Your privacy is important to us and we commit ourselves to protect and secure the privacy rights of your data.
- We process your personal data for justified purposes only. This means that the processing is necessary in order to achieve specific goals mentioned in the GDPR, or that you have given permission to process your personal data. If it is justified to process your personal data, we will do so neatly and responsibly. We make clear to you for which purposes your personal data is processed and how it is handled.
- We collect and process your personal data only for specific, expressly defined and justified purposes. If we use your data later for another purpose, we will ensure that the purpose is compatible with the original collection purpose.
- We ensure that the personal data we collect and process is sufficient for the purpose for which we collect it, relevant and limited to what is needed.
- We take all reasonable steps to ensure that your personal information is accurate and current. If your data is not (anymore), then we erase or correct it.
- We do not keep your personal data any longer than necessary for the purpose for which we process them. When the data is no longer necessary, then we destroy or erase it.
- We make sure that your personal data is secure and stays confidential. We protect your personal information against unauthorised or unlawful processing and against accidental loss, destruction or damage.
When does this policy apply
WHEN DOES THIS POLICY APPLY
This policy applies to you when:
- You provide us with your details via the contact form on the website;
- You provide us with your information for the provision of one of our services;
- When you sign up for our newsletter;
- When you register via the contact form for one of our courses;
- When you apply for one of our vacancies;
- When you visit our website.
How to contact us
HOW TO CONTACT US
We are DPO Consultancy, Reitscheweg 37, 5232 BX ‘s-Hertogenbosch, The Netherlands.
You can contact us via our contact page on the website. You can also send us an e-mail via firstname.lastname@example.org or call via +31-85-0711080.
Which personal data do we collect?
WHICH PERSONAL DATA DO WE COLLECT?
DPO Consultancy only collects personally identifiable information you provide to us.
This is the personal information that we may collect and use:
- Personal details (name, address, e-mail address, telephone number);
- Company information (address, Chamber of Commerce registration number, VAT number);
- Your surfing behaviour on the website;
- Personal data you provide to us through communication;
- Bank details;
- Interests and preferences;
- IP address.
How do we collect your personal information?
HOW DO WE COLLECT YOUR PERSONAL INFORMATION?
We receive personal data both directly from you as from external parties:
Personal data that we receive directly from you:
- When you visit our website we collect your data;
- When you leave your details through our website;
- Information that you provide to us through communication.
Personal information you provide to us about others:
You may be sharing other people’s contact information with us, such as employee contact information. However, it is your responsibility to check whether the persons whose personal data you share agree with this.
How do we use your personal information?
HOW DO WE USE YOUR PERSONAL INFORMATION?
We use the personal data only for specific purposes for which they have been provided. We process your personal data for the following purposes:
- Sending a newsletter;
- When you provide your personal data via the contact form for the delivery of one of our services;
- When you sign up for one of our courses we will use your data to finalise the registration. We may also use this information in the future to send you information about our services;
- To be able to perform a contract;
- For the handling of an application procedure;
- If you visit our website we may also use your data to improve your user experience with our website;
- In exceptional cases, we are obliged to use your personal data in criminal proceedings;
- Where appropriate and in accordance with local laws and regulations, we may also use your personal data for example in marketing and profiling. Where this is required we will ask your permission to perform all or some of these activities.
Our legal basis for processing your data
OUR LEGAL BASIS FOR PROCESSING YOUR DATA
According to the GDPR, any processing of personal data must be justified. We process your personal data on the grounds of the following justifications:
- Necessary for the performance of a contract;
- On the basis of a legal obligation;
- Our legitimate interest;
- Your consent.
NECESSARY FOR THE PERFORMANCE OF A CONTRACT
Based on Art. 6 paragraph 1 (b) GDPR we may process your personal data if the processing is necessary for the performance of a contract we have with you. Where necessary, we will ask you for permission to process personal data.
ON THE BASIS OF A LEGAL OBLIGATION
We are obliged to process your data in order to comply with tax and other legal obligations.
OUR LEGITIMATE INTEREST
Based on Art. 6 paragraph 1 (f) GDPR we may process personal data when it is “necessary for the purposes of the legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection (…).”
The interest of DPO Consultancy is to maintain a lasting relationship with you by providing our services.
Naturally, we have balanced your privacy interests and the legitimate interest of DPO Consultancy for processing this data. In our opinion, the processing of your personal data has no impact on your privacy.
In case you should disagree with the processing of your personal data on the basis of the above mentioned legitimate interest, you have the right to object.
With whom do we share your personal information?
WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
DPO Consultancy uses other parties (third-party service providers) to provide its services, the third parties do this in the capacity of processor for DPO Consultancy. We have taken the necessary technical and organisational measures to ensure that the data is processed solely for the purposes mentioned in the privacy statement.
List of used tools
LIST OF USED TOOLS
- Microsoft Office 365
- Google analytics
- Google AdWords
How long do we keep your personal data?
HOW LONG DO WE KEEP YOUR PERSONAL DATA?
- We will remove your personal information when you request it and when it is no longer required to perform any of our services;
- The law may oblige us to keep your data longer. To enter into a contractual relationship with DPO Consultancy, your data will be retained for 5 years, unless the law or relevant authorities demand from us to keep your data longer;
- When you have provided your information to receive a newsletter, we will keep your personal information for as long as you wish to receive the newsletter. When you unsubscribe, your data will be destroyed;
- If you have applied for one of our vacancies, your data will be deleted within 4 weeks after the final interview. In case you have given permission, we will keep your data for up to 12 months.
What are your rights under the GDPR?
WHAT ARE YOUR RIGHTS UNDER THE GDPR?
Under the GDPR you have several rights regarding the personal data we hold of you. At any given moment, you can submit a request to access, rectify or erase your personal information. In addition, you have the right to request restriction of the processing of your personal data, the right to object to the processing of your personal data and the right to data transfer. To claim your rights, please contact us by sending an e-mail to email@example.com. We may ask you to identify yourself, so that we know for sure that we do not provide personal data to the wrong persons.
When you have given permission, you can revoke it. We hereby note that the withdrawal of your consent shall have no retroactive effect.
Right to lodge a complaint to the supervisory authority
RIGHT TO LODGE A COMPLAINT TO THE SUPERVISORY AUTHORITY
To lodge a complaint against the processing of your personal data, please contact us. You also have the right to lodge a complaint to the local data protection authority. In The Netherlands this the so-called Autoriteit Persoonsgegevens.
You can contact the data protection authority in the following ways:
- Telephone: (+31) 900 2001 201
- Online: https://www.autoriteitpersoonsgegevens.nl
- Mail: P.O. Box 93374, 2509 AJ The Hague, The Netherlands
Reporting a data breach
REPORTING A DATA BREACH
Despite our efforts, incidents unfortunately occur and a data breach can arise. A Aata breach is in short a breach of security in which the personal data (inadvertently or intentionally) has been lost, provided, accessed or made accessible. As a result of a data breach, personal data may get in the wrong hands.
If you suspect that there is a data breach at DPO Consultancy, you can report it by calling or e-mailing us (see our contact details). It is important to do this as soon as possible, so we can take measures as soon as possible.
In case your personal data is involved in a data breach:
- Then we inform you how this has happened and which personal data is concerned;
- Which measures we have taken to prevent (possible) damage.
What are cookies and how do we use them?
WHAT ARE COOKIES AND HOW DO WE USE THEM?
- If you want to check which type of cookies you accept when visiting our website, you can do so in your browser settings.
- The cookies we use may change. For more info check out https://www.dpoconsultancy.nl/en/cookie-statement/
How to delete cookies
HOW TO DELETE COOKIES
- Most web browsers will accept cookies, but if you would rather prefer that we do not collect any data from you in this way, you can use the privacy settings of your browser to choose to accept all cookies, accept some cookies or refuse all cookies. However, rejecting all cookies means that it may be possible that you can not benefit from all the functions of our website and/or leave a job application with us. Each browser is different, so check your browser’s help menu to see how you can change cookie preferences;
- For general information about cookies, including how to disable them, you can visit https://www.aboutcookies.org/. There you will find details on how to remove cookies from your computer.