TEGEMA PRIVACY STATEMENT

Transcription

1 TEGEMA PRIVACY STATEMENT In the context of providing its services, Tegema collects information about identified or identifiable persons (hereinafter Personal Data ). We set great store by informing you about the Personal Data that Tegema collects, the purposes for which we use these Personal Data and how long we retain these Personal Data. We have attempted to give a transparent description of all this in this Privacy Statement. In any event, Tegema warrants that Personal Data are collected and used carefully and in accordance with the law. You are advised to read this Privacy Statement carefully before you use our services. 1. Table of contents The following topics are addressed in this Privacy Statement: 1. Table of contents 2. Who is Tegema? 3. Contact with Tegema 4. Tegema s services 5. Additional services 6. Newsletters 7. Statistical surveys 8. Job applications 9. Retention of Personal Data 10. Disclosure to third parties 11. Protection of your Personal Data 12. What are your rights? 13. Changes to this Privacy Statement 15. Any questions or complaints? 2. Who is Tegema? Tegema is responsible for how Personal Data are collected, used and stored in the context of its services. The Tegema entities listed below are jointly considered to be the controller and exchange Personal Data between themselves where necessary. These entities are jointly referred to as Tegema in this Privacy Statement. Tegema Eindhoven B.V. Science Park Eindhoven EA Son en Breugel Chamber of Commerce no Tegema Engineering Services B.V.

2 Science Park Eindhoven EA Son en Breugel Chamber of Commerce no MA3 Solutions B.V. Science Park Eindhoven EA Son en Breugel Chamber of Commerce no Tegema Arnhem B.V. Utrechtseweg 310 gebouw B AR Arnhem Chamber of Commerce no. [insert] 3. Contact with Tegema If and when you contact Tegema because you have a question or a complaint about Tegema s services, we will store your contact details and your question or complaint. Tegema may ask you to provide more Personal Data if Tegema believes this is necessary for answering the question or handling the complaint. The Personal Data collected in this manner are used to answer the questions concerned and to handle complaints, as well as for other purposes. This processing of your Personal Data is necessary to promote Tegema s legitimate interest, which is its interest in efficiently serving you, as a customer. These conditions also apply if you submit a request to Tegema for access to the Personal Data that Tegema stores about you or if you ask Tegema to alter or remove certain Personal Data. More information about how these requests can be submitted is included in section Tegema s services If you use Tegema s services, Tegema will collect some Personal Data. These are Personal Data about you as a supplier and about your employees. We also collect Personal Data of the staff you loan out to us within the context of an agreement concluded with Tegema. Specifically, we collect the following information: Customer i) name and position of contact and other relevant employees ii) address and telephone number of contact and employees On loan staff i) name and address ii) telephone number iii) address iv) position v) date of birth

3 vi) place of birth vii) Citizen Service Number (CSN) viii) copy of identity document (CSN obscured) ix) level of education x) employee loan agreement and rate xi) family information (partner and any children): name/date of birth xii) marital status xiii) sickness absence records xiv) holiday records xv) Chamber of Commerce number (self-employed persons only) xvi) VAT number (self-employed persons only) xvii) copy of liability insurance (self-employed persons only) In addition to the other purposes discussed in this Privacy Statement, we use the Personal Data provided first of all to provide our services. This use of Personal Data is necessary to perform any agreement to which you and/or the on loan staff are party. 5. Additional services Tegema offers you the option of using additional services as part of the Account. This includes participation in loyalty schemes, promotions or special offers. You may be required to provide additional Personal Data to make use of these additional services. The purposes and grounds for the processing of additional Personal Data will be communicated to you when you provide them. Tegema processes the Personal Data you provide for additional services first of all to offer you the additional services. Tegema will also link these Personal Data to your existing Account. 6. Newsletters You may subscribe to newsletters sent by Tegema. If you have subscribed to the newsletter, Tegema uses the address you stated for receiving the newsletter. Tegema may also use your name and/or sex to personalise the newsletter. If you no longer wish to receive newsletters, you can use the unsubscribe link included in every newsletter. Tegema processes your address for direct marketing purposes based on its legitimate interest in sending you the newsletter and other information related to Tegema. 7. Statistical surveys Tegema aims to provide services of the highest quality. In this context, it is necessary for Tegema to continuously conduct statistical surveys, allowing Tegema to adapt its services where necessary. Tegema may use your Personal Data for these statistical surveys. Tegema does so based on its legitimate interest in carrying out statistical surveys to improve the quality of its services. Only

4 Tegema employees who have been specially designated for this purpose have access to your Personal Data. The survey results are always aggregated. This means that the information in the survey results cannot be traced back to you personally. 8. Job applications If you send us a job application letter, with or without enclosures such as a CV, we store the letter and enclosures, as well as the Personal Data they include, i) to determine whether we will accept the application and, if so, ii) to carry out and conclude the selection procedure. We perform these processing operations in the context of our legitimate interest. If the application does not result in an appointment, we may ask for your consent to retain the application letter with enclosures, as well as the Personal Data they include, in a separate filing system. We do so based on our legitimate interest in being able to approach persons who have applied, in order to offer them an appointment after a certain period. If no consent is given to include the Personal Data in a filing system, we will remove the application letter and enclosures, as well as the Personal Data, after a period of four (4) weeks. 9. Retention of Personal Data Tegema will not retain Personal Data longer than is necessary to fulfil the purposes for which the Personal Data were obtained. 10. Disclosure to third parties Tegema will not disclose your Personal Data to third parties (other than processors engaged by Tegema) for direct marketing purposes for example for sending you offers without your consent. In some instances, Tegema may use third parties when offering its services, for example to host its central database. Agreements between Tegema and these third parties are in place which contain arrangements about the technical and organisational measures they must implement to protect your Personal Data. In principle, your Personal Data are stored within the European Economic Area (hereinafter EEA ). However, it may be the case that Tegema stores certain (pseudonymised) Personal Data on servers outside the EEA. Wherever Tegema stores the Personal Data, it will ensure that this storage is always in accordance with the law. Tegema may also provide your Personal Data to third parties if you have consented to this. Tegema may also disclose Personal Data to third parties if these Personal Data cannot be traced back to you personally (since, in that case, they are no longer Personal Data). Finally, Tegema

5 may disclose your Personal Data to third parties if it is obliged to do so pursuant to the law, if it believes this is necessary in legal proceedings or if it believes it must protect its rights. 11. Protection of your Personal Data Tegema sets great store by the proper security of your Personal Data. Consequently, Tegema has implemented appropriate technical and organisational measures to protect your Personal Data against loss or any form of unlawful processing. 12. What are your rights? You, as a data subject, have a number of rights pursuant to privacy legislation. This section of the Privacy Statement states which rights they are and how you can exercise them. Response We will attempt to respond to any request as soon as possible, and in any event within one month. However, it is possible that we will need more time. If that is the case, we will inform you of this before the end of the month referred to above. The extra time will be no more than two months. Requests can be made through administratie@tegema.nl. Please also include a valid identity document to confirm to us that the Personal Data you are requesting are in fact your Personal Data. We ask you to obscure the Citizen Service Number (CSN) shown on your identity document. We may reject a request you make, for example because your request is unfounded or excessive or because we cannot, or need not, comply with your request from a legal point of view. We will also inform you of any rejection. We would like to point out to you that if we do reject a request you make, you have the right to file a complaint with the Dutch Data Protection Authority. Right of access You have the right to submit a request to ascertain whether we process any Personal Data concerning you. If we do, we will provide you with a copy of the Personal Data collected about you in accordance with the law. Right to rectification You have the right to submit a request for rectification of incorrect Personal Data concerning you. If possible, you also have the right to provide additional Personal Data to complete the collection of your Personal Data. Right to be forgotten

6 You have the right to request that (certain) Personal Data concerning you be removed (the right to erasure). If your request is granted, we will remove the relevant Personal Data. Right to restriction You have the right to submit a request for the restriction of your Personal Data. This means that if the request for restriction is granted, we will not process your Personal Data any further during the term of the restriction, unless this is permitted by law. Right to object Under certain circumstances, you have the right to object to the processing of your Personal Data, for example if we process your Personal Data based on a legitimate interest. If you submit an objection, we will weigh your privacy interests against our business interests. If your interest outweighs ours, we will stop any further processing your Personal Data. You can always object to the processing if your Personal Data are used for direct marketing. In that case, we will stop processing your Personal Data for that purpose. Right to data portability You have the right to submit a request for data portability. If applicable, we will make the data covered by this right available to you in a structured, commonly used and machine-readable format, allowing you to transmit them to a third party. 13. Changes to this Privacy Statement This Privacy Statement may be changed. The changes will be announced in a manner to be determined by Tegema. The latest version of the Privacy Statement dates from 1 June Any questions or complaints? If you have any questions about this Privacy Statement you can send Tegema a message via administratie@tegema.nl. If you have a complaint about the use of your Personal Data and you cannot find a solution with Tegema, you may also file the complaint with the Dutch Data Protection Authority. ***