Legal
Last updated: 4 November 2026 (Europe/Amsterdam). How BoldATS handles personal data for its ATS.
The controller for the marketing site, accounts, billing, support and security is S. Simon Communication (KvK 62685252, VAT identification number NL002218668B93), trading as BoldATS (boldats.com), Pier Christiaanswei 11A, 8508 SB Delfstrahuizen, the Netherlands; contact: [email protected]. For Applicant Tracking System (ATS) content you enter — such as candidates, vacancies/jobs, applications and related recruitment records — you are controller and BoldATS is processor; for that data the DPA at https://boldats.com/dpa/ applies, which forms part of our terms (this policy does not replace it). Contact: via the contact page.
Website/technical data; Typeform demo/contact/trial fields; account/subscription/billing metadata; billing details (legal company name, billing address, billing e-mail, chamber of commerce or registration number, VAT number, country) and subscription, invoice and payment-status data; support tickets; ATS content (candidates, vacancies, applications and hiring workflow data) as processor only to provide the Service.
Contract performance, legal obligation, legitimate interests (security/support), consent where required (non-essential cookies/analytics). BoldATS is a SaaS ATS helper tool for recruitment/hiring — not legal, employment or compliance advice, and not a CRM.
Hosting and cloud providers for the application; Cloudflare, Typeform, an invoicing provider (WeFact or a comparable invoicing provider) for invoices and accounts receivable, an external payment service provider to process payments (where payments run through a payment service provider), email/support tools, analytics if enabled, advisors, authorities where required. Sub-processors for customer data are listed in Annex C of the DPA. We do not sell personal data.
Appropriate safeguards for non-EEA transfers (e.g. SCCs). Retention limited to purpose/contract/law. After a trial that is not converted into a paid subscription, the environment is kept for the retention period as shown in the app and then deleted, subject to statutory retention obligations. Appropriate security measures. GDPR rights via the contact page. You may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or with the supervisory authority in your own EU country. For ATS-tenant data (candidates, vacancies, applications), contact your organisation first.
Necessary cookies always; non-essential with consent. B2B — not directed at children. We may update this policy; the “Last updated” date changes.