Privacy Policy
Will Werk, Dutch Chamber of Commerce (KvK) no. 97287296. A question or a request? Email ik@willwerk.nl or call +31‑85‑1150551.
Version 2.1 — in force since 19 August 2026This is an English translation provided for your convenience. The Dutch version of this policy is the legally binding text; if the two differ, the Dutch version prevails. We are established in the Netherlands and Dutch law applies.
1. In brief
We process personal data because we help people find work. That is not possible without reading your CV and passing your details to an employer. What we do not do: sell your data, resell it to advertisers, or keep it indefinitely because it might come in handy one day.
This policy forms part of our terms and conditions. Where the two conflict on the point of personal data, what is stated here applies.
2. What data and why
We process only what we need, each time on a basis that the law permits (the GDPR).
| From whom | What | For what, and on what basis |
|---|---|---|
| Candidates | Name, email, phone, place of residence, CV and the text within it, your motivation, the conversation with Will and the assessment that follows from it | To handle your application and put you forward to an employer. Basis: performance of your request and our legitimate interest in acting as an intermediary. |
| Candidates who opt in | The same data, plus the fact that you gave consent and when we emailed you | To alert you to a later vacancy that suits you. Basis: your consent, which you can withdraw at any time. |
| Employers | Company details, registration number, contact persons, billing details, use of the platform | To perform your subscription and to invoice you. Basis: the contract and our statutory record-keeping obligation. |
| Anyone who calls | Phone number, time, duration, and for recorded calls the recording and a written summary | To handle your question and improve our service. You are told at the start of the call that it is recorded. Basis: legitimate interest. |
| Site visitors | Pages visited, time, and an encrypted representation of your IP address | To see how the site is used. We do not keep your IP address as such. Basis: legitimate interest. |
We do not ask about, and do not assess on, your gender, age, origin, religion, sexual orientation, health or other special-category data. If something like that nevertheless appears in your CV because you put it there yourself, it plays no part in the assessment.
3. Assessment by AI
Will is an AI recruiter. He reads your CV, conducts the conversation and forms an opinion on how well you fit the role. That is automated processing, which is why we explain how it works.
- Will's opinion is advice. In their dashboard the employer sees every candidate who responded to their vacancy, including those Will did not put forward, with their CV and contact details. The employer can assess them and invite them directly.
- You can always ask a human to review it. Email ik@willwerk.nl. A member of staff will then reassess your application, can change the outcome, and will let you know the result.
- You can ask for an explanation of the points on which, according to Will, the fit fell short.
- We do not infer emotions, personality or health from your voice, face or posture. That is prohibited in recruitment and we do not do it.
- We keep a record of the assessments so we can check whether particular groups are structurally rejected more often.
4. How long we keep it
Briefly, and no longer than permitted. We follow the retention periods used by the Dutch Data Protection Authority.
| What | How long |
|---|---|
| Application and CV, without consent to contact you | 4 weeks after the application is completed |
| Application and CV, with your consent | 1 year. Before it expires we ask whether you want to stay in our database; if we hear nothing, we delete your data. |
| You unsubscribed or asked to be deleted | Immediately |
| Recordings of phone calls | At most 3 months; after that our telephony provider deletes them. We keep the summary for as long as the client relationship lasts. |
| Employer data and invoices | During the subscription, and after that for as long as the tax retention obligation lasts (7 years) |
| Site visit data | At most 12 months |
This is enforced automatically. A clean-up process deletes the data whose period has expired every day, including the CV file itself. A retention period that exists only on paper is not a retention period.
5. Who we share with
We do not sell your data. We share it with the employer of the vacancy you apply for, and otherwise only with parties that help us deliver the service:
| Party | For what |
|---|---|
| Anthropic | The language model behind Will: conversations, CV texts and assessments |
| OpenAI | Transcribing recorded phone calls |
| Google Workspace | Our email, incoming and outgoing |
| Composio | Reading and sending our email |
| Rinkel | Our telephony and call recordings |
| Mollie | Payments by employers. We do not store payment details ourselves. |
| Our hosting provider | The server on which the platform runs |
| Backblaze (EU, Amsterdam) | Encrypted backups of our data |
We have agreements with these parties on the handling of personal data. They may use the data only to deliver the service to us, and not for their own purposes.
If an employer puts your data into their own system
Employers on a larger plan can connect Will Werk to their own system, for example their applicant tracking system. If you are put forward to such an employer, they can retrieve your data and CV into it.
From that moment the employer maintains their own copy, and we are no longer the party responsible for it. They are responsible themselves: for how long they keep it, for its security, and for answering your questions about it. In our terms we have laid down that they may use that data only for their own recruitment, may not resell it and may not train models with it.
If you ask us to delete your data, we do so on our side. We cannot do so in the system of an employer to whom you have already been put forward. If you want it removed there too, let us know: we will tell you which employers you were put forward to, so you can ask them. Our terms require that employer to do the same.
6. Transfers outside the EU
Some of our suppliers are in the United States, including the providers of the language models. Your data may therefore be processed outside the European Union. This takes place on the basis of the European Commission's standard contractual clauses, or because the party is certified under the EU-US Data Privacy Framework.
If you would rather your CV not be read by a language model, let us know. We can then handle your application manually, or delete your data if you prefer.
7. Your rights
You have the right to access your data, to have it corrected, to have it deleted, to restrict processing, to have your data transferred, and to object to processing. If you have given consent, you can withdraw it at any time; that does not affect what was already done beforehand.
Email your request to ik@willwerk.nl. We respond within one month. We ask you to identify yourself, so that we do not hand someone else's data to you.
If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), or with the data protection authority in your own EU country. If it concerns a suspicion of discrimination, you can turn to the Netherlands Institute for Human Rights.
8. Cookies
We use functional cookies that are needed to make the site work, for example to keep you logged in. We also measure how the site is used; we store your IP address encrypted so it cannot be traced back to you. We do not place any third-party advertising or tracking cookies.
9. Security and changes
We protect your data with encrypted connections, per-employee access rights and passwords that are stored only in encrypted form. CVs are not publicly accessible: they can only be retrieved via a signed link that expires.
We may change this policy. A change that materially affects your position we announce at least 30 days in advance. The date at the top of this page indicates which version applies.
Version 2.1, adopted on 19 August 2026. English translation of the authoritative Dutch text.