Data Protection Information for Applicants
Waterland (Waterland or we) would like to inform you as an applicant with this privacy notice about which data we collect in the online application process, in which way and for which purposes we process the data, under which conditions and when it is deleted and which rights you have in relation to the data.
I. Responsibility and Data Protection Officer
Responsible for data processing is
Waterland Private Equity Investments B.V., for Dutch applications
Waterland Private Equity GmbH, for applications in Germany
Waterland Private Equity NV, for applications in Belgium
Waterland Private Equity Ltd, for applications in the United Kingdom
Waterland Private Equity Ireland Ltd, for applications in Ireland
Waterland Private Equity SAS, for applications in France
Waterland Private Equity ApS, for applications in Denmark
Waterland Private Equity AS, for applications in Norway
Waterland Private Equity SLU, for applications in Spain
The data protection officer can be contacted at the e-mail address confilegal@waterland.nu.
II. Category of Personal Data, Processing Purposes and Provision
1. Data Categories
As part of your application to Waterland, we process the personal data you provide to us.
The categories of your personal data (together the Applicant Data) are in particular
- Basic data (e.g. first and last name, birth name, name affixes, age, date of birth, marital status, ID card data, nationality);
- Contact information (including addresses, e-mail address(es), landline and mobile phone numbers);
- Content data (e.g. general information from your cover letter, CV, letter of motivation and, if applicable, LinkedIn or your photograph);
- Qualification data, i.e. information on qualifications and professional background (e.g. data from the application process, in particular cover letter, CV, certificates, information on previous employments, professional and academic qualifications, specialist knowledge, doctorates or comparable titles, or language skills);
- IT usage data as part of the online application and publicly available data of you (for example data available on the internet);
- Health data (e.g. if an interview with the company psychologist takes place).
2. Processing Purposes
The purpose of processing your Applicant Data is to carry out the application process and, if necessary, other pre-contractual activities, including entering into an employment relationship. In particular, we process your Applicant Data to respond to contact inquiries and to communicate with you.
3. Provision of the Data
By submitting an application on our recruiting page, you express your interest in taking up employment with us. The provision of Applicant Data is necessary for the conclusion of the employment contract. You are not obliged to provide Applicant Data; however, failure to provide such data will mean that we will not carry out the application process and will not enter into an employment relationship with you.
III. Legal Basis
The processing of Applicant Data for the above-mentioned purposes results from the applicant’s request and is primarily done to carry out pre-contractual activities for which the processing is necessary in accordance with Art. 6 (1) lit. b) alternative 2 GDPR (legal basis).
In some cases, data processing is based on your consent in accordance with Art. 6 (1) lit. a) GDPR. In these cases, we will ask you for your consent (in writing) before processing the data.
In addition, individual data processing operations may be necessary to fulfill a legal obligation on our side or to safeguard our legitimate interests, in which case the data processing is carried out on the basis of Art. 6 (1) lit. c) GDPR or Art. 6 (1) lit. f) GDPR.
In the context of data processing of applicant data, it is also possible that special categories of personal data are processed. In this case, the applicable legal basis is Art. 9 (2) lit. b) GDPR.
IV. Storage Period
The Applicant Data processed by us is generally only processed for as long as is necessary for the respective purposes of processing (Storage Period). This is generally the duration of the application process.
As soon as your Applicant Data is no longer required, we will delete it, unless deletion conflicts with statutory retention obligations or longer storage is required in a specific case to fulfill other legal obligations or to protect our legitimate interests (e.g. assertion, exercise or defense of legal claims).
If you are hired by Waterland, your application data will be transferred to your personnel file. In the event of an unsuccessful or withdrawn application, we will delete your data no later than six (6) months after completion of the application process, unless you agree that we may store your data for a longer period of time (maximum two (2) years) in order to be able to consider it at a later stage.
V. Transfer of Data to Third Parties or Data Transfer to Third Countries
Your applicant data will be shared with our administration management software and an applicant database operated by Personio SE & Co. KG and Sum & Substance Ltd for compliance and KYC screening. In this context, Personio SE & Co KG and Sum & Substance Ltd are our processors in accordance with Art. 28 GDPR. The basis for the processing is an order processing contract and legal obligation.
VI. Data Transfer to Third Countries
For specific software applications and regulatory requirements, personal data may also be transferred to companies in countries outside the European Union and the European Economic Area where an adequate level of data protection is not guaranteed and your rights under European data protection law may not be enforced or may not be enforced in an equivalent manner but only if permitted by GDPR. It is also possible that government authorities in these countries may access your data to a different and broader extent than is permitted within the European Union. Your data may be significantly less protected there.
On 10 July 2023, the EU Commission adopted its adequacy decision for the EU-U.S. Data Privacy Framework pursuant to Art. 45 (1), (3) GDPR. This decision sets out that the USA guarantee an adequate level of protection for personal data transferred from the EU to US companies that have also joined the EU-U.S. Data Privacy Framework.
All US companies that have joined the EU-U.S. Data Privacy Framework can be found in the official Data Privacy Framework list. Further information as well as questions and answers on the EU-U.S. Data Privacy Framework can be found on the website of the EU Commission.
In particular, this concerns if user data of software tools are administered on servers in countries outside the European Union and the European Economic Area or disclosure in relation to employee participation and carried interest schemes to countries outside the European Union and the European Economic Area.
VII. No Automated Decision-Making
Automated decision-making including profiling in accordance with Art. 22 GDPR is not applied.
VIII. Cookies
Standard cookies are used when applying via our website. All information on cookies can be found in our Cookie Policy at https://www.waterlandpe.com/nl/cookie-policy/
IX. Rights of Data Subjects
Where the specific legal requirements are met, you have the right
- in accordance with Art. 7 (3) GDPR, to withdraw your consent once given to us at any time; as a result, we may no longer continue the data processing that was based on this consent in the future;
- in accordance with Art. 15 GDPR, to request information about your personal data processed by us;
- in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;
- in accordance with Art. 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for reasons arising from the law;
- in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data, insofar as the legal requirements are met;
- in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller, and
- in accordance with Art. 77 GDPR, to lodge a complaint with a supervisory authority; as a rule, you may contact the supervisory authority of your usual place of residence or workplace.
Please contact us or our data protection officer (see Section I. above) to assert your rights as a data subject with regard to the data processed in connection with the employment relationship.
X. Right of Objection
If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 (1) lit. f) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation. If you would like to exercise your right to object , simply send an email to confilegal@waterland.nu
XI. Final provisions
We reserve the right to adapt this privacy notice at any time to ensure that it always complies with current legal requirements and to reflect changes in data processing.
We would also like to point out that this privacy notice only covers the processing purposes described. Other privacy notices, such as our privacy notices on our website, remain unaffected by this privacy notice and continue to apply without restriction.
Version: 05/2025