Hatch-UpHatch Up

Privacy Policy

Last updated: December 2024

1. Introduction

Hatch-Up (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

We are based in the Netherlands and comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

Information You Provide

  • Account Information: Name, email address, password when you create an account
  • Profile Information: Education details, skills, interests, bio, and phone number (optional)
  • Documents: CV/resume and profile photo you choose to upload
  • Application Data: Cover letters and application history
  • Payment Information: Processed securely through our payment provider Mollie. We do not store your payment card details.

Information Collected Automatically

  • Usage Data: Pages visited, features used, and actions taken on our platform
  • Device Information: Browser type, operating system, device type
  • Log Data: IP address, access times, and referring URLs

3. How We Use Your Information

We use your information to:

  • Provide and maintain our platform services
  • Process your internship applications
  • Connect you with potential employers (startups)
  • Process payments for premium features
  • Send you relevant notifications and updates
  • Improve our platform and user experience
  • Comply with legal obligations

4. Sharing Your Information

We share your information with:

  • Startups/Organisations: When you apply for an internship, your profile information and CV are shared with the relevant organisation
  • Service Providers: Third-party services that help us operate our platform (hosting, email, payments)
  • Legal Requirements: When required by law or to protect our rights

We do not sell your personal information to third parties for marketing purposes.

5. Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your personal data (“right to be forgotten”)
  • Restriction: Request limited processing of your data
  • Portability: Receive your data in a structured, machine-readable format
  • Object: Object to processing based on legitimate interests
  • Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at privacy@hatch-up.nl.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes:

  • Encryption of data in transit (HTTPS)
  • Secure storage with access controls
  • Regular security assessments
  • Employee training on data protection

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. We may retain certain information as required by law or for legitimate business purposes after account deletion.

8. Cookies

We use essential cookies to ensure our platform functions properly. We may also use analytics cookies to understand how users interact with our platform. You can control cookie preferences through your browser settings.

9. International Transfers

Your data may be processed by service providers located outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

10. Children's Privacy

Our platform is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on our platform and updating the “Last updated” date.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe your rights have been violated.