Applicant privacy notice
Who is responsible?
Inquira Health B.V. is the controller for your application data. Questions or requests: hello@inquira.health. Version 14 November 2026.
What we collect and why
We use your name, email, CV or profile link, motivation and job-related evaluations to assess your application and contact you. This is necessary to take steps at your request before entering an employment contract (GDPR Article 6(1)(b)). Do not provide government ID numbers, ID copies, date of birth or health information. We ask for a CV or profile link and a motivation. Without contact details, information about your experience and your motivation we cannot assess your application.
Who has access
Only the founders and colleagues assigned to your application have access through our internal Ops tool. CVs and application data are encrypted at rest. We do not send them to our sales CRM or use them for marketing. Website hosting and infrastructure providers process data on our behalf. Cloudflare Turnstile checks for abuse; Upstash processes short-lived pseudonymous identifiers for request limits. These providers may process data outside the EEA. Where required, we use an appropriate transfer mechanism such as EU Standard Contractual Clauses. Contact us for details about providers and safeguards.
Retention
Without separate permission, we delete recruitment data within four weeks after closure. Automated cleanup starts on day 27 to allow operational margin. With separate, optional consent, we may keep your CV and contact details for future roles for up to one year after closure. Consent does not affect your current application and can be withdrawn at any time. Interview evaluations are still removed within four weeks after closure. Unresolved applications expire no later than 120 days after receipt. If you join us, only necessary data transfers to employment administration under its separate retention policy; recruitment CVs and selection notes are not kept indefinitely.
Backups and deletion
Deletion from the active system also removes CVs, evaluations and access assignments. Protected backups expire under our documented backup policy and are not used for further recruitment. Earlier deletions are reapplied before access is restored after a recovery. A limited erasure ledger containing a random application identifier and deletion time is retained for up to 90 days to support reliable erasure and accountability, based on our legitimate interest (GDPR Article 6(1)(f)).
Your rights
Your private link lets you check your status, withdraw future-role consent or withdraw and delete your application. Email hello@inquira.health to request access, a copy, correction, restriction, portability or to object. We normally respond within one month and may verify your identity proportionately without routinely requesting an ID copy. You can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). People make hiring decisions; we do not make solely automated decisions about applicants.