Privacy Policy
Last updated: February 3, 2026
1. Introduction
ZZPVinder attaches great importance to the protection of your personal data. In this privacy policy, we explain what data we collect, why we do this, and how we safeguard your privacy in accordance with the General Data Protection Regulation (GDPR).
Data Controller:
ZZPVinder (CarTalks)
Email: privacy@zzpvinder.nl
Chamber of Commerce number: [KvK nummer]
2. What data do we collect?
We collect different types of personal data, depending on how you use our services:
Account Data
- First and last name
- Email address
- Password (stored encrypted)
- Account type (freelancer or client)
Profile Data (voluntary)
- Skills and expertise
- Work experience and education
- Availability
- Hourly rate
- CV and portfolio (if uploaded)
Usage Data
- IP address
- Browser and device information
- Pages visited and click behavior
- Visit timestamps
3. Purpose of data processing
We process your personal data for the following purposes:
- Creating and managing your account
- Matching freelancers with relevant contracts
- Communication about your account, applications, and services
- Improving our services and website
- Complying with legal obligations
4. Legal basis for processing
We process your data based on the following legal grounds:
Consent
For sending newsletters and marketing communications, we ask for your prior consent. You can withdraw this consent at any time.
Performance of contract
We process your data to provide our services to you, such as displaying vacancies and processing applications.
Legitimate interest
For improving our services and securing our website, we rely on our legitimate interest, carefully balancing your privacy.
5. Retention periods
We do not retain your data longer than necessary:
- Account data: As long as your account is active, plus 2 years after deletion for administrative purposes.
- Application data: 4 weeks after completion of the application process, unless you consent to longer retention.
- Talent pool: Maximum 1 year with your consent, after which data is anonymized or deleted.
- Server log files: Maximum 90 days for security purposes.
6. Sharing with third parties
We only share your data with third parties when necessary for our services:
| Party | Purpose | Location |
|---|---|---|
| Supabase | Database and authentication | EU (Frankfurt) |
| Vercel | Website hosting and CDN | EU |
All processors have signed a data processing agreement and comply with GDPR. We never sell your data to third parties.
7. Your rights
Under GDPR, you have the following rights regarding your personal data:
Right of access
You have the right to know what data we process about you.
Right to rectification
You can have incorrect data corrected or incomplete data supplemented.
Right to erasure
You can request deletion of your data ('right to be forgotten').
Right to restriction
You can request restriction of the processing of your data.
Right to data portability
You can receive your data in a structured, commonly used format.
Right to object
You can object to processing based on our legitimate interest.
Right to withdraw consent
You can withdraw previously given consent at any time.
Right to lodge a complaint
You can file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
How do you exercise your rights?
Send an email to privacy@zzpvinder.nl with a copy of your ID (with BSN and photo redacted). We will respond to your request within 30 days.
8. Security
We take appropriate technical and organizational measures to protect your data:
- SSL/TLS encryption for all data transmission
- Encrypted storage of passwords and sensitive data
- Strict access control to personal data
- Regular secured backups
- Continuous monitoring for security incidents
9. Cookies
Our website uses cookies for functional and analytical purposes. For more information about our cookie usage, please refer to our cookie policy.
10. Changes
We may change this privacy policy from time to time. For significant changes, we will inform you by email or through a notification on our website. We recommend consulting this policy regularly. The date of the last change is shown at the top of this document.
11. Contact
Do you have questions about this privacy policy or about the processing of your personal data? Please contact us: