Privacy Policy

Will Werk, Dutch Chamber of Commerce (KvK) no. 97287296. Questions or requests? Email will@willwerk.nl.

Version 2.4, in force since 4 November 2026

This is an English translation provided for your convenience. The Dutch version of this policy is the legally binding text; if the two differ, the Dutch version prevails. We are established in the Netherlands and Dutch law applies.

  1. In brief
  2. What data and why
  3. Assessment by AI
  4. How long we keep it
  5. Who we share with
  6. Transfers outside the EU
  7. Your rights
  8. Cookies
  9. Security and changes

1. In brief

We process personal data because we help people find work. We cannot do that without reading your CV and passing your details on to an employer. What we do not do: sell your data, sell it on to advertisers, or keep it indefinitely just because it might come in handy one day.

This policy forms part of our terms and conditions. If the two conflict on anything to do with personal data, this policy prevails.

2. What data and why

We process only what we need, and always on a legal basis permitted by the GDPR.

From whomWhatPurpose and legal basis
Candidates Name, email address, phone number, place of residence, your CV and its contents, your motivation, the conversation with Will and the assessment that follows from it To handle your application and put you forward to an employer. Basis: carrying out your request, and our legitimate interest as an intermediary.
Candidates who opt in The same data, plus the fact that you gave consent and when we emailed you To let you know about a suitable job in the future. Basis: your consent, which you can withdraw at any time.
Employers Company details, registration number, contact persons, billing details, how you use the platform To provide your subscription and invoice you for it. Basis: our contract with you and our statutory obligation to keep records.
Anyone who calls Phone number, time and duration of the call, and for recorded calls the recording and a written summary To handle your question and improve our service. We tell you at the start of the call that it is being recorded. Basis: legitimate interest.
Site visitors Pages visited, time of visit, and an encrypted form of your IP address To see how the site is used. We do not store your actual IP address. Basis: legitimate interest.
Visitors who accept cookies Statistics cookies from Google Analytics: pages visited, device and browser, and an approximate location To see how visitors use the site. Only if you accept statistics in the cookie bar. Basis: your consent, which you can withdraw at any time.
Visitors who accept marketing cookies Advertising cookies from Google (Google Ads): whether you reached us through an ad and then applied or signed up, and an identifier that lets Google show you Will Werk ads elsewhere To measure what our ads achieve and show relevant ads. Only if you accept marketing in the cookie bar. Basis: your consent, which you can withdraw at any time.

We do not ask about, or assess you on, your gender, age, origin, religion, sexual orientation, health or any other special category of personal data. If any of this appears in your CV because you included it yourself, it plays no part in the assessment.

My Will

As a candidate you can log in to My Will with a link we send to your email address; no password needed. There you can see your applications and your conversation with Will. For this we use your name, your email address, your applications, the conversation with Will and the profile Will builds from that conversation. This is the same data as your application, and it is kept for the same period (see section 4).

The CV database of werkzoeken.nl

We sometimes contact candidates who have made their CV public in the werkzoeken.nl CV database about a job that suits them. In that case, the source of your data is werkzoeken.nl. We use your name, your contact details and your CV. Basis: legitimate interest; you made your CV public so that employers could find you. When we first contact you, we tell you that we got your data from werkzoeken.nl, and you can object at that point. If you do not respond, we delete your data after 28 days.

3. Assessment by AI

Will is an AI recruiter. He holds the conversation with you and forms an opinion on how well you fit the role. That opinion is based only on the conversation. Will does read your CV so he can draw on your background and experience during the conversation, but he does not assess you on it. This counts as automated processing, so we explain how it works.

4. How long we keep it

Not long, and never longer than permitted. We follow the retention periods applied by the Dutch Data Protection Authority.

WhatHow long
Application and CV, if you did not consent to further contact 4 weeks after your application is completed
Application and CV, with your consent 1 year. Before it expires we ask whether you want to stay in our database; if we hear nothing, we delete your data.
Data from the werkzoeken.nl CV database, if you do not respond 28 days after the first contact
You unsubscribed or asked to be deleted Immediately
Recordings of phone calls At most 3 months; after that our telephony provider deletes them. We keep the summary for as long as the client relationship lasts.
Employer data and invoices For the duration of the subscription, and afterwards for as long as the statutory tax retention period requires (7 years)
Site visit data At most 12 months

This happens automatically. Every day, a clean-up process deletes all data whose retention period has expired, including the CV file itself. A retention period that exists only on paper is not a retention period.

5. Who we share with

We do not sell your data. We share it with the employer whose vacancy you apply for, and otherwise only with parties that help us provide our service:

PartyPurpose
AnthropicThe language model behind Will: conversations, CV texts and assessments
OpenAITranscribing recorded phone calls
Google WorkspaceOur email, incoming and outgoing
Google (Google Analytics, Google Tag Manager and Google Ads)Website statistics and measuring and showing ads, each only after your consent in the cookie bar
MolliePayments by employers. We do not store payment details ourselves.
Our hosting providerThe server on which the platform runs
Backblaze (EU, Amsterdam)Encrypted backups of our data

We have agreements with these parties on how they handle personal data. They may only use the data to provide their service to us, never for their own purposes.

If an employer imports your data into their own system

Employers on a larger plan can connect Will Werk to their own system, for example their applicant tracking system. If you are put forward to one of these employers, they can import your details and CV into that system.

From then on, the employer holds their own copy and we are no longer responsible for it. The employer is then responsible for how long they keep it, for keeping it secure, and for answering your questions about it. Our terms stipulate that they may only use this data for their own recruitment, may not resell it, and may not use it to train models.

If you ask us to delete your data, we delete it on our side. We cannot delete it from the system of an employer you have already been put forward to. If you want it removed there too, let us know: we will tell you which employers you were put forward to, so you can ask them directly. Our terms require those employers to delete it as well.

6. Transfers outside the EU

Some of our suppliers are in the United States, including the providers of the language models. Your data may therefore be processed outside the European Union. Where this happens, it is based on the European Commission's standard contractual clauses, or on the party's certification under the EU-US Data Privacy Framework.

If you would prefer your CV not to be read by a language model, let us know. We can then handle your application manually or, if you prefer, delete your data.

7. Your rights

You have the right to access, correct and delete your data, to restrict its processing, to have it transferred, and to object to its processing. If you have given consent, you can withdraw it at any time; this does not affect any processing that took place before.

Email your request to will@willwerk.nl. We respond within one month. We will ask you to verify your identity, so that we do not hand someone else's data over to you.

If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), or with the data protection authority in your own EU country. If you suspect discrimination, you can contact the Netherlands Institute for Human Rights.

8. Cookies

We use functional cookies that the site needs in order to work, for example to keep you logged in. We also measure how the site is used; we store your IP address in encrypted form so it cannot be traced back to you.

In addition, the cookie bar asks for your consent per purpose: statistics (Google Analytics, via Google Tag Manager) and marketing (Google Ads: measuring our ads and showing Will Werk ads on other sites). Without your consent these cookies are not placed; rejecting is as easy as accepting. You can change or withdraw your choice at any time on the cookie page, linked at the bottom of every page, which also lists exactly which cookies are used and how long they last.

9. Security and changes

We protect your data with encrypted connections, individual access rights for each employee and passwords that are stored only in encrypted form. CVs are not publicly accessible: they can only be accessed through a signed link that expires.

We may change this policy. We announce any change that materially affects you at least 30 days in advance. The date at the top of this page shows which version applies.

10. Our videos on YouTube

Will Werk publishes its own promotional videos on our YouTube channel (@will_werk). For this we use Google's YouTube API Services. We use them only to upload our own videos to our own channel and to read that channel's details. Through the YouTube API we do not read, store or share any data about you or any other YouTube user, and visitors or customers do not use this integration.

What we store: an encrypted access token for our own channel and, for each published video, the video ID. By using YouTube you agree to the YouTube Terms of Service. How Google handles data is described in the Google Privacy Policy. Will Werk's access to the channel can be revoked at any time through the Google account security settings; after that we delete the stored access token within 7 days. Questions or deletion requests: will@willwerk.nl.

Version 2.4, adopted on 4 November 2026 (marketing cookies from Google Ads with consent, a choice per purpose in the cookie bar and a separate cookie page; sections 2, 5 and 8). Version 2.3, adopted on 31 October 2026 (added section 10 on our use of the YouTube API Services). English translation of the authoritative Dutch text.