Privacy Policy

1. Data We Collect and How We Use It

1.1 Personal Data You Provide

Newsletter or Event Subscription: Name, job title, company name, email address, and areas of interest; used to send relevant updates, invitations, and newsletters. Requires your explicit consent; you may unsubscribe at any time.

•Marketing Communications (e.g. whitepapers, events): When downloading content or registering for events, you may optionally consent to receive marketing communications (updates, insights, and event invitations). Consent is optional and not required to access content.

•Contact Form: Name, email address, and company name to respond to your inquiry. Your details will not be used for marketing purposes unless you have explicitly consented.

•Job Applications: Any personal data you provide during (open) job applications, including name, contact details, CV, cover letter, and any other information you choose to share. We use this information to assess your suitability for a position at Ampelmann.

•As part of our recruitment process, we use Metaview, an AI-powered interview analysis tool. Metaview processes recordings or transcripts of candidate interviews in order to generate notes, summaries, and analytical insights that assist our recruitment team. Metaview acts as a data processor on our behalf, processing your personal data under a data processing agreement. Your data may be stored on servers located outside the European Economic Area; where this is the case, appropriate safeguards (such as Standard Contractual Clauses) are in place.

•Our use of Metaview means that your interview data is used to generate AI-assisted analytical outputs, which may include a ranking or prioritisation of candidates. A member of our recruitment team always reviews these outputs and makes the final hiring decision. No decision is made solely on the basis of automated processing. You have the right to request human review of any AI-assisted assessment, to express your point of view, and to contest the outcome. If you have questions about how Metaview is used in relation to your application, please contact us at legal@ampelmann.nl.

•LinkedIn Lead Generation Advertisements: Contact details provided via LinkedIn lead generation advertisements. We process this data on the basis of your consent, as provided via the LinkedIn lead form. You may withdraw your consent at any time by contacting us at legal@ampelmann.nl.

•Communication with Our Business Development Team: When you engage with us through email, phone, or other channels, we process your contact details and the content of your communications in order to manage our business relationship with you. This includes processing personal data of contact persons at (potential) business partners and clients. We process this data on the basis of our legitimate interests in managing and developing our business activities.

•Webinar and Internal Event Registration: Details provided when signing up for events or webinars.

Purposes of Use: We use the personal data described above to:

•respond to your inquiries and provide requested information;

•send the Ampelmann newsletter where you have subscribed;

•send marketing communications where you have provided explicit consent;

•manage and facilitate event and webinar participation;

•manage our business relationships and B2B sales activities;

•improve our services, marketing strategies, and user experience;

•conduct AI-assisted recruitment analysis as described above; and

•comply with legal obligations.

‍1.3 Cookies‍

‍

When you use our website, we automatically collect: IP address, browser type and settings, pages visited, interaction patterns, referral website, demographic information, and time and duration of visit. This data is processed for the technical and functional management of the website, to analyse usage, and to improve the user experience.

website usage, e.g. Google Analytics), and Social Media Cookies (to enable social sharing via LinkedIn, Facebook, YouTube, and Twitter). Please note that these third-party platforms may process your data independently. For more details, see our Cookie Policy.

Cookies are small text files stored on your device. We use Functional Cookies (to improve usability and save preferences), Analytic Cookies (to provide insights into

1.2 Automatically Collected Data

2. Legal Basis for Processing

We process your personal data on the following legal grounds under the GDPR:

•Performance of a Contract: To provide requested services or respond to your inquiries.

•Consent: For sending the Ampelmann newsletter and other marketing communications, and for processing LinkedIn lead generation data. You may withdraw your consent at any time.

•Legitimate Interests: For business communications, improving our services, analytics, handling job applications, and managing B2B sales and business development activities.

•Compliance with Legal Obligations: As required by applicable laws or regulations.

‍

3. Data Sharing and Transfers

Personal data may be shared with the following recipients:

•Ampelmann Entities: For internal administrative purposes.

•Service Providers (data processors): Such as hosting providers, analytics services (e.g. Google Analytics), and recruitment tools. This includes Metaview, which processes candidate interview data on our behalf as described in Section 1.1. All service providers are bound by data processing agreements and may only process your data on our instructions.

•Third Parties: With your consent or as required to fulfil contractual obligations.

•International Transfers: Personal data may be transferred outside the EU/EEA only when appropriate safeguards (e.g. Standard Contractual Clauses) are in place to ensure GDPR compliance.

‍

4. Your Rights

Under the GDPR, you have the following rights:

•Right of Access: You may request a copy of the personal data we hold about you.

•Right to Rectification: You may request correction of inaccurate or incomplete data.

•Right to Erasure (Right to Be Forgotten): You may request deletion of your personal data where legally applicable.

•Right to Restriction: You may request that we limit the processing of your personal data under certain circumstances.

•Right to Data Portability: You may request to receive your personal data in a structured, commonly used, and machine-readable format.

•Right to Object: You may object to the processing of your personal data based on our legitimate interests.

•Right to Object to Direct Marketing: You may object at any time to the use of your personal data for direct marketing purposes. We will immediately cease processing for such purposes.

•Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

•Right in Relation to Automated Processing: You have the right to request human review of any AI-assisted recruitment assessment, to express your point of view, and to contest the outcome. Please contact us at legal@ampelmann.nl to exercise this right.

•How to exercise your rights: To exercise any of the above rights, please email legal@ampelmann.nl or write to us at our registered address. We will respond to your request within one month of receipt. In the case of complex or multiple requests, we may extend this period by a further two months, in which case we will notify you within one month of receiving your request, stating the reason for the extension.

•Right to Lodge a Complaint: You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens (the Dutch Data Protection Authority, www.autoriteitpersoonsgegevens.nl), or with the supervisory authority in your country of residence within the EU.

5. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, and in accordance with our legal obligations. The following periods apply:

•Newsletter and marketing communications: Until you withdraw your consent or unsubscribe, and no longer than two years after your last active engagement with our communications.

•Contact requests: Up to twelve months after your inquiry has been closed.

•Event participation: Up to twelve months after the event, for follow-up and evaluation purposes.

•B2B sales and business development contacts: For as long as the business relationship exists and up to two years after our last contact, unless a longer retention period is required by law or justified by our legitimate interests.

•Job applications (unsuccessful candidates): Four weeks after the end of the recruitment procedure. With your explicit consent, we may retain your details in our talent pool for up to one year, in order to consider you for future vacancies. You may withdraw this consent at any time.

•Legal obligations: As required to comply with applicable legal obligations.

‍

6. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including secure servers and firewalls, and regular monitoring and auditing of our systems. While we take all reasonable steps to protect your data, no system is completely secure.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with our obligations under the GDPR.

7. Links to Third-Party Websites

Our website may include links to external websites. Ampelmann is not responsible for the privacy practices of those websites and recommends reviewing their privacy policies before providing any personal data.

8. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The latest version will always be available on our website.

9. Contact Us

If you have any questions, concerns, or complaints about this policy or the way we handle your personal data, please contact us:

Ampelmann Operations B.V. Rotterdamseweg 380, 2629 HG Delft, the Netherlands Email: legal@ampelmann.nl

You also have the right to lodge a complaint with the relevant supervisory authority in the EU, such as the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): www.autoriteitpersoonsgegevens.nl.

‍