Privacy Notice

1. Controller

KB Consulting BV (trade name Rivant), BCE/KBO 1010.283.011, VAT BE1010.283.011, registered office Ierse-Predikherenstraat 23, 3000 Leuven, Belgium.

Privacy contact: info@rivant.be. You can also use the Interest Drop form on this website and mark your message as a privacy request.

2. Data We Process

• Identity and contact data you submit (name, email, phone).
• Professional data (CV/PDF, LinkedIn URL, language notes, VAT/enterprise number where provided).
• Vacancy reference if you apply from a specific role page.
• Technical security metadata (approximate IP and request metadata) for anti-spam and abuse prevention.

Please do not include special-category data in your CV or form fields (for example health, political opinions, trade-union membership, or biometric data) unless we explicitly ask for it for a lawful reason.

3. Purposes and Legal Bases (GDPR Art. 6)

• Recruitment matching and follow-up — steps prior to entering a contract at your request / pre-contractual measures (Art. 6(1)(b)), and our legitimate interest in matching freelancers to client mandates (Art. 6(1)(f)).
• Security, anti-spam, and rate limiting — legitimate interests in protecting the service and candidates (Art. 6(1)(f)).
• Legal/accounting retention where required — legal obligation (Art. 6(1)(c)).

We do not use your data for automated decision-making that produces legal or similarly significant effects.

4. Recipients and Processors

Access is limited to authorized staff of KB Consulting BV. We use processors for hosting and storage. Current processors include:

• Vercel Inc. — website hosting and application delivery.
• Supabase — database and private CV file storage.
• Resend — email delivery of application notifications, only when email forwarding is configured.

Candidate data may be shared with a prospective client organization only where relevant to a specific role match, under confidentiality and need-to-know principles.

5. Retention

Candidate profile records and CVs are retained for up to 24 months after last meaningful contact, unless a longer period is legally required, or you request earlier deletion (and no overriding legal duty applies).

6. International Transfers

Our preference is EEA processing where available. Some processors may process data in or from countries outside the EEA (including the United States). Where that happens, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and, where applicable, additional technical/organizational measures.

7. Your Rights

Under GDPR you may request access, rectification, erasure, restriction, portability, and objection (including to processing based on legitimate interests), subject to legal limits.

You may lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit) or another competent EU supervisory authority.

8. Security

We apply measures appropriate to the risk: private CV storage, server-side access controls, TLS in transit, honeypot and rate limiting on intake, and least-privilege operational access. No security measure is absolute.

9. Cookies

Cookie and similar-technology details are described in the Cookie Notice.