Nedco B.V. collects personal data when carrying out its activities. In most cases, this involves data requested from the data subject or that the data subject provides of their own accord. Examples include the initial telephone conversation between Nedco B.V. and a (potential) customer or when a (potential) customer sends an email to Nedco B.V.
When processing personal data Nedco B.V. will proceed with the greatest possible care. An essential part of that care is transparency. Nedco B.V. believes it is important that third parties and data subjects should have access to information about how it uses personal data and the underlying reasons for this. That is why it has prepared this statement. If you have any questions or comments after reading this statement, please contact Nedco B.V. This, of course, also applies if you would like to exercise one of the rights described below or if you have a complaint. The name and full address of the contact person can be found at the bottom of this statement.
Nedco B.V. is the controller for the processing of personal data. It is registered with the Netherlands Chamber of Commerce under number 29050322, has its registered office at 's-Gravenweg 346 in Nieuwerkerk ad IJssel, and can be reached by phone at +31(0)180-317199 and by email at firstname.lastname@example.org.
Nedco B.V. has not appointed a Data Protection Officer. But it has appointed a staff member to be its first point of contact when it comes to privacy and personal data. This is Mr. Jan Nederlof. The full address can be found at the bottom of this statement.
Nedco B.V. processes different types of personal data for different reasons. The data it processes are Identification Data (name, email address, contact person, telephone number, Netherlands Chamber of Commerce number), Location Data (postal and/or registered address) and Financial Data (bank account number, payment data). The first main objective of processing this data is to enable a contract to be concluded with the customer. After all, Nedco B.V. and the customer must be able to communicate with each other. This might relate, for example, to recording the customer's wishes and drawing up a proposal. The second main objective is to be able to implement the concluded agreement. This might concern, for example, the delivery of goods. The third main purpose is to enable the work or services to be invoiced and to facilitate payment (and if necessary collection). The last main objective is to be able to inform the customer about any developments that may be relevant to them.
Nedco B.V. processes personal data insofar as this is necessary in order to establish or execute a contract with a customer and/or a supplier. This is the case, for example, when a quotation is requested, when an order is placed, or when Nedco B.V. itself places an order. Furthermore, Nedco B.V. processes personal data if this is justified by its own interests. This is the case when it is reasonably impossible for Nedco B.V. to carry out its work without processing these data. Finally, in some cases Nedco B.V. asks (additional) permission to use the data. The legal basis for processing the data is therefore
1. That processing is necessary for the performance of a contract to which the data subject is a party or takes place at the request of the data subject for the conclusion of a contract.
2. That processing is necessary for the protection of the legitimate interests of Nedco B.V. (or a third party)
3. That the data subject has given permission for the data processing
With regard to category (2), this applies in all cases to data processing that is necessary for Nedco B.V. to be able to deliver its services. It simply cannot do its job, communicate, deliver products, etc. without using the customer's personal data. It therefore has a legitimate interest in such data processing. Nedco B.V. believes that this interest, when weighed against the interests of the data subject, should be given priority. There are two reasons for this. Firstly, there is the fact that Nedco B.V. knows from experience that, as a rule, such data processing is not met with objections. Nedco B.V. therefore takes this as its starting point. Secondly, there is the fact that Nedco B.V. does not keep the data longer than necessary. Nevertheless, in order to respect the rights of the data subject as much as possible, Nedco B.V. only uses data that are necessary to achieve its objective.
For category (3), given consent can be withdrawn at any time without giving a reason.
The term European Economic Area (EEA) is used in this context. It consists of the countries of the EU, plus Norway, Liechtenstein and Iceland. All countries that fall outside of this are considered 'third countries'. Nedco B.V. transfers personal data to third countries. Data will only be transferred to a country for which it has been explicitly established at a European level that an adequate level of personal data protection is guaranteed there.
Nedco B.V. retains the data it collects for various periods of time, depending on the category of data and the manner in which it was collected. The exact periods are included in the list of processing activities drawn up by Nedco B.V.
In determining the applicable periods, Nedco B.V. based its decisions primarily on statutory (minimum) periods. Examples include the legal obligation to keep accounting information. Furthermore, Nedco B.V. has, where possible, aligned itself with the retention periods included in the Exemption Decree of the Personal Data Protection Act (Wbp). For example, customer contact data is subject to a retention period of up to one year after the termination of the relationship between the parties. Finally, in determining the storage periods, Nedco B.V. is guided by its own interests and those of its customers. For example, it may be important for both parties that documents in which (further) agreements have been made are kept for longer than two years. If such documents (e.g. mail correspondence) contain personal data, these will therefore also be retained.
With regard to the data collected via cookies on the website, retention periods apply as described in the Cookie Statement (see elsewhere on this website).
By law, you are a 'data subject' and data subjects have a number of specifically defined legal rights. You can submit a request to Nedco B.V. to inspect, receive, change, or have your personal data removed. You can also object to the (further) processing of your data. If Nedco B.V. processes your personal data on the basis of consent, you may withdraw this consent at any time. For all these matters and any other questions you can contact:
Mr/Ms J. Nederlof
's Gravenweg 346, 2911 BK
Nieuwerkerk aan den IJssel
If you believe that Nedco B.V. is acting in contravention of the applicable personal data legislation and regulations, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, Postbus 93374, 2509 AJ DEN HAAG).
No automated decision-making takes place at Nedco B.V.
2. In order to protect your personal data, Nedco B.V. has taken appropriate technical and organisational measures. A description of them is also included in the list of processing operations. Nedco B.V. periodically assesses whether these measures are still adequate.
5. From time to time it will be necessary to amend this Statement. Nedco B.V. has the right to do so. We recommend that you check this Statement from time to time for any changes.
Version 1.0, dated 22-5-2018