Processing of personal data
What is personal data?
Personal data is any data that can identify a natural person (directly or indirectly). Personal data can therefore be a name or telephone number, but also a date of birth or IP address for example.
Which personal data does BPM Company process and why?
We collect personal data for the purposes and on the basis set out below. To the extent that we collect data through cookies, you can find more information about this in the Cookie statement.
Possibility to ask questions and apply
Via our Website you can ask us a question and / or apply to us. To answer the question to you, we ask you to enter your name and e-mail address. When applying, we ask you not only to enter your name and email address, but also to share the URL of your public profile on LinkedIn with us. In the case of an application, we will use your email address to inform you about the progress of the application process. Your public LinkedIn information will be used to consult your curriculum vitae.
BPM Company has a legitimate interest on the basis of Article 6, paragraph 1 (f) of the AVG to process this personal data in order to be of service to you. Use of your contact details to contact you is not a necessary legal or contractual condition. However, if you do not provide this information to us, we will not be able to assist you.
Sharing of personal data
We may share personal data with third parties in the context of services such as data storage, maintenance, security or other similar services (hereinafter: “processors“). If we grant access to your personal data, we require third parties to treat your personal data confidentially and only process your personal data for our benefit.
We will further not provide your personal data to a third party that is not engaged by us to enable the intended use of the website, unless this follows from a legal obligation or if this follows from a legal request.
We do not share data outside the European Economic Area (“EEA“).
Security
We have taken appropriate technical and organizational measures to protect your personal data against loss or any other form of unlawful processing. In addition, we require our processors to also take such appropriate technical and organizational measures.
Retention periods
We will not keep your personal data for longer than is necessary for the purposes for which your personal data is collected, unless legal provisions provide otherwise.
What are my privacy rights?
You have the right to request us to:
– provide insight into your personal data
– have it supplemented, corrected or deleted
– to object to the processing of your personal data
– limit your personal data and / or
– to receive your personal data or have it passed on to a third party (data portability)
We will provide you with information about the actions we have taken as a result of your request as soon as possible, but in any case, within one month of receiving your request. We can extend this period by two months due to the complexity of your request or the number of requests that we receive. We will inform you in that case.
You generally have the right not to be subject to exclusively automated decision-making, including profiling, unless there is an exception.
Finally, you have the right to submit a complaint to the Dutch Data Protection Authority at any time.
Changes to the privacy statement
We may adjust this privacy statement from time to time.
