Privacy Policy

Last updated: 2026-10-08

1. Who we are

This site is operated by Sivel Labs SRL, a Belgian limited liability company registered in La Hulpe, Belgium — BCE / VAT number: BE 1037.283.356. Sivel Labs SRL is the data controller within the meaning of the GDPR (Regulation (EU) 2016/679).

2. Data we collect

We process personal data only in the following cases:

2.1 Contact form

• Submitted fields: name, email address, subject, message.
• Technical metadata: pseudonymised IP address (never in clear text), User-Agent, language.
• Retention: 90 days, then automatic deletion.
• Legal basis: your consent (art. 6.1.a GDPR) by submitting the form, plus legitimate interest (art. 6.1.f) for abuse prevention.

2.2 Job listings (browsing)

Merely browsing our open positions requires no personal data from you. If you apply to a position via the "Apply" form, the data described in section 2.4 is processed.

2.3 Audience measurement with consent

Google Analytics 4 loads only after your explicit consent in the cookie banner. Before consent, no request is sent to Google. We send only page views whose URL is limited to the origin and path, standard GA4 technical session and engagement signals, the HTTP success of contact and application forms, and clicks on the job sharing buttons. Data sent is limited to page views (origin and path) and GA4 technical session signals. You can withdraw consent at any time; see the cookie policy.

2.4 Job applications and CV submission

When you apply to a position published on this site (the "Apply" form), the data controller is Sivel Labs SRL (BCE / VAT BE 1037.283.356, Avenue du Bois d'Hennessy 30, 1310 La Hulpe, Belgium), acting for its recruitment-agency activity Sivel Labs Talents.

• Purpose: processing your application and putting you in contact with the end-client companies for which the position is open.
• Legal basis: GDPR art. 6(1)(b) — pre-contractual measures taken at your request. The form's checkbox records that you have read this information; it is not the legal basis of the processing.
• Data categories: identity (name), contact details (email address, phone number where provided), your CV and its full contents (experience, education, skills), cover message.
• Proof of acknowledgement: when you submit the form, your IP address and user-agent are retained to demonstrate your acknowledgement (GDPR art. 5.2 and 7), for the same duration as the application or the mandate concerned.
• AI analysis of your CV: the AI analysis of your CV (skill extraction and assessment), strictly as a tool assisting the human consultant, is carried out by default on the basis of legitimate interest (GDPR art. 6(1)(f)), with prior information (GDPR art. 13-14). You have a right to object (GDPR art. 21) exercisable at any time via dpo@sivel-labs.be, without any consequence for your application; an objection stops the analysis and deletes its results.
• Recipients: the end-client companies for which the position is open, where applicable via their vendor management system (VMS), after a right-to-represent mandate that you explicitly confirm.
• Sub-processors: the ATSIQ recruitment platform (published by Sivel Labs SRL), hosting provider (EU), transactional email provider (EU).
• Retention: the application and the associated CV are erased 2 years after the closure of the recruitment process concerned; an application that is still being processed is not deleted until that process is closed. The associated candidate profile (identity, contact details) is deleted at the same time if no application and no active mandate concerning it remain. Spontaneous expressions of interest ("Express your interest") are kept for at most 2 years (730 days) after your last activity, then automatically deleted.
• Your rights: access, rectification, erasure, restriction, objection, portability (GDPR art. 15 to 21), right to object to the AI analysis at any time and complaint with the Belgian DPA (APD-GBA) — see section 6 for the procedure. Contact: dpo@sivel-labs.be.

2.5 Sivel Labs Talents talent pool

Sivel Labs SRL (BCE / VAT BE 1037.283.356, Avenue du Bois d'Hennessy 30, 1310 La Hulpe, Belgium), for its Sivel Labs Talents agency business, keeps a pool of professional profiles in order to identify and contact people who may match the positions it handles.

• Sources: public professional profiles (LinkedIn), professional data providers, CVs provided by the person.
• Legal basis: the agency's legitimate interest in identifying and contacting potential candidates (Art. 6(1)(f) GDPR).
• Data: identity, LinkedIn profile, professional contact details where available, professional background, CV where applicable, and the origin of the profile.
• Recipients: the ATSIQ platform (software of Sivel Labs SRL) and a hosting provider located in the EU.
• Retention: as long as the profile remains useful for recruitment, or until you object.
• Objection: you can object at any time, and have your profile removed, by writing to dpo@sivel-labs.be (Art. 21 GDPR). Your other rights (access, rectification, erasure, restriction, complaint to the Belgian Data Protection Authority) are described in section 6.

3. Anti-bot — Cloudflare Turnstile

The contact form and the application form are protected by Cloudflare Turnstile. Turnstile may process your IP address and a browser fingerprint on Cloudflare's servers. More information: Cloudflare Privacy Policy.

• Data categories : visitor IP address, browser fingerprint (user-agent, language, timezone), cryptographic challenge result. No persistent third-party cookies — Turnstile may set at most a session-scoped cf_clearance technical cookie.
• Retention : on the Sivel Labs SRL side, the Turnstile verification itself only yields a boolean result (pass/fail). The IP address and user-agent transmitted when a job application is submitted are, however, kept in the proof of acknowledgement described in section 2.4 (GDPR art. 7).
• Legal basis : legitimate interest (GDPR art. 6.1.f) — bot protection is a necessary and proportionate security measure given the form's public exposure.
• Outside EU transfer : Cloudflare operates from the USA but relies on Standard Contractual Clauses (SCCs) from the European Commission plus the Data Privacy Framework. Cloudflare's sub-processors are listed at cloudflare.com/gdpr.

4. Sub-processors

• ATSIQ — recruitment platform (Sivel Labs SRL).
• Hosting provider (EU).
• Transactional email provider (EU).
• Anti-bot provider (United States) — Standard Contractual Clauses + Data Privacy Framework.
• Audience measurement provider, after consent.

5. Scope of AI processing

Data collected via this site (contact form, technical metadata — excluding job applications, see section 2.4): no artificial-intelligence processing is applied to contact form data.

Data collected outside this site, after a recruitment mandate begins: if you become a candidate or client of the Sivel Labs Talents recruitment section operated by Sivel Labs SRL, the subsequent processing of your data may rely on AI tools assisting the human consultant (legitimate interest, GDPR art. 6(1)(f), with right to object, art. 21), under a separate contract.

6. Your rights

You have the right to access, rectify, erase, object, restrict, and port your data. To exercise these rights, write to dpo@sivel-labs.be with a proof of identity. Response within 30 days max.

If we don't respond, you may file a complaint with the Belgian Data Protection Authority (APD-GBA).

7. Security

We implement appropriate technical and organisational measures to protect your data.

8. DPO contact

Email: dpo@sivel-labs.be
Postal address: Sivel Labs SRL, Avenue du Bois d'Hennessy 30, 1310 La Hulpe, Belgium