Privacy notice
Welcome to Elefy; social mobility company.
When you visit our website, apply for a job or when you contact us, personal data may be processed. In this privacy statement you can read everything about how we handle your personal data. We keep and deliver our promises!
General
We only process personal data if there is a valid reason to do so. Under Dutch and EU GDPR law (AVG), there are a number of reasons, called “bases”, that justify the processing of personal data. The bases we use when processing personal data are:
Consent
Execution of agreement
Legal obligation
Legitimate interest
Elefy Holding Group b.v. is the controller under the GDPR and therefore responsible for the processing of your personal data. This concerns personal data of every user and/or visitor to our website: www.elefy.io.
What information do we collect and why?
This privacy notice shows how we use data of our users. The personal data processed by Elefy include:
The data provided by you when contacting us, such as name, (e-mail) address, telephone number;
Contact details and personal information stated in your resumé, when applying for a job with us;
The data collected via cookies. We will use the personal information we collect through our websites to administer and improve our websites, for internal operations, including troubleshooting, data analysis, testing, statistical and survey purposes. Read more about this in the cookie notice.
Legal basis
Elefy processes personal data on the basis of the execution of the agreement, the legitimate interest, a legal obligation or permission. Consent can be withdrawn at any time.
Examples for each data collection method are provided below:
Data collection method | Legal basis | Explanation |
|---|---|---|
Cookies | Legitimate Interest | The Elefy website uses cookies to track website performance, improve user experience, and gather statistics for data analysis. The legal basis for processing this data is legitimate interest. Elefy has a legitimate interest in analyzing user behavior on the website to enhance its services and optimize the website’s performance. |
Cookies | Consent | Elefy processes personal data collected via cookies based on your consent. By using the website and accepting the cookie banner, you provides Elefy with your explicit consent to process certain information through cookies. |
Resumés (job applications) | Execution of Agreement | When you submit your resumé for job applications, Elefy processes this data as part of the employment agreement process. The legal basis for processing this data is the execution of the agreement between Elefy and you, as the data is necessary to assess your suitability for the position and proceed with the hiring process. |
Resumés (job applications) | Consent | When you submit a job application (resumé) through the website, Elefy processes your personal data based on your consent. By submitting your resumé and agreeing to this cookie policy, you give us permission to process the information provided for recruitment purposes. |
Contact forms | Consent | When you contact Elefy through contact forms on the website, you provide your personal information such as name, email address, and telephone number. The legal basis for processing this data is consent, as you voluntarily provide your information to get in touch with Elefy. |
Contact forms | Legitimate Interest | When you contact Elefy through the website’s contact forms, Elefy processes the personal data you provide based on Elefy’s legitimate interest in responding to your inquiries. Elefy’s aim is to provide you with information and support related to Elefy’s services. |
Retention periods
Elefy does not store personal data for longer than necessary. We will not process your data longer than 24 months from your last visit to the website, unless Elefy is obliged to keep personal data for longer on the basis of a legal obligation. Marketing data is not stored for longer than 24 months. Resumés are stored for 12 months (with consent) and removed after that period.
User rights
We ensure that your rights under the GDPR are guaranteed. You can request to change, move, add or delete your data (unless a legal obligation dictates otherwise). Below we explain them:
Data subject rights
to change or delete data that you have shared with us, or to gain access to your personal data that Elefy processes, you can submit a data subject request by sending an e-mail to hello@Elefy.io.
Direct marketing
to stop receiving newsletters from us, you can always unsubscribe from marketing communications via the link in the newsletter.
Cookies
withdraw your cookie consent or change your cookie preferences at any time. Please refer to our Cookie Policy at https://elefy.io/cookie-policy/ for more details.
Data security
Elefy has taken appropriate technical and organizational measures to protect users’ personal data against loss or unlawful processing, including the use of an SSL connection and encrypted storage of the data.
Whom we share your data with
Our companies
Our headquarter is based in the Netherlands, in the European Union. To provide support to our users and to support our global marketing activities, data may be shared with our companies outside the EU. We ensure that the correct protective measures are taken to protect this personal data.
Processors
We work with vendors to perform tasks on our behalf. We have concluded the correct data processing agreements with (sub) processors and take reasonable steps to ensure they have appropriate data privacy and security measures in place.
In the event that (sub) processors are based outside the EU, we will comply with the model clauses of the European Commission.
Below you can read about the organisations Elefy Holding Group b.v. shares personal data with.
Domain hosting via Vokus b.v.
We purchase web hosting and e-mail services from Vokus b.v.. Vokus b.v. processes personal details on our behalf and does not use your details for its own purposes. However, this party may collect metadata on the use of the services. This is not personal data. Vokus b.v. has implemented appropriate technical and organisational measures to prevent the loss and unauthorised use of your personal data. Vokus b.v. is bound to confidentiality by virtue of the agreement.
CCPA Sale of Information
We do not sell your data for monetary consideration.
Data Subject Rights
As a user and data subject, you have certain rights under the General Data Protection Regulation (GDPR) that provide you with control over your personal data. We are committed to respecting and fulfilling these rights. Below are the key data subject rights you can exercise:
Right to Access: You have the right to request access to the personal data we hold about you. If you want to know what personal information we have collected and processed, please submit a data subject request by sending an email to hello@elefy.io.
Right to Rectification: If you believe that the personal data we hold about you is inaccurate or incomplete, you have the right to request corrections or updates. To exercise this right, please contact us at hello@elefy.io.
Right to Erasure (Right to be Forgotten): You have the right to request the erasure of your personal data under certain circumstances. To request the deletion of your data, please reach out to us at hello@elefy.io.
Right to Restriction of Processing: You can request the restriction of processing your personal data if you contest its accuracy, the processing is unlawful, or we no longer need the data, but you require it for legal claims. To exercise this right, please contact us at hello@elefy.io.
Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and you may request us to transmit this data to another data controller. To make a data portability request, please contact us at hello@elefy.io.
Right to Object: You have the right to object to the processing of your personal data for certain reasons, such as direct marketing or processing based on legitimate interests. To object to specific data processing activities, please contact us at hello@elefy.io.
Exercising Your Rights:
To exercise any of the rights mentioned above, or if you have any questions or concerns about the processing of your personal data, please contact us at [email address]. We will respond to your request without undue delay and no later than one month from the receipt of your request. However, in certain cases, we may need to verify your identity or ask for additional information to process your request effectively.
Please note that there may be circumstances where we are legally permitted or required to retain your personal data even if you exercise your rights to erasure or objection. In such cases, we will inform you accordingly.
Complaints:
If you believe that your data protection rights have been violated or if you are not satisfied with our response to your requests, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.
We are committed to protecting your privacy and handling your personal data in a transparent and responsible manner. For more information on how we process and protect your personal data, please refer to our Privacy Policy.
Information about Data Transfers Outside the EU
At Elefy, we may share your personal data with companies located outside the European Union to provide support and facilitate our global marketing activities. We want to assure you that when transferring your data, we take appropriate measures to safeguard your privacy and ensure compliance with data protection laws.
Protective Measures:
To protect your personal data during such transfers, we implement suitable safeguards, which may include the use of Standard Contractual Clauses approved by the European Commission. These contractual clauses ensure that the receiving companies outside the EU adhere to the same data protection standards as required by the General Data Protection Regulation (GDPR).
Legal Basis:
The legal basis for transferring personal data to companies outside the EU may vary depending on the specific circumstances of the transfer. In some cases, the transfer may be necessary for the performance of a contract with you or for pre-contractual arrangements at your request. In other instances, the transfer may be based on your explicit consent or may be required to comply with legal obligations.
Please rest assured that we are committed to maintaining the confidentiality and security of your personal data, regardless of where it is processed. If you have any questions or concerns about data transfers outside the EU or any other aspect of our privacy practices, please don’t hesitate to contact us at hello@Elefy.io.
Contact Data
Do you have a complaint about the processing of your personal data by Elefy? Let us know and we can try to work it out together. It is also possible to submit a complaint to the Dutch Data Protection Authority via www.autoriteitpersoonsgegevens.nl. This statement may change in the future. We therefore recommend that you continue to consult this privacy policy on a regular basis.
Our data are:
Elefy b.v.
HQ
De Graaflaan 19
1261 WR Blaricum
The Netherlands
T +31 (0)6 1562 6301
E hello@Elefy.io
Changes
Changes to this privacy statement will be published on the website. This privacy statement was last amended on March 30, 2025.