Processing of (personal) data by the entity in charge of the online application process
Privacy and Security Statement for the Online Application Process
1. General Information
This data privacy and security statement applies exclusively to the processing of personal data collected as part of the online application process. Its purpose is to inform you about how we handle, process, store, and protect your personal data when you submit an application through our recruitment website or HR system.
2. Controller
The controller responsible for processing your personal data is:
AnGard Microwave B.V.
Dr. Van Hoekstraat 81,
7545WZ Enschede
The Netherlands
KvK number: 94627703
Security Officer:
Romy Pannekoek
You may contact our Security Officer for all questions related to data protection within the application process.
3. Personal Data Processed
Personal data means any information relating to an identified or identifiable person. In the context of the application process, this may include:
Name, address, email, phone number
Information contained in your CV (career history, education, skills, etc.)
Optional documents such as motivation letters, diplomas or reference letters
Any information voluntarily provided by you during interviews or communication
Special categories of personal data (Article 9 GDPR)—such as health information, religious beliefs, racial or ethnic origin—are not required. We ask you not to include such sensitive information in your application.
4. Legal Basis for Processing
We process your personal data on the following legal bases:
Article 6(1)(b) GDPR – Processing is necessary to take steps at your request prior to entering into an employment contract.
Article 6(1)(f) GDPR – Processing is necessary for our legitimate interests, such as defending legal claims during or after the recruitment process.
Article 6(1)(a) GDPR – If you voluntarily give consent for your data to be stored in our Talent Pool beyond the application process.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
5. Purpose of Processing
We process your data for the following purposes:
Managing and executing the application process
Assessing your qualifications for a position
Communicating with you during the recruitment process
Preparing an employment contract if you are selected
Maintaining our Talent Pool (only with your consent)
Fulfilling legal obligations and defending legal claims
Only authorized HR personnel and hiring managers with a legitimate need have access to your data (role‑based access and least‑privilege principles).
6. Data Storage and Retention Periods
Your data is stored only for as long as necessary for the purposes stated above.
Standard retention: 4 weeks after the recruitment process has concluded.
Extended retention with your consent: Up to 1 year (Talent Pool).
Hired candidates: Data will become part of your employee file and is stored for at least the duration of your employment. After the retention period expires, your data is automatically deleted or irreversibly anonymized.
7. Disclosure to Third Parties
Your personal data is stored in our HR and applicant management system operated by:
Personio GmbH
(https://www.personio.com/legal-notice/)
Personio acts as a processor under Article 28 GDPR. All processing is governed by a valid Data Processing Agreement (DPA).
No other third parties receive your data unless:
required by law, or
you have provided consent.
We do not sell or share applicant data for commercial purposes.
8. International Data Transfers
Personio stores data within the European Union.
However, Personio may use carefully selected sub‑processors located outside the European Economic Area (EEA).
In such cases, international transfers are secured with EU Standard Contractual Clauses (SCCs) or equivalent safeguards as required by Articles 44–49 GDPR.
9. Security Measures
We implement appropriate technical and organizational measures to protect your personal data, including:
Data encryption in transit and at rest
Secure hosting environments within the EU
Role‑based access controls
Multi‑factor authentication for authorized personnel
Access logging and monitoring
Regular security audits and compliance checks
These measures ensure that your data remains confidential, secure, and protected against unauthorized access.
10. Rights of Data Subjects
Under the GDPR, you have the following rights:
Right of access (Article 15)
Right to rectification (Article 16)
Right to erasure (Article 17)
Right to restriction of processing (Article 18)
Right to data portability (Article 20)
Right to object (Article 21)
Right to withdraw consent (Article 7(3))
You can exercise your rights by contacting our Security Officer.
Right to lodge a complaint:
If you believe your data is being processed unlawfully, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
11. Changes to This Privacy Statement
We reserve the right to update or adjust this privacy statement at any time to comply with legal requirements or reflect changes in our recruitment process.
The updated version applies to all subsequent visits and applications.
1. General Information
This data privacy and security statement applies exclusively to the processing of personal data collected as part of the online application process. Its purpose is to inform you about how we handle, process, store, and protect your personal data when you submit an application through our recruitment website or HR system.
2. Controller
The controller responsible for processing your personal data is:
AnGard Microwave B.V.
Dr. Van Hoekstraat 81,
7545WZ Enschede
The Netherlands
KvK number: 94627703
Security Officer:
Romy Pannekoek
You may contact our Security Officer for all questions related to data protection within the application process.
3. Personal Data Processed
Personal data means any information relating to an identified or identifiable person. In the context of the application process, this may include:
Name, address, email, phone number
Information contained in your CV (career history, education, skills, etc.)
Optional documents such as motivation letters, diplomas or reference letters
Any information voluntarily provided by you during interviews or communication
Special categories of personal data (Article 9 GDPR)—such as health information, religious beliefs, racial or ethnic origin—are not required. We ask you not to include such sensitive information in your application.
4. Legal Basis for Processing
We process your personal data on the following legal bases:
Article 6(1)(b) GDPR – Processing is necessary to take steps at your request prior to entering into an employment contract.
Article 6(1)(f) GDPR – Processing is necessary for our legitimate interests, such as defending legal claims during or after the recruitment process.
Article 6(1)(a) GDPR – If you voluntarily give consent for your data to be stored in our Talent Pool beyond the application process.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
5. Purpose of Processing
We process your data for the following purposes:
Managing and executing the application process
Assessing your qualifications for a position
Communicating with you during the recruitment process
Preparing an employment contract if you are selected
Maintaining our Talent Pool (only with your consent)
Fulfilling legal obligations and defending legal claims
Only authorized HR personnel and hiring managers with a legitimate need have access to your data (role‑based access and least‑privilege principles).
6. Data Storage and Retention Periods
Your data is stored only for as long as necessary for the purposes stated above.
Standard retention: 4 weeks after the recruitment process has concluded.
Extended retention with your consent: Up to 1 year (Talent Pool).
Hired candidates: Data will become part of your employee file and is stored for at least the duration of your employment. After the retention period expires, your data is automatically deleted or irreversibly anonymized.
7. Disclosure to Third Parties
Your personal data is stored in our HR and applicant management system operated by:
Personio GmbH
(https://www.personio.com/legal-notice/)
Personio acts as a processor under Article 28 GDPR. All processing is governed by a valid Data Processing Agreement (DPA).
No other third parties receive your data unless:
required by law, or
you have provided consent.
We do not sell or share applicant data for commercial purposes.
8. International Data Transfers
Personio stores data within the European Union.
However, Personio may use carefully selected sub‑processors located outside the European Economic Area (EEA).
In such cases, international transfers are secured with EU Standard Contractual Clauses (SCCs) or equivalent safeguards as required by Articles 44–49 GDPR.
9. Security Measures
We implement appropriate technical and organizational measures to protect your personal data, including:
Data encryption in transit and at rest
Secure hosting environments within the EU
Role‑based access controls
Multi‑factor authentication for authorized personnel
Access logging and monitoring
Regular security audits and compliance checks
These measures ensure that your data remains confidential, secure, and protected against unauthorized access.
10. Rights of Data Subjects
Under the GDPR, you have the following rights:
Right of access (Article 15)
Right to rectification (Article 16)
Right to erasure (Article 17)
Right to restriction of processing (Article 18)
Right to data portability (Article 20)
Right to object (Article 21)
Right to withdraw consent (Article 7(3))
You can exercise your rights by contacting our Security Officer.
Right to lodge a complaint:
If you believe your data is being processed unlawfully, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
11. Changes to This Privacy Statement
We reserve the right to update or adjust this privacy statement at any time to comply with legal requirements or reflect changes in our recruitment process.
The updated version applies to all subsequent visits and applications.