Candidate privacy statement
Enginium People & Projects BV Version 4 18 September 2026
This statement briefly explains how Enginium uses your personal data when we contact or support you for recruitment.
Controller and contact
Enginium People & Projects BV, BE 0848.764.747, Mechelsesteenweg 531, 3020 Herent, Belgium, is the data controller. Questions or requests:
Why we use your data
We use your data to contact you about opportunities, assess and support your application, manage a possible placement and meet legal, administrative and security obligations. Processing is based on legitimate interests, pre-contractual steps, performance of a contract or a legal obligation.
We share your CV or profile with a specific client for a specific role only after informing you and obtaining your agreement. You may object to processing based on legitimate interests.
Data and sources
We process relevant contact and profile details, your CV, experience, education, skills, availability, mobility, salary expectations, communications, shared documents and necessary security and audit data. We do not ask for your current salary and do not intentionally collect sensitive or criminal data for ordinary recruitment.
Data comes from you, clients or professional contacts, or from public and professional sources. If it does not come directly from you, we identify the source or type of source at first contact.
Who receives your data
Access is limited to authorised staff and necessary service providers, including hosting, back-up and professional data enrichment. A specific client receives your profile only after your agreement. Authorities or advisers receive data only when legally required or necessary. For transfers outside the EEA, we use legally recognised safeguards.
AI and decisions
A recruiter may use AI to summarise information factually or compare it with role criteria. AI does not assign a score or ranking and does not make selection decisions. A recruiter checks the information and decides.
Retention and your rights
We keep a complete file while a linked project is active and normally for 24 months afterwards. We then minimise the file and retain it for no more than five years, unless a contract, legal period or legal claim requires otherwise.
Subject to GDPR conditions, you may request access, correction, deletion, restriction or portability, or object to processing, via