Privacy
Privacy statement
This statement explains how Solvism handles personal data through this website. It covers what we collect, why, who else processes it, how long we keep it, and the rights you can exercise.
Version 1.5. Last updated 25 September 2026.
Who is responsible
Solvism is the controller for website request data, direct assessment emails, and its own sourcing and candidate records described in this statement. That does not automatically make Solvism the controller for an application to a client vacancy. A reusable client authority profile records that allocation once for the engagement, and every published role must match it. The approved application target must identify the controller and explain Solvism's role before it collects your application data.
Solvism is a sole proprietorship registered in 's-Gravenhage, the Netherlands. It is registered with the Chamber of Commerce (KvK) under number 73970344, VAT number NL002453943B31.
For any question about your data or privacy, or to exercise any of the rights below, write to jonathan@solvism.nl.
To update your candidate profile or manage a consent, email us first. After checking your identity, we can send a secure Recruit CRM link for your profile.
Solvism has not appointed a Data Protection Officer. As a sole proprietorship, it is not required to.
What this website collects
The website itself gathers very little. Its current assessment and job-application paths are described below.
Assessment requests
The assessment page has no form. The request link opens your email application with a subject line. Nothing is submitted to this website or to the retained Cloudflare assessment handler. If you send the email, Google Workspace receives it so we can read and reply. Please do not include candidate data, CVs or ATS exports in this first email.
Booking a call
The Talk to Jonathan link opens a Google Calendar booking page. It runs on Google, not on this website. If you book a slot, Google receives the name, email address and any notes you enter, so the appointment reaches our calendar. We use those details only to hold and prepare the call.
Job applications
This site does not currently accept applications through a Solvism form. A client vacancy can offer an application link only after a protected profile records the controller, Solvism's role, the purpose and lawful basis once for that client engagement. The role must match that profile and its approved application destination. If either match is missing, the vacancy and its application link stay unpublished. Applying is your request to handle that application for that role. It is not GDPR consent or permission for another company or role. The candidate data page explains the wider process.
Optional website analytics
Google Analytics is currently inactive. Saving a preference records it in your browser only; no analytics data is sent to Google.
Your saved browser preference expires after 180 days. The cookies page explains the stored choice, cookie lifetimes and how to change your mind. This preference is separate from candidate-data permissions.
Hosting and technical records
This website is hosted on Cloudflare. Cloudflare processes the technical request data needed to serve and protect the site on our behalf. A retained Worker executes requests to explicit API paths, but its assessment handler does not accept submissions. The assessment page does not submit data to it. Your optional analytics choices are explained below. See the cookies page.
Who else processes your data
We do not present an identifiable candidate profile to a hiring company without explicit written permission for that company and role. Several service providers may still process data in the paths described here. For Solvism's own controller purposes, providers acting on our behalf are processors. That processor handling is different from presenting a candidate to a hiring company. For a client vacancy, the application notice explains the controller and processor allocation that applies.
Cloudflare, Inc. Website hosting, request protection and Worker execution for explicit API paths. The assessment handler does not accept assessment requests, and the assessment page does not submit data to it. Based in the United States. Its customer data processing addendum relies on the standard contractual clauses under Commission Implementing Decision (EU) 2021/914 and the EU-US Data Privacy Framework.
Recruit CRM. Stores and helps manage recruitment records for the applicable controller, and is the application destination for published client vacancies. Operated by Workforce Cloud Tech, Inc., of Norwood, New Jersey, United States, which stores data on Amazon Web Services in the United States. The protected client profile records the processor agreement, approved application origin and evidence that the configured notice appears before collection. Each role inherits that profile only through its private Recruit CRM company linkage. The notice identifies the controller and explains Solvism's role. Recruit CRM's transfer terms rely on the standard contractual clauses under Commission Implementing Decision (EU) 2021/914, incorporated into its published data processing agreement.
Clay. Enriches business-contact details for our own outreach to prospective clients. Based in the United States.
Unipile. Connects to LinkedIn for sourcing and messaging on our behalf. Established in the European Union, with no transfer of your data outside the European Economic Area.
Google Workspace. Provided by Google Ireland Limited, for our email. Transfers to the United States rely on the EU-US Data Privacy Framework and standard contractual clauses.
We also use Anthropic to assist AI processing, described in the next section. For customers in the European Economic Area, the contracting entity is Anthropic Ireland, Limited, with processing taking place in the United States. The sourcing database and vector store we maintain run on Solvism's own infrastructure in the Netherlands, while applications submitted through the job board are held in Recruit CRM in the United States.
International transfers
Where a processor is based outside the European Economic Area, the transfer relies on the mechanism named for that processor above, either the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework, so your data keeps a recognised level of protection when it is processed outside the EEA.
How long we keep it
For records Solvism controls, these are the current retention periods. When the hiring client controls an application record, the vacancy-specific notice gives the period that applies instead.
Active candidates in a process. For the duration of the recruitment process plus 90 days.
Saved profiles we have not contacted. For profiles we have saved but never contacted, we have not yet defined when the retention period starts. The period after a recruitment process does not provide a deletion deadline for these profiles. You can ask us to delete your profile by emailing jonathan@solvism.nl.
Contacted with no response. Deleted within 90 days of the last time we tried to reach you.
Future roles after a process. We do not currently extend the 90-day period so we can consider you for future roles. You can ask us to delete your data sooner at any time.
Placed candidates. A placement record is kept for seven years, because Dutch tax and accounting law requires it.
If you object or ask us to delete your data, we keep a minimal suppression record so that we do not contact or re-source you again: your name, your email, the public profile link we found you through where that applies, and the date and reason. We keep nothing beyond what honouring your request requires.
AI support and questions about decisions
Gillnet, Solvism's own AI sourcing product, supports the search. We source people and approach them through LinkedIn. Being contacted about a role is different from applying for it; a direct application enters that role's recorded process.
We speak with candidates about their interests, discuss suitable client vacancies and ask for explicit written permission before presenting an identifiable profile for a specific company and role. You can ask whether AI was used in handling your information and how it affected the process. If you want a person to review a decision, ask us and we will.
AI-assisted drafting and scoring send candidate text to Anthropic in the United States, under the same approved EU transfer mechanism described above. Email addresses and phone numbers are stripped out before that text is sent. Names are not, so assume your name can appear in text processed in the United States. The databases and the vector store holding candidate records run on Solvism's own infrastructure in the Netherlands.
Your rights
Under the GDPR you have the following rights over your personal data. To use any of them, email jonathan@solvism.nl. We answer within one calendar month, and for a complex request we may extend this by up to two months, telling you within the first month if we need to.
Access (Art. 15). Ask for a copy of the personal data we hold about you, its purposes and recipients, how long we keep it, and where we got it.
Rectification (Art. 16). Ask us to correct data that is wrong, or complete data that is missing.
Erasure (Art. 17). Ask us to delete your data. We do this unless the law requires us to keep it, for example a placement record kept for seven years.
Restriction (Art. 18). Ask us to pause processing while a question about your data is resolved.
Portability (Art. 20). Receive the data you gave us in a structured, machine-readable format.
Objection (Art. 21). Object to processing we base on a legitimate interest.
Human review (Art. 22). Ask a person to review any decision you believe was made by software alone.
Withdraw consent. Where we rely on your consent, withdraw it at any time. This does not affect processing that happened before you withdrew it.
Before we act on a request, we confirm your identity so that we never send personal data to the wrong person.
How to complain
If you have a concern about how we handle your data, please contact us first so we can put it right. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens.
You can reach them at autoriteitpersoonsgegevens.nl or by phone on 088 - 1805 250.
Related pages: candidate data and cookies.