Privacy policy

Who processes your data

SuriCareer is a trade name of BlueOceanSolutions B.V., Dutch Chamber of Commerce (KvK) no. 92101550, registered at Duintopstraat 11, 1361 BJ Almere, the Netherlands. BlueOceanSolutions B.V. is the data controller for the data collected through this website: we decide what it's used for and how.

Questions about your data or about this notice: info@suricareer.com.

Browsing and searching vacancies

You don't need an account to browse or search vacancies. Our server logs technical data that any web server logs, including your IP address, to keep the site running and secure.

Creating a candidate profile

If you create a candidate profile, we collect: your name, a short headline and bio, your sector and experience level, your location (as free text, e.g. a city name — not a street address), languages and skills you list yourself, and optionally a CV you upload.

We do not collect a date of birth, nationality, photo, or phone number for your profile — we don't ask for them and don't store them.

You control who can see your profile and CV: hidden, visible to employers, or — for your CV specifically — shareable only once you respond to a contact request. You also control how your name is shown to employers: in full, first name only, or initials only. Public candidate listings never show a real photo, only an anonymized letter.

Contact between employers and candidates

An employer cannot message you outside the platform: if an employer is interested, we route that request to your account. Your email address and phone number are not automatically shown to the employer.

You decide whether and how to respond. If your CV visibility is set to 'on request', the employer only sees your CV once you've responded to the contact request.

Creating an employer account

From employers we collect: company name, a contact person with an email address and (optionally) a phone number, the Chamber of Commerce (KvK) or SBB registration number, sector, company size, and optionally a logo and company description. The KvK/SBB number is checked at registration, to prevent abuse by previously banned companies.

Subscriptions and payments

Payments for an employer subscription are handled by Stripe. We do not store card details ourselves — Stripe processes and stores those. What we do store: your Stripe customer ID, which subscription you hold and its status (active, cancelled, expired), so we know which features your account can use.

Signing in and accounts

Sign-in runs through Microsoft Entra External ID, with an email address and password or a federated sign-in option. We do not store passwords ourselves — those are managed by Microsoft Entra.

Chatbot

Your question to the chatbot is sent to our search-and-answer service so it can respond. If you're signed in, we also send your name and email address, so an answer can be tailored to your account. Don't type anything into it you don't want to share; a chat window invites sharing more than is needed.

Cookies and analytics

We use Google Tag Manager and Google Analytics to see how the site is used. These are only set if you consent via the cookie banner. You can withdraw consent at any time via 'Cookie preferences' at the bottom of every page — that's as easy as giving it.

On what legal basis

Consent (Art. 6(1)(a) GDPR) — for analytics cookies. You may withdraw consent at any time.

Performance of a contract (sub b) — for your candidate or employer account and the features that come with it, including a subscription.

Legitimate interest (sub f) — for security, abuse prevention (including checking KvK/SBB numbers), and keeping the site technically running.

Legal obligation (sub c) — where the law requires us to retain something, for example for payment-related bookkeeping.

Who we share data with

With an employer: only the contact request and, if you agree, your CV — never your email address or phone number automatically.

With suppliers who work on our behalf and may not use your data for themselves: Microsoft (Azure hosting and storage, and Entra External ID for sign-in), Stripe (payments), Google (Tag Manager and Analytics, after your consent), and the supplier behind our chatbot. A data processing agreement is in place with each of them.

We do not sell your data and do not use it for advertising.

Transfers outside the EEA

Our servers are located in the European Union. Some suppliers are based outside the European Economic Area, for example in the United States. For those transfers we rely on Standard Contractual Clauses (SCCs) and assess whether they provide sufficient protection in practice.

Your rights

You have the right to access, correct, and delete your data, to restrict or object to certain processing, and to receive a copy of data you provided yourself. To exercise any of these rights, or if you have a question about your data, email info@suricareer.com. You'll get a reply within a month. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes to this notice

We may update this notice, for example when we add a new feature that processes personal data. The date at the top of this page shows when it was last updated.