PRIVACY AND COOKIE STATEMENT DSIT B.V.

The privacy policy below applies to all site visits, transactions and agreements with:

DSIT B.V.

Schuilenburglaan 5a

7604 BJ Almelo

Chamber of Commerce number 58021256

T: 074 852 64 48 E: [email protected]

Version: 15-10-2019 (v1.3)

We respect the privacy of visitors to our website and ensure that the personal information you provide is treated confidentially. How exactly we do this, and which personal data we collect from you for which purposes, can be read below.

Contact person for privacy matters

Daniel Spijker

Use of personal data

When using our website, we obtain certain data from you. This may be personal data. We only store and use the personal data that is provided directly by you, in the context of the service you requested (for example via the contact form or for creating an account), or of which it is clear when provided that it is provided to us for processing. We will not use your personal data for other purposes, unless you have given your prior consent or we are permitted or required to do so by law.

Purposes of use

In order to provide you with the best possible service, DSIT B.V. needs to store your personal data in certain cases. DSIT B.V. uses personal data for:

• providing access to our website(s);
• using functionalities on our website;
• executing agreements, transactions and services;
• relationship management, including contacting you if you request this;
• gaining insight into the use of our website;
• product and service development;
• determining strategy and policy;
• making the internet offer more interesting by showing advertising that matches your interests.
• if necessary, detecting unlawful conduct with regard to DSIT B.V., its relations and its employees.

Description of personal data

For the purposes mentioned above, we will process the following personal data from you:

• Name and address details
• Company name
• VAT number
• Email address
• Telephone number
• Surfing behaviour
• IP address

Retention periods

We will retain your data for as long as you are a client of ours. This means that we will retain your customer profile until you indicate that you no longer wish to use our services. If you indicate this to us, we will also regard this as a request to be forgotten. Based on applicable administrative obligations, we must retain invoices with your (personal) data, so we will retain this data for as long as the applicable term runs. However, employees no longer have access to your client profile and documents that we have produced in response to your order.

Cookies

Our website uses cookies for technical, functional and analytical purposes.

Cookies are small information files that can be automatically stored on or read from your device (including a PC, tablet or smartphone) when you visit a website. This is done via the web browser on the device. The information that a cookie obtains about your use of the website can be transferred to DSIT B.V.'s own secure servers or those of a third party.

Technical or functional cookies

The main purpose of cookies is to save you time and effort. For example, if you adjust a web page to your personal preferences or if you navigate a website, cookies remember the selected settings and preferences for future use. When you visit the website again later, the previously entered data can be retrieved by the cookies, allowing you to easily use the options of the website as you previously set them.

Analytical cookies

In addition, cookies are used on this website to keep statistics, so that we can gain insight into the use of our website and the effectiveness of our campaigns.

Cookies used

The table below provides an overview of the cookies used on this website.

Table 1 – cookies

Enabling and disabling cookies

You can choose whether or not to accept cookies. Most browsers automatically accept cookies, but you can usually change your browser settings to disable cookies if you prefer (check your browser help page for exact instructions). If you choose not to accept cookies, you will not be able to fully use the features of this website or other sites you visit.

Deleting cookies

Most cookies have an expiration date. This means that they automatically expire after a certain period and no longer record data from your site visit. You can also choose to manually delete cookies before the expiration date has passed. For more information about this, please consult your browser manual.

E-mail advertising

E-mail advertising with newsletter registration

If you register for our newsletter, we will use the data required for this or separately provided by you to regularly send you our (e-mail) newsletter.

You can unsubscribe from the newsletter at any time by sending a message to the contact option described below or via a link included for this purpose in the newsletter. After unsubscribing, we will delete your email address, unless you have expressly consented to further use of your data or this use is legally permitted and we inform you about this in this statement.

Web hosting, development & third parties

Byte

We purchase web hosting and email services from Byte. Byte processes personal data on our behalf and does not use your data for its own purposes. However, this party can collect metadata about the use of the services. This is not personal data. Byte has taken appropriate technical and organizational measures to prevent the loss and unauthorized use of your personal data. Byte is obliged to maintain confidentiality under the confidentiality agreement.

Hubspot

We use the CRM platform Hubspot to process communication with customers via email and live chat. In Hubspot, we store contact details that we use exclusively internally for our customer service. Hubspot is committed to protecting your data in accordance with the European General Data Protection Regulation (GDPR).

Trusted Shops

We use Trusted Shops as an independent and reliable service provider for obtaining reviews. Trusted Shops uses various technical measures to ensure that these are genuine reviews from online customers.

Shipping and logistics

Montapacking / Oegema / Systematic Logistique / PostNL

When you place an order with us, it is our job to have your package delivered to you. We use the services of Montapacking, Oegema, Systematic Logistique and PostNL to carry out deliveries. For this purpose, it is necessary that we share your name, address and place of residence with Montapacking, Oegema, Systematic Logistique and Post NL. Montapacking, Oegema, Systematic and PostNL use this data only for the purpose of executing the agreement. In the event that Montapacking, Oegema, Systematic and PostNL engage subcontractors, they will also make your data available to these parties.

Accounting

If components relating to accounting ensure that the collected personal data are shared with third parties, SAP may need to use Ageon as the processor if this is external.

Your rights

• in accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us, insofar as this information is described therein;
• in accordance with Art. 16 GDPR, you have the right to demand immediate correction of incorrect or incomplete personal data stored by us;
• in accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless further processing

• • to exercise the right to freedom of expression and information;

• • to comply with a legal obligation;
  • for reasons of public interest, or

• • for the assertion, exercise or defence of legal claims;
• in accordance with Art. 18 GDPR, the right to request restriction of the processing of your personal data, insofar as

• • you deny the accuracy of the data;

• • the processing is unlawful, but you refuse to erase it;

• • we no longer need the data, but you need it to assert, exercise or defend legal claims, or

• • you have objected to the processing in accordance with Art. 21 GDPR;
• in accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, current and machine-readable format or to request its transfer to another controller;
• to file a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work or of us.

In principle, in order to prevent misuse, we only send copies and transcripts of your data to your e-mail address, which is already known to us. If you wish to receive the data at a different e-mail address or, for example, by post, we will ask you to identify yourself. We keep a record of processed requests; in the case of a request to be forgotten, we administer anonymized data. You will receive all copies and transcripts of data in the machine-readable data format that we use within our systems.

You always have the right to view the data that we (have) process and that relate to you or can be traced back to you. You can submit a request to that effect to our contact person for privacy matters. You will then receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data to the e-mail address known to us, with an overview of the processors who have this data, stating the category under which we have stored this data.

Right of rectification

You always have the right to have the data that we (have) process and that relate to you or can be traced back to you, adjusted. You can submit a request to that effect to our contact person for privacy matters. You will then receive a response to your request within 30 days. If your request is granted, we will send you a confirmation that the data has been adjusted to the e-mail address known to us.

Right to restriction of processing

You always have the right to restrict the data that we (have) process that relates to you or can be traced back to you. You can submit a request to that effect to our contact person for privacy matters. You will then receive a response to your request within 30 days. If your request is granted, we will send you a confirmation to the e-mail address known to us that the data will no longer be processed until you lift the restriction.

Right to transferability

You always have the right to have the data that we (have) process and that relate to you or can be traced back to you, processed by another party. You can submit a request to that effect to our contact person for privacy matters. You will then receive a response to your request within 30 days. If your request is granted, we will send you copies of all data about you that we have processed or that has been processed by other processors or third parties on our behalf to the email address known to us.

In all probability, we will no longer be able to continue providing services in such a case, because the secure linking of data files can then no longer be guaranteed.

Right to object and other rights

You have the right to object to the processing of your personal data by or on behalf of DSIT B.V. in certain cases. If you object, we will immediately cease processing the data pending the handling of your objection. If your objection is justified, we will provide you with transcripts and/or copies of data that we (have) processed and then permanently cease processing.

You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in such a way that this right applies. If you believe that this is the case, please contact our contact person for privacy matters.

Links to other third-party websites

Our internet pages contain links to other websites. This privacy and cookie statement does not apply to third-party websites that are linked to our website. We cannot guarantee that these third parties will handle your personal data in a reliable or secure manner. We therefore recommend that you read the privacy policy of these websites before using them.

Changes to this privacy and cookie statement

We reserve the right to amend this privacy and cookie statement. Changes will be published on our website. It is therefore recommended that you consult this policy regularly so that you are aware of any changes.

Dutch Data Protection Authority

Of course, we are also happy to help you if you have complaints about the processing of your personal data.

Under privacy legislation, you have the right to file a complaint with the Dutch Data Protection Authority against our processing of your personal data. You can contact the Dutch Data Protection Authority for this. You can do this on the following web page: https://autoriteitpersoonsgegevens.nl/nl/zelf-doen/gebruik-uw-privacyrechten/klacht-melden-bij-de-ap