Privacy Statement

We are 5CA International B.V., headquartered in Utrecht, the Netherlands. Through this privacy document, we will explain to you how we process your personal data throughout our recruitment process. At 5CA we strive to be transparent and clear in our treatment of personal data as well as in our privacy practices, so our privacy policy has been created in a user-friendly manner to make it easily understandable. Our goal is to treat our customers and employee’s information carefully and with respect.

Personal data of careers website visitors

What data do we process?

We may process the following personal data of careers website visitors:

  • Device and browser
  • IP-address
  • Requests and responses sent from and to your device
  • Source website (we use a cookie to track this)
  • Behavior on our website

Purpose of the processing:

  • learning more about the behavior of the visitors of our Careers website to improve our recruitment process and this website;
  • improving and monitoring the performance of our Careers website;
  • and generating anonymized data that we share with our partners.

All processing of personal data of careers website visitors is based on our legitimate interest to facilitate recruitment.

Your personal data is also processed by Indeed on pages where we display a button to ‘Apply with Indeed’, even when you don’t use that functionality. Indeed may use cookies. The privacy policy of Indeed applies for processing of personal data by Indeed.

Your personal data may also be processed – for remote positions – later during the recruitment process by Harver. We will not transfer your information to Harver but ask you to create your own account in their website in order to be able to take the assessment. Their privacy policy as well as their use of personal data can be found here.

 Your video and its related content - such as images and sound - will also be processed in case you're an applicant who decided to submit a video application. You can always take back your consent for us holding this data by sending an email to as stated below. 

Personal data of job applicants

What data do we process?

  • Any personal data that you provide through our job application form including, but not limited to:
    • Full name, email address, phone number, picture, cover letter, résumé, LinkedIn profile, Indeed profile and which job you have applied for.
  • Statuses, notes and planning related to your job application
  • Email communications

Purpose of the processing:

If you apply for a job, then we will process your personal data to facilitate the entire job application procedure on the grounds of our legitimate interests for recruiting. After the application procedure is finished, you can request your data to be deleted, otherwise we will keep your information on file for the period of one year in order to possibly contact you for future job openings. If you are hired to work for us, however, deletion might not be possible as some of your information needs to be stored for up to 7 years due to legal requirements.

Under European data protection law, we are required to inform you that withholding personal data in your job application can give you a disadvantage in comparison to other candidates who are applying for the same role.

Your personal data has to be processed by LinkedIn and Indeed to allow for the ‘Apply with LinkedIn’ and ‘Apply with Indeed’ functionalities. LinkedIn and Indeed may use cookies. You can find their privacy policies here and here.


Recipients of personal data

We store your personal data in a secure and compliant Recruiting Database System hosted by our service provider in the EU. Internally, only recruitment professionals and staff involved in the recruitment process have access to your personal data.


Your rights

As a data subject under GDPR you have the following rights:

Right of Access

You have the right to know whether we process personal data of yours or not and to request to access this information.

Right to Rectification

If there is information of yours which is incorrect or inaccurate, like if for example, your address changed, you can request that we modify or update this in our system.

Right to be forgotten

You have the right to have your personal data deleted by us without any undue delay.  This right is limited to specific grounds, for example, if you have withdrawn your consent, or if you object and there are no overriding legitimate grounds for us to maintain the processing.

Restriction of processing

You have the right to request that we restrict the processing of your personal data based on specific grounds. These are (1) the time for us to verify the accuracy of your personal data on your request; (2) instead of erasure of unlawful processing, you request restriction of use instead; (3) you need personal data in legal proceedings; or (4) we are verifying whether our legitimate grounds override your objection to the processing.

Right to object

You have the right to object at any time to our processing of your personal data if such processing is (1) based on our legitimate interest; or (2) necessary for the performance of a task carried out in the public interest or exercise of official authority vested in us. We shall cease to process your personal data based on your objection, unless we demonstrate compelling legitimate grounds overriding your interests, rights, and freedoms or if we need your personal data in legal proceedings.

Data portability

You also have the right to receive your personal data from us so that you can transmit that data to another controller. This will contain all your personal data from your candidate profile but will not include any device data, including data that was transmitted to us in a log file.

Lodging a complaint

We advise you to contact us first at if you have any complaints regarding the processing of your personal data. But you have the right to lodge a complaint with the relevant supervisory authority about our processing of your personal data.

International transfers

As stated above, we may transfer your personal data to a subsidiary or third party that is located in a different country than where 5CA is located. If such country does not provide for an adequate level of protection by domestic law according to the European Commission, we have ensured this adequate level of protection by agreeing on additional appropriate safeguards with that subsidiary or third party through the Standard Data Protection Clauses adopted by the European Commission, or through the EU-US Privacy Shield. A list of countries that have ensured an adequate level of protection according to the European Commission can be found here. Alternatively, we may ask you for your explicit consent to the proposed transfer.

Requests or questions

Feel free to contact us if you have any questions regarding your personal data. You can also contact us with requests to exercise your rights – mentioned above - under European data protection law.

If you have any requests or questions with regard to your personal data you can contact our Data Protection Officer:

Agustina Villamide

Details of the controller

5CA will be the controller responsible for processing your personal data according to laws and regulations. The address of 5CA is:

Catharijnesingel 30E, 3511 GB, Utrecht, the Netherlands