BloomAI Services B.V.

Privacy Policy

DRAFT — This privacy policy requires review by a qualified legal professional before publication.

Last updated: March 2026

1. Data Controller

BloomAI Services B.V.
Beechavenue 54 – 62
1119 PW Schiphol-Rijk, The Netherlands
KvK: 93065418

Data protection enquiries: privacy@bloomaiservices.com
General: info@bloomaiservices.com

2. Types of Data Collected

We collect personal data through the following channels:

  • Candidate applications: Full name, email address, phone number, LinkedIn URL, CV/resume file, cover letter, and GDPR consent records.
  • Client lead forms: Company name, contact name, email address, phone number, role requirements, urgency, and GDPR consent records.
  • Contact form submissions: Name, email address, subject, message content, and GDPR consent records.
  • Website analytics: Anonymised usage data collected via Google Analytics 4, including pages visited, session duration, device type, and approximate geographic region.

3. Purpose and Lawful Basis

  • Candidate data: Processed on the basis of explicit consent (Article 6(1)(a) GDPR) for the purpose of evaluating your suitability for open positions and contacting you about relevant opportunities.
  • Client lead data: Processed on the basis of legitimate interest (Article 6(1)(f) GDPR) for the purpose of responding to staffing enquiries and developing a business relationship.
  • Contact form data: Processed on the basis of legitimate interest for the purpose of responding to your enquiry.
  • Analytics data: Processed on the basis of consent for the purpose of improving our website and understanding visitor behaviour.

4. Data Retention

  • Candidate application data: Retained for 12 months from the date of submission, then automatically deleted unless you request earlier deletion or provide renewed consent.
  • Client lead data: Retained for 24 months from the date of submission.
  • Contact form submissions: Retained for 12 months.
  • Analytics data: Retained according to Google Analytics 4 default retention settings (14 months).

5. Third-Party Processors

We use the following third-party services to process your data:

  • Supabase (database and file storage) — data hosted in EU region
  • Vercel (website hosting) — global CDN with EU processing
  • Resend (transactional email delivery)
  • Google Analytics 4 (anonymised website analytics)

All processors are bound by data processing agreements and maintain appropriate technical and organisational security measures.

6. Your Rights

Under the GDPR, you have the following rights:

  • Right of access: Request a copy of the personal data we hold about you.
  • Right to rectification: Request correction of inaccurate or incomplete data.
  • Right to erasure: Request deletion of your personal data ("right to be forgotten").
  • Right to data portability: Request your data in a structured, machine-readable format.
  • Right to restriction: Request that we limit how we process your data.
  • Right to object: Object to processing based on legitimate interest.
  • Right to withdraw consent: Withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.

7. How to Exercise Your Rights

To exercise any of the above rights, please contact us at privacy@bloomaiservices.com. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.

8. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens
Postbus 93374
2509 AJ Den Haag
autoriteitpersoonsgegevens.nl

9. Cookie Policy

Our website uses the following types of cookies:

  • Necessary cookies: Required for the website to function correctly, including session management and security. These cannot be disabled.
  • Analytics cookies (optional): Google Analytics 4 cookies used to understand how visitors interact with our website. These are only set with your consent and collect anonymised data.

You can manage your cookie preferences at any time using the Cookie Settings link in the website footer.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "last updated" date. We encourage you to review this policy periodically.