Privacy statement

Last updated: 20 October 2026

This statement explains how Tevrin handles personal data of candidates, contacts at client and prospective client companies, and visitors to tevrin.nl. We process personal data in line with the General Data Protection Regulation (GDPR, in Dutch: AVG).

1. Who we are

Tevrin is a recruitment business that introduces candidates to employers for direct hire. It is a small business run by one person. The controller of your personal data is:

Tevrin, Eindhoven, the Netherlands, info@tevrin.nl

We have not appointed a data protection officer; this is not required for a business of our size. Questions about privacy can be sent to the email address above.

2. What data we collect

Candidates. Name and contact details; your CV; work history, education and qualifications; language skills; the type of role and location you are looking for; salary expectations and availability; notes of our conversations; and the roles and employers you have agreed to be introduced to. Please do not send us special categories of data (such as health, religion or a copy of your passport); we do not need them.

Client and prospective client contacts. Name, job title, company, business email address and business phone number, and our correspondence with you. We find business contact details in public sources such as company websites and job advertisements.

Website visitors. The site has no contact form, no account and no analytics. Our hosting provider records technical server logs (such as IP address, date and time, and the page requested) to deliver and secure the site.

3. Why we use your data and on what legal basis

Finding you a role (candidates): reviewing your CV, discussing roles and introducing you to an employer. Legal basis: steps taken at your request before entering into an agreement (Art. 6(1)(b) GDPR) and your consent (Art. 6(1)(a) GDPR).
Introducing you to a specific employer: we send your CV to an employer only after you have agreed to that specific role at that named employer. Legal basis: your consent (Art. 6(1)(a) GDPR).
Contacting companies about our services (B2B outreach): emailing business contacts about candidates for their vacancies. Legal basis: our legitimate interest in offering our services to businesses (Art. 6(1)(f) GDPR). Every email offers a simple way to opt out.
Working with clients: agreements, invoices and correspondence. Legal basis: performance of a contract (Art. 6(1)(b)) and legal obligations such as tax record-keeping (Art. 6(1)(c)).
Running the website securely: server logs. Legal basis: legitimate interest in a secure, working website (Art. 6(1)(f)).

We do not use your data for automated decision-making or profiling, and we do not sell it.

4. Who we share your data with

Employers. Only the employer for a role you have agreed to, and only the information needed for that application.

Service providers (processors) who handle data on our behalf, under a data processing agreement:

Netlify: website hosting;
ImprovMX: forwarding of email sent to info@tevrin.nl;
Brevo (Sendinblue SAS, France): sending email from info@tevrin.nl;
Google: storing email.

We may also share data where the law requires it, for example with the tax authorities.

5. International transfers

Netlify, ImprovMX and Google may process data outside the European Economic Area, including in the United States. Where this happens, the transfer is protected by the EU Standard Contractual Clauses (SCCs) in the provider's data processing terms and, where the provider is certified, by the EU-U.S. Data Privacy Framework. Brevo is based in the EU. You can ask us for more information about these safeguards.

6. How long we keep your data

Candidates: 12 months after our last contact with you, unless you agree to a longer period. Before deleting, we may ask whether you would like to stay on file.
Outreach contacts: for as long as relevant to our services; deleted when you object or ask us to stop. We keep only your email address on a do-not-contact list so that we do not contact you again.
Client records: agreements and invoices are kept for 7 years to meet Dutch tax law.
Server logs: for the limited period set by our hosting provider.

7. Security

We protect personal data with appropriate measures for a business of our size, including strong, unique passwords, encrypted connections (HTTPS and TLS for email), limited access, and deletion of data we no longer need. If a data breach occurs that is likely to put you at risk, we will report it to the Autoriteit Persoonsgegevens within 72 hours and inform you where required.

8. Your rights

You have the right to access, correct or delete your data; to restrict processing; to data portability; to object to processing based on legitimate interest (including outreach emails); and to withdraw consent at any time, without affecting processing before withdrawal. Send your request to info@tevrin.nl. We reply within one month. We will only ask for extra information to confirm your identity if we have reasonable doubt; we will not ask for a copy of your passport.

9. Cookies

This website does not use cookies, analytics or tracking scripts, and loads no content from third parties. It has no forms. A link to our LinkedIn page takes you to LinkedIn, whose own privacy statement then applies.

10. Complaints

If you are unhappy with how we handle your data, please contact us first at info@tevrin.nl. You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens: autoriteitpersoonsgegevens.nl.

11. Changes to this statement

We may update this statement when our services or the law change. The date at the top shows the latest version.