Affiliated with
Exterus considers your privacy important and ensures that the personal data we receive is treated confidentially. Exterus is responsible for the careful processing of personal data in accordance with the General Data Protection Regulation (GDPR). In this privacy statement, we inform you about how and why we use and process your personal data.
This Privacy Statement applies to the processing of personal data of:
There is a separate Privacy Statement for employees of Exterus’ customers. This can be found at exterus.nl.
Personal data is any information relating to a natural person that can be traced back to that natural person. We may process personal data of all persons with whom we have contact or who visit this website. We also process personal data of contact persons of our (potential) clients, business customers, suppliers, or business partners, employees, and job applicants.
The parties responsible for processing your personal data are Exterus B.V., Exterus Payrolling B.V., Hello HR Flex B.V. or Exterus Visa Services B.V. (jointly referred to as ‘Exterus’). The party responsible for processing your personal data (data controller) is the com-pany with which you enter into a (potential) legal relationship. The data controller with regard to the processing of personal data via the website is Exterus B.V.
Do you have any questions about our Privacy Statement? Please feel free to contact us at:
Exterus B.V./Exterus Payrolling B.V./Hello HR Flex B.V./Exterus Visa Services B.V.
Attn: Privacy Officer
Prinses Alexialaan 80
2496 XA The Hague
Email: info@exterus.nl
Exterus may only process your personal data if we have a legal basis for doing so. Exterus processes your personal data for the purpose of efficient and effective business operations. In general, we only collect and process your data for the purpose of providing our services, for recruitment and selection purposes, or when you have given your consent.
The overview below shows which personal data Exterus processes for which purposes.
First and last name, email address, and telephone number of the contact person.
We use this data to:
This data is processed in connection with a legitimate interest in the purposes described and the business operations of Exterus. In addition, this data is processed on the basis of the consent of the (potential) clients.
Name and address details, invoice details (services provided, prices, VAT rates), contact details, salary details, company details, VAT number, social security number, and all other financially relevant information.
We use this data to:
Account number, IBAN, and BIC.
We use this information to:
Personal data that clients provide to us in their documentation, such as names, contact details, salary details, company details, social security number, and all other financially relevant information (payroll administration, tax details).
We use this data to:
History of services already provided to the client.
We use this data to:
Copy of passport or ID card.
We use this data, among other things, to:
The (bank and identification) details of clients, details in client documentation, and details relating to services previously provided are processed in connection with a legitimate interest in the purposes described and the business operations of Exterus. In addition, these details are necessary for the performance of the agreement concluded.
Exterus also has a (tax) legal obligation to process and retain data related to invoicing.
First and last name, company name, email address, telephone number (optional), and any personal data included in the message.
We use this data to:
This data is processed in connection with a legitimate interest in the purposes described and the business operations of Exterus. In addition, this data is processed on the basis of the consent of the (potential) clients.
First and last name, email address, and telephone number.
We use this data to:
Information on the resume (such as qualifications, work experience, and education) and information about any limitations of the applicant that would prevent them from performing the job.
We use this data to:
Notes from job interviews and (if applicable) results of assessments and psychological tests.
We use this data to:
This applicant data is processed in connection with a legitimate interest in the purposes described, the business operations of Exterus, and the possible conclusion of an agreement with the applicant. In addition, this data is processed on the basis of the applicant’s consent.
For applicants and clients, Exterus receives your personal data. For potential clients, Exterus may also receive data from public sources.
Exterus will not retain your data for longer than is necessary for the purposes for which your data is processed and than is permitted by law. Your data will be deleted at the end of the retention period.
For applicants, if the application leads to an employment contract with Exterus, the applicant will be subject to the Privacy Statement for employees from that moment on. If the application does not lead to an employment contract, the applicant’s data will be deleted. With the applicant’s consent, the data may be retained for up to one year after the application.
The data of (potential) customers is generally retained for five to seven years, depending on the data processed. This is in connection with statutory (tax) retention obligations, warranty periods, and any claims and disputes in connection with limitation periods.
Exterus may share your data with third parties to the extent necessary for the provision of services, taking into account the aforementioned purposes.
In addition, Exterus may provide personal data to a third party, such as a supervisory authority or other public authority, to the extent that this is required by law.
A processing agreement will be concluded with the third party that processes your personal data on behalf of and on the instructions of Exterus, whereby that third party is also obliged to comply with the GDPR. Third parties engaged by Exterus who offer services as data controllers, such as tax advisors, lawyers, or accountants, are themselves responsible for compliance with the GDPR for the (further) processing of your personal data.
The basic principle is that personal data will not be transferred to countries outside the European Economic Area (EEA). In individual cases, it may be possible that your personal data will be shared with a third party (e.g., a supplier) outside the EEA. This will be done on the basis of your consent and/or within the framework of an agreement to which you are a party. If Exterus does share data with third parties established outside the EEA, this will always be done in accordance with the GDPR.
Personal data collected by Exterus may be transferred to other Exterus entities that are part of the Exterus organization. However, these entities may only use the data for the purpose for which you provided it to Exterus.
When you post data on the Exterus website, we assume that you expressly consent to Exterus sharing that information with other Exterus entities that are part of the Exterus organization.
Exterus protects all personal data it processes against unauthorized and unlawful access, alteration, disclosure, use, and destruction. To this end, we have taken appropriate technical and organizational measures, taking into account the state of the art, to ensure a level of security appropriate to the risk.
In the event that Exterus uses the services of third parties, Exterus will lay down agreements on adequate security measures in a processing agreement within the framework of the protection of personal data. Exterus will report any loss, theft, or misuse of personal data to you as soon as possible if it is obliged to do so.
When you visit our website, we register your IP address, general visit data, and cookies. This data is used to further improve our services. We also register your click behavior. This data is only stored and processed internally. It is used, for example, for statistical analyses of visitor behavior.
With your consent, we use Google tracking cookies on this website as part of the “Analytics” service. We use these cookies to keep track of which pages you visit. The information collected by Google is anonymized as much as possible. Google may provide this information to third parties if Google is legally required to do so, or insofar as third parties process the information on Google’s behalf. We have no influence on this. The information is transferred to and stored by Google on servers in the United States. We have not given Google permission to use the analytics information (cookies) obtained for other services and/or purposes. You can refuse the use of cookies by selecting the appropriate settings on your browser, but as a result, you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. If you do not wish to allow the use of Google Analytics at all, you can download and install the Google Analytics Opt-out Add-on via https://tools.google.com/dlpage/gaoptout?hl=nl.
You have the right to see which personal data Exterus has processed about you at any time. If you exercise this right, we ask you to specify which personal data you would like to see or receive. If this data is incorrect or incomplete, you have the right to have it corrected.
We will inform the third party or parties who have received your data from us of any rectification, unless this is impossible or requires a disproportionate effort on our part. You also have the right to:
If you wish to exercise your rights, you can contact us at any time using the contact details above. We will respond to your request within one month and indicate how your request will be handled. Your request may be subject to restrictions, for example in connection with the protection of personal data of third parties.
Exterus is not legally required to appoint a Data Protection Officer. For your requests as referred to above, our internal privacy officer is your contact person. You can address your requests to the privacy officer using the contact details above.
No automated decision-making is applied to the personal data processed about you.
The above rights only apply to the person whose personal data is processed by Exterus, a third party cannot invoke these rights on behalf of another person.
If you disagree with the way in which your personal data is processed, you can always contact us.
If you are not satisfied with Exterus’ response, you can submit a complaint to the Dutch supervisory authority, the Autoriteit Persoonsgegevens, Postbus 93374, 2509 AJ DEN HAAG (https://www.autoriteitpersoonsgegevens.nl/nl).
Exterus may amend this Privacy Statement without prior notice. Any amendments will be published on the website. The most recent version can always be found at exterus.nl.
This Privacy Statement was last updated on 28 August 2025
Affiliated with