Privacy Policy

Privacy Statement - Zest for Work

Zest for Work, located at Kastanjelaan 400, 5616 LZ Eindhoven, The Netherlands, is responsible for the processing of personal data as described in this privacy statement.

Contact details

Website: https://www.zestforwork.com
Address: Kastanjelaan 400, 5616 LZ Eindhoven, The Netherlands
Phone: +31 40 798 7332
Email: info@zestforwork.com

Security Officer: Yvon (reachable via info@zestforwork.com)

Applicability of the GDPR

Zest for Work applies the General Data Protection Regulation (GDPR) as the legal framework for processing personal data. Where applicable, we also comply with relevant local data protection laws outside the EU/EEA.

Personal data we process

Zest for Work processes your personal data because you use our services and/or because you provide this information to us. The categories of personal data we may process include:

• First and last name
• Gender / Sex
• Date of birth
• Place of birth (if collected)
• Address details
• Telephone number
• Email address
• Bank account or payment details (where applicable)
• Location data
• Internet browser and device type
• Data about your activities on our website
• Data concerning your browsing behavior across different websites (e.g. for analytics/advertising)
• Other personal data you actively provide, for example when creating a profile, in correspondence, or by telephone

Special and/or sensitive personal data

Our services do not intend to collect data from individuals under the age of 16 unless parental or guardian consent is provided. We recommend that parents monitor the online activities of minors. If you believe we have collected personal data about a child under 16 without consent, please contact us at info@zestforwork.com. We will promptly delete any such data.

In specific contexts (e.g. coaching, trainings or assessments), you may voluntarily provide sensitive personal data—such as health information. We process these data only when you explicitly provide them and only for the agreed purposes.

Purposes of processing personal data

We process your personal data for the following purposes:

• To enable you to create and manage a user account (e.g. assessment tool, learning platform)
• To process payments and invoices
• To send newsletters or promotional materials (with consent)
• To contact you if necessary for service provision
• To inform you of changes to our services and products
• To deliver goods and services to you
• To analyze your use of our website in order to improve our services and tailor products to your preferences
• To comply with legal obligations (e.g. tax reporting, VDAB requirements)

How long do we store personal data

Zest for Work does not store your personal data longer than is strictly necessary to achieve the purposes for which it was collected, unless a longer retention period is required by law.

We apply the following retention periods:

• Information needed for coaching sessions: 10 years.

For coaching sessions under the VDAB career checks, we are legally obliged to retain all data for 10 years. Reports of other coaching programs are also stored for 10 years.

• Financial administration data (e.g. name, address, bank account number): 7 years.

Required by Dutch tax law.

• Data stored when you contact us via e-mail, Facebook or LinkedIn: 6 months.

If you contact us but do not make use of our services, this data will be deleted after a maximum of 6 months.

• Data you leave behind when visiting our website (including cookies): up to 3 years.

Used for improving and optimising the website and our services.

When retention periods have expired or the data is no longer required, it will be securely deleted or anonymized.

Sharing personal data with third parties

Zest for Work shares your personal data with third parties only when this is necessary to provide our services, to meet legal obligations, or to use software that is essential for our business operations. Examples include:

• Execution of the agreement, for instance when passing on an assignment to another coach or trainer.
• Legal obligations, such as reporting to VDAB or the Tax Office.
• Business operations, such as hosting, CRM systems, or accounting software.

With companies that process your data on our behalf, we conclude a processor agreement to ensure an appropriate level of security and confidentiality. Zest for Work remains responsible for these processing activities. We only share your data with other third parties if you have given explicit consent.

Current third parties include (non-exhaustive, updated regularly):

• Tax Office – complying with tax obligations – customer invoice data.
• Alissome & VDAB – legal obligation – personal data, contracts, LBC documents, POPs, evaluations.
• OneDrive / MS Office – saving, managing, and processing documents – all data provided by the client.
• Hosting provider – website and email – data submitted through website or email.
• Zoho – CRM system, marketing and communication – name, email address, communication preferences.
• Craft – website CMS – data submitted through website forms.
• Google Analytics / Google Tag Manager – analyzing website usage – website behavior, anonymized IP, browser/device data.
• Foxit Phantom (PDF editor) – execution of services (e.g. reading assessment results) – data provided by the client.
• Survey by TalentLogiQs (assessment tool) – execution of services – name, date of birth, email, position, and other assessment data.
• Learningstone (online learning platform) - execution of services – name, email, position, and other assessment data.
• Cijfersenzo (accounting support) – invoicing and financial administration – name, address, IBAN, VAT number (if applicable).
• Dropbox – sharing documents with Alissome/VDAB – personal data, contracts, LBC documents, POPs, evaluations.
• ICF (International Coach Federation) – accreditation requirement – coaching hour log.
• Moneybird (accounting system) – invoicing and financial administration – name, address, IBAN, VAT number (if applicable).

Where these parties are located outside the European Economic Area (EEA), Zest for Work ensures appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses (SCCs) and other GDPR-compliant measures.

This list may be updated over time. Any changes will be reflected in this privacy statement.

Cookies or similar technologies

Zest for Work uses functional, analytical, and tracking cookies. At your first visit, you were informed about the use of cookies and asked for consent. You can review our Cookie Policy here.

Your rights

You have the right to:

• Access your personal data
• Correct or delete your personal data
• Withdraw your consent for data processing
• Object to the processing of your personal data
• Request data portability (receive the data in a machine-readable format)

Requests can be sent to info@zestforwork.com. To verify your identity, we may ask for a copy of your ID with personal details (photo, MRZ, passport number, BSN) blacked out. We respond within four weeks, as required by law.

Complaints

You also have the right to file a complaint with the data protection authority in the country where you live, work, or where you believe an infringement of data protection laws has taken place.

For users in the Netherlands, this is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons

Security of personal data

Zest for Work takes the protection of your data seriously and implements organizational, technical, and physical security measures to prevent misuse, loss, unauthorized access, disclosure, or alteration. If you suspect that your data has been compromised, please contact our Security Officer Yvon via info@zestforwork.com.