PRIVACY POLICY

Overbosch & Co B.V. (“Overbosch & Co”) is an executive search firm specializing in the healthcare sector in the Netherlands.
We offer a range of services, including:

  • Executive and non-executive search: identifying top-tier candidates for leadership roles;

  • Individual and team assessments: evaluating talent potential and fit to specific roles; and

  • Advice on strategy, leadership, governance, organizational alignment, and benchmarks of strategies and strategic agendas to specific roles.

At Overbosch & Co, we take your privacy seriously. We are committed to protecting the privacy of our clients, candidates, and anyone who engages our services. This privacy policy explains how we process personal data in compliance with applicable laws. Overbosch & Co is dedicated to ensuring that your personal data is handled responsibly, regardless of whether it is provided through our website, email, social platforms, direct communication, or other means.

Why we process personal data and on what legal basis

We process personal data for the following purposes:

  • Providing our services;
    The personal data we process enables us to align candidate skills, experience, and career aspirations with the specific needs of our clients.

  • Compliance with legal obligations (for example compliance with the legal retention period for financial data);
    The processing of personal data for the abovementioned purposes is based on one or more of the following legal bases:

  • Your consent;

  • Performance of a contract we concluded with you;

  • Compliance with a legal obligation to which we are subject; and

  • Legitimate interest(s) of us or a third party.

If we process your personal data based on your consent you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. Withdrawing your consent is possible via the contact details mentioned in this privacy policy.

We process personal data for the following legitimate interests: to be able to perform (parts of) our services (for example, giving advice to our clients on the fit of a number of candidates to a specific role, or mapping potential candidates based on publicly available personal data).

What personal data we process

For candidates we may process the following information:

  • LinkedIn profiles, full name, employment history, and educational background;

  • Scientific accomplishments;

  • CVs, interview notes, remuneration, personality profiles, and contact details; and

  • Location and current role.

For clients we may process details such as:

  • Names, job titles, and employers (current and past);

  • Interview notes; and

  • Work address, email address, and telephone number

Where we obtain personal data

We gather personal data from a variety of sources, including:

  • Public platforms like LinkedIn;

  • News articles, press releases, and other publicly available material;

  • Recommendations from professional contacts, colleagues, or former employers; and

  • Direct communication with clients and candidates during our search and assessment process.

Recipients of your personal data

We may share your personal data with our clients in the context of the services we provide.

Retention of personal data

We do not retain your personal data longer than necessary for the purposes mentioned in this privacy policy. If there is a statutory retention obligation or a retention period under professional or conduct rules, we will adhere to those periods.

Methods of contact

We may contact candidates and clients through telephone, email, WhatsApp, LinkedIn, or other methods.

Your rights

Under data protection legislation, you have several rights concerning your personal data:

  1. Right of access: request access to the personal data we hold about you.

  2. Right to rectification: update or correct any inaccuracies in your personal data.

  3. Right to erasure: request that your data be permanently deleted when it is no longer needed.

  4. Right to restrict processing: limit the use of your data for certain purposes.

  5. Right to data portability: obtain a copy of your personal data for reuse.

  6. Right to object: object to the processing of your data for marketing, research, or other legitimate interests.

 

To make a request based on the above mentioned rights you can contact us via the contact details mentioned in this privacy policy. Upon receipt of your request, we will attempt to issue a response within 30 days. We may not be able to fulfill your request within the 30-day period. In that case, we will notify you.

Lastly you have the right to lodge a complaint (with the Dutch DPA (“Autoriteit Persoonsgegevens”)) regarding our processing of your personal data.

Complaints or Queries

If you have questions or concerns about this privacy policy or the way we handle personal data, please contact us:

We are here to ensure your privacy is respected and your data is handled responsibly.

This privacy statement was last modified on 31 January 2025.