Privacy Policy – Three BV

This privacy policy applies to the processing of personal data via the website www.three.hr, managed by:
Three BV Brusselstraat 211 box 102 1702 Groot-Bijgaarden, Belgium Company number: (add if applicable) Email for questions or privacy complaints: nick@three.hr

Three BV respects your privacy and processes your personal data in accordance with the General Data Protection Regulation (GDPR) and Belgian privacy legislation.

1. What personal data do we collect?

1.1 Via website usage

• IP address, browser type, operating system • Browsing behavior (pages visited, time spent, clicks) • Cookies (see cookie policy)

1.2 Via contact forms or newsletter sign-up

• Name, email address, phone number • Attachments such as CV, cover letter • Messages or questions submitted voluntarily

1.3 As part of our services

• Personal and professional data (CV, experience, education, salary, references, test results) • Information provided during interviews or communication with Three BV

1.4 Publicly available data

• LinkedIn, company websites, press articles, public databases

2. Why do we process your data?

We process your data for the following purposes: • Application management: to help candidates find suitable jobs or projects • Client relations: for introducing candidates and reporting • Follow-up communication: to respond to your questions or requests • Newsletters and events: to inform you about jobs, updates, events (only with consent) • Website analysis: via cookies and Google Analytics • Marketing: only with your explicit consent – which can be withdrawn at any time

Legal grounds: • Consent (e.g., for marketing or newsletter) • Contractual necessity • Legal obligation • Legitimate interest (e.g., site improvement, past cooperation)

3. Use of cookies and Google Analytics

Three BV uses cookies to improve your browsing experience and analyze site usage via Google Analytics. Google may collect IP addresses and transfer data to the USA with appropriate safeguards (e.g., Standard Contractual Clauses). Google Analytics is configured according to the Data Protection Authority’s recommendations. See our separate [Cookie Policy] for more information.

4. Sharing with third parties

Your data is not sold or shared without your consent, except: • With service providers acting on our behalf (e.g., IT partners) under a data processing agreement • With clients in the context of a project or job application (with consent) • To comply with legal obligations or proceedings • In case of a merger or acquisition, with guarantees for your rights

5. Retention period

• Application data: max. 2 years after last contact unless deletion is requested • Client/project data: as long as needed and then for legal retention (e.g., 7 years for accounting) • Newsletter subscriptions: until unsubscribed • Google Analytics: 26 months (default setting)

6. Data security

Three BV takes appropriate technical and organizational measures to protect your data against unauthorized access, loss, or alteration. Only authorized personnel have access where necessary.

7. Your rights

You have the following rights: • Right of access • Right to rectification or completion • Right to erasure (except where legal retention applies) • Right to restrict processing • Right to object • Right to data portability • Right to withdraw consent (where applicable)

You can exercise your rights by emailing nick@three.hr. Proof of identity may be required for sensitive requests.

8. Complaints

If you have a complaint, contact nick@three.hr or submit a complaint to: Data Protection Authority Rue de la Presse 35, 1000 Brussels www.dataprotectionauthority.be

9. Changes Three BV reserves the right to update this privacy policy. The latest version will always be available at www.three.hr. We recommend reviewing this document regularly