Name: Nedco B.V.
Physical and postal address: ’s-Gravenweg 346, 2911HA Nieuwerkerk aan den IJssel
Chamber of Commerce number: 29050322
General phone number: 0180-317199
General e-mail address: firstname.lastname@example.org
Nedco has not appointed a data protection officer. If you have any questions, or if you want to exercise your individual rights, you can contact Nedco’s privacy contact person. Nedco will answer your message within a month.
Privacy contact data
Contact person: J. Nederlof
E-mail address: email@example.com
Phone number: 0180317199
In the context of the employment relationship, Nedco processes several personal data. The personal data of employees which Nedco processes include amongst others:
Nedco has collected these personal data from you personally. If Nedco intends to acquire personal data of you via a third party, you will be extra informed by Nedco according to the applicable laws and regulations.
Nedco collects your personal data primarily to be able to implement – in its widest sense – the employment contract that Nedco has concluded with you. Processing takes place particularly in personnel administration, absence registration, ICT systems and payroll administration.
The purposes of Nedco processing your personal data are as follows:
Nedco processes the acquired personal data only for above purposes. If Nedco intends to process your personal data for other purposes, Nedco will contact you to give you the opportunity to object to further processing. This will take place before any possible further processing, and information about this other purpose and all further relevant information will be shared with you during this consultation.
Processing as part of the aforementioned purposes always has at least one legal ground. These legal grounds are explained below.
Implementation of (employment) agreement
In many cases, Nedco processes your personal data to implement your employment agreement.
Meeting legal obligations
In many cases, Nedco processes your personal data to be able to meet a legal obligation incumbent upon Nedco.
Balance of interests
Furthermore, processing your personal data is sometimes necessary for the representation of the legitimate interests of Nedco or of any third party. In that situation, Nedco assesses whether your interests and fundamental rights outbalance those legitimate interests. Only if that is not the case, Nedco processes your personal data based on the balance of interests ground.
In case processing your personal data is based on the legal ground of balance of interests, Nedco will inform you about this and specify the relevant legitimate interests.
In principle, as an employer Nedco will not (only) base any processing of your personal data on your consent. For processing based on your consent, you would namely be required to give free, explicit, unambiguous consent. Because an employer-employee relationship exists between Nedco and you, it is assumed that in most cases you cannot give your consent in full freedom. This assumption knows exceptions: if Nedco provides additional safeguards to ensure you can consent or reject in full freedom, without the risk of being impaired, free consent can still be realised. In that case, Nedco can base processing on your consent. If this situation occurs, you will be informed about this beforehand.
If Nedco processes personal data on the ground of your consent, you are always entitled to withdraw this consent. If processing takes place exclusively on the ground of your consent, no further processing may be performed after the withdrawal of your consent. Withdrawing consent shall not affect the legitimacy of any consent-based processing performed before the withdrawal.
Nedco will inform you beforehand about any situations in which you will be required to provide personal data which subsequently have to be processed by the Finance/HR departments on the grounds of:
In that case, you will also be informed about the ensuing consequences if you might refuse to provide these personal data. In general, Nedco can – in case you refuse to provide certain personal data – draw any consequences they deem appropriate in the particular situation.
Concerning your personnel file specifically, Nedco will retain this file – as advised by the Data Protection Authority – up to two years after the end of your employment agreement. This term can be shorter or longer in individual cases, if the data concerned are no longer relevant, or are indeed relevant for a longer time.
Data from our payroll administration that are fiscally relevant are retained by Nedco – in compliance with the legal retention period – up to seven years after your resignation.
Nedco retains income tax declarations and a copy of your identity document, in compliance with the Wages Tax Act 1964, up to 5 years after the end of your employment agreement.
For retaining any other personal data, no legally or internally pre-set periods apply. Nedco applies the principle that your personal data should no longer be retained than strictly necessary for the purposes your personal data were collected for. Whenever your personal data are no longer relevant for the purposes mentioned, Nedco will delete them.
Nedco exchanges your personal data with third parties. This concerns, among others, the following recipients:
In case any of the aforesaid parties takes the role of processor, Nedco will conclude a data processing agreement with them in order to safeguard the protection of your data.
Personal data are not processed in countries outside the European Union.
Based on the GDPR, you are entitled to several rights concerning your personal data:
In case you want to exercise your rights, you can submit a request via the contact details mentioned in this letter. Note: the rights mentioned above are not absolute. I.e. Nedco is not always obliged to grant a request for exercise of one of the rights mentioned above.
Nedco will inform you within a month after Nedco has received your request for exercise of one of the aforementioned rights. In doing so, Nedco will communicate whether and how your request will be granted, and if not, why not. Provided that this is necessary in consideration of the request, Nedco can extend the month-long response term. In that case, Nedco will inform you within one month about the term within which they will reply. Exercising your right(s) will in principle be free of charge.
It is possible that, despite Nedco’s prudent approach, you have a complaint about the way in which Nedco processes your personal data and/or respects your rights. In that event, you can file a complaint with the supervisor. In the Netherlands, the Data Protection Authority is supervisor in the field of personal data processing. You will find the contact details of the Data Protection Authority via the website www.autoriteitpersoonsgegevens.nl.