Legal & privacy
Privacy Statement
How xentys handles the personal data of candidates: what data we process, for what purpose, and what rights you have.
Last updated: October 2026
Applies to all xentys candidates
On this page
Your privacy matters
We place people in new positions or assignments. This is a sensitive service. Here we explain how we handle your privacy.
Purpose-led
We only process your data so that we can put you forward for vacancies and assignments.
Confidential
We handle your data with the utmost confidentiality.
Transparent
You can always see which of your data we hold.
First of all
We place people in new positions or assignments. This is a sensitive service.
Handling the data of
- those whom we have approached for specific vacancies or assignments,
- or those who have approached us for this purpose themselves (together referred to below as “Candidates”)
with the utmost confidentiality is essential for our business, but above all for the people concerned.
Here we explain how we handle your privacy:
- what data we process
- for what purpose
- what rights you have regarding the processing of the personal data we hold.
Below is a diagram that shows “how we work” (see our process), followed by an explanation of how we handle your personal data.
How we work with candidate data
This diagram shows how we work: from selection and consent to retention, renewal and deletion.
Who is xentys?
xentys B.V. is located at Geestbrugkade 35, 2281 CX Rijswijk, the Netherlands, Chamber of Commerce no. 27346676.
With respect to your personal data, we are the ‘data controller’ under the General Data Protection Regulation (GDPR, in Dutch: AVG).
Our data protection officer is Maarten Smits van Oyen, who can be reached at maarten.smitsvanoyen@xentys.nl.
For what purpose do we use your personal data?
Below is an overview of the purposes for which we store personal data. It also shows what data we store and use, the legal basis for processing that data and how long we keep it.
Placement in permanent positions
- Purpose: in order to put candidates forward for vacancies, we need to have their data. Our business is aimed at having the data of suitable candidates at our disposal.
- Data: curriculum vitae, career details, contact details, motivation letters, reports of our interviews with candidates, photos, correspondence and other data provided by the candidate
- Legal basis: either “legitimate interest” (for providing the service “placement in permanent positions”) or we have “consent” from the candidate concerned
- Our interest: commercial interest
- Retention period: 3 years
Placement in interim assignments
- Purpose: in order to put candidates forward for temporary assignments, we need to have their data. Our business is aimed at having the data of suitable candidates at our disposal.
- Data: curriculum vitae, career details, contact details, motivation letters, reports of our interviews with candidates, photos, correspondence and other data provided by the candidate
- Legal basis: either “legitimate interest” (for providing the service “placement in interim assignments”) or we have “consent” from the candidate concerned
- Our interest: commercial interest
- Retention period: 7 years
Actively searching for new candidates, for both permanent and interim positions
- Purpose: for some positions, advertising and/or searching our database is not enough. For these we use software that searches for candidates with a specific set of abilities and knowledge, the so-called skill set. These candidates are placed on a temporary, project-specific ‘long list’ of search results. A xentys consultant then selects candidates from this list by hand, and the data is used to tell them about a potentially interesting vacancy by email or LinkedIn message. After use, the temporary file is destroyed.
- Data: career details, contact details, photos, references, reviews (so-called third-party endorsements) and other data the candidate has published on public websites (for example, but not only, LinkedIn).
- Legal basis: “legitimate interest” (for providing the service “placement in interim assignments”), including asking the candidate concerned for consent to put them forward and to store their data for that purpose.
- Our interest: commercial interest.
- Retention period: 3 months. This is the typical length of a procedure up to a signed employment contract. It can only be extended while the procedure is still running.
How do we obtain your personal data?
We hold your personal data because you sent it to us yourself (by email), whether or not through an intermediary website that shows vacancies and/or interim assignments, or because we found it on public websites (e.g. LinkedIn).
What are your rights?
Under the GDPR (AVG) you have a number of rights regarding your personal data and its processing:
Access
If you would like to see the personal data we hold about you, you can request access at info@xentys.nl.
Correction
If you want to make changes to the personal data you have seen, you can ask xentys to change, correct or complete your data.
Restriction of processing
Under certain conditions, you have the right to ask xentys to restrict or stop the processing of your personal data.
Right to object
You have the right to object to the processing of your data, unless you have given us explicit consent to process it.
Blocking or deletion
You can also ask xentys to block or delete your data.
Data portability
You have the right to receive your personal data from us, in the format in which we have stored it.
Withdrawing consent
You always have the right to withdraw consent you have given for the processing of your data. This then applies only to future actions. As a result, we may no longer be able to provide certain services to you.
Response from xentys
Send your request to xentys at info@xentys.nl. Your request will be processed within 1 month at the latest. If we refuse your request, we will explain why.
Recipients of personal data
Your personal data is only shared with our clients with your consent. Such a client has a vacancy or an interim assignment that you are interested in.
Can this privacy statement be changed?
xentys may change this privacy statement unilaterally. Please check the current privacy statement on the xentys website regularly.
Complaints and questions
For questions and/or complaints, you can contact xentys at info@xentys.nl.
You can also contact the Dutch supervisory authority: the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).
Questions about your personal data?
Contact xentys about access, correction, deletion, objection or any other privacy request.