Last updated: June 1, 2026
1. Introduction
Vince People B.V. (“Vince People,” “Vince,” “we,” “us”) respects your privacy and handles personal data with care. In this privacy statement, we explain what personal data we process, for what purposes, on what legal basis, with whom we share data, and what rights you have.
This statement applies to the use of the website www.vince.nl, the Vince People platform (dashboard.vince.nl), the Vince People mobile app, and all related services and communications.
| Person in charge | Vince People, Inc. |
|---|---|
| Address | Keizersgracht 16E, 5611 GD Eindhoven |
| Chamber of Commerce number | 83798072 |
| Email Privacy | [email protected] |
| Data Protection Officer | Not a mandatory appointment — please contact us at [email protected] |
2. Our role: both controller and processor
Vince People is an infrastructure: a platform where independent healthcare professionals (freelancers), healthcare institutions, and private individuals can enter into contracts with one another directly. Vince is not a staffing agency, intermediary, or employer, and is not a party to the agreements entered into through the platform.
- Data Controller — for data we process in connection with our own services: account information, use of the platform, website, and app, the Vince Verified verification process, communications and marketing, and payment processing records.
- Processor — for personal data that we process on behalf of a client (healthcare institution, private individual, or intermediary) or healthcare professional under a contract for services, including data from clients/care recipients. For this purpose, we enter into a data processing agreement in accordance with Article 28 of the GDPR; the client is then the data controller.
3. Who is covered by this statement?
- Healthcare professionals who use the platform to secure assignments, manage contracts, and bill clients;
- Healthcare facilities that seek out and hire healthcare professionals;
- Individuals (whether or not they have a personal budget, PGB);
- Contact persons at organizations;
- Website visitors and app users.
4. What personal data do we process?
Account and identity information: name, email address, phone number, password (encrypted), profile information.
Business details: Chamber of Commerce number, VAT ID number, company name, business and billing addresses, bank account number (IBAN).
Verification details (Vince Verified): BIG registration number and status, Certificate of Good Conduct (VOG), diplomas and certificates, policy details for professional/general liability insurance and disability insurance, and membership in a dispute resolution body (Wkkgz).
Special and sensitive personal data: health data of clients/care recipients to the extent that such data is processed via the platform in connection with an assignment (in such cases, we generally act as a processor); Social Security Number (SSN) only where permitted or required by law.
Contract and transaction data: contracts, time sheets, invoices, and payments processed through the escrow account.
Compliance data: data used to monitor indicators related to independence (such as contract diversity, revenue distribution, and billing practices).
Communication data: email, WhatsApp messages, phone calls, and support contacts.
Technical and usage data: IP address, device and browser information, app version, log data, and usage data.
Data collected when logging in via social media: When you log in via Facebook or another external account, we receive a limited set of data (such as your name and email address) from that provider based on your consent. We use this data solely to create your account and grant you access.
5. Purposes and Principles
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating and managing your account; providing the platform, website, and app | Performance of the Agreement (Art. 6.1.b) |
| Generating, signing, and archiving contracts | Performance of the Agreement (Art. 6.1.b) |
| Time tracking, invoicing, and payment via the escrow account | Performance of the Agreement (Art. 6.1.b) |
| Vince Verified: Verification and monitoring of qualifications, registrations, and insurance | Performance of the agreement (Art. 6.1.b) and legal obligation where applicable (Art. 6.1.c) |
| Complying with tax and administrative record-keeping requirements | Legal obligation (Art. 6.1.c) |
| Compliance Monitoring (Identification of Bogus Self-Employment) | Legitimate interest (Art. 6.1.f) and performance of the contract |
| Customer service and communication regarding the service | Performance of the Agreement (Art. 6.1.b) |
| Marketing and newsletters | Consent (Art. 6.1.a), with the option to opt out |
| Security, fraud prevention, and service improvement | Legitimate interest (Art. 6.1.f) |
We process health data pursuant to Article 9 of the GDPR, specifically in the context of providing healthcare. We process Social Security Numbers (BSN) only when there is a legal basis for doing so.
6. Disclosure to third parties and subprocessors
We never sell your data. However, we do engage carefully selected service providers to process data on our behalf, based on data processing agreements:
| Party | Purpose |
|---|---|
| GoCredible B.V. / Rabobank | Management of third-party accounts and payment processing |
| DocuSign | Digital signing of contracts (EU data center) |
| SendGrid (Twilio) | Sending transactional email |
| ActiveCampaign | Marketing and Newsletter Communications |
| Twilio | Voice and WhatsApp communication |
| Finqle | Optional factoring (only when used) |
| DigitalOcean | Hosting of the platform and data within the EU |
For verification purposes, we consult public and official registries and services, such as the BIG Registry (CIBG), the Chamber of Commerce, validatie.nl/Justis (Certificate of Good Conduct), and DUO (degrees). We also disclose information to third parties when we are legally required to do so.
7. Transfer outside the EEA
We prefer to process data within the European Economic Area (EEA). Some service providers are located (in part) outside the EEA. In such cases, we ensure appropriate safeguards, such as the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework.
8. Retention periods
We do not retain personal data for longer than necessary. As a general guideline:
- Administrative and tax records: 7 years (statutory retention requirement);
- Account information: for the duration of your account and for a reasonable settlement period thereafter;
- Verification documents (Vince Verified): during use and thereafter for as short a period as is reasonable;
- Marketing data: until you unsubscribe;
- Health data: in accordance with the applicable statutory (healthcare) retention periods.
Afterward, we will delete or anonymize the data.
9. Security
We take appropriate technical and organizational measures to protect your data. For health data and Social Security Numbers (BSN), we implement enhanced security measures in accordance with NEN 7510, including encryption, role-based access control, logging, and secure connections (TLS).
10. Your rights
Under the GDPR, you have the right to access your data, have it corrected, have it deleted, restrict its processing, object to its processing, transfer your data (data portability), and withdraw your consent.
You can submit a request via [email protected]. We will respond within the statutory one-month period. For requests to have your data deleted, please refer to our Data Deletion page.
11. Cookies
Our website and app use cookies and similar technologies to ensure the service functions properly, to track usage, and (with your consent) for marketing purposes. You can manage your preferences via the cookie banner.
12. Log in via Facebook / Meta
If you log in via Facebook, we process the data you share with us through that platform solely for the purpose of logging you in and managing your account. You can revoke the connection with Facebook at any time through your Facebook settings or by having us delete your data.
13. Changes
We may update this privacy statement. The most current version is always available at www.vince.nl. We will actively notify you of any significant changes.
14. File a complaint
If you disagree with how we handle your data, please contact us first at [email protected]. You also have the right to file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
15. Contact
Vince People B.V.
Keizersgracht 16E, 5611 GD Eindhoven
Email: [email protected]
Chamber of Commerce: 83798072