Privacy Statement

Last updated: 13 August 2026

1. Introduction

The BlockTech group (‘BlockTech’, ‘we’, ‘us’, or ‘our’) is committed to protecting your personal data. This Privacy Statement (‘Statement’) explains how we collect, use, share, and safeguard personal data of candidates, employees, contractors, business partners, counterparties, event participants, and visitors to www.block-tech.io (the ‘Website’).
‍
We process personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (‘GDPR’), the Dutch Implementation Act (Uitvoeringswet AVG), the Singapore Personal Data Protection Act 2012 (‘PDPA’), and other applicable data protection laws.
‍
The specific BlockTech entity responsible for the processing is identified in Section 8 below. If you have questions about how your personal data is processed, you may contact us at legal[at]block-tech[dot]io.

2. What we collect

We only collect personal data that is necessary for the purposes described in this Statement. The categories of personal data we collect depend on your relationship with BlockTech and may include:
‍
Candidates
Contact details, professional and educational background, assessment outcomes, and where relevant to the role or required by applicable law, work authorisation status and availability. Where AI tools are used in the recruitment process, additional data may be processed as described in Section 5.
‍
Employees and contractors
Identification and contact details, contract and role information, payroll and banking details, tax and social security information, and performance and professional development data. In the Netherlands, new employees are required to provide a Verklaring Omtrent het Gedrag (‘VOG’) before commencing employment and current employees may be required to do so periodically where BlockTech determines this to be necessary or where required by applicable law.
‍
Business partners and counterparties
Contact and identification details of relevant representatives, company information, and due diligence records required by law.
‍
Website visitors
Technical data collected through cookies and similar technologies, as further described in our Cookie Notice.
‍
Event participants
Contact and logistics information necessary to organise your participation.

3. How we collect personal data

We collect personal data in the following ways:

• Directly from you, for example, when you submit a job application, enter into an agreement with us, contact us, or use the Website.
• From third-party sources, including professional networking platforms, company registries, public records, recruitment agencies, pre-employment screening providers (such as VOG verification in the Netherlands), and regulatory or governmental authorities (for example, in connection with sanctions screening).

Where we collect personal data about you from a source other than yourself, we will inform you in accordance with applicable law, including the source of the data and the categories of data concerned.

4. Why we process your data

We process your personal data on one or more of the following legal bases:

• Performance of a contract - where processing is necessary to enter into or perform an agreement with you, including pre-contractual steps such as evaluating a job application or onboarding an employee.
• Legal obligation - where we are required by law to process your data, for example in connection with tax, social security, anti-money laundering, or regulatory reporting obligations.
• Legitimate interests - where processing is necessary for purposes of recruitment (including AI-assisted screening), operating our business, ensuring the security of our systems and premises, performing due diligence on counterparties, and enforcing internal policies, provided these interests are not overridden by your rights and freedoms. You have the right to object to processing based on legitimate interests (see Section 9).
• Consent - where we ask for and you provide consent for a specific purpose (for example, retaining your details in a talent pool). You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, contact legal[at]block-tech[dot]io.

Special category data
We do not process biometric data or special categories of personal data unless required by law and subject to appropriate safeguards.

5. AI in recruitment

We use artificial intelligence and machine learning (‘AI’) tools to support, but not replace, our recruiters in evaluating candidates. The AI tools' role is limited to parsing application materials, comparing candidate profiles against role requirements, and generating preliminary assessments.

Data processed by the AI tools
We process the following categories of personal data when using the AI tools: name and contact details; CV content (including educational background, work experience, skills, and qualifications); assessment or test outcomes; and, where applicable, transcripts of interviews.

Where you provide prior consent, interviews may be recorded and transcribed. The AI tools process only the text transcripts, not the audio or video recordings. If you do not provide consent, the interview proceeds without recording or transcription. This does not affect your application.

No biometric data or special category data is processed by the AI tools.

How the AI works and its significance
The AI tools use natural language processing to analyse the personal data described above and compare it against criteria defined for the role, such as required qualifications, relevant experience, and technical and soft skills. Based on this comparison, the tools produce a structured assessment, for example a relevance score or summary, indicating how closely your profile matches those criteria. The AI tools may be applied at different stages of the recruitment process. Their output assists, but does not determine, the recruiter's assessment. No hiring or rejection decision is made on this basis.

Human involvement
A human recruiter always reviews and can override or disregard the AI's output before any decision is made. AI output is never the basis for a hiring or rejection decision, but one of several factors the recruiter will consider.

Right to opt out
You have the right not to have your application assessed using the AI tools. You can opt out via the opt-out option in the job vacancy posting or by emailing legal[at]block-tech[dot]io and jobs[at]block-tech[dot]io. Opting out means your application will be reviewed entirely by human recruiters, without any negative impact on your candidacy.

Right to explanation
You may request a clear explanation of the role the AI played in the assessment of your application, the criteria considered, and how the AI's assessment contributed to the decision. You may also express your views or contest the decision.

Third-party provider and transfers
The AI tools are operated by a third-party provider acting on our behalf under a data processing agreement. Where the provider processes personal data outside the EEA, the transfer safeguards set out in Section 7 apply.

Fairness
We periodically review the AI tools' criteria and outputs for potential bias to prevent discriminatory outcomes.

6. Sharing personal data with third parties

Intra-group sharing
Sharing within the BlockTech group is limited to the minimum necessary for the recipient affiliate to perform its role in connection with legitimate operational, HR, compliance, or commercial purposes.
Processors
We may engage external service providers (including payroll, IT hosting, assessment platforms, and AI tool providers) to process personal data on our behalf. These relationships are governed by written data processing agreements that require the processor to: act only on BlockTech's documented instructions; implement appropriate technical and organisational security measures; comply with transfer safeguards; obtain prior authorisation for sub-processors; and return or delete personal data upon termination of the agreement.

Disclosures required by law and corporate actions
Personal data may be disclosed to public authorities, regulators, auditors, or (legal/tax) advisors where required by applicable law, or in connection with a corporate reorganisation, merger, or sale.

Further information
To obtain details of specific entities or recipients involved in processing your data, contact legal[at]block-tech[dot]io.

7. Transferring personal data to third countries

Personal data collected or processed within the EEA may be transferred outside the EEA, including to Singapore.

Where we transfer personal data outside the EEA (including to BlockTech group entities), we rely on Standard Contractual Clauses adopted by the European Commission, supplemented where necessary by additional technical and organisational measures identified through a transfer impact assessment.

In limited circumstances, we may rely on a derogation under Article 49 GDPR, such as your explicit consent, the performance of a contract with you, or the establishment, exercise, or defence of legal claims.

BlockTech entities outside the EEA comply with applicable local data protection laws in their respective jurisdictions, including the PDPA in Singapore.

8. Who is responsible for your data

The controller for the processing of personal data subject to the GDPR is BlockTech B.V. with registered office at Herengracht 449 A, 1017 BR, Amsterdam, the Netherlands. This includes processing relating to candidates who apply via the Website; employees and contractors of BlockTech B.V.; business partners; and Website visitors.

The controller for the processing of personal data subject to the PDPA is BlockTech APAC Pte. Ltd. with registered office at 18 Robinson Road, #22-01, 048547, Singapore. This includes processing relating to candidates who apply via the Website to be employed by BlockTech APAC Pte. Ltd.; employees and contractors of BlockTech APAC Pte. Ltd., and its business partners.  

Where both entities are involved in processing, BlockTech B.V. remains responsible under the GDPR and BlockTech APAC Pte. Ltd. remains responsible under the PDPA.

For any inquiries, you may contact us via email at legal[at]block-tech[dot]io for specific queries and at info[at]block-tech[dot]io or by phone at +31(0)202090230 for general queries.

9. Your rights

You may exercise the following rights, subject to applicable law:

• Access - obtain confirmation of whether we process your personal data and, if so, a copy of that data;
• Rectification - request correction of inaccurate data;
• Erasure - request deletion of your data where it is no longer necessary or where processing is unlawful;
• Restriction - request that processing be restricted in certain circumstances;
• Portability - receive your data in a structured, commonly used, machine-readable format;
• Objection - object to processing based on legitimate interests (see below);
• Withdrawal of consent - withdraw previously given consent at any time.

Right to object
Where we process your personal data on the basis of legitimate interests (Section 4), you have the right to object at any time on grounds relating to your particular situation. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defence of legal claims.

How to exercise your rights
Send an email to legal[at]block-tech[dot]io with the subject line ‘Exercising Privacy Rights’. We may verify your identity before processing your request.

Response times
BlockTech B.V. will respond within one month of receipt. This period may be extended by two further months where the request is complex or we receive multiple requests. We will inform you of any extension within the first month, together with the reasons for the delay.

BlockTech APAC Pte. Ltd. will respond as soon as reasonably possible, and in any event within thirty days, in accordance with the PDPA.

Supervisory authorities
You have the right to lodge a complaint with a supervisory authority. For GDPR matters, this is the Autoriteit Persoonsgegevens (www.autoriteitpersoonsgegevens.nl). For PDPA matters, this is the Personal Data Protection Commission (www.pdpc.gov.sg).

Consequences of not providing data
If the provision of personal data is a contractual or legal requirement and you choose not to provide it, this may result in BlockTech being unable to enter into or continue a contractual relationship with you.

10. How long we keep your data

We retain personal data in accordance with applicable law and our Data Retention Policy. Personal data is not retained longer than necessary for the purposes for which it was collected.

We retain your personal data for the duration of our relationship with you. After that relationship has ended, we continue to retain personal data where we are required to do so by applicable statutory or regulatory retention obligations, or where retention remains necessary to establish, exercise, or defend a legal claim or to resolve pending requests, complaints, or disputes.

When retention is no longer justified, we securely delete or anonymise the data.

Copies of personal data may persist in backups made for business continuity purposes for a limited additional period, subject to technical and organisational measures that prevent reintroduction of backup data into active systems.

11. Changes to this Statement

We may update this Privacy Statement from time to time. The most recent version will always be available on our Website, with the date of the latest revision indicated at the top. Where changes materially affect your rights, we will notify you by appropriate means before they take effect.