Privacy policy

Scope

This privacy policy applies to all visitors to our website and to persons who provide their data to us through the contact form or otherwise communicate electronically with TotalFlex.

Which data do we process?

Through our website we process personal data that you provide to us yourself through one of our forms:

• Contact form: name, email address, phone number, subject and your message
• Registration form for employees: first name, last name, email address, mobile number, place of residence, date of birth, desired position, desired start date, driving licence and your motivation
• Form for clients: first name, last name, organisation, email address, mobile number and your question

In addition, with your consent we process technical and statistical data about your website visit, such as your IP address, your browser and device and the pages you visit. This takes place through Google Analytics, Google Tag Manager and Cloudflare Web Analytics and only if you give your consent via the cookie banner. You can find more information in our cookie policy.

When you submit a form, our form service also receives technical data such as your IP address. We follow the principle of data minimisation and only ask for the data that is necessary to handle your request.

Purposes of the processing

We process your personal data for the following purposes:

• Answering the questions you ask and handling contact requests
• Being able to contact you following your message or request
• Assessing your registration as an employee and being able to match you with suitable work
• Gaining insight into the use of our website, only with your consent

We do not process personal data for automated decision-making or profiling.

Legal basis for the processing

Your personal data is processed on the basis of:

• Your consent, when you voluntarily provide your data through the contact form
• Our legitimate interest in being able to answer your questions and provide services

Where required, we explicitly ask for your consent and you can withdraw it at any time.

Retention periods

We do not keep your personal data longer than necessary for the purposes for which it was collected. In practice we apply the following periods:

• Messages sent through the contact form and the form for clients: until your request has been handled, and after that for a maximum of 1 year
• Registrations through the employee form: a maximum of 1 year after receipt of your registration

We only keep data for longer if the law requires it or if you give your consent. After the period has ended we delete your data.

Sharing personal data

We do not sell your personal data. We use a number of service providers that process personal data on our behalf:

• Formbold (Pimjo Technologies), for receiving, storing and forwarding the data you submit through our forms. Formbold itself engages sub-processors for this, including DigitalOcean (hosting), Cloudflare (file storage) and Amazon Web Services and Zoho (email delivery)
• Google (Analytics and Tag Manager) and Cloudflare (Web Analytics), for website statistics and only with your consent

Formbold is based in Bangladesh and the parties mentioned may process data outside the European Economic Area, including in Bangladesh and the United States. A data processing agreement applies with Formbold, which includes the European Commission's standard contractual clauses for this transfer. Otherwise, we only share your personal data with other third parties if we are legally obliged to do so or if you have given us your explicit consent in advance.

Security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure and unauthorised alteration. Access to personal data is limited to persons for whom this is necessary to perform their duties.

Your rights

Under the GDPR you have, among others, the following rights with regard to your personal data:

• Right of access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to certain processing

You can submit a request to exercise these rights using the contact details at the end of this policy. We may ask you to identify yourself adequately so that we can handle your request.

If you disagree with the way we handle your data, please contact us first. You also always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Cookies

We use cookies on our website. For detailed information about which cookies we use and how you can manage your preferences, please see our cookie policy.

Contact