Privacy notice

1. Who is responsible for your data

Winvigor Solutions ("Winvigor", "we", "us") is the controller of the personal data described in this notice.

Address: Ikaroslaan 1, 1930 Zaventem, Belgium
Enterprise number: 0728.703.095
VAT: BE0728703095
Privacy contact: services@winvigor.com

This notice applies to personal data processed in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.

2. What data we collect and why

Website visits

This website does not use analytics, advertising or tracking cookies, and does not load fonts or scripts from third-party trackers. Our hosting provider processes technical data needed to deliver the site securely, such as your IP address, browser type and the pages requested. It may set a strictly necessary security cookie to protect the site against automated attacks. Because these cookies are essential to operating the site, they do not require consent.

Legal basis: our legitimate interest in running a secure, working website (Article 6(1)(f) GDPR).

Enquiries through the contact form or by email

When you contact us, we receive your name, email address, organisation (if you give it), the profile reference you asked about (if any) and the content of your message. We use this to answer you, to discuss a possible engagement and to keep a record of our correspondence. If the form shows a security check, it processes technical data to tell people from automated spam.

Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b)), and our legitimate interest in responding to business enquiries and keeping records of them (Article 6(1)(f)).

Candidates, CVs and the talent network

When you apply for a role or join our talent network, we receive the information you choose to send: your CV, contact details, work history, skills, qualifications, language skills, availability and preferences for future work. We use it to assess your fit for current and future assignments, to contact you about relevant opportunities, and to arrange interviews.

We never send your CV or identifying details to a client without your agreement for that specific opportunity. Profiles on our talent board are anonymised and do not identify individuals.

Please do not include special categories of data in your CV (for example health, religion, political opinions or ethnic origin), or national identification numbers. If an assignment legally requires a security clearance or background check, we will explain what is needed and the legal basis before any such information is collected.

Legal basis: steps taken at your request before entering into a contract for a specific application (Article 6(1)(b)); your consent for keeping your CV in our talent network for future opportunities (Article 6(1)(a)), which you can withdraw at any time.

Clients and suppliers

We process the business contact details of people at our clients and suppliers to manage engagements, invoicing and the relationship.

Legal basis: performance of a contract (Article 6(1)(b)), our legal obligations, for example accounting and tax (Article 6(1)(c)), and our legitimate interest in managing business relationships (Article 6(1)(f)).

We do not sell personal data. We share it only with:

Clients, when you have agreed to be put forward for a specific opportunity.
Service providers acting on our behalf under data processing agreements: website hosting and security (Cloudflare), hosting of our content system and enquiry records (ChemiCloud), and our email provider.
Professional advisers and authorities, such as accountants, lawyers or regulators, where required by law or to protect our legal rights.

4. Transfers outside the European Economic Area

Some service providers may process data outside the European Economic Area. Where they do, we rely on an adequacy decision of the European Commission (including the EU-US Data Privacy Framework for certified providers) or on the European Commission's Standard Contractual Clauses, with additional safeguards where needed. You can ask us for a copy of the relevant safeguards.

5. How long we keep data

Enquiries that do not lead to an engagement: up to 24 months after our last exchange.
Applications for a specific role: up to 12 months after the recruitment process ends, unless you join the talent network.
Talent network CVs: up to 24 months after your last contact with us. Before that period ends we will ask whether you want to stay in the network; if you do not reply, we delete your data.
Client and supplier records: for the duration of the relationship and afterwards for as long as required by law, for example 7 years for accounting records under Belgian law.
Hosting and security logs: for the short period set by our hosting provider, normally no longer than needed to keep the site secure.

6. Your rights

Under the GDPR you have the right to:

access the personal data we hold about you and receive a copy;
have inaccurate data corrected;
have your data erased;
restrict how we use your data;
object to processing based on our legitimate interests, including at any time to direct marketing;
receive data you gave us in a portable format;
withdraw your consent at any time, without affecting processing carried out before the withdrawal.

To exercise any of these rights, email services@winvigor.com. We reply within one month. We may ask you to confirm your identity before acting on a request.

7. Complaints

If you have a concern, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35 / rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be, or with the supervisory authority in the EU country where you live or work.

8. Security

We protect personal data with appropriate technical and organisational measures, including encrypted connections, access limited to the people who need it, and providers bound by confidentiality and data protection obligations.

9. Automated decisions

We do not make decisions about you based solely on automated processing, including profiling. Every candidate is assessed by a person.

10. Changes to this notice

We may update this notice when our practices or the law change. The date at the top shows when it was last updated.