Privacy statement

Privacy Statement Timing B.V.

Good to read

This is the privacy statement of Timing. In this statement, we tell you who we are, what personal data we collect from you, why we collect this data, and what we do with it. This privacy statement explains how Timing B.V. handles your personal data when you communicate with us as a user, customer, business partner, supplier, shareholder, or other person with a business relationship.

Timing aims to help temporary workers find a job and to connect employers with a suitable temporary worker as quickly as possible. For this, we need to process your information and/or personal data. Additionally, with the help of this data, we can continuously improve the application and matching process for our users. It is important for us to handle your information carefully because it concerns your personal data and privacy, and because we believe there should be no ambiguity about privacy.

Therefore, in our privacy statement, we explain how we handle and protect your personal data in both our website and our app. Please note, for the purposes of this privacy statement, we mean by personal data any information or collection of information that directly or indirectly identifies you, such as your name, email, or phone number.

1. Who are we
2. What are personal data and other useful terms
3. Why do we process your personal data
4. What type of personal data do we process
5. With whom do we share your data
6. Legal basis for processing your data
7. Your Timing account
8. How long do we retain your data
9. Where do we store your data
10. How do we keep your personal data safe
11. Your rights
12. Contact and complaints
13. Document version
14. Cookie statement

1. Who are we

We are Timing B.V. and in this privacy policy and in other product- or service-specific privacy documents, we refer to ourselves as the data controller of your personal data.

Address:
Timing B.V.
Deventerstraat 15-2
7311 BH Apeldoorn
Netherlands

2. What is personal data? And other useful terms.

Personal data
Personal data is any data that can directly or indirectly identify a user. This includes data such as name, address & postal code, BSN number, email addresses, but also technical carriers such as identification number (UserIds), IP addresses, and online identifiers (cookie IDs).
Do you want to know more about what personal data exactly is? Check the definition of personal data from the Autoriteit Persoonsgegevens and how it relates to you: https://autoriteitpersoonsgegevens.nl/nl/over-privacy/persoonsgegevens/wat-zijn-persoonsgegevens

Other useful terms
Other useful terms mentioned within the privacy and cookie statements are further explained below.

Timing online platform
The Timing online platform is the collective name for the entire website, app, and all own channels in which Timing operates.

Job seeking
Job seeking refers to any person actively looking for a job and who has applied to an employer via the Timing online platform.

Client
A client of Timing is understood to be any employer who wants to publish their vacancies via the Timing online platform.

Data Subject
The natural person to whom the personal data relates. The data subject is the person whose data is being processed. In this document, the data subject is referred to as any visitor and user of our website and app.

Data Controller
A person or organization that, alone or together with others, determines the purpose and means of processing personal data. In this document, Timing is referred to as the Data Controller.

Data Processor
The person or organization that processes personal data on behalf of and solely for the benefit of another person or organization. In this document, this refers to any partner or supplier with whom Timing has a direct contract.

Personal data
All information about an identified or (directly or indirectly) identifiable natural person.

Sensitive personal data
Data relating to race or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a person, data concerning health, sexual behavior, or sexual orientation.

Processing of personal data
Processing includes everything that is 'done' with personal data, whether or not automated. This includes recording, storing, consulting, retrieving, collecting, combining, providing to another, transferring, and destroying data.

Autoriteit Persoonsgegevens
The Dutch authority responsible for supervising the processing of personal data and compliance with laws and regulations in the field of personal data.

Consent
Under the GDPR, consent is understood as a free, specific, informed, and unambiguous expression of will by which you accept the processing of personal data through a statement or an unambiguous active action. For users of the Timing online platform, explicit consent is required to proceed to our services. This consent is collected via the consent banner pop-up and can always be withdrawn.

 
3. Why do we process your personal data?

We store and use your personal data only for carefully determined purposes. In most cases, we receive personal data from you because you use our services or want to use our services from Timing. To be able to offer our services, data processing is necessary for the preparation or execution of our online services and to assist you as a client. Your personal data is also processed for maintaining a central customer administration, conducting marketing activities, preventing and combating fraud, or using the data for risk management. Additionally, we process your data to comply with our legal obligations. For non-essential data processing activities where we place technical carriers to collect your personal data, such as cookies, scripts, and tags, we need your consent. With these cookies, Timing can track user activity on their website, such as which pages have been visited, how long a user stayed on a page, and which links were clicked. This data can be used to better understand customer behavior and preferences, which can then be used to tailor content and offers to the customer's needs. This consent is always requested from you via the consent banner. See our cookie statement on our website to read more about what kind of data processing activities and cookies Timing uses. Below you will find more information about the basis on which we process your personal data.

To prevent fraud and manage risks
To protect your own safety, we process personal data for risk management and to prevent and combat fraud. We may exchange data within Timing and with other authorities in the event of an investigation related to compliance claims.

For applying for a job
Our recruitment process is designed to help connect the right job seekers with the right employers. We need to process your personal data to enable you to apply via the website/app and to assess your skills and qualifications against the position you are applying for and/or other career opportunities. We also use your personal data to communicate with you about the recruitment process and to prepare an offer.

We process your personal data for:

• Applying for a vacancy on our vacancy website and enabling you to apply via the vacancy website;
• Assessing your skills, qualifications, and suitability to work in comparison to the position you applied for and/or other career opportunities;
• Asking you if you want your data to be kept in our talent pool. If you agree, we will proactively contact you when suitable vacancies arise again;
• Preparing an offer when your application is successful;
• Complying with applicable laws and regulations to which we are subject and cooperating with regulators and law enforcement agencies;
• Signing up for our career newsletters to receive the latest vacancies and news directly in your inbox;
• Interacting with us (for example, with our recruiters) for vacancies.
  
  

For communication and email marketing
We process your personal data:

• To communicate with you about the recruitment process;
• To help you as a client get in touch with us or a potential employer.
• To keep you informed of new vacancies and company changes via our website, the Timing App, a letter, or email.
• To find out if a user has opened an email, at what location, and on what type of device. The data is collected via our email automation platform once you sign up for our newsletter subscription.
  
  

To improve website and app performance and personalize the online experience
We process your personal data:

• To improve the performance of the website and app, to fix bugs, enhance the user experience, and optimize your online experience for future visits.
• To analyze users' online behavior, to offer more personalized content, and to save personal settings.
• When someone registers on our website or app, we collect user information when someone has filled out a form or survey.
• For data analysis, including A/B testing, and for innovations that use data analysis, such as developing applications on our processes and service offerings and to better align them with the wishes of our customers. With analyses, we can, among other things, create groups (profiles) of customers with the same characteristics or behavior.
  
  

For marketing and social media purposes
We process your personal data:

• To offer you more personalized advertisements on other websites and platforms that match your interests.
• To communicate with you via social media platforms.

 
4. What personal data do we process?

Timing collects and processes data in various ways to provide our users with the best online experience. From all website and app visitors, temporary workers, job seekers, clients, and employers, we process the following personal data:

To apply
When you apply for a position within the Timing online platform, we process the following personal data:

• General contact details such as full name, email address, phone number, country of residence, home address, other contact details;
• Data about your skills and qualifications, included in resumes, cover letters, or other documentation provided to us with your application (such as educational history, work experience, transcripts);
• Data needed to conduct background checks or employment checks, if permitted by applicable law (such as documents to prove your identity or qualifications);
• Information about the type of work you are seeking or looking for, current and/or desired salary, and other conditions related to compensation and benefits packages, willingness to relocate, or other work preferences;
• Data needed to make a conditional offer (such as bank details to process salary payments, emergency contact details to know who to contact in case of an emergency at work).

To become a client
If you want to create a Timing account in your capacity as an employer, we may also process the following data:

• Company name;
• Company address;
• Company phone number;
• Organization type;
• Job title/specialty;
• Customer account number

To visit the Timing online platform
When you visit the Timing online platform, we place cookies and other similar technologies (scripts, tags, and SDKs) on your browser or device that help us enable the technical and functional management of our websites (including ensuring information security). We do this to improve the design and performance of our websites and to better understand visitor behavior on our pages. These cookies and other similar technologies may collect data such as:

• IP address;
• Geo-location;
• Username;
• Your operating system;
• Your browser type;
• Your device type (e.g., PC, smartphone).
  
  

Strictly necessary/functional cookies
Some cookies are always enabled when you visit our websites. We call these “strictly necessary cookies.” We use these cookies to ensure that our websites work correctly and meet the needs and interests of the audience. We use these cookies, for example, to offer login functionalities or to ensure the security of our websites. These cookies are exempt from user consent, as they do not collect personal data and are strictly necessary for the business functionality of Timing online products and services.

We also use “functional cookies” to tailor our websites to your specific preferences. We use these cookies, for example, to save your settings on our website (such as your username, language, or the region you are in) and to provide more enhanced, personal features. They only collect anonymous aggregated data and do not track browser activity on other websites. Like strictly necessary cookies, functional cookies do not collect personal data and are exempt from user consent.

Analytical cookies
We use analytical cookies to collect aggregated statistical information about how our websites perform and to improve their performance. You can enable or disable these at any time. We will only use them if you have given consent. We use these cookies, for example, to get a general picture of how visitors use our websites (i.e., which web pages are most visited, or the number of visitors to the different parts of a website) or to conduct user surveys on our website in general or on specific elements of our website.

Profile cookies
Timing also uses profile cookies to tailor the Timing online platform to your personal preferences. We use your accumulated interest and profile (based on your browsing behavior) to show you relevant vacancies and/or profiles and tips on the Timing online platform. These cookies are also used to conduct tests to optimize and improve your online experience with us. To do this effectively, we need your personal data, such as user ID, IP addresses, cookie ID, etc., to remember your preferences and interests for future visits. This way, we tailor the content specifically to your interests and needs. Based on your browsing behavior, we can, for example, personalize your experience and show vacancies that we think better suit you based on your preference.
Marketing/social media cookies
Finally, we use advertising and social media cookies to track your browsing behavior on our website and show you personalized advertisements that are relevant to you and your interests. Moreover, if you have given us your consent to receive promotional messages, we will use the information collected from these cookies to send you messages tailored to your preferences. These cookies may be placed by third parties and are linked to site functionality provided by such third parties. This, therefore, affects the content and messages you see on other websites you visit. You can enable or disable these at any time. We only use them if you have agreed. For example, if you read an article about a vacancy, we may show you advertisements about this vacancy on our website or that of third parties. The legal basis on which we rely to process your personal data in this context is your consent.

Read our cookie statement for more information about the specific cookies we use. You can adjust your cookie settings at any time via our cookie consent tool.

5. With whom do we share your personal data?

We only share your information when you ask us to, when it is necessary to do business with you and provide you with services, or when it is necessary for legal reasons. Companies where you apply via Timing may collect your data according to their own policy when you visit their websites. Sometimes companies that advertise through our services may also collect your information (see our cookie policy to see which suppliers these are). Finally, companies that help us provide our services will also collect and use your information on our behalf (referred to as data processors in this document). Below you can read more about with whom we share your personal data.

Timing internal
The data that Timing collects and uses is accessible to employees of Timing and its sister or subsidiary companies if they need that data in the performance of their duties.

Clients
Timing shares some of your personal data with clients where you work or will work.

The government
Personal data is also shared with the Tax Authorities, UWV, and others to which Timing is legally obliged. This also applies to bodies involved in monitoring compliance with the applicable CAO (SNA/SNCU/SFU).
In principle, there are no other parties that receive data, but it may happen that data must be made available to external parties on the basis of a legal obligation or a legal dispute. In the context of a merger or acquisition or bankruptcy or suspension of payment, it may be necessary for third parties to access the data or make it available.

Technology and Business partners
We work with external service providers. For example, we develop Timing.nl and the Timing app with external service providers. With these third parties - who perform (part of) the processing on behalf of Timing, we have concluded a processing agreement, they are the so-called processors. We only work with parties that provide sufficient guarantees and take measures to ensure the protection of your personal data is well arranged. And that the processing of personal data is also in accordance with the applicable laws and regulations (GDPR). We keep a record of these processes and processors.

6. Legal basis for processing your personal data

Timing processes personal data on one or more of the following limited grounds:

Consent
When consent is given by the user for data processing purposes via the Timing online platform. Timing will document and store the user's consent choice. This is done to demonstrate that informed consent has been given. You have the right to withdraw your consent at any time, which does not affect the lawfulness of the processing before the withdrawal. Timing ensures that consent can be withdrawn as easily as it was given.

Agreement
When processing is necessary for the performance of a contract to which you are a party or for actions taken at your request that are necessary for the conclusion and performance of a contract.

Legal obligation
To comply with the law, we must process personal data.

Legitimate interest
The processing of personal data takes place for a legitimate interest of Timing or a third party, except where your personal interest or fundamental rights and freedoms prevail.

7. Your Timing Account

Your Timing profile:
When you use and register with the Timing online platform, you build a profile, and we have your data available in our systems.

If you are registered with Timing as job seeking, you have a My Timing profile that helps us find the job that suits you. With your My Timing profile, you can access, edit, download, or delete important personal data linked to your profile at any time by going to your profile by logging in.

If you are registered with Timing as a client to post vacancies, you have a My Timing profile to see which job seekers have viewed and applied to

Your identity
When processing these personal data, we must be 100% sure that you are the same person. Therefore, Timing may contact you to request additional information, such as a (valid) identification document. The one-month period within which Timing must respond to this request is extended until you have provided us with the requested evidence.

Costs
Your request to access or have your personal data adjusted is free of charge. If the request is unfounded or excessive, Timing may charge a reasonable fee for the administrative costs of providing information.

Response to your request
If you think your data is incorrect or being used for the wrong purpose(s), you can request us to correct, supplement, adjust, or delete your data. We will respond to this request as soon as possible, but in any case within a month. Depending on the complexity of the request and the number of requests, the period may be extended by two months. Timing will inform you of an extension within a month of receiving the request. Click here to view or delete your Timing profile.

Cannot fulfill your request
In some cases, we are legally required to retain data for a certain period. This means that we cannot always fulfill your request. You can, of course, assume that we will discuss this with you in good consultation. You also have the right to have the personal data transferred. If Timing does not respond to your request, you can file a complaint directly with the data protection officer via [email protected]. For more information on filing a claim, see the "contact and claims" section in this privacy policy.

8. How long do we keep your data? 

We only keep your data as long as we need it or as long as the data is required for legal reasons. We will then delete or anonymize them so that you cannot be identified with them. We handle data in different ways, depending on the purpose for which they are used. You can ask us at any time to delete your personal data. 

Government oversight 
We do not keep your personal data longer than necessary. This depends on the reason why they were collected and whether we have an ongoing legal basis to do so (for example, to execute a contract between us, to provide a service you requested, or for our legitimate interests). If we no longer have a reason or legal obligation to process your personal data, we will delete it or store it in a way that it can no longer be traced back to you. 
We apply different retention rules for different types of personal data, taking into account: 

• The purpose of collecting the personal data*; 
• How long it takes to achieve that purpose; and
• A specific reason or urgent legal obligation to retain the personal data for a certain period. 

* Timing stores your personal data. How long the data is retained depends on whether you have worked through Timing. In that case, data must be retained for 2, 5, or even 7 years, depending on the type of data.

• 2 years for data in and belonging to the personnel file (e.g., name, address, education received, etc.);
• 5 years for the copy ID and wage tax reduction;
• 7 years for tax data (pay slips);

Online data and account details
If you have an account with us, we also retain personal information such as your email address, name, and other details so you can log in and use our services as long as you have an account. We retain and use information, such as user accounts, up to two years after contract termination to improve our products and services and protect our business interests.

Other online data
Online data collected through cookies and similar techniques are retained for up to 24 months before being deleted.

Regardless of the length of the retention period, you can ask us in certain circumstances to erase your personal data. Read more about how you can manage your personal data in the "your rights" section of this privacy policy. 

Technical and organizational (security) measures 
Timing takes appropriate technical and organizational measures to prevent personal data from being unlawfully processed or, for example, lost or stolen. Additionally, Timing has a protocol for the use of ICT, email, internet, and social media. This protocol contains (behavioral) rules on how to handle information and communication technology within Timing. It includes rules on, for example, the use of ICT and for what purposes it is used. It also describes how/who monitors this use. 

The technical and organizational measures taken by Timing ensure, taking into account the state of the art, the implementation costs, and the nature, scope, context, processing purposes, and the varying likelihood and severity of the risks to your rights and freedoms, an appropriate level of security tailored to the risk. The measures are also aimed at preventing unnecessary collection and further processing of personal data. 

9. Where do we store your data? 

We store the information we collect from you on secure servers at various locations, depending on where in the world you are when you visit our site. Your data is only processed by suppliers who provide appropriate contractual guarantees for the information they process. The Timing IT environment and data storage are hosted on Equinix servers in the Netherlands, within the EU. The Server host Equinix complies with strict security requirements in accordance with NEN 7510, ISO 27001, and ISO 9001 to keep up with data privacy industry standards. 

 
10. How do we keep your personal data safe?  

Timing naturally observes the legal grounds (Article 5 GDPR) when processing personal data. Timing ensures that it can actually demonstrate that these grounds are being complied with and thus meets its accountability obligation. 

Processing of personal data takes place in accordance with the relevant applicable laws and regulations, including the GDPR and the GDPR Implementation Act. Timing will: 

1. Protect your privacy as much as possible against unlawful processing and/or misuse of personal data, against the loss of that data, and against the processing of incorrect data; 
2. Prevent as much as possible that personal data is further processed or processed for a purpose other than that for which it was collected; 
3. Inform you about the processing that takes place by or on behalf of Timing and about your rights. 

Security incidents and data breaches 
Despite our security measures, it is possible that security incidents occur that result in a breach of personal data. 

Data breach by the data controller (Timing)
In the event of a data breach of one of the technical or organizational measures taken by the data controller, Timing will report the incident immediately after discovery, and no later than 36 hours after discovery, to the Dutch Data Protection Authority. The report of the data breach will explain the nature of the breach and the expected consequences thereof. The report will also indicate how Timing will mitigate the adverse effects of the breach and within what timeframe. 

Timing has a data breach procedure in case of a personal data breach, it will be documented. We note exactly what happened, the consequences, and the measures taken.

Data breach by the data processor
In the event of a data breach of one of the technical or organizational measures taken by one of the data processors, the data processor will report the incident immediately after discovery, and no later than 36 hours after discovery, to the Dutch Data Protection Authority. The report of the data breach will explain the nature of the breach and the expected consequences thereof. The report will also indicate how they will mitigate the adverse effects of the breach and within what timeframe. 

Processing register 
Timing keeps a written register of the processing activities that take place under its responsibility. That register contains at least the following information: the categories of personal data, the purpose, the legal basis, the data subjects, the recipients, the retention periods, the transfers, a general description of the technical and organizational security measures taken, and the name and contact details of Timing and the DPO.

11. Your rights 

Depending on our reason for processing your personal data and applicable law, you have certain rights regarding your personal data. We would like to point out to you what these privacy rights are. 

You have the following rights under the GDPR: 

Right to information 
You have the right to clear, understandable, and easily accessible information about the processing of your personal data. 

Right of access 
You have the right to ask Timing whether and in what way personal data is being processed. Of course, we must also answer your question. 

Right to rectification 
You have the right to request Timing to correct your personal data if it is incorrect or to supplement it if it is incorrect or incomplete. 

Right to be forgotten 
You have the right to ask Timing to delete your personal data. Note: Timing may sometimes not comply with a request for deletion, for example, if processing is legally required (for example, in the case of tax legislation). 

Right to restriction of processing 
You have the right to ask Timing to restrict the processing of personal data in certain cases. 

Right to data portability 
You have the right to obtain the personal data you have provided to Timing digitally from Timing or to ask Timing to transfer the personal data to another data controller, provided this is technically possible. 

Right not to be subject to automated decisions (including profiling) 
Automated decision-making through profiling is not done by Timing, you always have the right to obtain human intervention, express your point of view, and the right to contest the decision. 

Exercising your rights 
In all other cases, to exercise your privacy rights, to file a privacy complaint, or to contact our data protection officer, you can contact us via our privacy contact form. 
We will do our best to handle your request promptly and free of charge. In certain cases, we may ask you to verify your identity before we comply with your request. If you are not satisfied with the way we have handled your request, you can, of course, file a complaint with the supervisory authority that is competent for your country or region. 

12. Contact and complaints 

Do you have questions or comments about our privacy policy or would you like to file a claim? We do everything we can to handle your data carefully. If you have questions or comments about our privacy statement, feel free to ask them. We do everything we can to continuously improve our services. 

Questions about our privacy policy 
Timing has appointed a Data Protection Officer (DPO). This DPO is involved in all activities related to the protection of personal data within Timing. His tasks include: 

• Informing;
• Advising;
• Supervising;
• Raising awareness and acting as a contact person for the Dutch Data Protection Authority and data subjects;

The DPO is responsible for structurally testing the implementation and execution of the legal requirements and regulations in the field of personal data. Timing remains, despite the appointment of a DPO, independently responsible for compliance with applicable laws and regulations. Processing of personal data is first reported to the DPO before processing begins. For all activities related to the processing of your personal data and the exercise of your rights, you can contact the DPO via [email protected]. 

Filing a claim 
Do you think that Timing - in connection with the processing of your personal data - is in violation of the applicable laws and regulations or this privacy statement? Then contact the Data Protection Officer of Timing via [email protected]. 
If you want to file a complaint directly with authorities in connection with the processing of your personal data, you can do so with the Dutch Data Protection Authority via www.autoriteitpersoonsgegevens.nl. 

Contact 
You can also contact us via our postal address: 

Timing B.V. 
Deventerstraat 15-2, 
7311 BH Apeldoorn 
Netherlands 

13. Document version

This document was last updated 08-2023