This privacy and cookie statement provides insight into how we handle your personal data, the use of cookies on this website, and how you can exercise your rights regarding your personal data.

This privacy and cookie statement does not apply to third-party websites that may be visited via links on this website.

 

Which personal data do we use and why?

We process your personal data for various purposes. Below you can see which purposes these are and which personal data are used for each purpose.

1. To communicate with you, the following personal data are processed:

  • (Company name incl. contact person + job title)
  • First and last name
  • Email address
  • Telephone number

Retention period: A maximum of 1.5 years, unless you agree that your personal data may be retained for a longer period.

Legal basis: Legitimate interest and consent if retained longer. We process the personal data for a maximum of 1.5 years in order to determine when and about what we last had contact. This allows us to respond more easily if you contact us again. We have carefully weighed our interest against your privacy interest and will, of course, not process more personal data than strictly necessary.

2. To conclude and perform an agreement with you, the following personal data are processed:

  • (Company name incl. contact person + job title)
  • First and last name
  • Address
  • Email address
  • Telephone number

Retention period: We process these personal data for the duration of the agreement as well as 1.5 years after termination of the agreement.

Legal basis: Necessary for the performance of the agreement and legitimate interest. We process the personal data for up to 1.5 years after termination of the agreement in order to determine what a customer has purchased from us and under which conditions, or to determine which services a cooperation partner previously performed for us. This allows us to respond more easily if you contact us again. We have carefully weighed our interest against your privacy interest and will, of course, not process more personal data than strictly necessary.

3. To be able to prepare quotations and invoices, the following personal data are processed:

  • (Company name incl. contact person + job title)
  • (Chamber of Commerce number)
  • (VAT number)
  • Address
  • Email address
  • Customer number
  • Invoice number
  • Bank account number

Retention period: We retain quotations, invoices, and payment details for 7 years in order to comply with tax retention obligations.

Legal basis: Necessary for the performance of the agreement and to comply with a legal obligation.

4. To provide hosting services for you, the following personal data are processed:

  • IP addresses

Retention period: Approximately 3 months. In connection with incident prevention, data are retained so that they can be reviewed for one quarter.

Legal basis: Performance of the agreement.

The aforementioned personal data have been provided to us by you, or we have obtained them via the Trade Register of the Chamber of Commerce. We do not process personal data for purposes other than those for which the data were collected.

You are not legally obliged to provide personal data to us; however, we will not be able to communicate with you, issue quotations, or enter into an agreement with you if you do not provide the aforementioned data.

With whom do we share your personal data?

Your personal data may be received by processors we use. We make use of the following processors:

  • Hosting provider
  • Invoicing system
  • Accountant
  • Cooperation partners
  • Google Mail
  • Google Analytics

We have entered into a data processing agreement with all processors, both within and outside the European Union.

Unfortunately, it is not always possible to process personal data exclusively within the European Union. When personal data are processed outside the European Union through us, this will only take place by companies established in a country designated as adequate by the European Commission or that are affiliated with the Privacy Shield program of the U.S. Department of Commerce.

We do not sell your personal data to third parties and only disclose them if this is necessary for the performance of the agreement with you, because you have given consent, or to comply with a legal obligation.

Which security measures have we taken?

To protect personal data against unlawful processing or loss, we have taken the necessary technical and organizational measures. For example, the website is equipped with an SSL certificate, no unknown/open Wi-Fi is used, personal data are encrypted during transmission, we use two-factor or multi-factor authentication, maintain a data breach register, require equipment and email to be secured with passwords and antivirus software, and have rules for choosing, recording, and renewing passwords.

When we use other parties, so-called processors, we ensure that they have also taken adequate measures.

If, despite these security measures, you believe that your personal data are not properly secured or there are indications of misuse, please contact us as soon as possible using the contact details below.

Cookies

We use cookies on this website. Cookies are text files that are stored on your computer or mobile device when you visit the website. Functional, analytical, and tracking cookies are placed via our website. Tracking cookies are only placed with your consent.

Functional cookies ensure that the website functions properly. These cookies are used, for example, to read your browser settings in order to display the website correctly on your screen or to enable filtering/searching on a website. Read more about cookies on the ConsuWijzer website.

Most browsers automatically accept cookies (this explicitly does not apply to tracking cookies), but you can adjust your browser settings to refuse cookies. You must do this again for each browser and each computer. More information about enabling, disabling, and deleting cookies can be found in the instructions below and/or via your browser’s Help function.

https://www.consumentenbond.nl/internet-privacy/cookies-verwijderen

Google Analytics

An analytical cookie from Google Analytics is placed via this website. We use this service to track and obtain reports on how visitors use the website. Google may provide this information to third parties if Google is legally obliged to do so, or insofar as third parties process the information on Google’s behalf. We have no influence over this. Read Google’s privacy policy (which may change from time to time) as well as the specific Google Analytics privacy policy to learn what they do with the (personal) data they process via these cookies. We have not given Google permission to use Analytics information obtained via us for other Google services. The information collected by Google is anonymized. Your IP address is explicitly not shared. Google states that it adheres to the EU-US Privacy Shield principles and is affiliated with the Privacy Shield program of the U.S. Department of Commerce. This means that there is an adequate level of protection for the processing of any personal data.

Social Media buttons

You will find social media buttons in various places on the website that allow you to follow us on the relevant channel or easily share content posted by us. These social media channels collect information via cookies they place. These include social media buttons from Facebook, Google Plus, and YouTube. Click on the name of the channel in the previous sentence to review their privacy policies (which may change from time to time) and to learn what they do with the information collected via cookies. The information they collect is anonymized as much as possible and transferred to and stored by Facebook, Google Plus, and YouTube on servers in the United States. Facebook, Google Plus, and YouTube state that they adhere to the EU-US Privacy Shield principles and are affiliated with the Privacy Shield program of the U.S. Department of Commerce. This means that there is an adequate level of protection for the processing of any personal data.

What rights do you have regarding your personal data?

Right of access

You have the right to inquire whether your personal data are being processed and to receive a copy thereof.

Right to rectification

You have the right to have incorrect personal data corrected or to provide a supplementary statement regarding incomplete personal data.

Right to erasure / right to be forgotten

We are obliged to erase your personal data at your request without unreasonable delay if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, you withdraw your consent and there is no other legal ground for processing, you have legitimately objected to the processing, the personal data have been unlawfully processed, the personal data must be erased to comply with a legal obligation, or the personal data were collected in connection with a direct offer of information society services to a child.

Right to restriction of processing

The right to restriction means that, at your request, the processing of your personal data is temporarily put on hold. The data may then only be processed with your consent, for the establishment, exercise, or substantiation of a legal claim, to protect the rights of others, or for reasons of important public interest of the European Union or a Member State. Restriction of processing is possible if the accuracy of the personal data is contested by you, the processing is unlawful and you request restriction instead of erasure, we no longer need the personal data, or you have objected to the processing.

Right to data portability

The right to data portability applies only to processing carried out by automated means based on your consent or the performance of our agreement with you. It means that you have the right to receive your personal data in a structured, commonly used, and machine-readable format. The essential difference from the right of access is therefore the manner of obtaining the data. A condition is that the data concern information you have provided to us yourself. You may request us to transfer these data directly to a third party (the new controller).

Right to object

You have the right to object to the (further) processing of your personal data, for example when the processing is based on the legitimate interest ground.

Right not to be subject to automated individual decision-making / profiling

We do not use automated individual decision-making or profiling.

Submitting a request

If you wish to exercise any of these rights, you may submit a request via the contact details below.

To ensure that the request for access has been made by you, we ask you to include a copy of your identity document with the request. In this copy, black out your photograph, MRZ (machine readable zone, the strip with numbers at the bottom of the passport), passport number, and citizen service number (BSN). This is to protect your privacy.

You will receive a response as soon as possible, but in any case within one month. If it concerns a complex or extensive request, this period may be extended by two months, which will also be communicated to you within one month.

Complaint

If you believe that we do not comply with privacy legislation, you may file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). See https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons.

Changes

This privacy and cookie statement may be amended, for example in connection with changes in business operations or changes in laws and regulations. It is recommended to consult this privacy and cookie statement regularly so that you are aware of any changes in a timely manner.

Contact

For requests, questions, or complaints, you may contact Webatleten as registered in the Trade Register of the Chamber of Commerce under number 77034120, via:

Webatleten

Attn. Jeroen Kloppenburg
Prins Willem-Alexanderlaan 1427
7312 GB Apeldoorn

T: +31 6 42677371

E: info@webatleten.nl

Privacy and Cookie Statement Webatleten

--
Version January 2024