In this privacy statement we will explain what information we process from you if we have, want to have or have had a business relationship with you. We will also tell you why and for how long we process your data and what your rights are with regard to each processing. In addition, we will also provide information about the parties we work with and about our security policy.
We believe it is important that our services are reliable and transparent. We therefore treat your personal data with discretion and care and ensure that any processing of your data complies with the applicable laws and regulations.
The Responsible Party is:
Albert Cuypstraat 36-2
We have appointed a Privacy Manager. This is not a ‘data protection officer’ as referred to in Article 37 of the GDPR. However, it is someone who ensures that your data is processed in accordance with the law. The activities of the Privacy Manager include monitoring and dealing with questions and complaints. The contact details of our Privacy Manager are:
Iris Sloof, firstname.lastname@example.org, +31638500594.
Depending on your relationship with our organization and the purpose for which we process data, we note (always some of) the following data:
We process your personal data for the following purposes:
The processing grounds are those referred to in Article 6 of the GDPR (consent, agreement or legitimate interest).
We do not make decisions on the basis of automated processing on matters that may have (significant) consequences for individuals. These decisions are made by computer programs or systems, without a human being (for example, one of our employees) being involved.
In general, we will not retain your data any longer than necessary for the purposes for which we have collected your data. The retention period may vary from case to case. For example, we may need to retain a number of documents for a minimum period of time for tax or administrative purposes. In such cases, we will only retain data that is necessary to comply with our legal obligations. After the legal retention period, we will delete or anonymize your data.
We do not share your personal data with third parties, unless this is done in the context of executing an agreement with you and in order to comply with any legal obligation. To the extent that these third parties are to be regarded as processors, we have entered into a processing agreement with these third parties in which, among other things, security, confidentiality and your rights are arranged. We remain responsible for these processing operations.
We engage third parties in the manner and on the grounds described above for the following categories of processing:
We use the following cookies:
cookies with a purely technical functionality. These ensure that the website works properly and that, for example, your preferred settings are remembered. These cookies are also used to make the website work properly and to optimize it.
You can unsubscribe from cookies by setting your internet browser in such a way that it no longer stored cookies. In addition, you can also delete all information previously stored via your browser settings.
Your rights with regard to the processing of your data are explained below
You have the right to access your own data. This includes the questions on what the purpose of processing is, to which parties the data is provided and what the retention periods are.
You can ask us to rectify your data immediately. You also have the right to complete incomplete data, for example by sending us an email.
You have the ‘right to be forgotten.’ Upon request, we will erase your data without unreasonable delay. However, we may not always delete all of your data. Sometimes the processing is still necessary, for example, to comply with legal obligations or to make, exercise or substantiate claims.
In principle, you have the right to have the processing of your data restricted, for example if you believe that your data is incorrect or the processing of the data unnecessary.
Unless it is impossible or involves a disproportionate effort, we will notify the recipients of your data of any rectification, deletion or restriction of the processing.
You have the right to transfer data. This means that you can make a request to receive your data. You can then save this data for personal reuse. You only have this right in relation to data that you have provided us yourself and if the processing is based on consent or an agreement to which you are a party.
If the data processing is based on consent, you have the right to revoke that consent at any time. However, the processing of your data for the period prior to withdrawal remains lawful.
In principle, you have the right to object to the processing of your data. After your objection we will in principle stop the processing of your data.
If you are of the opinion that the processing of your data violates the law you can contact our Privacy Manager, but you also have the right to lodge a complaint with the Personal Data Authority (AP) or go to court.
Sometimes we may restrict your rights, for example in the context of the prevention, investigation, detection and prosecution of criminal offences, such as fraud.
Any request can be addressed to our Privacy Manager. To make sure that a request has been made by you, we ask you to enclose a copy of your ID with the request. In this copy, make your MRZ (machine readable zone, the strip with the numbers at the bottom of the passport), passport number and citizen service number (burgerservicenummer) black. This is to protect your privacy.
We take the protection of your data seriously and take appropriate measure to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. If you have the impression that your information is not properly secured or there are indications of misuse, please contact our privacy manager.
We may amend this statement if developments give cause to do so, for example in the case of new forms of processing. The most current privacy statement can be found on our website. We recommend that you consult this privacy and cookie statement regularly so that you are kept informed of the changes.
11 October 2021