Privacy policy, Terms of service & Cookies

Stichting She Matters and She Matters B.V. (“She Matters”) endeavours to protect the privacy of users of its Website and services.

This Privacy Policy explains how we collect, use, and protect your data when you use our website at https://www.shematters.nl, apply for a vacancy, programme, internship or volunteering role, or otherwise engage with our services.

Last amended: September 2025

ARTICLE 1. DEFINITIONS‍

• Applicable Privacy Legislation: All applicable data protection laws, including the General Data Protection Regulation (“GDPR”) and national implementation acts.
• Controller: Stichting She Matters / She Matters B.V., Berkheide 25, 3069 KS Rotterdam, The Netherlands. Chamber of Commerce numbers: 69389519 / 72472405.
• Personal Data: Any information relating to an identified or identifiable natural person that is Processed by She Matters as described in Article 3.
• Processing: Any operation performed on Personal Data, such as collection, storage, use, disclosure, or deletion.
• Website: https://www.shematters.nl.

ARTICLE 2. SCOPE‍

2.1 This Privacy Policy applies to every use of the Website, to applications for jobs, internships and volunteer roles, to programme participation, and to other interactions with She Matters. She Matters is the Controller for this Processing.

2.2 The Website may contain references to third-party websites (e.g. hyperlinks or banners). She Matters is not responsible for their compliance with Applicable Privacy Legislation.

ARTICLE 3. PERSONAL DATA COLLECTED

3.1 Applicants (jobs, internships, volunteering)

When you apply for a vacancy, internship, or volunteering role, we may collect:

• Name and contact details (first name, last name, email address, phone number);
• Application materials (CV, cover letter, portfolio, references, supporting information);
• Information provided during interviews, forms, or assessments (skills, experience, motivations);
• Sensitive data you choose to share (e.g. health, refugee status) – processed only with your explicit consent;
• Application source (if via LinkedIn, Teamtailor, or another platform).

Applications are processed through Teamtailor, our recruitment platform. Teamtailor acts as a data processor on our behalf and processes candidate data in accordance with GDPR.

3.2 Other interactions

We may also collect:

• Contact details when you sign up for newsletters or contact us directly;
• Technical data when you use our Website (IP address, device/browser type, cookies – see Article 8);
• Communication data (emails, contact forms, or messages).

ARTICLE 4. PURPOSES AND LEGAL GROUNDS

4.1 Personal Data is processed for the following purposes:

a. Recruitment & Placement: To assess and manage applications for jobs, internships, and volunteer opportunities, to communicate with applicants, and to match candidates with programmes or opportunities.

• Legal basis: consent (Art. 6(1)(a)), contract (Art. 6(1)(b)), and legitimate interest (Art. 6(1)(f)).

b. Programme management and communication: To provide services, respond to inquiries, and handle complaints.

• Legal basis: legitimate interest.

c. Marketing: To send newsletters and updates if you have registered for them. You may unsubscribe at any time.

• Legal basis: consent.

d. Legal obligations: To comply with statutory requirements (e.g. tax, employment, reporting).

4.2 If She Matters intends to further process Personal Data for another purpose, it will provide information about that purpose in advance.

ARTICLE 5. TRANSFER OF PERSONAL DATA TO THIRD PARTIES

5.1 She Matters only shares Personal Data where necessary:

• Internally with employees managing recruitment, programmes, or communications;
• With partner companies, mentors, facilitators, or potential employers where relevant;
• With third-party IT and hosting providers.

5.2 Recruitment platform: She Matters uses Teamtailor as its recruitment platform. Teamtailor acts as a data processor under GDPR. A data processing agreement is in place to safeguard Personal Data. Teamtailor may use sub-processors for technical infrastructure; where transfers occur outside the EEA, EU Standard Contractual Clauses or equivalent safeguards apply.

5.3 Personal Data may also be disclosed if required by law.

ARTICLE 6. SECURITY

She Matters takes appropriate technical and organisational measures to protect Personal Data, restricts access to authorised staff, and maintains internal data breach procedures. In the event of a data breach, She Matters will notify the supervisory authority and, where required, affected individuals.

ARTICLE 7. RETENTION PERIODS

• Applicants (jobs, internships, volunteers): Data is retained in Teamtailor for up to 24 months after the recruitment process, unless the applicant has consented to longer retention in a talent pool. Consent can be withdrawn at any time.
• Newsletter subscribers: Until unsubscribed.
• General inquiries: Up to 12 months.
• Legal obligations: As long as required by law.

ARTICLE 8. COOKIES

8.1 The Website uses cookies to function properly and improve user experience.

8.2 Types of cookies:

• Functional cookies: essential for basic Website operation;
• Analytical cookies: to understand Website use (configured with privacy safeguards, e.g. Google Analytics in anonymised mode);
• Marketing cookies: only used with prior consent.

8.3 Users can manage or disable cookies via browser settings. Some functions may not work properly if cookies are disabled.

ARTICLE 9. YOUR RIGHTS

You have the right to:

• Withdraw consent at any time;
• Request access to your Personal Data;
• Request rectification of inaccuracies;
• Request erasure (“right to be forgotten”);
• Restrict or object to processing;
• Request portability of your Personal Data.

If you applied via Teamtailor, you may also exercise certain rights directly through the Teamtailor platform. Requests are free of charge and will be answered within one month, extendable by two months in complex cases.

ARTICLE 10. CONTACT DETAILS

Stichting She Matters / She Matters B.V.
Berkheide 25, 3069 KS Rotterdam, The Netherlands
Email: info@shematters.nl
Tel: +31 (0)6 19173293

ARTICLE 11. SUPERVISORY AUTHORITY

You have the right to lodge a complaint with a supervisory authority, particularly in the EU Member State of your residence, place of work, or where you believe GDPR has been infringed. In the Netherlands, this is the Autoriteit Persoonsgegevens.

ARTICLE 12. MISCELLANEOUS

12.1 She Matters may suspend or delete user accounts in cases of misuse. No compensation is owed in such cases.

12.2 She Matters reserves the right to amend this Privacy Policy from time to time. The latest version will always be available on our Website.

12.3 If a provision of this Policy conflicts with law, it shall be replaced with a valid provision that reflects the original intent as closely as possible. Other provisions remain unaffected.