Version March - 2026

1. Introduction

1.1 Who we are
This website (https://schubergphilis.com/) is owned and operated by Schuberg Philis B.V. Rooted in the Netherlands, Schuberg Philis empowers organizations to create and sustain business value through technology. We deliver IT solutions with a 100% impact on the areas most critical to our customers’ operations, supporting them in achieving mission-critical transformations with our deep expertise and commitment.

We have our registered offices in:

Offices:	Locations:
Schiphol-Rijk	Boeingavenue 271, 1119 PD Schiphol-Rijk
Rotterdam	Oostmaaslaan 53-71, 3063 AN Rotterdam
Den Bosch	Reitscheweg 1-25, 5232 BX 's-Hertogenbosch

1.2 Applicable law(s) and definitions

For this website and its features, Schuberg Philis processes personal data of website visitors, job applicants, and people who subscribe to our newsletter, events, or downloadable content. In this privacy statement, we refer to anyone whose personal data we process as “you.”

To help you understand the terms and definitions we use in this privacy statement, we have included a explanations section below. If you have any questions about these definitions, please refer to Section 6: Our Contact Details.

Schuberg Philis B.V. (“Schuberg Philis”, “SBP”, “we” or “us”) is responsible as the data controller for the processing of your personal data, in compliance with the General Data Protection Regulation (GDPR). As a data controller, we are legally required to handle your data responsibly and to implement appropriate technical and organizational measures to ensure your data is processed securely and transparently.

You have several rights under the GDPR to help protect your personal data. We will explain your rights in more detail in Section 3: Privacy Rights.

We may update this Privacy Statement occasionally, for example when we introduce new website features, use different cookies, or comply with new laws and regulations. We will inform you if there are any significant changes.

Terms and definitions

Applicable law(s) / GDPR: The General Data Protection Regulation (GDPR) is the European privacy law that applies to companies based in Europe. In the Netherlands, it is known as the “Algemene Verordening Gegevensbescherming” (AVG).

Personal data: Personal data is any information that can be used on its own or with other information to identify a natural person. Examples include a name, address, contact details, or identification numbers such as a Social Security Number (SSN/BSN).

Controller: The controller is the organization (in this case, Schuberg Philis) that determines how and why personal data is processed and is responsible for ensuring the processing complies with the GDPR.

Data subject: The data subject is the individual whose personal data is being processed. This means you, as the person who provides your data to us. You also have a role in keeping your personal data accurate and up to date.

Consent: Consent means you give clear and explicit permission for us to process your personal data. You have the right to withdraw your consent at any time.

Devices: Devices include all types of equipment you might use to access our website, such as computers, smartphones, tablets, and other internet-enabled devices.

2. Use of Personal data

For the purpose of this website (marketing, sales and recruitment), we rely on explicit consent as a lawful basis for processing your personal data under the GDPR. To find out more about our specific processing activities and use-cases, please refer to the relevant sections of this statement:

Purpose	Section
We use your personal data to send you relevant marketing materials, analyze your engagement, and identify potential sales leads.	Marketing and Sales
We use your personal data to process and evaluate your job application, communicate with you about the recruitment process, and, where relevant, consider you for future opportunities.	Recruitment

2.1 Marketing and Sales
At Schuberg Philis, we keep you informed about our latest services, solutions, events, and insights, and we use your personal data to support our broader marketing and sales activities. You can share your details with us in several ways: for example, when you download content from our website (such as whitepapers or on-demand webinars), register for an event, subscribe to our newsletter, contact us via a web form, or interact with our marketing campaigns.

Depending on how you interact with us, we may collect the following personal data:

Your name

Your title or function

Your email address and other contact details

Company name, industry, and country

Your professional interests and preferences (for example, topics, solutions, or types of events you are interested in)

Information about your interactions with our marketing (such as downloads, event attendance, or responses to campaigns)

To help us improve our marketing and ensure it is relevant and valuable to you, we may also collect data on how you interact with our communications and content, such as:

Whether you open our emails

Whether you click on links in our emails or online campaigns

Which web pages, downloads, or topics generate engagement

This information helps us measure and improve the effectiveness of our marketing and identify potential interest in our services.

How do we use your data?
We use your information exclusively to:

Send you marketing communications you have requested or that may reasonably be relevant to your role, such as newsletters, whitepapers, invitations, and product or service updates

Tailor our content, invitations, and offerings to your professional interests and the needs of your organization

Analyze and improve the quality, effectiveness, and relevance of our marketing activities and digital channels

Identify and qualify potential sales leads and, where appropriate, contact you or your organization about our services

Where required by law, we will only send you electronic marketing communications with your consent, and you can withdraw that consent or opt out at any time.

How long do we keep your data?
We will retain your marketing interaction data (such as email opens, clicks, downloads, and campaign responses) for up to two calendar years from your last meaningful interaction with us. After this period, we delete or anonymize these marketing interaction records.

If you withdraw your consent or object to receiving marketing, we will stop sending you marketing communications and remove you from our active mailing lists. We may still retain your contact and lead data in our CRM system (such as your name, role, company, email address, and sales-related notes) for legitimate business purposes (for example, account management, contract performance, or record-keeping) and to ensure we respect your opt-out from marketing.

Third-party tools
To manage our marketing and sales activities and measure their effectiveness, we use several thirdparty tools, including:

Microsoft Dynamics 365 Sales and Microsoft Dynamics 365 Customer Insights – Journeys as our CRM and marketing automation tools, to store and manage contact details, preferences, and interactions; to build segments and journeys; to assess interest in particular topics based on interactions; and to send marketing communications in line with your choices.

Clay.com to enrich and maintain the accuracy and completeness of our lead and contact data, using business information from publicly available or licensed sources, so that we can better understand your role, organization, and preferred language.

LinkedIn Tag Manager and similar tools to understand how our campaigns perform and how visitors reach our website through advertisements or posts on social media platforms.

These tools may process your personal data on our behalf to support campaign execution, interaction tracking, intent assessment, and reporting. We have data processing agreements in place with these providers that require them to protect your personal data and to process it only in accordance with our instructions and applicable data protection laws. We do not use these tools to carry out automated decisionmaking that produces legal or similarly significant effects on you.

2.1.1 Cookies
Our website uses cookies. Cookies are small text files that are stored on your device (such as your computer or smartphone) when you visit our website. These files help remember your preferences and make our website work better for you. Cookies can also help us—and in some cases third parties—understand how visitors use our website. This insight allows us to improve your browsing experience and the overall performance of our website. Below, we explain which cookies we use, what they do, and why we use them.

Cookie type	Purpose of the cookie	Activation
Functional	Functional cookies are essential for our website to work properly and to provide you with core features, such as navigating pages and remembering your preferences (including your cookie choices). Because these cookies are necessary for our website to function, they are always enabled and cannot be turned off using our cookie settings tool.	Enabled
Analytical	Analytical cookies help us understand how visitors use our website by collecting and reporting information, such as which pages are visited most often. These cookies allow us to generate user statistics in a privacy-friendly way, so we can improve the quality, effectiveness, and user-friendliness of our website, products, and services. We take steps to protect your privacy while using these cookies, following the guidelines of data protection authorities.	Enabled
Tracking & Advertising	Tracking or advertising cookies are used to show you advertisements that are relevant to you, both on our website and on third-party websites, including social media platforms. These cookies track your browsing behavior and interests to help tailor ads to your preferences. They also help us see which ads you have viewed or clicked, how you interact with our website after arriving via a marketing campaign (for example, which pages you visit), and how you behave around key actions such as submitting a form, so we can analyze the success of our campaigns and avoid showing you the same or irrelevant advertisements repeatedly.	Enabled
Social media	Social media cookies make it easy for you to view videos and other content from third-party social media providers on our website, as well as share our content on your own social media accounts. If you do not accept these cookies, you may not be able to access or share social media content directly from our site. These cookies are set and accessed by the respective third parties, who may use them to track your browsing behavior across our website and others. Please note that we do not control these cookies or how third parties use the data they collect.	Enabled

What our cookies are doing

We use functional and analytical cookies to help us understand how visitors interact with our website, so that we can improve its quality and user experience. These cookies allow us to remember your preferences, track general trends, and see how visitors navigate our site. This information helps us count website visits, identify popular content, and learn how visitors use our services. We also use social media cookies to understand how users find our website through advertisements on social media platforms and to optimize our marketing campaigns.

Our website may use “third-party” cookies, which are set by external providers who deliver services on behalf of Schuberg Philis. The table below shows which web tracking cookies are used on our website.

Every cookie has a specific validity period, starting from when it is stored on your device. Depending on the type of cookie, it may be renewed automatically if you visit the website again. Once the validity period ends, your browser will delete the cookie automatically. Please see the table below for details on the validity periods for each type of cookie we use.

Cookie provider	Purpose of the cookie	Retention
Google analytics	To perform an analysis on visitor statistics (anonymous data about the number of website visitors, where the visitor was referred from, and which pages are popular).	30 days
Dynamics 365 Customer Insights - Journeys	To track your web behavior (such as pages visited and clicks) over a 365‑day period and link this activity to your contact or lead in our CRM, so we can see how you personally interact with our website, create more personalized experiences based on your behavior and preferences, and analyze these interactions in our reports.	365 days
LinkedIn	To optimize advertisement campaigns on LinkedIn, by determining how LinkedIn users find our website through advertisements displayed on the platform.	30 days

What data do we collect with our cookies?

With cookies and log files, we collect the following information:

Language settings

Web pages and downloads you have requested

IP address (with the last digit groups anonymized to limit traceability)

User agent information (such as your browser and operating system)

Device details (type and brand)

General location (based on anonymized IP address)

Search terms used to find our website through external search engines

Referring links (the websites or links you used to get to our website)

Pages visited within our website (to help us understand which content is most popular)

We collect this data to analyze website usage and improve your experience, while protecting your privacy as much as possible.

Your consent

By using the Schuberg Philis website, you agree to the placement of functional and analytical cookies in your web browser for the purposes described in this statement. These cookies are used for statistical and site improvement purposes that, in line with legal guidelines, do not require explicit consent. We do not use any personal data collected through cookies for any purpose other than those specified in the table above.

For cookies that require your explicit consent, such as social media or advertising cookies, you will be presented with a separate choice and can accept or decline these cookies at any time through our cookie settings tool.

Most browsers accept cookies automatically, but you can change your browser settings to refuse cookies or to alert you when cookies are placed. Please note that if you decline certain cookies, some features or services on our website may not work properly.

2.2 Recruitment
We appreciate your interest in working at Schuberg Philis. When you apply for a job with us, we collect and process your personal data as part of our recruitment process. We do this to:

Identify and verify applicants and their skills.

Build a talent pool of potential future colleagues.

Recruit new employees and assess their suitability for open positions.

How we use your personal data

We may use your personal data to:

Review your suitability for current and future job openings.

Communicate with you about your application and our recruitment process.

Provide relevant information to interviewers so they can prepare for your interview.

Establish and maintain an employment relationship if you are hired.

Complete necessary administrative tasks related to your application or employment.

Improve our recruitment and application process.

Which personal data do we collect

When you apply for a job, you typically provide us with:

Full name (first and last)

Email address

Phone number

City and country of residence

Resume (CV)

Cover letter

We may also receive information about you from other sources, such as:

Publicly available information (e.g. from public databases, blogs, or social media, in line with applicable law)

Details from any previous applications or employment with Schuberg Philis

References or information shared by Schuberg Philis employees

Please note that any additional personal data you include in your resume or cover letter is provided voluntarily, as we only specifically request the information listed above in our application form.

As you are moving through the recruitment (and possible onboarding) process, we may ask you for further personal information if necessary. We will only request information that is needed for the purposes explained above and will never ask for more than is required.

We use Greenhouse Recruiting as our applicant tracking system. Within Greenhouse, certain AI-supported features (such as parsing information from applications to support candidate review and organizing administrative workflow tasks) may be used to help our team process applications more efficiently. These AI-features are used as decision-support tools only and do not make automated decisions about candidates; all decisions about advancing, rejecting or otherwise assessing applicants are made by human recruiters and hiring managers. Because Greenhouse’s AI functionality does not make automated decisions with legal or similarly significant effects, it does not constitute automated decision-making under GDPR Article 22. Greenhouse acts on our instructions as a data processor and its AI features operate under the same privacy and data protection commitments described in its documentation, with human oversight required for all hiring outcomes.

Your consent

By applying for a job with Schuberg Philis, you give us your consent to process your personal data for recruitment purposes as described in this privacy statement (see Section 2.1). You may withdraw your consent at any time, as explained in Section 3 (Privacy Rights) and Section 6 (Our Contact Details). Please note that if you withdraw your consent or do not wish for us to process your personal information, we will not be able to consider your application for employment.

3. Your privacy rights

3.1 Your rights under the GDPR

As a data subject, you have several rights under the General Data Protection Regulation (GDPR). These rights ensure your personal data is handled fairly, transparently, and securely. Your rights include:

Your right	What this means for you
Right to transparency	You have the right to clear and understandable information about how your personal data is processed. We will always explain, in plain language, what data we collect and why.
Right to access	You can request to know if and how we process your personal data, for what purposes, and with whom it is shared. We will let you know what information we hold about you.
Right to rectification	You can ask us to correct or update any inaccurate or incomplete personal data we have about you.
Right to erasure	You have the right to request deletion of your personal data (“the right to be forgotten”). We will delete your data unless we are legally required to keep it.
Right to restriction	You can request us to limit how we use your personal data, for example if you contest its accuracy or how it is being used.
Right to object	You can object to us processing your personal data for certain purposes, such as direct marketing. Unless we have compelling reasons to continue, we will stop the relevant processing.

Please note: Some rights may not apply in all situations. We will always review your request and inform you of our decision, including any legal reasons preventing full compliance.

3.1 How to exercise your rights

If you wish to exercise any of your privacy rights, or if you have questions or concerns about how we handle your personal data, please contact us in one of the following ways:

Speak to your contact person at Schuberg Philis.

Use the ‘Contact’ link at the bottom of our website.

Email our Data Protection Officer (DPO) at dpo@schubergphilis.com.
For full contact details, see section 6 below

Data protection and Transfer

Security

We take all reasonable and appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or misuse. The security and privacy management systems of Schuberg Philis are certified according to ISO 27001 (information security), ISO 27701 (privacy information management), and ISO 27018 (protection of PII in the cloud). This means that the Schuberg Philis website and all processing of personal data connected to this website are conducted in line with these internationally recognized standards for information security and data protection. Access to your personal data is restricted to employees and trusted third parties who need this information to fulfill their job responsibilities and who are bound by confidentiality.

Retention

We only keep your personal data for as long as necessary to fulfill the purposes for which it was collected, as described in section 2. Here are our main retention periods:

Talent & Careers: Your data will be retained for one calendar year. We will ask for your explicit consent if we wish to keep your data longer, for example, to inform you of future job opportunities. If you withdraw consent, your data will be deleted.

Newsletter: Your data will be retained for two calendar years. We will ask for your explicit consent if we wish to keep your data longer. If you withdraw consent, your data will be deleted. Your data will be deleted upon your request to unsubscribe. This option is available under each e-mail.

Cookies: Cookies are generally stored for no more than 30 days in your browser.

International data transfer

Your personal data may be transferred to, and processed in, countries outside the European Union that may not provide the same level of data protection. In such cases, Schuberg Philis ensures that appropriate safeguards are in place, such as contractual clauses, to protect your personal data in line with the GDPR.

Changes to this privacy statement

We may update this Privacy Statement as our business, website, or regulatory requirements change. The date of the latest update is shown at the top of this statement. For any significant or impactful changes (such as using your personal data for new purposes), we will inform you in advance whenever possible.

Our contact details

If you have any questions, concerns, or complaints about how we process your personal data, please contact our Data Protection Officer at dpo@schubergphilis.com . All questions and complaints will be investigated, and we are committed to resolving them in line with our policies and your rights as a data subject.