Privacy policy

Your privacy is important to Team Rockstars. In this privacy statement, we describe what personal data we collect from you, why we process it, what we use this information for and how you can manage it.

This privacy statement applies to the processing of personal data via our website www.teamrockstars.nl and other online channels that refer to this statement. This concerns data of website visitors, applicants, candidates and business contacts who share their data with us online or during (offline) events.

Thus, the information in this statement relates only to personal data processed in the context of

• The use of website and cookies;
• Online applications or registrations;
• Contact requests or participation in events;
• Communication with (potential) clients or collaborative partners.

For internal processes (such as HR, supplier and operational processing), Team Rockstars maintains an internal privacy policy. This policy is managed within our information security management system (ISMS) and describes how personal data is protected and processed internally.

‘Team Rockstars IT B.V.’ is a subsidiary of ‘Simonse Beheer B.V.’.

The following entities are data controllers depending on the service or relationship:

• Student Agency B.V.
• Generation IT B.V.
• Team Rockstars Holding B.V.
• Team Rockstars Real Estate B.V.
• Team Rockstars IP B.V.
• Team Rockstars IT B.V.
• Team Rockstars Solutions B.V.
• Team Rockstars Data B.V.
• Team Rockstars Security B.V.
• Team Rockstars Cloud B.V.

These entities work closely together within joint processes, such as recruitment, marketing and website management, and are joint controllers. For processing that takes place within their own business operations (such as personnel or customer administration), they act as separate controllers.

Team Rockstars IT B.V. serves as the central contact party for all privacy-related inquiries on behalf of the above entities. You can contact them at privacy@teamrockstars.nl

This privacy policy does not apply to third-party websites that can be accessed through links on our website.

This privacy policy applies to visitors to www.teamrockstars.nl.

This privacy policy does not apply to third-party websites that can be accessed through links on the Team Rockstars IT website.

Team Rockstars IT values the privacy of its visitors. Team Rockstars IT therefore pays special attention to processing the personal data that visitors leave on its website. To ensure the privacy of its visitors as much as possible, Team Rockstars IT has created this privacy policy.

Team Rockstars IT collects personal data from you in the following situations:

• When you actively provide your data to us, for example;
  • When filling out a form or application on teamrockstars.co.uk;
  • When you contact us via email, phone or social media;
  • During (offline) events or trade shows where you share your data through one of our staff members;
  • When you respond to a job posting or sign up for the talent pool.
• When we collect data automatically when using our website, such as:
  • IP address, device and browser data;
  • Statistics about your visiting behavior (via cookies or similar technologies)
  • Preferences you specify through cookie settings.

We use the personal data we collect in this way only for the purposes described in this privacy statement.

We process your data only on a valid legal basis, namely:

• Your consent (for example, for marketing cookies or talent pool enrollment);
• The performance of a contract or to take pre-contractual steps (in job applications and mediation);
• A legal requirement (e.g., for administrative or tax obligations); or
• A legitimate interest (such as improving our website or maintaining business relationships).

Team Rockstars IT collects and processes personal data in order to provide our services as a secondment provider, properly inform website visitors and guide applicants through the placement process.

We use your personal data only for the following purposes:

For applicants and candidates:

• Assessing your suitability for a (future) position or assignment;
• Maintaining contact during the application or mediation process;
• Including your profile in our talent pool (only with your permission);
• Offering relevant job opportunities or information about our services;
• Drafting an agreement or pre-contractual documents;
• Carrying out administrative obligations arising from a cooperation or potential cooperation.

For business associates or contacts:

• Maintaining contact and executing agreements;
• Sharing profiles of candidates or information about our services;
• Performing administrative and financial processes;
• Informing about developments within Team Rockstars IT or relevant market information.

For website visitors:

• The operation and improvement of our website;
• Analyzing visitor behavior via cookies and analytics (only with permission where required);
• Showing personalized content and advertisements (if allowed via cookie settings).

Grounds for processing (AVG Art. 6):
We process your personal data only on the basis of one or more of the following grounds:

• Consent – for example, when you enter your data through an application form, consent to being kept in the talent pool, or accept marketing cookies.
• Execution of a contract or pre-contractual steps – for example, when you apply for a job or enter into a partnership with us.
• Legal obligation – for example, administrative, tax or identification obligations.
• Justified interest – for example, to improve our services, maintain business relationships and send limited business information to existing contacts.

Team Rockstars IT processes personal data only for the purposes mentioned above and does not share it with third parties for commercial purposes.

We process only the personal data necessary for the purposes described in this privacy statement.
The nature of the data depends on the purposes for which you have shared your data with us.

When you apply or register through our website

We may process the following data from you:

• First and last name;
• E-mail address, phone number and other contact information;
• City or region (if specified);
• CV, cover letter or other documents you voluntarily upload;
• Information about your education, experience and availability;
• Any test results or references you provide yourself;
• Photo or profile picture (voluntary).

When you contact us through the website or social media

We then process:

• Your name and contact information;
• The content of the message or question you ask;
• The date, time and manner of contact.

When you visit our website

We automatically collect limited data to make the website function and improve, such as:

• IP address, browser type, device and operating system;
• Pages visited, click behavior and session duration;
• Cookie preferences and analytics (see our cookie statement for more information).

After successful mediation or employment

After a successful mediation or hiring, we may process additional personal data necessary for the execution of an employment contract or cooperation.
This is only data that is required by law or necessary for personnel, salary or absence administration, such as:

• BSN, ID and bank information.

This data is only processed internally and is subject to Team Rockstars IT’s internal privacy policy.

Providing personal data is voluntary, but in some cases necessary to provide a service. For example, to review your application or to contact you.

We will retain your personal data no longer than necessary for the purpose for which it was collected, or for as long as we are required by law to retain it.
Once the retention period has expired, we will carefully delete or anonymize your data.

Applications and talent pool

When you apply through our website or register for a vacancy, we keep your data for as long as necessary to process the application.
After completion of the procedure:

• No match: we keep your data for a maximum of 4 weeks.
• With talent pool consent: we will keep your data for a maximum of 12 months.
  After that period, we will ask for your consent to keep your data again.
• Do you withdraw your consent earlier? Then we will delete your data within 4 weeks.

You always have the right to have your data removed, accessed or corrected earlier. Would you like to exercise this right, or withdraw your consent? Please send an e-mail to privacy@teamrockstars.nl. We will handle your request carefully and respond within one month.

When an application or mediation leads to a partnership or employment, we will include your data in our internal records.
This data is then subject to Team Rockstars IT’s internal privacy policy, in which separate legal retention periods apply.

As a business relationship:

For organizations, a professional or starter may be relevant at any time.
We therefore process only limited personal data of business associates – such as name, contact information, job title, gender and company information.

We keep this data for as long as the business relationship is active or remains relevant for future cooperation.
When there has been no contact for an extended period of time or the data is no longer needed, we delete or anonymize it.

Of course, you can at any time request access to the data we have on you or request a change or deletion at privacy@teamrockstars.nl.

We share your data only when necessary for our services or when we are required to do so by law. When sharing data, we always ensure that this is done securely and according to the General Data Protection Regulation (AVG).

Sharing with processors

To perform our services, we use carefully selected suppliers and IT partners.
These parties process personal data exclusively on behalf of Rockstars IT and on the basis of a processing agreement.

Examples of parties we work with are:

• Workday – for HR and recruitment processes (server location: AWS, Frankfurt – EU);
• Salesforce – for CRM and talent pool management (EU data centers);
• Microsoft 365 – for email, documents and internal communications (EU data centers);
• DocuSign – for digitally signing documents (EU environment);
• Cookiebot – for managing cookie preferences;
• Cloud and hosting providers – for technical management and security of our website (servers within the European Economic Area).

Data is not processed outside the European Economic Area (EEA) unless appropriate safeguards are in place in accordance with the AVG (such as standard contractual clauses).

Sharing with other entities within Team Rockstars IT.

The entities that fall under Team Rockstars Holding B.V. (such as Team Rockstars Data B.V., Cloud B.V. and Security B.V.) work closely together within joint processes, such as recruitment, marketing and website management.
In that context, personal data may be shared within this group, only when necessary for the same purpose for which the data was collected.
Team Rockstars IT B.V. acts as the central contact party and coordinator for these data exchanges.

Legal obligations

In exceptional cases, we may share personal data with government agencies or regulators,
for example, when we are required to do so by law (such as in the case of a court order or tax audit).

Security of transmission

Any party processing personal data on behalf of Team Rockstars IT is contractually obligated to:

• Process the data securely according to our standards;
• Not pass on any data to third parties without our consent; and

delete or anonymize data at the end of the collaboration.

The security of your personal data is of great importance to us.

We take appropriate technical and organizational measures to protect your data from loss, misuse, unauthorized access or unauthorized disclosure.

Our security measures are based on the principles of the General Data Protection Regulation (AVG) and are in line with the principles of the ISO 27001 standard, which we are actively working towards.

Our security measures include:

• Access restriction: only authorized employees have access to personal data, and only to the extent necessary for their functions.
• Strong authentication: we use secure login procedures with multi-factor authentication and role management.
• Encryption (encryption): personal data is stored and transmitted encrypted via secure connections (SSL/TLS).
• Secure storage: data is stored exclusively on systems within the European Economic Area (such as AWS Frankfurt, Microsoft 365 EU, Workday EU).
• Backups and recovery: we make regular encrypted backups and test recovery procedures.
• Processor control: our suppliers are selected based on their security level, and processor agreements are in place.
• All employees receive information security and privacy training and awareness. Team Rockstars is working on a periodic training program that will provide these trainings on a structural basis.
• Incident management: in case of a (possible) data breach, we follow an established protocol and, if necessary, report this to the Personal Data Authority and the data subjects.

Suspected data breach

Do you suspect misuse of your data or want to report a possible data breach? Please contact us directly at privacy@teamrockstars.nl.
We take every report seriously and act according to our data breach protocol.

You have several rights under the General Data Protection Regulation (AVG) when it comes to your personal data. We think it’s important that you can easily make use of them.

Your rights include:

• Right to access: you can request what personal data we process about you.
• Right of correction: you can have it corrected if data is incorrect or incomplete.
• Right to deletion: you can ask us to delete your data if it is no longer needed or if you withdraw your consent.
• Right to restriction: you can ask to temporarily restrict processing, for example if you dispute the accuracy of the data.
• Right to portability: you can request to receive your data in a structured, common format so that you can transfer it to another party.
• Right of objection: you can object to the processing of your data, for example in the case of direct marketing.

How do you submit a request?

You can submit your request or question to our Privacy Officer Linsey van den Boom at privacy@teamrockstars.nl or by calling 073-6157777. Clearly state which right you wish to exercise and what data is involved. To prevent someone else from making a request on your behalf, we may ask for additional information to confirm your identity.

We will process your request within one month of receipt. If the request is complex or if there are many requests at once, we may extend this period by up to two months. In that case, we will always let you know in good time.

Do you have a complaint?

Not satisfied with the way we handle your personal data or how we handled your request? Please let us know at shout@teamrockstars.nl or privacy@teamrockstars.nl. We will gladly look for a solution together. If you cannot work it out with us, you can always lodge a complaint with the Dutch Data Protection Authority at www.autoriteitpersoonsgegevens.nl.

Our website uses cookies and similar technologies for (a) making the site function properly, (b) measuring and improving performance and (c), only with your permission, displaying personalized content and ads.
You can change or revoke your preferences at any time in the cookie statement. There you will find the purpose, retention period and provider for each cookie.

We may update this privacy statement from time to time, for example, when our services or laws and regulations change. The most current version of the privacy statement can be found at the top of this page.

If we make significant changes that affect the way we process your personal data we will actively inform you about them, for example through an e-mail or notification on our website.

Current version

This version of the privacy statement was created in November 2025.