Your privacy is important to us, and we would therefore like to inform you about our privacy policy. The information below applies to:
- CostManagement B.V.
What do we do?
We provide a wide range of services for companies that place packaging on the market. You can find out more about this on this website. For the majority of our activities, we are the controller. This means that we, in consultation with you, determine the purpose and means of the processing. However, for some of our activities, we are the processor and act on behalf of the controller. In that case, the controller has control over the processing of the personal data. If we act as a processor, our processor agreement applies to these activities. This is also available on our website.
Why do we process personal data?
We process personal data because we cannot properly perform our services otherwise. This also means that if you do not provide personal data, we cannot perform our services. For us, personal data is never a goal in itself, but always a means to perform our services as well as possible. Our processing of personal data is always based on one or more of the following grounds:
- We have received permission from the person involved.
- The data processing is necessary for the execution of the agreement. This agreement will never be aimed at processing personal data, but will always have a different purpose.
- The data processing is necessary to comply with a legal obligation (for example, the implementation of the various tax laws).
What personal data do we process?
Below you will find an overview of the personal data that we process:
- Name (initials, surname)
- Phone number
- Email address
- Place of residence
- ID details
- Financial data, both business and private
- Other personal data that is actively provided to us.
How long do we keep your personal data?
We do not store your personal data for longer than is strictly necessary to achieve the purposes for which your data is collected. We use a standard retention period of seven years, because this is the legal retention obligation for many financial and tax documents. If the agreement is terminated or if you make a valid appeal to one of your privacy rights (see below), this retention period will be shortened. If there are other laws that prescribe a shorter or longer retention obligation (for example, regarding personnel data), this deviating retention period will be used.
Sharing personal data with third parties
When this is necessary for the execution of the agreement or when we have to comply with a legal obligation, we may share your data with third parties. We conclude a processor agreement with companies that process your data on our behalf to ensure a good level of security and confidentiality of your data.
What about the security of my personal data?
We take the security of your personal data seriously and we take appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. If you have the impression that your data is not properly secured or there are indications of abuse, please contact us immediately.
No automated decisions and no ‘profiling’
We do not take decisions based on automated processing about matters that may have (significant) consequences for you or others. This concerns decisions that are taken by computer programs or systems, without a person (for example, one of our employees) looking at them. In addition, we do not engage in so-called ‘profiling’. This is the classification of people into certain groups in order to predict the behavior of people.
What privacy rights do you have?
As a data subject, the person to whom the personal data relates, you have various rights that relate to your privacy. The most important are:
- The right of access. This is your right to know what personal data we process about you.
- The right to rectification and addition. This is your right to change your personal data that we process.
- The right to limit the processing. This is your right to have us process less personal data.
- The right to object. This is your right to object to our processing of your personal data.
- The right to be forgotten. This is your right to be ‘forgotten’ by us, which means that we delete all your personal data.
- The right to data portability (or data transfer). This is your right to send the personal data that we have from you in a computer file to you or another organization you have mentioned.
For a further explanation of these and other privacy rights, please refer to the website of the Dutch Data Protection Authority. Finally, we would like to point out that you have the option to submit a complaint to the Dutch Data Protection Authority.
Do you have any questions?
If you have any questions about your privacy rights or want to submit a specific request, you can do so via info@costmanagement.nl. You can also contact us by telephone (0346 – 211 657) or send us a letter (Noordendijk 207, 3311 RN Dordrecht).
