Nedmag complies with General Data Protection Regulation (GDPR) requirements. This privacy statement not only describes how we handle your personal data, it also informs you of your rights. Furthermore, it contains the contact details of the person you should contact if you have questions, requests or complaints. Please read this information carefully.
This page provides information concerning:
• the personal data we process about you;
• the way in which we do this;
• the provision of data to third parties;
• how long we store your data and;
• how we secure these data.
Personal data relates to information about an identified or identifiable natural person. This means information that is directly about you or information that can be traced back to you. For instance, this could be your name, date of birth and address. However, your business e-mail address or business telephone number are also personal data.
The processing of personal data relates to all actions that we can carry out with your personal data, from the collection to destruction of data; a wide concept. Processes that fall within this include: collecting, recording, arranging, storing, editing, changing, requesting, consulting, using, forwarding, distributing, making available, merging, connecting together, protecting, erasing and destroying data.
Grounds on which we process your data
We process your data for one or more of the following reasons. These are stated in the law:
• the data are necessary for us to satisfy a statutory obligation (for example an administration obligation, identification obligation and retention obligation);
• the data are required because we, as organisation, have a legitimate interest;
• the data are needed to implement a signed agreement (including implementing the regulation taken in the context of subsidence);
• we have your clear and unequivocal permission for certain actions.
Obligation to provide data
You are obliged to provide us with any data necessary for us to process data involving such things as registering a complaint or damage and/or satisfying a statutory obligation. This could also include data that are needed to register you for a structural inspection. In such cases you cannot refuse to provide the data. If you do refuse, we will be unable to handle the complaint or damage.
The data we process about you
• name, first name, initials, any title, address details, telephone number and other data that we need in order to communicate with you, such as your e-mail address;
• data as referred to under the first bullet point, from your parents, guardians or carers if you are a minor;
• IP address, internet browser, device type and location details;
• data about your activities on the website;
• data regarding the nature and content of your query;
• other data that are needed to implement or apply a law.
The processing of the above data only takes place for one or more of the following purposes:
• the data are necessary in order to contact you and to respond to the questions you asked;
• the processing of your request for information, your complaint or your damage;
• the data are needed to carry out administration, as well as other internal control activities;
• the data are important for improving the Nedmag website or services;
• internal control and business security;
• the implementation or application of a law.
- Analytics cookie: this enables measurements to be conducted - the IP addresses of users are anonymised, in accordance with the GDPR.
- YouTube cookie: required to play YouTube videos on the website.
Storing your personal data
In storing personal data, our starting point is that we do not store data for longer than necessary for the purpose for which the data were processed. We observe any existing statutory retention periods.
When registering a complaint or damage, a storage term of up to 20 years applies to archiving the registered types of complaints and damage and where these took place. We aim to use this to improve our working method and service provision. When a reason for contact (damage claim, complaint, sponsorship) has been concluded, data will be minimised before being archived.
The provision of personal data to third parties
Nedmag does not provide personal data to third parties.
Securing your personal data
We use physical, administrative, organisational and technological measures to ensure effective arrangement of your personal data. Only authorised employees have access to your data and registered data are processed carefully and treated in strictest confidence.
You are entitled to inspect, change or delete personal data processed by Nedmag, if these data are not or are no longer correct, or if the processing is not or is no longer legitimate. You are also entitled to withdraw permission that you once gave. We will then stop processing your data. The withdrawal of permission does not take place with retroactive effect.
Under certain conditions, you also have the right to restrict the processing of your data. In brief, this means that Nedmag places a temporary “freeze” on the processing of your data. You can invoke this right in four situations: (1) pending the evaluation of a correction request, (2) if data actually should have been deleted but you did not want this deletion, (3) if Nedmag no longer needs the data while you do need the data to prepare or conduct legal action and (4) in anticipation of the evaluation of an objection.
Exercising these rights is free of charge for you, with the exception of misuse. You can exercise these rights by contacting us via the contact details below.
We may request further proof of identity when responding to all questions/requests. We do this to ensure that we do not provide personal data to the wrong party or introduce an incorrect amendment when processing personal data.
If you have any questions, requests or complaints regarding the processing of your personal data, please contact Nedmag’s Data Protection Officer on telephone +31 (0)598-651328 or via e-mail h.smit [at] nedmag.nl.
Date and modifications to the privacy statement
We retain the right to modify this privacy statement. We will inform you if the change is important. This privacy statement was produced in May 2018.