Privacy policy

Who is responsible

Direct Impact B.V., trading as Rising Giants, is the controller for your personal data. Questions about privacy go to jeffrey@smallgiants.nl.

Minimum age

Rising Giants is for people aged 18 and older. You can rise with us from 18. If you are younger than 18, please do not send us your details. If we find out we received details from someone under 18, we delete them.

Who this is about

• Young talent aged 18 and older who contact us about rising with us.
• Companies and their contact persons who contact us about working with young talent.
• Visitors of this website.

What we collect

• Talent: only what you send us. That is your name, your email address, your age range and what you write us. In the first contact we do not ask for your date of birth, CV, photo, BSN or health data. Please do not send them.
• Companies: your name, company, role, email address, phone number if you give it, and what you tell us about the work.
• Website visitors: technical data your browser sends, such as IP address, browser type and the pages you visit. This is needed to show the site and keep it secure.

Why we use it

• To answer you.
• To see if Rising fits you (intake).
• To match talent with work and a mentor.
• To make and carry out agreements with companies and talent, including invoicing.
• To run and secure this website.

Legal basis

• Steps you ask for before a possible agreement, and carrying out that agreement (article 6(1)(b) GDPR).
• Our legitimate interest in answering business contacts and running our business (article 6(1)(f) GDPR).
• Legal obligations, such as keeping our financial records (article 6(1)(c) GDPR).
• Your separate consent to keep you in our talent pool, or to share your details with a company (article 6(1)(a) GDPR). You can withdraw consent at any time.

Who sees it

Only the Rising Giants team. A company sees your details only after you agree to that match. We do not sell your details.

We use a small number of service providers who process data for us:

• Google (Google Workspace), for email.
• Lovable, with Cloudflare, for hosting this website.
• Google Fonts, for the fonts on this website. Your browser loads them from Google, which sees your IP address.

We only share data with these providers where it is needed for the service they provide. Some of them may process data outside the European Economic Area. Where they do, we rely on the safeguards the GDPR requires, such as the EU standard contractual clauses or the EU-US Data Privacy Framework.

How long we keep it

• If it is a no, we delete your details within 4 weeks after we tell you.
• If you give separate consent for our talent pool, we keep your details for 1 year. You can withdraw that consent at any time.
• If you rise with us, we keep your details as long as you work with us, and we delete them within 3 months after you leave, unless the law requires us to keep them longer.
• Companies: as long as we are in contact or work together, and up to 2 years after the last contact.
• Invoices and financial records: 7 years, because Dutch tax law requires it.

Cookies

This website does not use analytics, marketing or tracking cookies. Our hosting provider sets one necessary security cookie (__cf_bm, Cloudflare) that helps block bots. It expires within 30 minutes. You can block or delete cookies in your browser settings. The site may then work less well.

Automated decisions

We do not make decisions about you by automated means only. People decide.

Security

We take appropriate technical and organisational measures to protect your data against loss and unauthorised access. Access is limited to the people who need it.

Your rights

You can ask to see, correct or delete your details, to limit or object to their use, and to get them in a portable form. You can also withdraw consent at any time. Send your request to jeffrey@smallgiants.nl. We answer within one month.

Complaints

If you are not happy with how we handle your details, tell us first. You can also file a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

Changes

We may update this policy. The date below shows the latest version.