Privacy statement.

The Dutch and English versions of this statement have the same content. If you have a question about either version, please contact us.

Who we are

SOMA Internationals is one of the six specialisms of SOMA Group, a group of companies in Limburg, the Netherlands: SOMA Works, SOMA Internationals, SOMA Academy, SOMA Professionals, SOMA Vakmeesters and SOMA Personeelsdiensten. Different companies operate under these names.

The controller for this website and its forms is SOMA Works B.V., Amerikalaan 1, 6199 AE Maastricht-Airport, the Netherlands, phone +31 43 362 16 62, email info@somaworks.nl. In this statement this is called “SOMA” or “we”.

How do the SOMA companies work together?

If your question fits better with another SOMA specialism, we pass your data on to the SOMA company that can help you further. That company only uses your data for your question and from then on is itself responsible for what it does with it. That company also follows this statement.

What data do we collect?

We only collect what you fill in or send us yourself. Per form, that is:

• Asking a question or requesting a call: your name, phone number and/or email address, your company if you give it, who you are (for example an employer) and your question.
• Call me back: your phone number and who you would like to call you back. We do not ask for your name here.

With every form we also store the page and language you sent it from, so we know what your question is about.

If you are looking for work through SOMA Internationals

• What we receive: your name, phone number, your email address if you give it, and what you tell us about your trade, your experience and the work you are looking for.
• What for: to talk with you about work in the Netherlands, find suitable work for you and prepare your start, such as travel, housing and paperwork.
• Legal basis: steps you ask us to take before an employment contract is concluded (GDPR Art. 6(1)(b)).
• Who sees it: the people at SOMA who help you. You usually start work through SOMA Works or SOMA Professionals; they receive your data for that purpose.
• How long: as for questions and requests, see the retention periods below. If you start work through SOMA, your data moves to your personnel file.

Only include what is necessary in your message. Through this website we do not need your citizen service number (BSN), passport number, a copy of your ID, your date of birth, a passport photo or health information. What we need later for a contract or paperwork, we will ask for ourselves, in a secure way.

When you visit the website. To show the website and protect it against misuse, our hosting provider Cloudflare processes technical data such as your IP address, browser type and the time of your visit. We do not use this data to track or recognise you.

When you call, email or use WhatsApp. The website shows the phone number and WhatsApp button of our point of contact and our email address. If you contact us this way, we receive your phone number or email address, your name if you give it, and what you tell or send us.

What do we use your data for, and on what basis?

The law requires a legal basis for every purpose. These are ours:

Purpose	Legal basis (GDPR Art. 6(1))
Answering your question or request and calling you back	Legitimate interest: you ask us to contact you, and we want to help you properly (point f). If it concerns an assignment you want, also: steps you request before a contract is concluded (point b).
Passing your question to the SOMA specialism that can help you further	Legitimate interest: this way you reach the right people (point f).
Keeping data we are legally required to keep, for example if an assignment follows	Legal obligation (point c).
Running the website and protecting it against misuse and spam	Legitimate interest: a safe and working website (point f).
Looking for work through SOMA Internationals: talking with you about work in the Netherlands, finding suitable work and preparing your start	Steps you ask us to take before an employment contract is concluded (point b).

The required box “I have read the privacy statement” means you have been able to read this explanation. It is not consent; we use your data on the bases above.

We do not sell your data. We do not use it for advertising or newsletters, unless you later sign up for that separately yourself. We do not make decisions about you by computer alone, and we do not create profiles of you.

Who can see your data?

Within SOMA, only the people who handle your question can see your data. Questions, requests and call-back requests arrive in our general mailbox and go from there to Tom Meyer or the colleague who helps you further.

For the website and the forms we work with these service providers. They only process your data on our instructions, under our agreements, and may not use it for themselves:

Service provider	What they do	Where
Cloudflare	Hosting the website and processing the forms on the server. Forms are not stored on the server, only forwarded.	Worldwide network; Cloudflare is an American company. See “Does your data leave Europe?”.
Brevo	Sending your form to us by email.	French company; according to Brevo, the data is stored in data centres in the EU.
Microsoft (Microsoft 365)	Our email, where your message arrives and is handled.	In the EU, with exceptions.

We have a data processing agreement with each of these service providers.

We only pass your data on to others if the law requires us to, for example at the request of the police or the tax authorities.

Does your data leave Europe?

Cloudflare and Microsoft are American companies. This means your data may be processed outside the European Economic Area (EEA), or that an American authority may request it in exceptional cases. This is only allowed with extra safeguards. These are in place:

• Cloudflare and Microsoft participate in the EU-U.S. Data Privacy Framework. The European Commission has decided that data transferred to the US on that basis is adequately protected.
• In addition, they have included the standard contractual clauses of the European Commission in their terms, in case that framework lapses.
• Microsoft stores and processes the data of European business customers in the EU (EU Data Boundary), with a few exceptions, such as the handling of major security incidents.
• Brevo processes the data in the EU. Where a sub-processor of Brevo is outside the EEA, the same safeguards apply.

For WhatsApp: see below.

How long do we keep your data?

Data	Retention period
Questions and requests	Until your question has been handled, then for up to twelve more months, so we can look back at what was discussed.
Call-back requests without follow-up	Three months after the call back.
Data if an assignment or collaboration follows	As long as the collaboration lasts. What falls under the legal retention obligation for our accounts, we keep for seven years.
Messages via WhatsApp, phone and email	The same periods as above, depending on what your message is about.
Technical data at Cloudflare	No longer than Cloudflare needs to run and secure the website, under Cloudflare's terms.
Looking for work through SOMA Internationals	As for questions and requests above. If you start work through SOMA, your data moves to your personnel file.

After that we delete your data, including from the mailbox and sent messages.

WhatsApp

On this website you can send a message to our point of contact via a WhatsApp button. If you click that button, you leave our website and WhatsApp opens. We then receive your phone number, your name or WhatsApp profile name and your message.

WhatsApp is a service of Meta (in Europe WhatsApp Ireland Limited). The messages themselves are end-to-end encrypted, but WhatsApp does process usage data, such as phone numbers and times, under WhatsApp's own privacy policy. Data may go to the US. Meta participates in the EU-U.S. Data Privacy Framework.

We only use WhatsApp for business, on a business account. Please do not send documents via WhatsApp, but by email. If you prefer not to use WhatsApp, you can also call or email us.

Does this website use cookies?

This website does not place cookies to track you and does not use advertising or analytics services. We do not load fonts, maps, videos or scripts from other parties. That is why we do not ask for cookie consent.

If we start measuring or advertising later, we will update this statement and ask for your consent in advance.

How do we protect your data?

• The website only works over a secure connection (https).
• Forms are not stored on the web server, but forwarded by email straight away.
• A hidden field stops automated spam.
• Our mailboxes are only accessible to the people who need them.

If something goes wrong with your data and that is a risk for you, we report it to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) and, if necessary, to you.

What are your rights?

You have the following rights regarding your data:

• Access: you may ask what data we hold about you and what we do with it.
• Rectification: if your data is incorrect, we correct it.
• Erasure: you may ask us to delete your data, unless we are legally required to keep it.
• Restriction: you may ask us not to use your data for a while, for example while we check whether it is correct.
• Objection: if we use your data on the basis of our legitimate interest, you may object. We then stop, unless we have compelling reasons to continue; we will explain these to you.
• Portability: data you gave us yourself and that we use for a contract can be provided to you in a common file format on request, or sent to another party.

To make a request, email info@somaworks.nl with “privacy” in the subject line, or call +31 43 362 16 62. We respond within one month. To make sure we help the right person, we may ask you who you are; we do not ask for a copy of your ID for this. Your request is free of charge.

Your request applies to all SOMA companies. If we have passed your data on to another specialism, we make sure that company also carries out your request.

Complaints

If you are not satisfied with how we handle your data, please let us know first via contact; we are happy to find a solution together. You also always have the right to file a complaint with the Dutch Data Protection Authority: autoriteitpersoonsgegevens.nl. You can also complain to the data protection authority in the EU country where you live or work.

Changes

We update this statement when our website or working methods change. The latest version is always on this page. Last updated 11 November 2026.