Force Hiring Inc. is committed to the responsible handling of personal data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679. As an Amsterdam-based company operating across the European Economic Area, GDPR compliance is central to how we operate — not a box-ticking exercise.
This statement supplements our Privacy Policy with specific detail on how we fulfil our GDPR obligations, particularly as an executive search firm that processes personal data about candidates who may not have directly contacted us.
Force Hiring Inc. is the data controller for personal data processed through the Site and in connection with our services. We are registered in the Netherlands.
Contact: hello@useforce.ai
Executive search involves identifying and approaching individuals who have not directly reached out to us. Under GDPR, we rely on the legitimate interests lawful basis (Article 6(1)(f)) to process publicly available professional information — such as LinkedIn profiles, published work, or speaking engagements — for the purpose of assessing suitability for a specific executive role.
We apply a legitimate interests assessment (LIA) before processing candidate data on this basis. Our conclusion is that the legitimate interest of our clients in finding qualified leaders is balanced against the reasonable expectation of senior professionals that their publicly available professional profile may be used for career-relevant outreach.
When we contact a candidate about a specific opportunity, we identify ourselves and the purpose of the contact clearly in that first communication. We also provide the candidate with information about their rights and how to object to further processing.
If Force holds personal data about you — whether as an enquiry contact, a candidate we have approached, or a client contact — you have the following rights:
To exercise any of these rights, contact us at hello@useforce.ai. We will respond within one calendar month. In complex cases we may extend this by a further two months, and will notify you if we do.
If you have been contacted by Force as a candidate and do not wish to be contacted again, you can:
We will remove your details from our active candidate pool within 5 business days and will not contact you again unless you initiate contact yourself. We retain a minimal suppression record to ensure your objection is respected in future.
Force operates primarily within the EEA. Where we engage service providers that process data outside the EEA (for example, cloud infrastructure providers), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or transfers to countries with an adequacy decision.
Where Force processes personal data on behalf of a client (for example, processing candidate data to fill a client's role), Force acts as a data processor and the client acts as a data controller. In these cases, we enter into a Data Processing Agreement (DPA) with the client that sets out the terms under which we process data on their behalf, consistent with Article 28 GDPR.
To request a copy of our standard DPA, contact hello@useforce.ai.
If you believe Force has not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the supervisory authority in the EU member state of your habitual residence, place of work, or the place of the alleged infringement.
In the Netherlands, the supervisory authority is:
Autoriteit Persoonsgegevens
Prins Clauslaan 60, 2595 AJ Den Haag
autoriteitpersoonsgegevens.nl
We would welcome the opportunity to resolve any concern directly before you contact the supervisory authority. Please reach out to us first at hello@useforce.ai.
We review this GDPR Statement at least annually and following any significant changes to our data processing activities or applicable law. The 'last updated' date at the top of this page reflects the most recent review.