Privacy policy

1. Who we are

TalentByCode (talentbycode.com) brings candidates and employers together for IT jobs and freelance assignments in the Netherlands. The controller of your personal data is:

• TBB Recruitment & Consultancy B.V.
• Meester B.M. Teldersstraat 7, 6842 CT Arnhem
• Chamber of Commerce (KvK): 95366881
• Contact: through the contact form at talentbycode.com/contact

2. What data we process

• Account data: name, email address, password (only as an irreversible hash), role (candidate or employer), language preference, profile photo (if you upload one) and the time of your last sign-in.
• If you sign in with Google: the name and confirmed email address Google passes on to us. We never see your Google password or any other data in your Google account.
• Candidate profile, as far as you fill it in: headline, summary, city and country with an approximate location, skills, work experience, education, links to portfolio, GitHub and LinkedIn, and projects.
• CVs and motivation letters you upload.
• Applications: which vacancy you apply to, your message, a reference to the CV you send, the stages of the procedure and the employer’s notes.
• Employer data: company name, information for company verification, and the vacancies you post.
• Usage and security data: logs of sign-ins and important actions, sessions, and short-lived counters per IP address to prevent abuse.
• Email data: the delivery status of emails we send you (verification code, password reset, notifications).
• Contact messages: your name, email address, subject and message when you use the contact form.

3. Why, and on what legal basis

We send no marketing email and use no advertising or analytics cookies.

• Creating your account and providing the service (profile, job search, applying, posting vacancies) — performance of the contract (Art. 6(1)(b) GDPR).
• Passing your application to whoever assesses the vacancy — performance of the contract.
• Showing your profile to employers — only if you switch on your profile’s visibility yourself; consent (Art. 6(1)(a)), which you can withdraw in your profile.
• Keeping your application for one year for other vacancies — only if you consent to that when applying (Art. 6(1)(a)).
• Confirming your email address, resetting your password and sending account and security messages — performance of the contract.
• Protecting the platform and its users against abuse (limiting sign-in attempts, logs, checking CV files) — legitimate interest (Art. 6(1)(f)).
• Meeting legal obligations — legal obligation (Art. 6(1)(c)).
• Answering your message through the contact form — legitimate interest (Art. 6(1)(f)).

4. Who we share data with

We do not sell your data.

• Employers: the employer of the vacancy you apply to sees your application and the CV you send. If you made your profile visible, employers can view it on the platform.
• Vacancies TBB Recruitment publishes itself: your application is assessed by the TBB Recruitment team.
• TalentByCode administrators (the TBB Recruitment team) can view every application on the platform, including those to other employers, to support users, resolve problems and prevent misuse. They do not use that data for any other purpose.
• Service providers processing data on our behalf: Hostinger (hosting, servers in Germany) and Resend (email delivery, from the EU region in Ireland; Resend is a US company). We conclude a data processing agreement with our processors.
• Google, only if you sign in with Google: Google confirms your identity and acts as an independent controller in doing so.
• Competent authorities, where the law requires it.

5. Transfers outside the European Economic Area

Resend and Google are US companies. Transfers to them are protected by the EU-U.S. Data Privacy Framework and/or the European Commission’s standard contractual clauses.

6. How long we keep data

• Account and profile data: as long as your account exists. If you ask us to delete it, we delete your data within 30 days.
• Applications: up to 4 weeks after the procedure ends (rejection, withdrawal or closing of the vacancy). If you consented to being considered for other vacancies, up to 1 year. This happens automatically.
• Sent emails: 30 days.
• Contact messages: no longer than 12 months after we receive them.
• Sign-up verification codes: at most 24 hours.
• Sessions: at most 30 days; signing out ends the session immediately.
• Security logs: as long as needed to keep the platform secure. When your account is deleted, they are detached from your personal data.

7. Cookies

We only use cookies the site needs to work:

• tbc_session: keeps you signed in (encrypted, at most 30 days).
• A language cookie: remembers the language you choose.

8. External content

Maps are loaded from OpenStreetMap, map markers from unpkg.com and some images from Unsplash. On pages with this content your browser connects to those servers, which makes your IP address known to them.

9. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and you can withdraw consent at any time. You can change much of your profile yourself. For other requests, use the contact form at talentbycode.com/contact; we respond within one month.

If you have a complaint about how we handle your data, you can file it with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

10. Security

Connections are encrypted with HTTPS. Passwords and one-time codes are stored only as irreversible hashes. CVs are kept in non-public storage and are visible only to those allowed to see them. Sessions can be revoked.

11. Age

TalentByCode is intended for people aged 16 and over.

12. Changes

We may update this policy. We announce important changes on the site and, where needed, by email.