Privacy Statement
Version
2.1
–
March 2026
We process personal data in the context of the supply of our Workforce Management Software Dyflexis. We are Dyflexis B.V., registered in the trade register under Chamber of Commerce number 59584327. Our contact details are at the bottom of this page.
Above all, of course, we process the personal data of the employees of our customers who use our software. We also process personal data of (potential) customers and job applicants. Below, we have specified the privacy statement in detail for these three groups.
Legal basis: the processing is necessary for the performance of the employment contract and/or for compliance with a legal obligation.
1. I get my schedule via Dyflexis
1.1 Who is the data controller?
At Dyflexis, personal data is processed for a client. The client of Dyflexis is the party responsible for the processing of this data. This can be an employer, but also, for example, the customer of an employment agency. For the sake of clarity, hereafter we will refer to this party as the ’employer’. Dyflexis is engaged for the processing of this personal data. This means that Dyflexis processes the data on behalf of the employer and is therefore a data processor.
1.2 Which data is processed by us and to what purpose?
Dyflexis supplies software for personnel planning and time registration on behalf of your employer. The employer determines which data will be stored. This may include the following details:
Name and address
Nationality
Marital status
Type, number and expiration date ID-card
Sex
Name spouse
Birthplace and date
Personnel number
Telephone number
Job description
E-mail address
Salary
Login credentials
Bank account number
Citizen service number
Absenteeism
Key Performance Indicators (KPI’s)
Your employer may collect more or less details than those listed above. For an exact overview, please contact your employer.
Your employer needs a good reason to process your data. Where the use of Dyflexis is concerned, this is usually the retention obligation of the Tax Authorities and the Labour Inspectorate. Ask your employer which reason is applicable.
1.3 Retention period for your data
We store your data on behalf of your employer. The employer determines the retention period. The Tax and Customs Administration requests employers to apply a retention period of seven years for schedules and time registration. Ask your employer which retention period is applied.
1.4 Your rights
For requests regarding access to, modification, protection or deletion of your data, please contact your employer. If the data is incorrect, you can request that your employer changes the data or has it removed. Dyflexis is not able or permitted to implement such requests, but forwards them to your employer.
1.5 Provision to third parties
Your data is expressly not provided to third parties, unless this is necessary for the provision of the service or if we are legally obliged to do so. In the event of a transfer, the third parties concerned will not use the data for any other purpose. These third parties are referred to as sub-processors. If you use Dyflexis, your employer has agreed to the use of these sub-processors. You can find a list of our sub-processors here.
1.6 Security
The security of your personal data is very important to us. For this reason, we get our software audited by an external company annually. We are also ISO27001 certified for information security as a company.
2. I’m a potential customer/I have requested a demo
By filling in our contact form, you consent to the processing of your personal data. We may collect the following data from (potential) customers:
Company name
First name and surname
Position
Telephone number
Email address
Correspondence and telephone calls
Browsing data at dyflexis.com
2.1 Purpose of the data processing
We store your data in order to provide you with the best possible service. We also send you product news and offers, until you unsubscribe from our newsletter.
Legal basis: your consent or our legitimate interest for carrying out the service.
2.2 Retention period
In order to be able to provide you with the best possible service at all times, we retain your data until such a time as you request that the data be deleted.
2.3 Your rights
For requests regarding access, modification, blocking or deletion of your data, you can contact us at the email address below.
2.4 Provision to third parties
We will only provide your data to third parties for the performance of our own services, and never for commercial purposes.
2.5 Security
The security of your personal data is very important to us. For this reason, we will only store your data at companies with an ISO27001 certification. We as a company are also ISO27001 certified for information security.
3. I am a customer
If you are a customer of ours, we have concluded a processing agreement with you which is part of our General Terms and Conditions. You can find these here. We also process the following data for our services:
Company name
First name and surname
Position
Telephone number
Email address
IP address of signed agreements
Correspondence and telephone calls
Browsing data at www.dyflexis.com
3.1 Purpose of the data processing
We store your data in order to provide you with the best possible service. In addition, we collect all data necessary for correct invoicing and to comply with the financial retention obligation.
Legal basis: Performance of the agreement and legal obligation (financial administration).
3.2 Retention period
In order to be able to provide you with the best possible service at all times, we retain your data until such a time as you request that the data be deleted. In addition, the Tax and Customs Administration requires that data relating to agreements and invoicing is retained for at least 7 years.
Your Dyflexis customer database will be made available to you at the end of the agreement and will then be deleted.
3.3 Your rights
For requests regarding access to, modification, blocking or deletion of your data, you can contact us at the email address below. For the part of the customer data that falls under the financial retention obligation, it may be the case that we are not allowed to carry out requests for changes and deletion.
3.4 Provision to third parties
We will only provide your data to third parties for the performance of our own services, and never for commercial purposes.
3.5 Security
The security of your personal data is very important to us. For this reason, we will only store your data at companies with an ISO27001 certification. We as a company are also ISO27001 certified for information security.
4. I am a job applicant
If you apply for a job with us, we process the following personal data:
First name and surname
Address
Telephone number
Email address
Courses followed
Job for which you are applying
Previous work experience
Other information you send
Salary indication / most recent salary earned
Passport photo, if applicable
4.1 Purpose of the data processing
To be able to assess whether you are eligible for the position for which you are applying or another position within the company. Also in preparation for a possible employment contract.
Legal basis: Consent or legitimate interest for recruitment purposes.
4.2 Your rights
You have the right to request access to, correction, deletion, or restriction of your personal data, where applicable. To exercise these rights or opt out of further recruitment-related communications, please use the relevant button at the bottom of the recruitment emails you receive from us.
4.3 Provision to third parties
Your details are expressly not provided to third parties, unless this is necessary for the application process or if we are legally obliged to do so. In the event of a transfer, the third parties concerned will not use the data for any other purpose. These third parties are referred to as sub-processors. We use Tellent for our application management software.
4.4 Retention period
We keep your data up to 12 months after the last contact.
5. I am a visitor to Dyflexis.com
See our cookie conditions here.
6. Contact details
If you have any questions, comments or complaints about the protection of your personal data by Dyflexis, you can send them to privacy@dyflexis.com, or by post to the following address:
Dyflexis B.V.
Saturnusstraat 14
2516 AH, Den Haag
+31 (0)880 111 555
Chamber of Commerce: 59584327
You can also contact our data protection officer at privacy@dyflexis.com.
7. Amendments
We reserve the right to make amendments to this statement. Changes will be published on this website and old versions will be kept available. It is recommended that you consult this statement regularly so that you are aware of these changes. The most current statement can be viewed at all times on the Dyflexis website.
This version was drawn up in March 2026.
