Cyber Security Talks Podcast Episode 3: Santiago Aragón – You Try, You Fail, You Try Again

Privacy & Cookies

How does Cyber Security Recruitment deal with the GDPR?

The General Data Protection Regulation (GDPR) took effect on 25 May 2018. The GDPR contains new
privacy rules with the primary objective of protecting your personal data even more effectively. The
current Cyber Security Recruitment privacy policy has been established based on that new
legislation.

What does this mean for you?

You share your personal details with us consciously and unconsciously, such as by visiting the Cyber
Security Recruitment website or when you try reaching out to us. Our Privacy policy describes in
detail how we handle your personal data. You can, for example, find more information about how
we obtain your information and what information we process. But, of course, your personal data is
in safe hands with us. Below, we provide insights into how Cyber Security Recruitment deals with
privacy legislation in the context of the GDPR and what it means for you.

What is personal data, and whose personal data do we process?

Personal data is the information of natural persons that directly or indirectly tells something about
you. We process the personal data of candidates, but also of individuals that express interest in us
and our services, or of people that are affiliated with a company or organisation with whom we
have, would like to have or have had a relationship. We urge you to be very careful when deciding to
disclose your personal data or any other information online. At all times, Cyber Security Recruitment
is not responsible for how third parties use such information.

For what purpose does Cyber Security Recruitment use your information?

Cyber Security Recruitment strives to provide website visitors with the most optimum personal
service. It also applies, for example, for:
• Contact with Cyber Security Recruitment
• Visiting the Cyber Security Recruitment website
• Social media
• Reviews & user satisfaction surveys
You give Cyber Security Recruitment permission to use your personal data for:
• Events, such as matchmaking and Cyber security talks
• Newsletters
• Contact with Cyber Security Recruitment
• Job-related advise
Who has access to your data?
We do not share non-publicly available data provided by the candidate to other parties. However,
some cookie developers have access to the information that cookies on our website collect. You can
read more about this in our cookie statement and the privacy policy of these parties.

Where will your information be stored?
We store your information in a highly secure (WordPress) environment. In those exceptional cases in
which personal data is passed on to organisations outside the European Union, we will ensure that
your privacy remains appropriately protected.
Securing your information
We seek to use reasonable organisational (procedures to identify, assess and mitigate any
reasonably foreseeable internal and external risks to the security, confidentiality, and or integrity of
systems or files containing personal data and evaluate and improve safeguards as necessary),
technical (penetrations testing, two-factor authentication, encryption protocols) and administrative
measures (privacy roles, awareness training, policies) to protect personal data within our
organisation.
Retention period guidelines
We will not retain and use your information for longer than is necessary. Guidelines for the retention
periods are:
• Visual material will be retained for as long as that suits Cyber Security Recruitment’s
objectives.
• We delete unnecessary information after five years.
• If you have signed up to receive emails or have granted permission to receive personalised
messages, we will retain that permission for four years. Additionally, if you decide at a given
moment that you no longer wish to receive emails or personalised messages, we will retain
the withdrawal of your request.
Use of the website
Every individual with access to the website is a 'user'. Therefore, all personal information that we
collect about your account is subject to our Privacy policy. You agree to keep all account information
accurate, current and complete for so long as you use the Cyber Security Recruitment website.
You must immediately inform Cyber Security Recruitment of any suspected malicious activities
regarding the website. Cyber Security Recruitment cannot and will not be liable for any loss or
damage arising from a failure to provide Security to your data.
What are your rights?
Of course, you maintain control over your information. Would you like to inspect and receive a copy
of your personal data? Or would you like to amend or delete your information, limit the use of your
information or modify your email preferences? No problem. Let us know by post or email. In that
way, you can also object to using your data or indicate that you believe that your privacy takes
precedence over our interests. In that case, we will re-examine the situation.
Functioning and of the website
Cyber Security Recruitment will as much as possible see to it that this website functions correctly
and does not contain elements, malware or viruses that could harm the functioning of computer
hardware or software. However, Cyber Security Recruitment is dependent on third parties.

Consequently, Cyber Security Recruitment cannot warrant the accessibility or non-existence of these
elements, malware or viruses on this website. Cyber Security Recruitment is under no circumstances
liable for any consequences that consulting or using (parts of) the content on this website could have
on the functioning of computer hardware or software.
References and hyperlinks
The website of Cyber Security Recruitment includes references and hyperlinks to third-party
websites, which Cyber Security Recruitment does not control. These references and hyperlinks are
included for information purposes only. In no event, Cyber Security Recruitment guarantees or
accept any liability about such websites' content, use, and accessibility.
Information on this website
Although the Cyber Security Recruitment website information is composed and maintained with
continuous care and attention, Cyber Security Recruitment cannot give any warranty as to the
correctness or completeness of the information or footage on this website. Furthermore, the
information or footage are not intended as legal, financial, fiscal or any other professional and
personal advice in any way. The consequences of decisions, solely based on the information or
footage on this website, remain at one's own risk. Cyber Security Recruitment is therefore under no
circumstances liable for damages of whatever nature, in any way resulting from or related to the use
of information or footage presented on or made available through this website.
Availability of the website
Cyber Security Recruitment will use commercially reasonable efforts to make the website available
at all times, except for scheduled downtime and any unavailability caused by events beyond our
reasonable control, such as fires, natural disasters, government actions, civil unrest, Internet service
provider failures or delays, denial of service attacks or other events related to cybercrime that would
not be stopped by the use of standard security measures.
Do you have questions or complaints?
We are committed to resolving any complaints about our collection or use of your personal data.
Therefore, if you would like to complain about this policy or our practices concerning your personal
data, please get in touch with us at info@csrecruitment.nl. We will reply to your complaint as soon
as we can and in any event, within 14 business days.
We strive to keep the website available all time but may suspend maintenance access or protect it
from attacks or other threats. In addition, we cover the Cyber Security Recruitment website with
robust security measures.

Cyber Security Recruitment Privacy policy
We are aware that you place trust in us. We, therefore, see it as our responsibility to protect your
privacy. Our privacy policy informs you of what information we collect, why we collect this
information, and how we handle this information. This privacy policy applies to the services of Cyber
Security Recruitment. You should be aware that Cyber Security Recruitment is not responsible for
the privacy policy of third parties. By using the services of Cyber Security Recruitment, you
acknowledge that you have familiarised yourself with the Cyber Security Recruitment privacy policy.
Cyber Security Recruitment respects the privacy of all users, candidates, partners and stakeholders
and that the personal information you provide to us is treated confidentially.
Definition of personal data
Personal data is all information that can be traced back directly or indirectly to you as an individual.
It can include your name, telephone number, IP address, email address and all optional data in the
resumes put. Everything that is done with personal data is referred to as 'processing'. The legal
definition of the term 'processing' is comprehensive and refers, among other things, to:
• The collection
• The retention
• The consulting
• The use
• The deletion of personal data
Whose personal data do we process?
We process the personal data of persons we would like to have, have, or have a relationship with. It
can include, for example, the following stakeholders:
• (Potential) candidates, stakeholders and partner organisations
• Persons affiliated with an organisation with whom we have a relationship
• Visitors to the Cyber Security Recruitment website or social media
• Other interested parties
For what purpose does Cyber Security Recruitment use your information?
Cyber Security Recruitment strives to provide our users, partners and stakeholders with the most
optimum personal service. It also applies, for example, for:
• Contact with Cyber Security Recruitment
• Visit the Cyber Security Recruitment website
• Social media
• Reviews & user satisfaction surveys
• Job-related advice
You give Cyber Security Recruitment permission to use your personal data for:
• Events, such as matchmaking and Cyber security talks
• Newsletters
• Contact with Cyber Security Recruitment

Use of our services
When you send us an email or other messages, we may retain those messages; see the guidelines on
retention periods. In some instances, we will request personal data from you that is relevant to a
particular situation. It enables us to communicate with you.
Communication
When you send us email or other messages, we may retain those messages; see also the guidelines
on retention periods. In some instances, we will request personal data from you that is relevant to a
particular situation. It enables us to communicate with you.
Third parties
With third parties designated by you, we may share your personal data with third parties where you
have provided your consent to do so, for example, to provide technical support, perform data
analysis, provide recruitment services, email delivery, and or to provide other services. Third parties
are only permitted to use your personal data to the extent necessary to enable them to offer their
services to us. In addition, they are required to follow the law and comply with appropriate security
measures to protect their personal data.
References and hyperlinks
The Cyber Security Recruitment website may contain links to third-party websites and features. This
policy does not cover the privacy practices of such third parties. These third parties have their
privacy policies, and we do not accept any responsibility or liability for their websites, features or
policies. Please read their privacy policies before you submit any data to them.
Choices for personal data
We offer all persons included among those 'whose personal data we process the option to access,
modify, or delete all personal information provided to us.

Cookie statement
Like many online services, we use cookies to collect information. Cookies are small pieces of
information that a website sends to your computer’s hard drive while viewing the website. We may
use both session cookies (which expire once you close your web browser) and persistent cookies
(which stay on your computer until you delete them).
We use two broad categories of cookies:
(1) First-party cookies served directly by us to your computer or mobile device, which are used only
by us to recognise your computer or mobile device when it revisits the Cyber Security Recruitment
website.
(2) Third-party cookies, which service providers serve on the Cyber Security Recruitment website,
can be used by such service providers to recognise your computer or mobile device when it visits
other websites.

We may also use cookies from time to time to measure your response to new aspects of the Cyber
Security Recruitment website and or emails to improve customer service continually. Please be
aware that a cookie cannot spread computer malware and viruses, retrieve any other data from your
hard drive, or capture sensitive information.
Cyber Security Recruitment uses the following types of cookies for the purposes set out below.
a. Essential cookies: These cookies are essential to provide you with services available through our
website and enable you to use some of its features. For example, they help the content of the pages
you request load quickly. Without these cookies, the services you have asked for cannot be
provided, and we only use these cookies to provide you with those services.
b. Functionality cookies: These cookies allow our services to remember your choices when you use
our website. The purpose of these cookies is to provide you with a more personal experience and
avoid re-entering your preferences every time you visit our website.
c. Analytics and performance cookies: These cookies collect information about traffic to the Cyber
Security Recruitment website and how users use our website. The information gathered does not
identify any individual visitor. Instead, the data is aggregated and anonymous. It includes the
number of visitors to our website. These websites referred them to our website, the pages they
visited, what time they visited our website, whether they have visited our website before, and other
similar information. We use this information to help operate our services more efficiently, gather
broad demographic data, and monitor the activity level on our website.
d. Social media cookies: These cookies are used when you share information using a social media
sharing button on our website through a social networking website such as Facebook and LinkedIn.
The social network will record that you have done this.
Disabling Cookies: You can typically remove or reject cookies via your browser settings. To do this,
follow the instructions provided by your browser. Unfortunately, many browsers are set to accept
Cookies until you change your settings.
Retention period guidelines
We will not retain and use your information for longer than is necessary. Guidelines for the retention
periods are:
• Visual material will be retained for as long as that suits Cyber Security Recruitment’s
objectives.
• We delete unnecessary information after five years.
• If you have signed up to receive emails or have granted permission to receive personalised
messages, we will retain that permission for four years. Additionally, if you decide at a given
moment that you no longer wish to receive emails or personalised messages, we will retain
the withdrawal of your request.
Information protection
We seek to use reasonable organisational (procedures to identify, assess and mitigate any
reasonably foreseeable internal and external risks to the security, confidentiality, and or integrity of
systems or files containing personal data and evaluate and improve safeguards as necessary),
technical (penetrations testing, two-factor authentication, encryption protocols) and administrative measures (privacy roles, awareness training, policies) to protect personal data within our
organisation. Unfortunately, no transmission or storage system can be guaranteed to be completely
secure, and the transmission of information via the internet is not completely secure.
If you have reason to believe that your interaction with us is no longer secure (for example, if you
feel that the security related to us might have been compromised), please immediately notify us at
info@csrecruitment.nl. In the case of data breaches, the procedure for reporting to the Personal
Data Protection Authority will be initiated.
By using the Cyber Security Recruitment website or providing personal data to us, you agree that we
may communicate with you electronically regarding Security, privacy, and administrative issues
relating to your use of the Cyber Security Recruitment website. For example, suppose we learn of a
breach of personal data. In that case, we may attempt to notify you electronically by posting a notice
on the Cyber Security Recruitment website or sending an email to you.
Do you have questions or complaints?
We are committed to resolving any complaints about our collection or use of your personal data.
Therefore, if you would like to make a complaint regarding this policy or our practices about your
personal data, don't hesitate to get in touch with us at info@csrecruitment.nl. We will reply to your
complaint as soon as we can and in any event, within 14 business days.
We strive to keep the website available all time but may suspend maintenance access or protect it
from attacks or other threats. In addition, we cover the Cyber Security Recruitment website with
robust security measures.