of the selection process.
• Up to 2 years after the last contact with you, unless you ask us to delete it.

You can request the deletion of your profile at any time: hr@quistor.com.

What are your rights?

You have the right to:

• Access, rectify, erase, object, restrict, and port your data.
• Withdraw consent anytime, this will end your participation in the recruitment process.

You can exercise these rights by contacting: dpo@quistor.com

Data Transfer Outside the EEA

Workable hosts data within the EEA. If they use non EEA sub processors, standard contractual clauses are in place to ensure GDPR compliance.

Is it mandatory to provide your data?

You are not obliged to provide your personal data, but without them we will not be able to assess your application or include you in our selection processes. The inclusion of your information on Workable depends solely on your informed consent.

Complaints

You may file a complaint with Quistor’s Data Protection Officer (dpo@quistor.com) or directly with your local supervisory authority.