
PRIVACY POLICY
Trade name: Tech Expat
Legal entity: Sole proprietorship
Website: www.techexpat.nl
Email address: info@techexpat.nl
Phone number: +31649830225
Registered address: Edenstraat 66, 5615 GB, EINDHOVEN
Version number: 2026.V1.
1. Introduction
Tech Expat is a career coaching platform based in Eindhoven, the Netherlands, dedicated to supporting international tech professionals in finding work on the Dutch job market. In the context of its services, Tech Expat processes personal data of various categories of data subjects.
The services include, among other things, personal coaching sessions, CV guidance, interview training, networking strategy, access to the Video Gallery and participation in online webinars.
This privacy policy explains which personal data Tech Expat processes, on what legal basis, for what purpose, for how long the data is retained, and what rights you have as a data subject. Tech Expat processes personal data in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the national legislation based thereon.
2. Data Controller
Tech Expat acts as the data controller within the meaning of Article 4(7) GDPR. This means that Tech Expat determines the purposes and means of the processing of personal data.
For questions about the processing of your personal data, you may contact us at:
-
info@techexpat.nlEmail address:
-
Phone number: +31649830225
-
Postal address: Edenstraat 66, 5615 GB, EINDHOVEN
3. What personal data Tech Expat processes and why
Tech Expat processes personal data of 4 categories of data subjects, each with its own purpose and legal basis.
3.1 Coaching participants
These are international tech professionals who make use of Tech Expat’s coaching and guidance services. We process the following data:
-
Name and contact details (email address, phone number).
-
Nationality and country of origin.
-
Curriculum vitae (CV) and LinkedIn profile.
-
Career experience, sector and job title.
-
Session notes and coaching records.
-
Payment details (for invoicing purposes).
-
Session history and progress.
Tech Expat does not process special categories of personal data such as health data.
Purpose: Performance of the coaching and guidance agreement, improvement of the services and financial administration.
Legal basis: Performance of a contract (Art. 6(1)(b) GDPR) for the coaching services. Legal obligation (Art. 6(1)(c) GDPR) for the financial administration.
Retention period: CVs and career data are retained for a maximum of one year after the last session. Financial and bookkeeping data (invoices, payment details) are retained for seven years in accordance with the statutory tax retention obligation. Intellectual property created by Tech Expat is retained indefinitely.
3.2 Interviewees (Video Gallery)
These are professionals already working in the Netherlands who are interviewed for the Video Gallery of the platform. Tech Expat processes the following data:
-
Name (first and/or last name).
-
Audio and video recordings of the interview (face, voice, body language).
-
Professional information (employer, job title, sector, career experience).
-
Nationality and country of origin.
-
Email address and phone number for scheduling and communication relating to the interview.
Purpose: Publication of video interviews on the platform and social media channels to inspire and inform coaching participants and other visitors.
Legal basis: Consent of the data subject (Art. 6(1)(a) GDPR), recorded via a separate informed consent form.
Retention period: Published visual material remains available as long as the platform is active, unless the data subject withdraws their consent. Contact and scheduling data are deleted after the interview has taken place. The visual material is archived as the intellectual property of Tech Expat for an indefinite period. In-house archiving does not constitute active processing of personal data within the meaning of the GDPR, provided the material is not actively used again without a valid legal basis for processing.
3.3 Webinar participants
Tech Expat organizes online webinars for coaching participants and interested parties. We process the following data:
-
Name and email address (for registration and communication relating to the webinar).
-
Participation in the webinar (attendance record).
Webinars are not recorded. Accordingly, no audio or video recordings of participants are made or stored.
Purpose: Organization of the webinar and communication with participants.
Legal basis: Performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR), or consent (Art. 6(1)(a) GDPR) for informational webinars without a commercial nature.
Retention period: Registration data is deleted within three months of the webinar taking place.
3.4 Website visitors
When visiting www.techexpat.nl, the following data may be processed:
-
IP-address (anonymized via Google Analytics IP-masking).
-
Browser type and version, pages visited and time of visit.
-
Referring website (referrer) and country of origin (not traceable to an individual).
-
Data submitted via a contact form or intake request (name, email, message).
Purpose: Analysis of website usage to improve the platform; handling of intake requests and questions.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) for anonymized analysis. Performance of pre-contractual steps (Art. 6(1)(b) GDPR) for intake requests. Consent (Art. 6(1)(a) GDPR) for non-functional cookies in accordance with the ePrivacy Directive.
Retention period: Analytical data for a maximum of thirteen months. Contact data is retained until the enquiry has been handled and thereafter for a maximum of six months.
6. Special categories of personal data
Tech Expat does not process special categories of personal data within the meaning of Article 9 GDPR, such as data concerning health, religion, political opinions, or criminal data. If information regarding residence status or nationality arises in the context of coaching services, this is processed exclusively to the extent necessary for the guidance and on the basis of the explicit consent of the data subject.
7. Recipients of personal data
Tech Expat does not share personal data with third parties and never sells it. Data may only be shared in the following circumstances:
-
Processors: parties that process personal data on behalf of Tech Expat, such as a hosting provider or video editor. A written data processing agreement is concluded with these parties in accordance with Art. 28 GDPR as soon as they gain access to personal data.
-
Financial administration: Tech Expat’s external accountant processes payment and invoice data for the purposes of financial administration.
-
Legal obligations: government agencies such as the Tax and Customs Administration may request access to certain data based on a legal obligation. Tech Expat is required to comply with such requests.
8. Transfers outside the EU/EEA
Tech Expat endeavors to process personal data exclusively within the European Union and the European Economic Area (EEA). To the extent that cloud services or SaaS platforms outside the EU/EEA are used, Tech Expat ensures appropriate safeguards in accordance with Chapter V of the GDPR, such as the application of Standard Contractual Clauses approved by the European Commission.
With regard to Google Analytics, the IP anonymization setting is enabled and Tech Expat has not permitted Google to use the data obtained for other Google services. For further information, see: https://policies.google.com/privacy.
9. Security of personal data
Tech Expat takes appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction or unlawful processing. The measures taken include, among others:
-
Encrypted connections via SSL/TLS (HTTPS) on the website.
-
Access security using strong, unique passwords and two-factor authentication (2FA) for systems containing personal data.
-
Restricted access: only Tech Expat has access to the personal data of clients.
-
Regular backups of business-critical data.
-
Use of well-known and reliable platforms for the storage and processing of data.
10. Use of automated processing and AI
Tech Expat may use software tools that are partly based on artificial intelligence (AI), such as tools for analyzing and improving CVs or optimizing LinkedIn profiles. To the extent that such tools process personal data, this is done solely in support of the service and not for fully automated decision-making that has legal effects concerning the data subject within the meaning of Art. 22 GDPR.
Tech Expat retains as coach the ultimate responsibility for the advice and guidance provided at all times. Clients are informed if and to the extent that AI tools are used in the processing of their personal data.
11. Your rights as a data subject
Under the GDPR, you have the following rights with regard to your personal data:
-
Right of access (Art. 15 GDPR): you may request details of the personal data we process about you.
-
Right to rectification (Art. 16 GDPR): you may request that inaccurate or incomplete data be corrected.
-
Right to erasure / right to be forgotten (Art. 17 GDPR): you may request that your data be erased if it is no longer necessary, you withdraw your consent, or the processing is unlawful.
-
Right to restriction of processing (Art. 18 GDPR): you may request that processing be temporarily restricted.
-
Right to data portability (Art. 20 GDPR): you may request to receive your data in a commonly used and readable format.
-
Right to object (Art. 21 GDPR): you may object to processing based on legitimate interests.
-
Right to withdraw consent (Art. 7(3) GDPR): where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, you may submit a written request to info@techexpat.nl. Tech Expat will respond to your request within one month. Additional questions may be asked to verify your identity.
If you believe that Tech Expat is processing your personal data unlawfully, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at www.autoriteitpersoonsgegevens.nl.
11. Amendments to this privacy policy
Tech Expat reserves the right to amend this privacy policy. The most current version is always available at www.techexpat.nl. In the event of significant changes, active clients will be informed by email.
Tech Expat