Privacy information

Controller

Jerry Van Der Sluys, trading as Crossborder Consulting, Rund Deel 1, 26409 Wittmund, Germany. Kernvanto Recruitment is the recruitment brand. For privacy questions and requests, contact info@kernvanto.nl.

Website use

This website is hosted by OpenAI. The hosting service may process technical information, including IP address, requested page, time and browser information, for delivery, security and troubleshooting. We also record aggregated page views by day, page (without query parameters), referring domain and source category, country and estimated city. The hosting infrastructure temporarily processes the incoming IP address to derive country and city. Our visitor register stores no IP address, cookies, visitor ID, full referrer URL or form contents. It counts page views, not unique people, and is not linked to applications or contact requests. Cities and countries with fewer than five views in the selected period are combined in the dashboard. Aggregated measurement data is deleted after 24 months. We use these data to understand website use on the basis of our legitimate interest (GDPR Article 6(1)(f)). We do not use advertising pixels, external fonts or external marketing trackers.

Cookies and sign-in

We do not place marketing cookies or store enquiry content in cookies or local storage. The hosting service may provide necessary access and sign-in functions. The internal administration uses verified account identity and email to restrict access to the owner.

Enquiries

Your name, email, optional contact details, organisation and message are stored in our restricted enquiry administration. A receipt with a reference appears on this website; the website does not send an automatic confirmation email. We use your details to respond and discuss a possible service. Requested services and agreements use GDPR Article 6(1)(b); other business enquiries use our legitimate interest in responding under Article 6(1)(f). Providing information is voluntary, but without contact details we cannot respond.

Candidates

Relevant contact details, experience, qualifications, languages, region, availability and preferences are used for the requested introduction or recruitment service (Article 6(1)(b)). We discuss a specific employer introduction with you first. A separate candidate pool requires separate consent (Article 6(1)(a)). Do not send national identification numbers, identity-document copies or medical information. We do not use automated decision-making or automated suitability assessments.

Storage and recipients

The owner may store relevant candidate profiles, CVs, source information, agreements and consent records in the internal administration. Cloudflare D1 and R2 provide database and file storage through the hosting service. Server-side access is restricted to the owner; candidate profiles are not public. OpenAI provides hosting using Cloudflare infrastructure. OVHcloud provides domain registration and DNS and processes limited technical data for those services. To the extent it processes that data on our instructions, OVHcloud is a separate processor; it may act as an independent controller for its own account, billing and legal purposes. CVs and candidate files are not stored at OVHcloud. Business email uses Google Workspace. The suppliers process information to provide their services. Hosting of data collected by this published website is covered by the OpenAI data processing terms for website hosting, incorporated through publishing and hosting. This hosted-data agreement does not cover website-authoring input. Processing outside the EEA may occur under SCCs or an applicable adequacy decision under section 4.1; EU-only hosting is not guaranteed.

International processing

The hosting service does not guarantee EEA-only storage. Processing outside the EEA, including in the United States, is possible. Hosting is subject to the applicable OpenAI data processing terms for website hosting or, for a business account, the OpenAI Data Processing Addendum. These provide for standard contractual clauses or an applicable adequacy decision for transfers.

Retention and deletion

New online candidate files: at most 90 days for requested recruitment support; without pool consent closure reduces this to at most four weeks. Only separate, unticked pool consent permits storage for up to 180 days after submission. Provided email address, timestamp and privacy version record submission and pool choice. Submit your CV without an account. Enter your own email address. After submission this page displays your application reference. Keep this reference. For access, correction, export, withdrawal or deletion email kandidaten@kernvanto.nl from the address you provided; we verify your request before disclosing any data. Expired files and documents are deleted on database use. Daily automatic cleanup is scheduled for 03:00 Europe/Berlin to delete expired active records and documents. Internal candidate records follow their recorded final deletion date. Local downloads and provider backups require separate handling. An internal notification sent through Google Workspace contains only the application reference, vacancy reference and a link to the protected area, without names, contact details or documents. No integrated antivirus. Hosting is covered by the OpenAI data processing terms for website hosting; processing outside the EEA may occur under its stated transfer safeguards.

Your rights

You may request access, correction, deletion or restriction. Where applicable, you may object or request portability. Consent can be withdrawn for future processing. Contact info@kernvanto.nl. You may complain to a competent supervisory authority, including the Lower Saxony data protection authority or the Dutch Data Protection Authority.

External vacancies and payment

The selected vacancies link to employer websites. Applications there follow the employer’s privacy information. Payment for fixed packages uses the existing Crossborder Consulting Shopify store. Shopify processes contact details, billing address, order and payment data. Kernvanto does not store card data. We use the selected service, language, business country and agreement to prepare the payment route. Cross-border business VAT is reviewed through an enquiry and personal contact before ordering. Review the privacy information in the Shopify checkout.

Updated: 6 October 2026.