How we handle your personal data
For candidates, users and website visitors
Reference: PRIV-PS-01
Organisation: The Selection Lab B.V.
Version / Period: Version 2026.9 · September 2026
Address: Sint Pieterspoortsteeg 19, 1012 HM Amsterdam
Data Protection Officer: Ondřej Sloup (independent)
Chamber of Commerce: 71341730
Contact: [email protected]
The Selection Lab takes your privacy very seriously and processes your personal data with the utmost care and security. In this privacy statement, we explain how we handle your personal data and what your rights are. We recommend reading this statement carefully. If you have questions or comments, please contact us at [email protected].
The Selection Lab B.V. is a private limited company, registered at Sint Pieterspoortsteeg 19, 1012 HM Amsterdam, The Netherlands. We are listed in the Dutch Chamber of Commerce under registration number 71341730.
The Selection Lab acts as the data controller for the processing of personal data.
We have appointed a Data Protection Officer (DPO), Ondřej Sloup, who can be contacted via [email protected].
Purpose: To assess the match between a candidate and an organization using a skill profile.
Legal basis: Explicit consent.
Consent question: "Do you agree to us processing your data to create a skills profile and based on that determine your match with different positions?"
Data: Name, email address, telephone number where the assessment runs by telephone, and data generated during the assessment (including psychometric data classified as special category personal data).
Retention period: 6 months.
Purpose: To store the digital skill profile so the individual retains access.
Legal basis: Explicit consent (individuals are clearly informed that they are free to refuse without consequences).
Consent question: "Do you want to keep unlimited access to your own digital skills profile?"
Data: Same as above.
Retention period: Until consent is withdrawn or up to 20 years.
Purpose: To improve the selection algorithm.
Legal basis: Explicit consent (refusal has no effect on the selection procedure).
Consent question: "Can we supplement and analyze your data to optimize the process of matching candidates to this organization?"
Data: See above, plus classification data provided by organizations (e.g., department, hiring phase, job offer status, and performance evaluations).
Retention period: 5 years.
Purpose: To match job seekers or interns with one or more organizations.
Legal basis: Explicit consent.
Data: Name, email address, telephone number where the assessment runs by telephone, and psychometric assessment data.
Retention period: Until consent is withdrawn or up to 20 years.
Data: Name, email address, browsing behavior, social media accounts.
Legal basis: Consent.
Retention period: 1 month after consent is withdrawn.
Purpose: Targeting visitors of our website with ads through a tracking pixel.
Data: Same as above.
Legal basis: Consent.
Retention period: 1 month after consent is withdrawn.
Purpose: Analyze website behavior and improve the platform.
Data: Browsing behavior.
Legal basis: Consent.
Retention period: 1 month after consent is withdrawn.
We receive your data directly from you or from the organization you are associated with (e.g., your employer).
The Selection Lab ensures in three ways that employees of organisations cannot suffer in any way as a result of whether or not their personal data are provided to The Selection Lab.
Under the General Data Protection Regulation (GDPR), you have the following rights:
Requests can be sent to [email protected]. We will respond as soon as possible, and no later than one (1) month. If we reject your request, we will explain why.
We only share personal data with:
Specifically, this includes the following parties:
Your data is stored and processed within the European Economic Area (EEA). Some of the parties listed above are established in the United States or store data there: Typeform and VideoAsk, Cloudflare, Papertrail, Superhuman, CriteriaCorp (also Australia) and, for the AI chat, OpenAI. These transfers rest on the European Commission's Standard Contractual Clauses.
In recruitment procedures with a large number of applicants, the organisation you apply to may use a score threshold that is set in advance. Candidates who score above it move on; candidates below it do not, without a person deciding on each candidate. This is an automated decision within the meaning of Article 22 GDPR. It rests on the steps needed before entering into a contract (Art. 22(2)(a) GDPR) or, where that applies, on your explicit consent, and for the assessment data itself always on your explicit consent (Art. 9(2)(a) GDPR). The score is calculated by fixed rules, not by artificial intelligence. You are told before the assessment when this applies. Via [email protected] you can ask for a review by a qualified person, give your point of view and contest the decision; we respond within one month.
Some organisations offer an AI chat, in the browser or on WhatsApp, to answer questions and to take in your answers to screening questions. The chat's opening message tells you that the conversation uses AI. Before anything is submitted, the chat sends you a summary of your answers as it understood them; you can change any answer in the conversation and then confirm. The chat does not assess you. Messages are processed by OpenAI (United States) after personal identifiers are filtered out by a PII gateway.
The Selection Lab uses small text files called cookies. These are stored on your device to enhance your browsing experience.
We use:
You can change or withdraw your choice at any time via "Cookies settings" at the bottom of every page.
This statement may be updated periodically. You will be informed in advance of substantial changes. We recommend reviewing this page regularly at www.selectionlab.com/pages/privacy-statement.
| Document | Version used |
|---|---|
| General Terms and Conditions, LEG-GTC-01 | 2026.9 |
| Data Protection Impact Assessment (DPIA), PRIV-DPIA-01 | 2026.9 |
| Data Processing Agreement, PRIV-DPA-01 | 2026.9 |
| Personal Data Consent Description, PRIV-CON-01 | 2026.9 |
Questions or complaints? Email us at [email protected].
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).