Privacy statement

Why this privacy statement?
Thank you for your interest in International Sourcing and our services. For the purpose of this service, we process your personal data. We attach great importance to your privacy and we will therefore handle this personal data confidentially and carefully. In this privacy statement we will inform you about this.

Who is responsible for your personal data?
Luba is the controller within the meaning of the General Data Protection Regulation. When we talk about Luba, we are talking about Luba Uitzend Diensten bv with our temporary employment labels Luba Uitzendbureau, Vallei Personeel, Luba procestechniek & International Sourcing. This privacy statement also applies to applications for positions at Luba itself (Luba Groep bv). Whose personal data do we process? We process personal data of job seekers, applicants, temporary employment and secondment workers. In addition, we process personal data of our (potential) customers. Finally, we process personal data of third-party companies, among other things in the context of obtaining For what purposes does Luba collect your personal data? We collect and process your data in order to perform and improve our services as well as possible. Think of our services mainly: temporary employment, secondment, payroll services, recruitment & selection, mediation of freelancers, HR advice, salary and personnel administration, planning and pool management. In the appendix you can read more about the purposes of the processing of personal data. On what legal grounds may we collect your data?

We process your personal data:

• Because this is necessary for the execution of an agreement or to take measures to conclude such an agreement. Think of the conclusion of an employment contract.
• Because this is necessary to be able to comply with legal obligations. Think, for example, of paying taxes or implementing absenteeism legislation in the context of employment.
• Because you (if applicable) have given permission for this. A given consent can be withdrawn at any time. For example, we may ask you for your consent to renew your registration or to keep your application data longer.
• Based on our legitimate business interests. This is the case if, for example, we provide login details. If we do this, we only process necessary personal data. You can always save against this processing.

Where and when do we collect personal data? You can share your personal data with Luba in several ways, for example by:

• Register for work at one of our locations or via our website.
• To apply via our website or to subscribe to a (vacancy) newsletter.
• Enter into an employment contract or service agreement with us.
• Give you access to a personal environment (e.g. My Luba).
• Report vacancies to us.
• Communication with Luba – whether or not via our website – about a service, for example the questions you have asked us or requests you have submitted.
• Contact one of Luba’s employees by e-mail, telephone or in writing.
• Participate in a social media activity (for example, by clicking ‘Like’ or ‘Share’) or if you exchange data via your social media.
• Subscribe to a Luba newsletter.

Which data do we process for what purpose? If you register with us or apply for a job, we collect the following data, among other things:

• Name and address details, e-mail address, telephone and other contact details
• Date of birth, place of birth
• Gender
• Your work experience and education and training
• Any references or certificates provided (and possibly copy of the front of the driving licence)
• Your motivation
• Marital status
• Copy ID
• Proof Bank account
• Availability
• Any test data
• Photo or video (on a voluntary basis)
• BSN (max four weeks)

Nb If screening of your data is required, we will only do this if this is necessary for the position and we will inform you about this and about the results. From the moment you start working for us:

• Bsn
• Statements of conduct
• Copy of ID proof, work permit
• Nationality
• Other data required for conducting a personnel, salary and absenteeism registration
• Company data (ZZP)
• Personal account login details

We collect the following personal data from companies:

• Contact details (names and positions) of employees of our (potential) customers, suppliers, referees and other companies with which we maintain a business relationship.
• Login details for the purposes of our company portal and planning and registration systems.

The purposes for which we process your personal data, we have included it in the following overview: view the overview What special personal data do we process? We only process special personal data if this is necessary to comply with our legal obligations, if you have given permission for this, or if this is legally permitted. ‘Special personal data’ means data about race, religion or belief, political disposition, health, sexual life or trade union membership or genetic and biometric data. We only process the BSN if this is necessary to implement the law. In addition, we never record criminal data. We would like to point out that you do not include the above information on the CV provided or uploaded by you. Think in particular of your BSN, data about your origin (e.g. place of birth), your health or data about your criminal history. Nevertheless, it may happen that such data provided by you on a voluntary basis are processed by us. Luba ensures that only those persons have access to this data that they need for the execution of their work.

With whom do we share your personal data?

• (Potential) clients including employment agencies for loan.
• Suppliers involved in our services (e.g. training bodies).
• Audit bodies (e.g. SNA, audit institutions, SNCU).
• Government institutions (e.g. UWV, tax authorities, pension fund).
• Health and safety and reintegration services (including occupational health and safety services).
• Insurers (including health insurers), whether or not through our financial advisor.
• Various software providers to support our (temporary) services, e.g. with regard to planning, time registration or drawing up employment contracts.
• To third parties on the basis of laws and/or regulations or court orders.
• Organisations charged with identifying and applying for grants.

We make arrangements with third parties working under our instructions to ensure that your data is safe there and is only processed for the aforementioned purposes. It is possible that third parties process your personal data outside the EU. If that is the case, we will ensure that the right legal safeguards are taken to adequately protect your data. How long do we keep your data? We do not store your data longer than is necessary for the purpose for which we collected it and take into account any statutory retention periods. If you do not work for us, we will keep your (application) data for 1 year unless you have given permission to be registered for a longer period of time. If you apply for a permanent position at Luba, we will keep your application data for four weeks unless you give us permission to keep your data longer. After completion of your employment, we will delete your personal data after 2 years. We keep your copy of your ID proof and your payroll tax credit for five years. Certain personal data, for example for the purpose of claims, audits and tax obligations, are retained for a longer period of time. For example, it is mandatory for the tax authorities to keep data for 7 years after the end of the employment. What rights do you have? We expect you to keep your data up to date yourself. You can report changes via your contact person. If you do not want Luba to send you personal offers or information, you can let Luba know via your contact person or via the unsubscribe button in the email message you receive. We also point out your legal rights, including those of access to and erasure of personal data. To make use of this, report to one of our Locations. After identification – with your ID proof – our staff will be happy to help you. If you have not worked for us, you can also delete data by clicking on the delete button in the email message you receive from us. Which cookies do we place? On our website we use cookies in particular to make them function properly, to match your preferences and to improve. On the site you can read our cookie statement and indicate which cookies you wish to add. If permission is required, you can also provide it. Click here for an overview of active cookies. How do we secure the processing of personal data? Luba makes every effort to protect the personal data you provide against unlawful use, loss, or unauthorized access. To this end, we take various organizational and technical measures. Our employees, who have access to your personal data, are bound by confidentiality and only have access to the data required for the performance of their duties. Furthermore, we take all measures necessary to keep the network and resources up-to-date and secure and we agree with our suppliers on appropriate measures to be able to process your data safely. What to do in the event of a data breach? If it nevertheless happens that you accidentally gain access to personal data that was not intended for you (or you become aware that this has happened), please report this to us immediately via the contact details below. Alterations? The text of this privacy statement is dated 1 July 2020. Any new versions will be published on our website. Questions, comments, complaints? If you have any questions, comments or complaints about the way Luba handles your personal data, please contact your contact person. You can also always file a complaint with the Dutch Data Protection Authority. Luba has appointed a Personal Data Officer. If you have any questions about the processing of personal data by Luba, you can always contact him via persoonsgegevens@luba.nl.