This privacy statement contains information on how Gutami Holding B.V. and its affiliated group companies process personal data in the context of their business operations. This includes the processing of data via our website (www.gutami.com). We are the so-called data controller for the processing of this data within the meaning of the General Data Protection Regulation in Dutch: “Algemene Verordening Gegevensbescherming” ("AVG"). We process your data carefully and in accordance with applicable privacy legislation, including the AVG. If, after reading our privacy statement, or in a more general sense, you have any questions about it or wish to contact us, you can do so via the contact details provided at the end of this privacy statement.

Data processing

We process personal data of (contact persons at) customers, suppliers and other relations, as well as website visitors. We obtain your data i) from you yourself, ii) from third parties (such as, for example, clients), or iii) from public sources, such as, for example, the Trade Register of the Chamber of Commerce and the Land Registry. Data we may process are:

• basic information such as your first and last name, title, gender;
• contact information such as your e-mail address, postal address, telephone number, the company where you work and your position;
• financial information, such as IBAN/bank account number;
• IP address and statistical data about your use of our website;
• personal data that you give us when you apply for a job with us, such as a cover letter, CV, date of birth, educational and career data;
• any other personal data we obtain from or about you that we use for the purposes listed below.

We do not always process all the above data, this depends on the type of relationship, the service or product involved and (where applicable) the consent you have given us.

Purposes for processing personal data

We process the above data for one or more of the following purposes (also depending on the relationship with you):

Marketing and acquisition purposes

We may use your personal data to send newsletters, event invitations and other marketing communications that may be relevant to you.

Performing an agreement

We process your data to the extent necessary in the context of the work to be carried out by us in connection with our business operations.

Complying with legal obligations

We process your data to the extent necessary to comply with applicable legal obligations and professional rules. Such as, for example, collecting and storing data relating to employees and providing information to the tax authorities and regulators.

Applications and recruitment

We process the data you share with us if you apply to us for a job or internship (via email/mail, the application form on our website or via social media) or that we receive through recruiters, in order to contact you for the purpose of our application process and process your application.

Access control

For security purposes (evacuation in case of emergencies), at certain events we keep a list of visitors to our/our premises(s). These lists are destroyed at the end of the day in question.

Use and improvement of our website

We process statistical data on visits to and use of our website. We do this to analyse and improve the content, layout and use of our website.

Other processing

We also process your data to handle any queries or complaints.

Principles for data processing

We process your personal data on the basis of one or more of the following legal bases:

• The performance of an agreement with you or to take measures for the conclusion of an agreement;
• A legitimate interest;
• Your consent;
• The fulfilment of a legal obligation.
  
  

Disclosure to third parties

In some cases, we will share your personal data. We will only do this when we consider it necessary. We will only share your data with trusted parties and ensure that the process of sharing this data has appropriate safeguards. We may share your personal data with:

• Government bodies such as the tax authorities, judicial authorities, the Land Registry, the Chamber of Commerce and regulators.
• (Sub)contractors;
• Other service providers such as estate agents, accountants, tax consultants and other advisors;
• External suppliers such as ICT service providers, hosting and cloud service providers or other suppliers to whom we outsource support services.

In addition, if the third party with whom your data is shared is designated as a processor within the meaning of the AVG, we will conclude a processing agreement with this third party.

Retention periods

We store your personal data in accordance with the AVG and specific mandatory legal retention periods. Data will not be kept for longer than is strictly necessary to achieve the purposes for which the data was collected and to comply with legal obligations.

Your privacy rights

Under the AVG, you have a number of rights. You have the right to request us to inspect, rectify, erase, restrict and transfer your personal data. You also have the right to object to the processing of your personal data. If you wish to exercise these rights, please contact us. Our contact details can be found at the end of this privacy statement.

We may not (be able to) comply with your request. For example, because the processing of certain personal data is required to comply with our legal obligations. Should we not (be able to) comply with a particular request, we will of course inform you of this with reasons.

Insofar as the processing of your personal data is based on consent, you have the right to withdraw this consent at any time. Any withdrawal of your consent does not affect the lawfulness of previous processing based on it. You also have the right to lodge a complaint with the supervisory authority: the Personal Data Authority ('AP'). More information on this can be found on the AP's website. Of course, we would be happy if you would contact us first so that we can see if we can work things out together.

Data security

We take appropriate security measures to limit misuse of and unauthorised access to personal data. For example, we ensure that only the necessary persons have access to the data, that access to the data is protected, via secure connections and that our security measures are checked regularly.

Cookies

We use cookies and/or similar techniques on our website. A cookie is a small file stored on the device (computer, tablet or smartphone) with which you visit our website. We only use functional cookies and analytical cookies on our website.

The functional cookies we use are necessary for the technical operation of the website and ease of use. They ensure that the website works properly and remember preferences, for example. They also allow us to optimise our website. With our functional cookies, we guarantee correct operation of our website.

We use analytical cookies to collect statistical data on a privacy-friendly aggregated level about the use of our website so that we can improve our services. The analytical cookies we use are from Google Analytics and we use them to gain insight into visitor flows, traffic sources and page views on our website, among other things. We do this in a way that respects your privacy as much as possible. Your IP address, for example, is only partially stored for this reason. We have concluded a processing agreement with Google in which, among other things, agreements are made about the security of your personal data.

Changes in this privacy statement

We may amend this privacy notice from time to time. Changes will be published on our website. It is therefore advisable to consult this privacy statement regularly to keep abreast of any changes.