Privacy statement

1. Introduction

EenvoudigHR B.V., trading under the trade name WorkVine, attaches great importance to protecting personal data. This privacy statement explains which data we collect, how we use and secure it, and which rights you have.

2. Controller

EenvoudigHR B.V., trading under the trade name WorkVine and located at IJsbaanpad 84E, 1076 CW Amsterdam, is the controller responsible for the processing of personal data described in this statement.

3. Personal data that we process

We process personal data of users of our platform such as:

• Name and contact details
• IP address, browser data and device information
• Login and account details
• HR data such as working hours, annual leave, documents

4. Purposes of data processing

The processing takes place for the following purposes:

• Use of the WorkVine platform (SaaS)
• Customer service and support
• Legal obligations and compliance (such as GDPR and WvP)
• Safety, statistics and product improvement

5. Legal bases

We process personal data based on:

• Execution of an agreement
• Legal obligations
• Legitimate interest (such as product improvement or abuse prevention). We weigh up interests in which your privacy interests are always carefully taken into account.
• Consent (for e.g. marketing newsletters)

6. Retention periods

We do not store personal data for longer than is necessary for the purpose for which it was collected, unless a statutory retention period applies. Examples:

• Account and login details: 2 years after contract termination
• Wage and tax data: 7 years (fiscal retention obligation)
• Application details: maximum 4 weeks (or 1 year with permission)

7. Sharing with third parties

We only share personal data with:

• Processors such as hosting and infrastructure providers (e.g. Google Cloud Platform EU-West-1)
• Authorities if required by law
• Partners such as Nmbrs for payroll processing (if activated)

We conclude processing agreements with all external parties that comply with Article 28 of the GDPR.

8. Data Security

We take appropriate technical and organizational measures to protect personal data against loss, unauthorized access or misuse. This includes encryption, access control and logging.

9. Rights of data subjects

You are entitled to:

• Access to your personal data
• Correction or deletion
• Restriction or objection to processing
• Data portability
• Withdrawal of consent
• Submitting a complaint to the Dutch Data Protection Authority

You can send requests to privacy@workvine.nl. We will respond within 30 days.

10. Cookies and tracking

When you visit our website you will see a cookie banner. This allows you to indicate which cookies you allow. We use:

• Functional cookies: necessary for the website to function correctly (always active)
• Analytics cookies: used to measure website usage anonymously through Google Analytics 4 (only after consent)
• Marketing cookies: for example, LinkedIn or remarketing pixels (only after consent)

The consent choice is stored in a functional cookie and is valid for a maximum of 12 months. You can change your preference at any time via the cookie banner. Click here to open it again.

11. Transfer outside the EEA

We process and store data exclusively within the European Economic Area (EEA). If data is processed outside the EEA, we provide appropriate safeguards in accordance with Article 46 GDPR (such as model contracts).

12. Data Protection Officer

WorkVine is not required to appoint a Data Protection Officer (FG), but has internally appointed a privacy contact to monitor GDPR compliance.

13. Changes

We may amend this privacy statement from time to time. The most current version is always available via our website. We will actively inform you of major changes.

14. Contact

For questions or requests you can contact us at:

• Email: privacy@workvine.nl