Privacy Statement

Privacy statement DBA.nl BV

Relation: DBA.nl BV and the underlying labels, websites and company names

We respect the privacy of everyone who comes into contact with DBA.nl. We are happy to ensure that the personal information you provide to us is treated confidentially. Processing of personal data is done in accordance with the requirements of the General Data Protection Regulation. This privacy statement describes how DBA.nl handles personal data.

Our privacy and cookie statement in brief

We adhere to the General Regulations when processing personal data
data protection. This means that we:

Clearly define our purposes before we process your personal data, via this privacy and cookie statement.
Store as little personal data as possible and only the data that is necessary for our purposes.
Explicitly request permission for the processing of your personal data, if permission is required.
Take necessary security measures to protect your personal data. We also impose these obligations on parties that process personal data for us.
Respect your rights , such as the right to inspect, correct or delete your personal data processed by us.

Purposes of the processing

By using our services or visiting our website www.dba.nl, we obtain different types of personal data from you. For each purpose, it is indicated below which data we obtain from you, for what purpose we process this data and for how long it is stored. If you have any questions or want to know exactly what we keep track of you, please contact us using the details at the bottom of this privacy statement.

Providing our services

As an organization you can make use of our services.

For this we process the following personal data:

• name contactperson
• (Business) phone number
• (Business email address
• Organization name
• Payment details
• Billing information
• Any content of correspondence

We use this data to be able to perform the agreement that we enter into with you and to maintain the relationships that arise from this. We keep this data for the duration of the agreement. We keep some data for longer if we are obliged to do so (for example because of the fiscal retention period of seven years).

Contact

When you send an e-mail message, use our contact form, contact us by telephone or contact us in any other way, you accept our offer to contact us (execution of the agreement). For this we process the following personal data:

• Name
• E-mail address
• Any information you enter yourself as the content of a message

We use this information to properly handle your request to contact you and to execute the agreement with you. We will keep this information until we think you are happy with our response.

Newsletter

Periodically we send a digital newsletter by e-mail with promotions to our customers. We will only send this newsletter (consent) to customers who have indicated that they wish to receive the newsletter. We only use the subscriber file for sending the mailing. The subscriber file of the newsletter is not provided to third parties.

For this we process the following personal data:

• Name
• E-mail address

We keep your personal data until you unsubscribe from the newsletter. You can unsubscribe from these messages at any time. Every newsletter contains an unsubscribe link.

Apply

Have you responded to one of our vacancies or have you sent in an open application? Then we process your personal data to be able to process your application and to prepare for the possible conclusion of an employment contract.

For this we process the following personal data:

• Name and address details
• Contact details (email address and telephone number)
• Curriculum vitae
• Motivation letter
• Salary indication
• References
• Any other information you send with your application

We keep your application data for a maximum of 6 weeks after the position has been filled. We keep this information so that we can contact you in the event that the position becomes available again during the trial period. If we are unable to offer you a position at this time, we can – with your permission – keep the application data for another year. You can withdraw your consent at any time by sending us an email. If you come to work for us, we will keep your application details in your personnel file. This file is kept for as long as necessary and with regard to the application data for a maximum of 2 years after employment.

A social media and internet survey can be part of the application procedure. This is necessary to ensure that our image is maintained when hiring new staff. We therefore do this on the basis of our legitimate interest. We search for your name on Google, and your profile on various social media. This of course insofar as these profiles are public; we will not ask you to grant us access to a restricted social media page or connect with us. The results of the investigation can be discussed with you. If you object to this, you can indicate this by e-mail when you apply.

Use of our customer portal

You can create calls for incidents and requests yourself via our customer portal. It is also possible to view the progress of the calls and to add additional information. Employees of DBA.nl customers can receive a username and password to log in to the private area of the DBA.nl website.

For this we process the following personal data:

• E-mail address
• User name
• Any information you send through the customer portal

We need this information to be able to offer the account environment to our customers (execution of the agreement). We keep this information for the duration of your account. As a user, you are responsible for handling the username and password with care. We assume that a person who logs in with a username and password is authorized to use it. If you suspect that the password is known to unauthorized persons, you must inform DBA.nl of this as soon as possible so that measures can be taken.

Disclosure of information or data to third parties

DBA.nl does not provide personal data to third parties other than pursuant to the law, at your request or to processors who perform certain activities on behalf of DBA.nl. Transfer of personal data only takes place in strict order and on the basis of your approval.

The parties that process personal data on our or your instructions are:

• Payment service providers
• Cookie service providers
• IT suppliers and service providers
• Marketing companies

In order to provide this service, DBA.nl may provide your personal data to parties established outside the European Economic Area (EEA). DBA.nl will only do this if there is
an adequate level of protection for the processing of personal data.

Security

DBA.nl takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized changes. The DBA.nl website has a TLS layer that ensures a secure connection between server and browser. You can see this by the lock and/or the word ‘secure’ in the address bar of your browser. Information that you provide to us via our website is therefore sent to us securely. If you have the impression that your data is not properly secured or there are indications of misuse, please contact us.

Sharing ability social networks and third party websites

Our website may contain buttons to promote (“like”) or share (“tweet”) web pages on social networks such as Facebook, Twitter, Google+ and LinkedIn. These buttons work by means of pieces of code that come from Facebook respectively Twitter and LinkedIn themselves. Cookies are placed through this code. We have no influence on that. Read the privacy statement of Facebook , Twitter , Google and LinkedIn (which can change regularly) to read what they do with your (personal) data that they process via these cookies. The website may also contain links to third party websites. Although these website(s) have been selected with care, DBA.nl bears no responsibility with regard to these third parties and the way in which they handle (personal) data.

Cookies

We use some cookies from ourselves and from third parties on this website. Cookies are information files that can be automatically stored on or read from the visitor’s device (such as PC, tablet or smartphone) when visiting a website. This is done via the web browser on the device.

We and third parties use cookies to:

• enable functionalities of the website (technical and functional cookies);
• analyze the use of the website and on that basis make the website more user-friendly
  create (analytical cookies);
• show personalized advertisements (marketing cookies).

These cookies collect the following information from you:

• IP address
• Cookie ID
• Application and click behavior
• Referrer URL

When you visit our website for the first time, we show a message with an explanation about cookies. In so far as we are obliged to do so, we will ask for your consent to the use of cookies. For more information about cookies and which cookies we use, see our cookie statement .

Enabling and disabling cookies

You can set your web browser to accept the storage of cookies only if you agree. For more information, please refer to your browser’s manual. Please note: many websites do not work optimally if the cookies are disabled.

Delete cookies

Most cookies have an expiration date. If an expiration date is set, the cookie is automatically deleted when the expiration date expires. You can also choose to manually delete the cookies before the expiration date has passed. Consult the manual of your browser for this.

Your privacy rights

If you have any questions or want to know what personal data we have about you, you can always contact us using the contact details below.

You have the following rights:

• Right of access: you have the right to view the personal data that we process about you.
• Right to rectification: you have the right to have the personal data that we process about you
  correct or supplement if they are incorrect or incomplete.
• Right to object: you can object to the processing of your personal data and
  against direct marketing. • Right to erasure: you can request that we delete your personal data.
• Right to withdraw your consent: if you have given us your consent to
  process personal data, you can revoke this consent at any time.
• Right to data portability: if it is technically possible, you have the right
  to have the personal data that we process about you transferred to a third party.
• Right to restriction of processing: in some cases you can request us to
  processing your personal data (temporarily or otherwise).

To ensure that the request for access has been made by you, we ask you for (identification) data to verify your identity. DBA.nl will respond to your request as soon as possible, in principle within four weeks. However, this period can be extended by two months for reasons related to the specific privacy rights or the complexity of the request. If we extend this term, we will inform you in good time. If you want to exercise one of your rights, you can make this known via ib@dba.nl.

To file a complaint

If you have any questions or would like to submit a complaint about the use of your personal data, you can contact us using the contact details at the bottom of this privacy statement. We handle every question and complaint internally and communicate this further with you. However, if you feel that we are not helping you in the right way, you can contact the Dutch Data Protection Authority to file a complaint.

Adjust privacy statement

We reserve the right to change this privacy statement. Changes will be published on this website. DBA.nl therefore advises you to regularly check this page to see whether changes have been made.

Contact

DBA.nl BV

visiting address
Archimedes lane 20
3439 ME Nieuwegein

Mailing address
PO Box 43
3430 AA Nieuwegein

Email: ib@dba.nl
Chamber of Commerce number: 30178605 Utrecht

The current Privacy Statement was updated on June 17, 2021