Security and confidentiality

Safety precautions

We have developed security measures that are technically and organisationally adapted to prevent the destruction, loss, falsification, alteration, unauthorised access or the inadvertent communication to third parties of personal data collected, as well as any other unauthorised processing of such data.

Technical measures:

• The servers are equipped with a firewall
• The servers are only accessible with an admin login via the network of our IT and cloud provider Tobania NV.
• The websites are secured with a TLS1.3 certificate (GlobalSign) and all http traffic is redirected to https.
• Encryption of e-mails and passwords
• Encryption of all personal data
• Secure backups and secure cloud environment
• Cloud environment with authorisation management: (partial) access to data is restricted to specific persons.
• Logging of consultation, addition, editing and deletion of data
• Virus scanner and SPAM filter on PCs
• The data centre, which is located on Belgian territory, is equipped with all physical security measures and complies with the ISO27001 standard and with Tier 3 certification.
   

Organisational measures:

• Incident management by our quality service
• Employees and trainees sign a declaration of confidentiality and receive a document with practical guidelines
• Training of our own employees
• Privacy Policy for our own employees
• Privacy policy for candidates, clients and suppliers published on the website
• Passwords on PCs and automatic time-out with login requirement
• Clean desk policy for assessors
• Physical access security: alarm system, storage of data carriers in locked rooms, printers and photocopiers in confined rooms, escorting of visitors in the office.
• Visitors can connect with internet via a specific guest login, shielded from the network for our internal operations.
• Confidential data on paper are stored separately and are periodically picked up and destroyed with certificate by a specialized organization
• Confidential data on paper that do not need to be stored are immediately destroyed with a paper shredder.
• Access to the data center is strictly controlled through identity checks and maintenance work must be scheduled in advance. Some maintenance operations also require licenses and specific data center safety regulations. In terms of software, the development team only has a scrambled database at its disposal, to protect privacy-sensitive information.
   

Legal context

This privacy statement relates to the law of 8 December 1992 on the protection of privacy with regard to the processing of personal data, the law of 11 December 1998, and the Royal Decree of 13 February 2001 (Belgium) and to the General Data Protection Regulation (GDPR) of May 2016.

The database of candidates of Search & Selection is registered in Belgium with the privacy commission under number HM00013757.

Search & Selection is a recruitment and selection agency recognised by the Belgian regional authorities.

Search & Selection is a founding member of the Federation of Recruitment and Selection Agencies (Federgon, RS&S), to which we subscribe the code of ethics and the quality charter, and with which we are certified for the RSS Quality Label. More information about this Federation and its mission can be found here.

Changes to our privacy policy will be published on this page.

Our privacy policy