Just a moment, loading your page…
Just a moment, loading your page…
How Areizon handles your information on the new platform.
This notice describes the self-hosted Areizon platform.
Controller and contact Areizon is a Dutch sole proprietorship owned by Marcus Fabian Alexander Westerink. Chamber of Commerce: 42106421. VAT identification: NL005497918B63. Registered business address as confirmed by the owner: Rietzangerweg 15, 7331 KT, Apeldoorn, Nederland. Contact: [email protected].
Information and purposes We process account identity, email, protected password and session data; application contact details, CV, motivation, vacancy, correspondence, appointments and progress; and employer, contact and training enquiries. An enquiry is not automatically an order. Account operation and necessary steps in services you request rely on our agreement with you or steps you request before an agreement. Ordinary enquiries and contact with employer representatives rely on our legitimate interest in responding and maintaining business contacts. Security and abuse prevention rely on protecting the platform and its users, with limited data, access and retention and consideration of your privacy interests. You may object to processing on this basis. Future matching and optional marketing use separate consent; registration or a privacy checkbox is not blanket consent.
Future vacancies Optional talent-pool consent is unchecked and not required to apply. It lasts at most one year from consent, independently of marketing. Withdraw it in My Areizon or by emailing us; this does not automatically end an ongoing application.
Recipients and hosting Dossiers are stored on our own server in the Netherlands, with separately encrypted CV files. Cloudflare provides internet ingress, Resend sends transactional mail and Google Workspace receives business mail. Staff notifications link to the protected workspace without attaching CVs. Necessary information may be shared with the employer involved in a specific placement; applicable information and arrangements must be clear before sharing. Cloudflare, Resend and Google process data under their applicable data-processing agreements, including European standard contractual clauses where applicable for international transfers. Resend uses an Irish sending region for our domain, not a guarantee of EEA-only processing. Emails do not attach CVs. Mail transport attempts TLS but is not guaranteed end-to-end encrypted. Self-hosting does not keep all processing on our PC. Contact [email protected] for information about recipients and safeguards.
Nearby search Address queries are sent from your browser to the PDOK Location Server. City search remains available. Browser geolocation requires your permission. The selected starting point is temporarily kept in the tab's session storage, not as a mandatory home address on your account. Clear filters or end the browser session to remove it. Network/security services may process technical data.
Retention Without valid separate talent-pool consent, rejected or withdrawn applications are cleaned up four weeks after closure. Open procedures and placed candidates are excluded. Consent extends storage to at most one year from grant; withdrawal does not extend deadlines. Shared CVs are not blindly deleted. Production backups are checked daily for expiry after 30 days; an unsafe or stale final recovery copy pauses the routine for review. A limited deletion-ID register prevents deleted dossiers returning after restoration, without storing CV contents or email addresses. Backups and keys remain on the same server, without independent protection against disk loss. Ordinary contact and information enquiries are removed twelve months after handling, unless still needed for an ongoing case, an agreement or statutory administration. Accounts unused for two years are reviewed and removed where possible. Ongoing cases and information demonstrably needed for longer are handled separately. These two working agreements are implemented through periodic manual administrative reviews; the website does not automatically erase these records. Employer cases and placed-candidate files are reviewed twelve months after the service ends. We erase information no longer needed; only necessary information for an ongoing agreement, dispute or statutory administration remains longer. Fiscal basic records are generally retained for seven years under the applicable administrative obligation; this is not a retention period for every CV. Ordinary technical security logs have a working retention period of thirty days. Relevant incident records may remain protected longer until handling and the demonstrable need end. Consent and request-handling evidence is reviewed periodically and retained only while needed to account for the relevant processing or request. These reviews are manual, not an automatic erasure feature for every category. Minimal deletion IDs remain while an available recovery copy could reintroduce erased information. Other manual erasures require a separate check to prevent reuse after restoration. Mailbox and provider copies are handled separately; website erasure does not automatically erase these copies.
Rights and decisions Ask for access, correction, erasure, restriction, and where applicable portability or objection at [email protected]. Withdraw consent without affecting earlier lawful processing. Account export/request features do not themselves resolve requests. We verify identity appropriately and normally respond within one month, explaining any permitted extension. Complaints can be made to the Dutch Data Protection Authority. Vacancy suggestions support people; they do not guarantee employment or make solely automated hiring/rejection decisions. Limited access, separate environments, encrypted CVs and malware scanning do not guarantee absolute security.
Version: 11 October 2026.
Areizon is for ages 13 and over. Self-service online registration is available from age 16 with a self-declaration; this is not verified age. Aged 13, 14 or 15? Contact us with your parent or guardian for a manual route. A checkbox is not treated as verified parental consent. People under 13 cannot register for Areizon services.
At registration you may voluntarily enter day, month and year or choose Prefer not to say. You can create a self-service account without an exact date of birth if you meet the age conditions. Voluntarily providing the date opts you into personal touches in your own account, including a birthday greeting; we also use it to indicate the appropriate age route. It is not identity evidence or an automated employment assessment. The date is kept private outside public profiles and account cookies, is not automatically included in applications or shared with employers/recruiters. No birthday email. Below 16 this self-service feature does not save a date while a verified parental consent procedure is unavailable.
In My profile you can change the date or choose Prefer not to say and save to remove day, month and year from the active database. Earlier day/month preferences are retained without inventing a birth year until you change or clear them. The date is included in your personal data export. Backups may contain earlier choices for up to thirty days; withdrawn choices must be checked before reuse after restoration. Profile previews do not save data or change applications.
Authorised Areizon admins can see your name, email address, profile photo and provided phone number in protected user management. To assist you, they can open your professional headline, introduction, availability, desired hours, skills and languages. Opening this detail view is recorded with the admin, account and time. Your date of birth, password, sessions and CV are not displayed in this overview. A profile photo is optional and is not public, not visible to other candidates, employers or recruiters, and not automatically shared with applications. You can remove your own photo; initials then appear. This does not change assessments or access permissions.
If you voluntarily saved a date for the personal greeting, a private window can appear on your birthday when you open the website while signed in. After dismissal, localStorage holds only an opaque account/day code and the current calendar day to avoid repeats. No name, date of birth or birth year is stored in the browser for this. The code only applies that day and is replaced or removed on a later check with a different code. You can clear browser storage; if it is blocked the greeting may reappear on reopening. No birthday email is sent.
Only after you choose Save these work filters do we store job terms and work filters in this browser's localStorage for up to ninety days. No town, postcode, address or precise location is saved in that preference. It is not automatically applied, copied to your account or an email alert. Clear it in Your search preference. Comparison stores up to three public job snapshots in this tab's sessionStorage for up to one hour. These are not applications or permanently saved jobs. Successful sign-in and sign-out clear these temporary personal browser lists and the search preference. Avoid saving on shared computers. Browser settings can also clear this storage; the website remains usable without it.
Last updated: 11 Oct 2026