Privacy and legal

Privacy notice

Effective 26 June 2026 · Version 1.0 · Controller: Solvism

Gillnet.ai is a done-for-you technical sourcing service operated by Solvism. This notice explains how we handle personal data, both for visitors to this website and for the candidates and clients of the sourcing service. We keep it plain. If anything is unclear, email privacy@solvism.nl.

1. Who we are

Solvism is the data controller for the personal data described here. Solvism operates Gillnet.ai and is based in The Hague, the Netherlands. For any privacy question or to exercise your rights, contact privacy@solvism.nl. Full company details are in the company information section at the end of this page.

2. This website

This website is deliberately low-data. It sets no cookies, runs no analytics or tracking, and loads no third-party fonts or scripts. Fonts are served from our own servers, so visiting this page does not share your IP address with any third party.

Two actions are under your control and involve a third party only when you choose them:

Clicking Book a free intake opens a Google Calendar scheduling page. From that point Google processes your booking under its own privacy terms.
Emailing us sends your message and email address to our mailbox, which we use only to reply.

3. Candidate data (the sourcing service)

If you are a professional we have sourced for a client vacancy, this section applies to you.

What we hold

Only what is publicly available or what you share with us directly: your name, job title and employer, city or region, a summary of skills and experience, your public LinkedIn profile URL, and your reply if you respond to our outreach. We do not collect national ID numbers, date of birth, salary history, or any special-category data under GDPR Article 9. We do not buy data from brokers, and we do not scrape LinkedIn directly.

Why, and on what legal basis

We process candidate data on the basis of legitimate interest (GDPR Article 6(1)(f)): identifying you as a potential match for a specific vacancy, contacting you about it, and storing your profile to avoid contacting you twice. We have carried out a Legitimate Interest Assessment, and a summary is available on request. Responding to opt-out and data subject requests is done to meet a legal obligation (Article 6(1)(c)).

AI scoring, with a human in the loop

Gillnet.ai uses AI-assisted scoring to rank candidates against a vacancy on title relevance, skills, seniority, and location. The scoring does not use demographic data. No candidate is contacted or rejected by automation alone. A human reviewer approves every outreach message before it is sent, so you are not subject to a decision based solely on automated processing (GDPR Article 22). Every scoring event is logged for audit. Every first message to a candidate also discloses that AI was used to identify their profile and that a person reviewed and wrote it before sending.

Who we share it with

We share candidate data only with:

The client employer whose vacancy you have been shortlisted for, limited to the shortlist and only after human review.
Our service providers acting as processors, by category: a LinkedIn Recruiter API gateway hosted in the EU; an AI text-processing provider and web-search providers based in the USA; and our own database and search-memory infrastructure self-hosted in the Netherlands.

We do not sell candidate data. The specific named list of our processors is held in our internal record of processing and is available to a supervisory authority on request.

International transfers

Some search and AI providers are US-based. Where personal data is transferred to them, we rely on Standard Contractual Clauses and the EU-US Data Privacy Framework where applicable, and we minimise what is sent outside the EU. We are moving toward routing all personally identifiable candidate data through EU infrastructure only.

How long we keep it

Not contacted: 28 days from sourcing.
Contacted, no response: 90 days from outreach.
Active in a hiring process: duration of the process plus 90 days.
Opted out (suppression list): kept indefinitely, solely to make sure we never source you again.

At expiry, your personal data is deleted from our database and search memory.

4. Client data

When a company engages Solvism, we hold the contact name, email, and job title of the person managing the engagement, the vacancy briefs, and related communication. The legal basis is performance of our service contract (GDPR Article 6(1)(b)). Client data is kept for the duration of the engagement and for two years afterwards for accounting and legal compliance.

5. Your rights

Under GDPR you have the right to access, erase, restrict, object to, and port your data. To exercise any of them, email privacy@solvism.nl. We respond within 30 days and never charge a fee. An erasure request also adds you to our suppression list so you are not sourced again.

If you are not satisfied with our response, you can complain to the Dutch data protection authority:

Autoriteit Persoonsgegevens
Postbus 93374, 2509 AJ Den Haag
autoriteitpersoonsgegevens.nl

6. Changes

We may update this notice. The current version always lives at this URL, with the effective date at the top.