Recruitment and Hiring Privacy Policy

Last Updated: 18 February 2026

Loop BV (“Loop”, “us”, “we”, or “our”) is a company dedicated to designing and selling products and services that enhance sensory wellbeing, such as earplugs, sleep masks, and related items.

This recruitment and hiring privacy policy (the “Privacy Policy”) outlines how we receive, use and manage your personal data in the context of your recruitment and hiring process at Loop (the “Process”). This Privacy Policy also describes the choices and rights you have with respect to your personal data. 

This Privacy Policy applies to the following persons regardless of their nationality or place of residence:

Any natural person who, because of a job offer at Loop, submits his/her application with a view to obtaining the job described in the job offer.
Any natural person who applies spontaneously with the aim of having his/her CV or application included in a database intended for recruitment and selection by Loop.
Any natural person whose CV was forwarded to Loop via a third party (such as a recruitment company) or by recommendation. Loop will communicate the policy to the applicant upon first contact.

This Privacy Policy applies whenever you apply for a role at Loop. Please take some time to read this Privacy Policy to ensure you understand and are comfortable with our use and disclosure of your personal data. If you do not agree to any of the provisions of this Privacy Policy, you should not apply for a role at Loop.

1. Data Controller’s Details.

Loop is the data controller of your personal data provided to, or collected by or for, or processed in connection with, the Process. Loop’s registered address is at Lamorinièrestraat 33/105 2018 Antwerp, Belgium, and we can be contacted using the details provided in the “Contact Us” section below.

2. Personal Data We Collect.

Personal data, or personal information, is any information about an individual which could, alone or together with other information, personally identify them or otherwise be reasonably linked or connected with them. It does not include aggregated, non-personally identifying information that does not identify an individual or cannot otherwise be reasonably linked or connected with them. We may use such aggregated, non-personally identifying information for internal reporting, statistical analysis, and improvement of our recruitment processes.

Personal data we collect is related to the Process and falls into three main categories: (1) personal data you voluntarily provide us; (2) personal data we collect automatically; and (3) personal data we collect from other sources.

2.1 Personal Data That You Voluntarily Provide Us.

In the context of the Process, we collect personal data that you knowingly choose to disclose. This may include:

Identification data: such as your last name, first name, marital status, address, email address, phone number, photo, date of birth, age and LinkedIn profile;
Data related to studies and training: such as your CV, education, training, diplomas and certificates;
Work related information: such as your CV, current position and responsibilities, prior positions and professional experience, date of departure, reason for departure, working conditions and gross salary, salary expectations, skills and professional competence;
Data related to mobility: such as your driver's license and transportation options;
Right-to-work information: such as your response to questions on whether you are legally allowed to work in the country where the job is located and whether you currently require or may in the future require sponsorship to work in that country.

We do not intentionally collect special categories of personal data (such as data concerning health, trade union membership, religious or political beliefs). Where such data is exceptionally provided voluntarily or is required to comply with applicable employment law (e.g. reasonable accommodations), we will process it only in accordance with applicable law and with appropriate safeguards.

2.2 Personal Data We Collect Automatically.

During the Process, we may automatically collect personal and other data. This may include:

Device Information. When you submit your application through Loop’s website or online systems, limited technical information (such as IP address or device information) may be collected automatically;
Data obtained from knowledge, competency and personality tests during the application process;
Record of your interview.

2.3 Personal Data We Collect from Other Sources.

As part of the Process, Loop may collect data about you from other sources including in some cases data that is publicly available or present on social media platforms. In particular, we collect personal data from the following sources:

Referees and Former Employers. We may contact previous or current employers (or other referees) to confirm aspects of your professional history (e.g. experience, role, responsibilities, dates of employment, etc.). We undertake such checks only when strictly necessary for assessing your suitability for the role. Before contacting anyone, Loop will inform you that we intend to make a reference check — including the type of referees we may contact — and you will have the right to object. If another employer contacts us for a reference about you, we will only provide information after receiving your explicit authorization for that request. Under no circumstances will we share personal data about you with a third party unless you have given such consent.
Professional Networking Sites and Publicly Available Sources. We may collect personal data from publicly accessible sources, including professional networking platforms and job-related social media sites (such as LinkedIn) or other public websites, where you have chosen to make such information publicly available.
Recruitment Agencies, Search Firms, and Other Intermediaries. We may receive personal data about you from recruitment agencies, executive search firms, staffing providers, or other intermediaries that introduce you to us as a potential candidate or assist us in the Process.
Job Fairs, Recruitment Events, and Career Platforms. We may collect personal data from you or about you during job fairs, recruitment events, campus recruiting activities, or through online career platforms and job boards where you have expressed interest in employment with us.

If your personal data are processed by these third parties, it is advisable to read their general terms and conditions and privacy policy to ascertain how they handle your personal data. Loop cannot be held responsible for the way these third parties handle your personal data, nor for the content published on their websites.

3. How We Use Your Personal Data

3.1 General Use of Your Personal Data

Loop will only collect and process your personal data to the extent necessary for the purposes of recruitment and selection. The personal data processed will be proportionate to the position to be filled and will be limited to the data necessary to ascertain to what extent your motivation, knowledge, skills, abilities, and experiences match the open position for which you are applying or qualifying.

3.2 Legal Bases for Processing under the GDPR

We will only use your personal data if and to the extent that applicable law allows. We may process your personal data as defined by the General Data Protection Regulation (the “GDPR”) under the following bases:

Performance of a Contract. Where the processing is necessary for the performance of a contract with you or the organization you work for.
Legitimate Interests. If we (or a third party) have a legitimate interest which is not overridden by your interests or your rights and freedoms.
Legal Requirement. Where the processing is necessary in connection with a legal obligation.
Consent. You have given your consent (where necessary) to such use or the organization you work for has obtained your consent (where necessary) to share your data with us.
Vital Interest. Where the processing is necessary to protect the health, safety, or vital interests of any person.

3.3 Purposes of Use with Legal Bases.

We may use the personal data we collect about you in a variety of ways, including:

Managing the Process. Specifically, we use personal data to assess your qualifications, skills, experience, and suitability for current or future employment opportunities, to review and evaluate applications, to shortlist candidates, to conduct interviews and assessments, and to make hiring decisions. The legal bases for the processing of your personal data for these purposes include taking steps prior to entering a contract, our legitimate interests, and legal requirements.
Communicating with You During the Process. Specifically, we use personal data to communicate with you regarding your application, schedule interviews, provide updates on your candidacy, respond to your inquiries, and notify you of outcomes or next steps in the Process. The legal bases for the processing of your personal data for these purposes include taking steps prior to entering a contract, our legitimate interests, and legal requirements.
Conducting Assessments, Screening and Verification. Specifically, where permitted by applicable law, we may use personal data to conduct skills assessments, aptitude or personality tests, reference checks, employment history verification, and, where relevant, background or right-to-work checks. The legal bases for processing personal data for these purposes include our legitimate interests, legal requirements, and consent where required.
Creating and Maintaining Recruitment Records and Talent Pools. Specifically, we may retain personal data to maintain recruitment records, document hiring decisions, and, where you have agreed or where permitted by law, consider you for future employment opportunities and include you in our talent pool. The legal bases for processing personal data for these purposes include our legitimate interests, legal requirements (including record-keeping and audit requirements), and consent where required.

4. How We Share Your Personal Data

We may share your personal data with third parties in connection with our recruitment and hiring activities under the following circumstances:

Affiliates and Subsidiaries. We may share our data with our subsidiaries and affiliates where necessary to manage the Process, assess candidates for roles across the group, or for internal administrative purposes, in each case in accordance with this Privacy Policy.
Service Providers. We may share your personal data with third-party vendors, consultants, and service providers who perform services on our behalf in support of our recruitment and hiring activities (as our central ATS we use Ashby). These may include providers of applicant tracking systems, interview scheduling tools, skills and aptitude assessments, background or right-to-work checks, IT hosting, data storage, security, and technical support. Such service providers process personal data solely on our instructions, are contractually bound to keep personal data confidential, and are prohibited from using the data for their own purposes.
Change in Control or Sale. We may share your data if we are involved in a merger, corporate transaction, or another situation involving the transfer of some or all of our business assets, with business entities or people involved in the negotiation or transfer.
Compliance with Laws. We may be required to share your data to comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities.
With Your Consent. We share data about you with other companies if you give us permission or direct us to share such data.

5. Your rights Regarding Your Personal Data

The GDPR gives certain rights to individuals in relation to their personal data. As available and except as limited under applicable law, the rights afforded to individuals are:

(a) Right To Access. The right to be informed of, and request access to, the personal data we process about you.

(b) Right to Rectification/Correction. The right to request that we amend or update your personal data where it is incorrect or incomplete.

(d) Right to Data Portability. The right to request a copy of your personal data in electronic format, and the right to request that we transfer such data to a third party of your choice.

(e) Right to Restrict. The right to request that we restrict the way we process and disclose certain of your personal data.

(f) Right to Object. The right to object to our processing of your personal data where we are relying on a legitimate interest (or those of a third party)

(g) Right to Withdraw Your Consent. The right to withdraw your consent at any time (to the extent we base processing on consent), without affecting the lawfulness of the processing based on such consent before its withdrawal.

(h) Right to Lodge a Complaint. The right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

You can exercise these rights by contacting us by using the details provided in the “Contact Us” section below and specifying which GDPR privacy rights you wish to exercise. We must verify your identity to honor your request, which we will respond to within one (1) month.

6. How We Protect Your Personal Data.

We take appropriate precautions including organizational, technical, administrative, and physical security measures to help safeguard your data against accidental or unlawful destruction, loss, alteration, and unauthorized disclosure. While we have employed security technologies and procedures to assist safeguarding your personal data, no system or network can be guaranteed to be 100% secure. Due to the inherent nature of the internet, we cannot guarantee that data, including personal data, is absolutely safe from intrusion or other unauthorized access by others.

7. How Long we Retain Your Personal Data.

Loop processes your personal data for as long as it is necessary to fulfill the purposes for which we need it. We apply different retention periods depending on the context of the Process, as indicated below.  When personal data is no longer needed, or in any event, after legal authority to retain it has expired, personal data will be destroyed, in accordance with local law and pursuant to procedures established in relation to the relevant system or process.

7.1 Candidacy for a specific vacancy

Loop retains your personal data for a period necessary for the processing of your candidature.

7.2 Spontaneous application

Any CV and other personal data sent through a spontaneous application will be retained for a period of two (2) years.

7.3 Recruitment database

If Loop has selected a third party for a certain position, but your profile could be interesting for a similar or another position within the company, we wish to contact you in the future for a vacancy that could interest you.  Loop will ask for your permission to keep your profile for two (2) years. You can always refuse this proposal, and then Loop will delete your personal data from our recruitment database.

7.4 Employment

In the case of recruitment, the further processing of your personal data by Loop will be necessary for personnel and payroll administration and for the performance of the employment contract, compliance with the legal obligations of Loop and our legitimate interest.  At the latest at the time of employment, you will be further informed about the processing of your personal data by Loop within the framework of personnel management and payroll administration.

8. International Data Transfers.

Your personal data may be transferred to, stored, and processed in a country or jurisdiction other than the one in which it was collected, including to a country and jurisdiction that does not have the same data protection laws as your jurisdiction. Where we transfer your personal data outside the European Economic Area (“EEA”), we will take reasonable steps to ensure an adequate level of data protection of the recipient as required under the GDPR. Where required, such transfers are safeguarded using appropriate transfer mechanisms, such as standard contractual clauses approved by the European Commission or other legally recognized safeguards.

9. Changes to this Privacy Policy.

This Privacy Policy went into effect on the “Last Updated” date noted near the top of this page. We may update this Privacy Policy from time to time. Any changes will be reflected in the revised Privacy Policy posted on this page, together with the updated effective date. Your continued participation in the Process after we make changes is deemed to be acceptance of those changes, so please check the Privacy Policy periodically for updates.

10. Contact Us.

We welcome questions, comments, and concerns about this Privacy Policy and our privacy practices. If you wish to provide feedback or if you have questions or concerns or wish to exercise your rights related to your personal data, please contact us via your recruitment contact, or by using the details set out below:

Loop BV
To the attention of the Data Protection Officer
Lamorinièrestraat 33/105
2018 Antwerp, Belgium
privacy@loopearplugs.com