Privacy notice — Blin Queen onboarding documents

1. Who we are

The controller of your personal data is Blin Queen Amstel B.V. (KVK 95157530) or Blin Queen B.V. (KVK 91329078), depending on which entity is offering you the employment contract. Both companies are based at Amstel 102, 1017 AD Amsterdam, the Netherlands. Where this notice refers to "Blin Queen", it means whichever of these two entities is offering you the contract.

If you have any questions about how we handle your personal data, contact us at hr@blinqueen.com.

2. What we collect on this page

To finalise your employment contract and submit you to our Dutch payroll administration, we collect:

• A copy of your primary identity document (Dutch passport, the front and back of your Dutch ID card, an EU/EEA passport, a non-EU passport, or the front of your Dutch residence permit — depending on your case).
• Where applicable, the back of your residence permit (to verify your work endorsement) or a separate proof of your legal status in the Netherlands.
• Proof of your BSN (Dutch citizen service number) — typically a letter from your municipality. For Dutch nationals we read the BSN directly from your passport or ID, so a separate letter is not required.
• Proof of your IBAN — a photo of your bank card, or a recent bank statement showing your name and IBAN.
• For Ukrainian nationals under the EU Temporary Protection Directive: a copy of the sticker in your passport confirming your protection status.
• Your marital status and your answer to the loonheffingskorting (Dutch payroll tax credit) question.

From the documents above we extract and store: your full name (surname and given names separately), date of birth, gender, nationality, document number and expiry date, BSN, IBAN, and (for residence permits) the work-endorsement text on the reverse.

Your identity document is the authority on how your name is recorded. If the name on it differs from what we hold, we update our records to match the document.

3. Why we collect it, and on what legal basis

We process this data for two purposes, on two legal bases:

• To enter into and perform your employment contract — GDPR Article 6(1)(b). This includes generating the contract, the Dutch "Intake formulier werknemer" for payroll, and verifying your right to work in the Netherlands.
• To comply with our legal obligations under Dutch tax and labour law — GDPR Article 6(1)(c). This includes the obligation under the Algemene wet inzake rijksbelastingen (AWR) to keep payroll records, and the obligation under the Wet arbeid vreemdelingen (Wav) to keep a copy of right-to-work documents for non-EU/EEA employees.

Providing this data is a contractual and statutory requirement. If you choose not to provide it, we cannot enter into an employment contract with you. Because the processing is based on contract performance and legal obligation, the consent checkbox you tick before uploading is for transparency only — it confirms you have read this notice. Your data will be processed if you proceed; if you decide not to proceed, simply do not upload anything and no records will be created from this page.

4. How AI is involved

Each document you upload is sent to Anthropic's Claude model for three operations:

1. To check that the file is actually the document type expected (so we can flag obvious wrong-document uploads without making you wait for a manager).
2. To extract the fields listed in section 2 so we can prefill your intake form and verify them against information you have already given us.
3. To compare the name on each document against the names on your other documents.

Anthropic processes the data on our behalf as a sub-processor; we have a data-processing agreement with them. Anthropic's processing takes place outside the European Economic Area (in the United States). The transfer is covered by the EU Standard Contractual Clauses (Module Two, controller-to-processor) incorporated into Anthropic's Data Processing Addendum, as required by GDPR Article 46(2)(c).

AI is used only to assist. Every approval or rejection decision is taken by a human (your hiring manager). The only automated decision the AI can take alone is rejecting a clearly-wrong upload (for example, a selfie sent as your ID), at which point we ask you to re-upload — this does not produce any legal effect on you and is not a decision under GDPR Article 22.

5. Who sees your data

• Your hiring manager at Blin Queen, who reviews each document.
• The Blin Queen HR team and our payroll administrator (loonadministratie).
• The following data processors, who act on our written instructions:
  • Airtable Inc. — our HR system; data stored in their EU region.
  • Anthropic, PBC — AI processing of uploaded documents; based in the United States.
  • Resend Inc. — the service that sends you the secure-link emails; based in the United States.
  • SignWell Inc. — the e-signature service used when your contract is ready to be signed; based in the United States.
• Where required by law, the Dutch tax authority (Belastingdienst), the UWV (work-permit decisions), or other competent public bodies.

Our US-based sub-processors process data outside the European Economic Area. The transfer safeguards under GDPR Articles 44–49 differ by provider:

• Anthropic, PBC — EU Standard Contractual Clauses (Module Two, controller-to-processor) incorporated into Anthropic's Data Processing Addendum.
• Resend, Inc. — EU Standard Contractual Clauses (and the UK SCCs for UK transfers) under Resend's Data Processing Addendum, supplemented by Resend's certification under the EU-U.S. Data Privacy Framework and its UK Extension.
• SignWell, Inc. — at the date of this notice, transfers to SignWell rely on the contractual-necessity provision in GDPR Article 49(1)(b), as set out in SignWell's privacy policy. We have requested a Data Processing Addendum incorporating the EU Standard Contractual Clauses (Module Two) and will update this notice once it is in force. If you would prefer that your employment contract not be signed via SignWell while this is being arranged, please contact your hiring manager — we can arrange a paper signature instead.

We do not sell your data and we do not share it for marketing.

6. Security

Data is transmitted over HTTPS and stored encrypted at rest by our data processors. Access within Blin Queen is limited to HR and your hiring manager. This privacy-notice page itself does not use cookies or analytics.

7. How long we keep it

• Payroll-related documents (IBAN, BSN, identity, loonheffingskorting declaration): retained for the duration of your employment and for seven years after the end of the calendar year in which your employment ends, as required by the Algemene wet inzake rijksbelastingen (AWR).
• Right-to-work documents (residence permit, work endorsement) for non-EU/EEA employees: retained for five years after the end of your employment, as required by the Wet arbeid vreemdelingen (Wav).
• Other documents (marital status, your answers on this page): retained for the duration of your employment plus the period needed to defend against employment-law claims (typically five years).
• If your employment with Blin Queen does not proceed, your uploaded documents are deleted within four weeks of the decision — or, with your express consent, retained for up to one year so we can consider you for future opportunities.

When the relevant retention period ends, your documents are deleted from our active systems.

8. Your rights

Under the GDPR / Dutch AVG you have the right to:

• request access to the personal data we hold about you;
• request rectification of inaccurate or incomplete data;
• request erasure of your data (subject to the retention obligations above);
• request restriction of, or to object to, our processing;
• request a copy of your data in a portable, machine-readable format (data portability);
• lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or with the data protection authority of your country of residence within the EU/EEA, if you are not satisfied with how we have handled your data.

To exercise any of these rights, email hr@blinqueen.com. We will respond within one month.

9. Updates to this notice

We may update this notice from time to time. The "Last updated" date at the top changes when we do. Material changes are communicated to you separately.