Privacy Policy
Last updated: 31 October 2026 · First published: 31 October 2026
In short
- This policy covers doowings.com and our business relationships: demo requests, emails, customers’ contracts and invoices.
- Are you a candidate? The recruiter or employer who uses Doowings Hire decides what happens to your data. Contact them first, or see For candidates.
- We collect little: what you type into the demo form or write to us, plus the technical data any website needs. No CVs, no advertising trackers, no sale of data.
- Analytics run only if you accept them, without cookies. You can change your choice at any time.
- You have rights under the GDPR. Write to hello@doowings.com; we reply within one month.
1. Who we are
Doowings BV (“Doowings”, “we”) makes Doowings Hire, an ATS and recruiting CRM for staffing agencies and in-house recruitment teams.
Doowings BV, Waterloosesteenweg 260, 1640 Sint-Genesius-Rode, Belgium · Enterprise/VAT number BE 0634.962.988 · hello@doowings.com
We process personal data under the General Data Protection Regulation (EU) 2016/679 (GDPR) and Belgian data protection law. We have not appointed a data protection officer; privacy questions go to the address above and are handled by management. Our lead supervisory authority is the Belgian Data Protection Authority.
2. Our role: controller or processor
Who is responsible for your data depends on how you meet us.
| Situation | Who decides (controller) | Who to contact |
|---|---|---|
| You visit doowings.com, request a demo or email us | Doowings | hello@doowings.com |
| You are a contact at a customer (contract, billing, support) | Doowings | hello@doowings.com |
| Your data is in a customer’s Doowings Hire workspace — for example as a candidate, a client contact or a user of their workspace | The customer (the recruiter or employer); Doowings is their processor | The customer first; we help them answer |
As a processor we act only on the customer’s documented instructions, under a data processing agreement (DPA) that lists our sub-processors. We do not use customer workspace data for our own purposes.
3. If you are a candidate
If a recruitment agency or employer holds your data in Doowings Hire, they are responsible for it: they decide why it is processed, on what legal basis and for how long. Ask them to access, correct or erase your data, or to stop contacting you; the product lets them do this quickly.
If you write to us instead, we cannot decide on your request for them. Where we can identify the customer, we pass your request on to them without undue delay and tell you we did. We do not search customer workspaces on our own initiative. Read For candidates for how AI is and is not used in hiring with Doowings Hire.
4. What we collect and why
Demo requests. Your name, work email, company, how you hire, your team size and anything you choose to add. We use it to reply, arrange and prepare a demo, and follow up on it.
Emails and calls. What you write or tell us, to answer you and keep a record of our conversation.
Customers and their contacts. Names, business contact details and roles of the people we deal with at a customer, plus contract, order and invoicing records, to provide the service, support the customer and meet our accounting duties.
Security and delivery. When you load a page, your browser sends technical data such as your IP address, browser type and the page requested. Our hosting provider uses it to deliver the website and protect it from abuse. The demo form is protected by a bot check (Turnstile) and a rate limit keyed on your IP address for 60 seconds. Our own server logs record only fixed event codes, never the contents of the form.
Analytics — only with consent. If you accept analytics, we measure page views and loading performance without cookies and without identifying you. See our Cookie Policy.
We do not accept CVs or candidate files on this website. We do not sell personal data, use it for advertising, or buy contact lists. We do not make automated decisions about you on this website.
Legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering a demo request or your email | Steps you ask for before a contract (art. 6.1.b); our legitimate interest in answering business enquiries (art. 6.1.f) |
| Following up with a prospect after a demo | Legitimate interest in developing our business (art. 6.1.f) — you can object at any time |
| Providing the service, support and invoices to customers | Performance of our contract (art. 6.1.b); legal obligation for accounting records (art. 6.1.c) |
| Delivering and securing the website | Legitimate interest in a working, secure website (art. 6.1.f) |
| Analytics | Your consent (art. 6.1.a), which you can withdraw at any time |
5. AI and this policy
This website uses no AI to profile visitors or evaluate demo requests; a person reads every request.
Doowings Hire, the product, uses AI to help recruiters — for example to read CVs, explain how a profile fits a role’s criteria and draft messages. A person reviews and decides every action: the AI never rejects a candidate, moves them in a process or contacts anyone on its own. How this works, where data is hosted and how the product supports the EU AI Act is set out on our Trust page and in the DPA.
6. Who receives your data
We share personal data only with providers who process it on our behalf, under contract, for the purposes above:
| Provider | What for |
|---|---|
| Cloudflare, Inc. | Website hosting and delivery, security, the Turnstile bot check and — only with your consent — cookieless analytics |
| Web3Forms | Delivering demo-form submissions to our inbox |
| Google (Google Workspace) | Our email, where demo requests and correspondence are stored |
The website’s fonts are served from doowings.com itself; your browser does not contact a font service. We may also disclose data when the law requires it, to protect our rights, or to a successor if our business is transferred — always within the GDPR.
7. Transfers outside the European Economic Area
Some of these providers are established in, or may access data from, countries outside the EEA, such as the United States. Where that happens, transfers rely on a European Commission adequacy decision — including the EU–US Data Privacy Framework for certified providers — or on the Commission’s standard contractual clauses with additional safeguards where needed. Ask us for details of the safeguard for a specific provider.
8. How long we keep it
| Data | How long |
|---|---|
| Demo requests and related correspondence | Up to 2 years after our last contact, unless you become a customer |
| Customer contracts, orders and invoices | For the contract, then 7 years (Belgian accounting law) |
| Rate-limit record of your IP address | 60 seconds |
| Security and delivery logs at our hosting provider | As long as needed for security, in line with the provider’s retention periods |
| Your analytics choice (stored in your browser) | 180 days, then we ask again |
| Analytics measurements | Kept by Cloudflare as aggregated, non-identifying statistics |
When a period ends, we delete the data or make it anonymous.
9. Security
The website is served only over encrypted connections (HTTPS with HSTS), with a strict content security policy, and stores no database of visitors. The demo form checks where requests come from, limits their size and rate and verifies them before they reach us. Access to our systems is limited to the people who need it, and our hosting and code accounts require multi-factor authentication. To report a vulnerability, see security.txt.
10. Your rights
You can ask us to:
- give you access to your data and a copy of it;
- correct inaccurate data;
- erase your data;
- restrict how we use it;
- give you your data in a portable format;
- stop processing based on legitimate interest — you can object at any time, and always to follow-up marketing;
- and, where we rely on consent, you can withdraw it at any time, without affecting earlier processing.
Write to hello@doowings.com. We reply within one month (extendable by two months for complex requests, in which case we tell you why). We may ask you to confirm your identity first. Exercising your rights is free.
11. Complaints
If you are unhappy with how we handle your data, please tell us first so we can put it right. You may also complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels — www.dataprotectionauthority.be — or to the authority where you live or work.
12. Cookies
Our Cookie Policy explains the few technologies this website uses and how to change your analytics choice.
13. Changes
We update this policy when our website, services or processing change. The date at the top identifies the current version. Previous versions are available on request.