1. Who we are
CultureMatch ("we", "us", "our") is a culture matching platform operated by DeDarkRoos B.V. from Almere, the Netherlands. We help companies assess the cultural fit of candidates using AI-driven questionnaires and evaluations.
Contact: support@culturematch.nl
Address: DeDarkRoos B.V. · Enschedepad 84, 1324 GK Almere, the Netherlands · Chamber of Commerce (KvK) 92855482 · VAT NL866194939B01
2. Data we collect
Account data
When you create an account, we collect your name, email address, company name and password (stored securely using bcrypt hashing).
Culture assessment data
We collect responses to culture questionnaires completed by your employees and job applicants. This includes information about values, preferences and work style used to generate culture match scores.
Candidate data
When candidates apply through our platform, we collect their name, email address, application responses and any uploaded documents (CVs, cover letters).
Usage data
We collect standard usage analytics, including pages visited, features used and technical information such as browser type and IP address.
Culture Check
If you complete the Culture Check on this website, we process your email address, your answers and the calculated score to send you the result. Only if you opt in do we also use your address for our newsletter.
3. How we use your data
- Service delivery: Processing culture assessments, generating match scores and providing analytics.
- AI evaluation: Questionnaire responses and — for the CV scan — the contents of uploaded CVs are processed by our AI providers (OpenAI, Mistral) under data processing agreements. We never send more personal data than necessary.
- Billing: Payment processing is handled by Mollie (mollie.com). We do not store credit card details.
- Communication: Sending questionnaire invitations, application confirmations and service notifications.
- Improvement: Analysing usage patterns to improve our platform.
4. Legal basis (GDPR)
We process your data on the basis of:
- Contract: Processing necessary to provide our services (Art. 6(1)(b) GDPR).
- Legitimate interest: Analytics and service improvement (Art. 6(1)(f) GDPR).
- Consent: Marketing communications, where applicable (Art. 6(1)(a) GDPR).
5. Your rights
Under the GDPR, you have the right to:
- Access your personal data
- Rectification of inaccurate data
- Erasure of your data ("right to be forgotten")
- Portability of your data to another service
- Object to processing based on legitimate interest
- Withdraw consent at any time
To exercise any of these rights, you can contact us at support@culturematch.nl.
6. Data sharing
We share data only with:
- AI providers (OpenAI, Mistral) · questionnaire responses and, for the CV scan, CV contents for evaluation, under data processing agreements
- Mollie · payment processing
- AWS · cloud infrastructure and file storage
- Sentry · error monitoring (no personal data)
- Brevo · newsletter signups, contact-form submissions, the Culture Check and live-chat conversations from this website (EU-hosted, under a data processing agreement)
We do not sell your data to third parties.
7. Data retention
We retain your data for as long as your account is active. After account deletion, personal data is removed within 30 days. Anonymised analytics data may be retained indefinitely.
Cookies & analytics
We keep cookies to a minimum and use three categories:
- Essential: Required for the site to work, including remembering your language and cookie choice. These are always on.
- Analytics: Google Analytics 4, to understand how the site is used. Only loaded after you accept the cookie banner.
- Live chat: Brevo Conversations, so we can answer your questions. Nothing is loaded and no chat cookie is set until you open the chat yourself — the widget then remembers the conversation so you can read our reply when you come back.
You can change your choice at any time by clearing this site's cookies in your browser.
8. Cookies
We use essential cookies for the site to work (your language and cookie choice), Google Analytics 4 for anonymous usage statistics only after you accept the cookie banner, and a live-chat cookie only if you open the chat yourself. We use no advertising cookies, and you can withdraw consent at any time by clearing this site's cookies.
9. Security
We protect your data with:
- Encrypted connections (HTTPS/TLS)
- Secure password hashing (bcrypt)
- Two-factor authentication (TOTP)
- Role-based access control
- Regular security reviews
10. Changes
We may update this policy from time to time. We will notify you of material changes by email or an in-app notification.
11. Contact
For privacy-related questions or requests:
Email: support@culturematch.nl
Address: DeDarkRoos B.V. · Enschedepad 84, 1324 GK Almere, the Netherlands · Chamber of Commerce (KvK) 92855482 · VAT NL866194939B01