Privacy statement

Who is responsible

stagematch is operated by Cyberdine Systems BV. For everything you enter on the platform yourself, Cyberdine Systems BV is the controller.

If your school or VDAB works with us, that institution remains the controller for the data it passes to us or confirms with us. For those we act as a processor, under a separate data processing agreement.

You can send questions or requests to the contact address on this website.

What we process

To sign you in: your email address and when you sign in. We store no passwords — you sign in with a single-use link sent by email.

For your profile: your name, photo or avatar, a short headline, your biography, your motivation, any previous role and employer, your postal code and municipality, your skills, your languages and your field of study.

To work out whether a placement is practically possible: your availability period, days per week, maximum travel distance and preferred work mode. For the distance calculation we store the coordinates of your municipality, not of your address.

If you upload it: your CV. That file is not used in matching.

Where applicable: your right to work, with the permit type and expiry date. We use this solely to determine whether a placement is legally possible. Employers do not see it.

From your use: your swipes, matches, scheduled and completed interviews, and the rating afterwards.

We do not ask for data about your health, beliefs, political views, sexual orientation or origin, and we do not use such data. If you put it in a free-text field or in your CV yourself, it plays no part in matching and appears in no overview.

Why we process it

To give you an account and let you sign in. This is necessary to perform our agreement with you.

To suggest placements that are practically feasible, and to show you to employers once you have both expressed interest. This too is part of performing that agreement.

To let your school or VDAB confirm your enrolment or dossier, so employers know you are who you say you are. This happens at your initiative and with your knowledge.

To measure use of the site, so we know what works. We use self-hosted statistics that store nothing on your device and do not follow you across other websites. That is why we do not ask for consent: nothing is stored on or read from your device.

How matching works

The order in which you see placements is set by a fixed set of rules: skills overlap, how well your field of study fits, travel distance and work mode, and the languages required. On top of that sit hard conditions — if the placement period does not overlap, or the location is further than you specified, it does not appear at all.

No self-learning model is involved. Every suggested match traces back to those rules, and we can explain why something is or is not on your list.

Matching makes no decision about you. It only determines what you see. Whether an interview happens is decided by you and the employer, both.

Who sees your data

Employers see your profile while you are visible. They only see your CV after you have both expressed interest — before that it cannot be retrieved, and its existence is not visible either.

Your school or VDAB counsellor sees the data needed to confirm your enrolment or dossier, and the progress of your search if the institution works with us.

We do not sell your data and do not use it for advertising.

Who we rely on

Our servers and your CV are with Hetzner Online GmbH, in a data centre in Helsinki, Finland.

Our email runs through Mailgun, in the European region.

Video interviews run through Daily.co. That company is based in the United States; the interviews themselves are handled in the European region.

Our visitor statistics run on our own server. No third party is involved.

How long we keep it

Your profile and everything attached to it, including your CV: up to 24 months after your last activity. After that we delete it automatically. Stay active and it stays.

Confirmation links for your school or VDAB: 14 days, after which they expire.

Expired sign-in sessions are cleared once they expire.

If you delete your account yourself, everything goes immediately — including the CV file.

Your rights

You can access your data, have it corrected, have it deleted, or have the processing restricted. You can also object, and request your data in a readable format.

Deletion you can do yourself, immediately, from your dashboard. There is a button there that erases your account and everything attached to it.

For the other rights, a message to the contact address on this website is enough. We answer within one month.

If you disagree with how we handle your data, you can lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels.

Security

All traffic is encrypted. Our database is not reachable from the internet. CVs sit outside the web root under a random key, and every retrieval checks who you are.

No setup is watertight. If something does go wrong with your data, we will tell you where the law requires it.

Changes

If something material changes we update this statement and show the new date at the top. For a significant change we let you know by email.