Privacy Policy and Cookie Statement

HFS Freelancers B.V.

Effective Date: November 19, 2025

Version: 3.0

Introduction

HFS Freelancers B.V. (hereinafter: "HFS" or "we") attaches great importance to the careful and secure processing of your personal data. This privacy policy applies to all processing of personal data of customers, suppliers, job applicants, visitors to our website and other relations, and describes in a transparent manner what data we collect, for what purposes we process it, on what basis this is done and what rights you have as a data subject. We process personal data in accordance with the General Data Protection Regulation (GDPR), the GDPR Implementation Act (UAVG) and the Telecommunications Act.

Data controller details

• Company Name: HFS Freelancers B.V.
• Business address: Witteweg 62, 1431GZ Aalsmeer
• E-mail address: info@hfsfreelancers.nl
• Telephone number: 085 060 6814
• Chamber of Commerce number: 90812522

Data Protection Officer (DPO):

• Name: Dylan van de Kar
• Email address: dylan@hfsfreelancers.nl
• Phone number: 085 060 6814

Categories of personal data

Depending on your relationship with HFS, we may process the following categories of personal data, among others:

• Identification data: name, address, place of residence, date of birth, nationality.
• Contact details: telephone number, email address.
• Social Security Number (BSN), if required by law.
• Data relating to your employment, position or assignment.
• Financial data: bank account number, billing information, payment history.
• Login credentials and user profiles.
• Technical data: IP address, browser type, device characteristics.
• Cookie and tracking data (see section 11).

Purposes and legal bases of the processing

We only process your personal data for specified, explicit and legitimate purposes. The corresponding legal basis is listed below for each purpose:

• Performance of contracts and provision of services – Necessary for the performance of a contract (Art. 6 (1) (b) GDPR).
• Customer and supplier administration – Legal obligation / legitimate interest (Art. 6 (1) (c) / (f) GDPR).
• Payroll administration and tax obligations – Legal obligation (Art. 6 (1) (c) GDPR).
• Sending newsletters and marketing communications – Consent (Art. 6 (1) (a) GDPR).
• Recruitment and selection of personnel – Consent / legitimate interest (Art. 6 (1) (a) / (f) GDPR).
• Systems security, fraud and abuse prevention – Legitimate interest (Art. 6 (1) (f) GDPR).

Special and sensitive personal data

If we process your BSN, this will only be done on the basis of a legal obligation, as laid down in the Wage Tax Act and the Identification Obligation Act. We apply strict security measures for this processing, including encryption, limited access rights and logging.

Retention periods

• Financial and tax data: 7 years (tax retention obligation).
• Customer data: a maximum of 2 years after the last moment of contact.
• Application data: maximum 4 weeks after completion of the application procedure, unless you have given explicit permission for a retention period of 1 year.
• Marketing data: until such time as you withdraw your consent.

Provision to third parties

We only provide personal data to third parties if this is necessary for the execution of our agreement, to comply with a legal obligation or if you have given explicit permission for this. If personal data is transferred to countries outside the European Economic Area (EEA), we will ensure appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission or an adequacy decision.

Automated decision-making and profiling

If we use automated decision-making, including profiling within the meaning of Article 22 GDPR, we will inform you in advance of the logic involved, the significance and the possible consequences of this processing. Currently, HFS does not use automated decision-making that produces legal effects or otherwise significantly affects you.

Rights of data subjects

You have the following rights at any time:

• Right to access your personal data.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure of personal data ("right to be forgotten").
• Right to restriction of processing.
• Right to data portability.
• Right to object to processing based on legitimate interest or for direct marketing.
• Right to withdraw your consent (without retroactive effect).

Requests to exercise these rights can be submitted via info@hfsfreelancers.nl. We will respond to your request within one month of receipt of your request, subject to an extension in accordance with Article 12 of the GDPR.

Security of personal data

HFS has taken appropriate technical and organizational measures to protect personal data against loss, unauthorized access, or any form of unlawful processing, including:

• Encryption of data during storage and transmission.
• Two-factor authentication for access security.
• Periodic penetration testing and security audits.
• Strict authorization procedures and logging.

Cookie Policy

Our website uses cookies and similar technologies. These cookies can be functional, analytical or marketing-oriented.

• Functional cookies – necessary for the correct functioning of the website.
• Analytical cookies – to gain insight into the use of our website (via Google Analytics).
• Marketing cookies – for personalized advertising and remarketing.

Overview of cookies used:

• _Go (Google Analytics) – Website usage statistics – 2 years – Third party.
• _gid (Google Analytics) – Website usage statistics – 24 hours – Third party.
• cookieconsent_status (HFS B.V.) – Save cookie preferences – 1 year – First party.

You can manage and change your cookie preferences through our cookie management system (Cookiebot). Consent can be withdrawn at any time.

Alterations

HFS reserves the right to change this Privacy Policy and Cookie Statement at any time. The most current version is published on our website and provided with a date stamp.