Last updated: 23 September 2026

Heroes B.V. ("Heroes", "we") respects your privacy. This policy explains what personal data we process, why, and what rights you have. It applies to visitors of heroes.nl, contact persons at our clients, prospects, suppliers and partners, and job applicants. Heroes B.V., Europalaan 400 (Gebouw 400), 3526 KS Utrecht, the Netherlands, KvK 67511163, is the controller of your data under the GDPR.

What we collect and why

• Contact and business details (name, company, job title, email, phone) – to answer your questions, deliver our services and manage our business relationship. Basis: contract or legitimate interest.

• Invoicing details – to bill our clients and meet tax and accounting obligations. Basis: legal obligation.

• Application details (CV, contact details, interview notes), including profiles received from recruitment agencies – to assess your application. Basis: steps before a contract, or legitimate interest.

• Website usage data via analytics cookies, only if you accept them – to understand and improve our website. Basis: consent.

We do not sell personal data, we do not ask for sensitive data, and we do not make automated decisions about you.

Who we share it with

Only where necessary: IT providers that process data on our behalf (such as Microsoft, HubSpot and Google) under a data processing agreement; professional advisers and auditors; authorities when legally required; and a successor in case of a merger or acquisition. Where a provider processes data outside the EEA, we rely on EU-approved safeguards such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.

How long we keep it

No longer than needed. Financial records are kept for 7 years, as required by law. Applications are deleted 4 weeks after the procedure ends, or after up to 1 year with your consent. Business contact data is kept for the duration of the relationship plus 2 years. After that, data is deleted or anonymised.

Cookies

When you first visit our website, a cookie banner asks you to accept or decline analytics cookies. Analytics cookies are only placed if you accept. If you decline, we store a single necessary cookie to remember your choice. You can change your choice at any time by clearing the cookies in your browser; the banner will then appear again on your next visit.

Security

We protect personal data with appropriate technical and organisational measures as part of our ISO 27001-aligned information security management system, and access is limited to people who need it. If a data breach poses a risk to you, we notify the Autoriteit Persoonsgegevens and, where required, you.

Your rights

You can ask to access, correct, delete or transfer your data, restrict or object to its processing, and withdraw your consent at any time. Email ward.eerland@heroes.nl and we will respond within one month. You can also file a complaint with the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

Our website and services are not intended for children under 16.

Changes and contact

We review this policy every year; the latest version is always at heroes.nl/privacy. Questions?

Contact our privacy contact our Privacy Officer at policy@heroes.nl, call us on +31 85 782 0449, or write to

Heroes B.V.
attn. Privacy Officer
Europalaan 400 (Gebouw 400)
3526 KS Utrecht
The Netherlands