Privacy notice

Who is responsible?

Leadhunter B.V., Goese Dieplaan 97, 4463 LA Goes, Dutch Chamber of Commerce number 67665284, is responsible for its own website, contact, account, contract, administration, security and marketing data. Privacy questions: info@leadhunter.nl or +31 88 003 98 88.

When our team processes personal data on a client’s instructions for research, business contact and follow-up, that client generally acts as controller and Leadhunter as processor. The actual processing determines the role; this notice or a contractual label does not change it.

Which data do we process?

For our own purposes: name, organisation, role, business email, telephone, account and access data, correspondence, invoicing data, appointments, acceptance records and necessary technical security data.

For assignments: business contact details and relevant conversation and follow-up information under the data processing agreement. These come from the client, contacts and relevant public business sources within the assignment.

We do not request sensitive personal data through general website forms. Do not share confidential or sensitive information with the digital website assistant. A business contact remains a natural person; public availability does not authorise every use.

Why and on what legal basis?

We handle contact and introductory requests, prepare agreements and perform the cooperation. Where an individual is a contracting party, contract may be the legal basis. For contacts at organisations, our legitimate interest in business communications and delivery may apply after balancing their interests.

We retain invoices and administration to meet statutory obligations. Accounts, fraud prevention and security support the contract and our legitimate security interest. Non-essential website analytics requires consent.

For marketing we use an appropriate legal basis and comply with applicable channel rules. Where consent is required, we request and record it separately. General registration or previous customer contact is not automatic consent to every form of marketing.

Retention periods

Contact and introductory data: as a proposed starting point, up to 24 months after the last relevant contact, unless earlier deletion is appropriate or an ongoing arrangement or dispute requires retention.

Financial administration: generally seven years insofar as required by law. Contractual acceptance evidence: as long as necessary for performance and substantiating rights, with justified retention.

Account and security data: as long as necessary for access, investigation and security, under concrete retention periods to be established. We do not apply an automatic thirty-day SaaS archive cycle to the existing client portal.

Data processed for clients: under their instructions and the data processing agreement. Minimal objection and unsubscribe records may be retained to prevent unwanted repeat contact.

GA4: Radar records a previous fourteen-month retention setting for the existing LH property; this is checked again in Analytics before launch. We do not retain data longer than necessary.

Personal contact on a client’s behalf

Our team may approach business contacts on a client’s behalf, following the agreed target market and considering applicable rules, legal form, channel and country. You may ask which organisation we represent.

If you no longer wish to receive direct marketing contact, tell us directly or email info@leadhunter.nl. We implement the objection and coordinate necessary suppression with the client concerned. Other client-data requests are referred to the responsible client.

Website analytics and cookie settings

With your consent, we use Google Analytics 4 to measure visits and use of contact and booking buttons. Google receives technical browser and connection information, page addresses without URL query parameters and measurement events. LH measurement code does not send entered names, emails, phone numbers, account IDs, passwords or chat content. Google Signals and advertising personalisation are disabled in the measurement code.

Reports help Leadhunter assess which information and contact options are used. Authorised administrators can view our own website data. Once Radar integration is activated, reports such as aggregated visit figures, search queries and page information from Search Console may support business insights and website improvement proposals. Other Radar businesses cannot access this LH data.

The public LH website does not request visitors’ access to their Google account, Analytics or Search Console. Linking Leadhunter’s own Google properties to Radar is a separate administrator action. The website receives no visitor OAuth tokens.

Consent to non-essential measurement is separate from registration and terms. Cookie settings on the terms page lets you allow, refuse or withdraw your preference.

Bot protection at registration

Cloudflare Turnstile is being prepared to protect registration from automation. It processes technical browser and connection data. We do not send name, email or password as input fields to the bot check.

The website backend must verify the token before passing on a registration. Cloudflare provides its own privacy information. Actual product settings and relevant supplier roles are checked before activation.

Digital assistant and possible AI

While AI is disabled, the digital assistant searches fixed website information locally. Your search stays in your browser and is not sent to an AI provider.

When the AI assistant is activated and identified as such, OpenAI’s API processes your question, a limited number of recent messages in the conversation and relevant approved business information to answer. The request uses store=false. This does not promise that the provider has no technical or safety retention under all circumstances. Do not share sensitive or confidential client information.

The website does not store free-form chat text in the LH database. Supabase processes the server request, approved knowledge and limited security and usage records. A derived IP code limits abuse; it is removed from AI usage records after two days. Technical platform logs may have separate retention, checked before activation.

For analysis within Radar, relevant LH reports and business context may be processed with OpenAI through the API. Google OAuth tokens are not sent to OpenAI. This feature does not provide access to other clients’ data or publish new text without agreed approval.

AI chat is activated only after checking data flows and privacy information. Any additional AI processing within client assignments is separately documented first. There is no general consent to use client lists or conversation notes for other clients or general model training.

Recipients and international processing

Where necessary, data may be processed by authorised employees, independent personnel and providers for hosting, communications, security, administration or analytics. Only appropriate necessary access is granted.

We share data with the client for whom we perform the assignment and with authorised advisers or authorities where necessary or required by law. We do not sell personal data.

Services outside the EEA require applicable transfer safeguards, such as an adequacy decision or standard contractual clauses, and supplementary measures where needed. Actual roles and arrangements are assessed for each data flow. The new website’s technical suppliers are not automatically those of the existing client portal or telephone systems.

Booking an introduction

We process your name, company, email address, phone number, chosen date and time and preference for a phone or video call to arrange, prepare and communicate about the appointment.

Leadhunter determines the available time slots. The website does not read the private calendars of Susan, Anton or visitors. The chosen slot is stored in our secured website backend and checked for conflicting reservations.

The customer and the relevant team member receive a confirmation and calendar invitation by email. Adding it to a personal calendar is subject to the chosen calendar and email service. To change or cancel an appointment, reply to the confirmation email at info@leadhunter.nl.

The digital assistant cannot make appointments or manage your calendar. Leadhunter may provide video-call details separately.

Social media and external websites

Links to LinkedIn and subsequently verified Facebook and Instagram accounts open external websites. Including a link does not load a social tracking pixel or embedded timeline.

A social platform’s own privacy rules also apply when contacting us or visiting there. Future publication through connected tools is configured separately; a footer link is not an active account integration.

LinkedIn and our own marketing through Radar

A link to LinkedIn does not give Leadhunter access to a visitor’s LinkedIn account. This public website does not request LinkedIn OAuth consent from visitors or retrieve profile, connection or message data through such a link.

If an authorised administrator connects Leadhunter’s own Page to Radar, Radar may use the granted permissions to process that Page’s posts and aggregate statistics and publish approved content. Radar’s specific privacy information also applies. This does not connect an ordinary website visitor to Radar.

In the current Radar configuration, source data retrieved through the LinkedIn API is not passed to Maya/OpenAI as AI input. Independently supplied business information and own website content may be used for content suggestions. Publication follows the agreed approval process.

LinkedIn member data is not used through this connection for Leadhunter prospect lists or CRM enrichment. Page management access does not authorise sales prospecting. For privacy questions or deletion requests contact info@leadhunter.nl. LinkedIn’s own privacy rules also apply to visits and communication on its platform.

Protection of data and Google reports

For the new website, secure HTTPS/TLS connections, task-based access, server-side secret management and access checks apply insofar as the relevant function is activated. Actual settings are checked before launch. General forms do not request special-category personal data and we do not request visitor access to Google accounts.

If an authorised administrator connects Leadhunter's own Analytics or Search Console property to Radar, Radar protects reports using company-specific server and database authorisation. OAuth tokens are additionally encrypted with AES-256-GCM and bound to the company and user; secrets remain server-side. Radar's primary database is in Frankfurt and uses encrypted storage. Transfers use HTTPS/TLS. Only necessary read permissions are requested. Radar's privacy notice at https://www.bizzi-b-radar.com/privacy.html also applies to this separate administrator integration.

This does not describe visitor OAuth or grant general access to client data. Human access is restricted to authorised persons and necessary delivery, support, security or legal obligations. No security measure guarantees absolute safety. Questions, incidents or requests concerning Leadhunter's own processing: info@leadhunter.nl.

Automatic publication checks for our own marketing through Radar

When Leadhunter publishes its own articles or social posts through Radar, AI automatically checks the outgoing text and image for LinkedIn, Facebook, Instagram and connected websites insofar as the integration has been released. No Radar employee reviews content during that automatic check; this does not mean Leadhunter's own team does not prepare or review its own content.

A block prevents publication through Radar; a warning requires separate confirmation. The user may edit or publish independently outside Radar, under their own responsibility and applicable law and platform rules. The check does not guarantee accuracy, lawfulness or third-party rights. OpenAI processes outgoing content as described in Radar's privacy notice. Source data retrieved through the LinkedIn API is not sent for this check.

Radar retains limited check results for 24 hours and deduplicated company/user security counters for 30 days, with cleanup every fifteen minutes. Radar Beheer shows counts and percentages, not publication content or rejection reasons. Leadhunter's own publication process does not connect website visitors to Radar. Any use for content on a client's behalf is documented beforehand within that assignment and applicable privacy arrangements.

Security and your rights

We implement appropriate technical and organisational measures, including task-based access, confidentiality and secure data transfer. No security can guarantee absolute protection.

You may request access, correction, deletion, restriction and, where applicable, portability. You may withdraw consent and object, particularly to direct marketing. We verify identity appropriately and generally respond within one month, subject to statutory extensions.

For our own processing, contact info@leadhunter.nl. For data processed for a client, we refer or assist your request to that client. You may complain to the Dutch Data Protection Authority, Autoriteit Persoonsgegevens.

We do not use the processing described here for solely automated decisions with legal or similarly significant effects. Changes are published in an updated version; new purposes or required consent are not introduced solely by changing text.