BKC BV processes personal data. Careful handling of personal data is very important here, and your data are therefore processed very carefully. The applicable legal rules are observed. In this privacy statement you can read which personal information is processed by BKC BV, for what purposes, who is allowed to view your information, to whom we provide the information and what rights you have. These regulations apply to all personal data that BKC BV processes in the context of its service provision. What is personal data? Personal data is all data/information that relates directly to a person or can be traced back to that person. There are many types of personal data, such as your name, address and place of residence. But also telephone numbers and zip codes with house numbers. We receive this information when, for example, a form is completed, a letter or email is sent or when you visit the BKC BV website or use our App. In some cases you may provide us with personal data. If this involves a cookie, you can read more about this in our cookie statement. Sensitive data such as someone’s race, religion or health are called special personal data. These are extra protected. It is prohibited to process special personal data unless there is a legal basis. What is Processing We may process personal data of all persons with whom BKC has contact or who visit our website. These include (potential) employees, freelancers, (contact persons of) customers and clients, suppliers or other parties who have a relationship with BKC BV. The term processing includes: collecting, storing, structuring, updating or changing, consulting, deleting, using, providing data to third parties, distributing or otherwise making available, erasing or destroying data. It does not matter whether the operation is performed manually or automatically. What is your personal data used for? BKC BV may lawfully process personal data if at least one of the bases is met. These are:

• Your consent for processing.
• The processing is necessary for the execution of an agreement to which BKC is a party.
• The processing is necessary to fulfill a legal obligation.
• Vital interests: to combat serious danger to your health and to protect the vital interests of you or another natural person.
• Public interest or public authority: if a task of public interest must be fulfilled, for which the processing of personal data is necessary.
• Justified interest: processing is necessary in the interests of BKC BV, unless the privacy interests of you outweigh this

More specifically, BKC BV processes personal data for the following purposes, among others:

• Being able to comply with applicable laws and regulations, such as the payment of premiums and taxes.
• Recruitment and selection for entering into a personnel/labor relationship.
• Personnel, hours, absence and/or payroll administration. Assessment of suitability and availability for a particular position or assignment.
• The conclusion of agreements with you, our client(s) and/or relations and their execution.
• Generating management reports, performing (internal and external) audits and improving company quality. ICT resources and use; being able to provide access to our online work environment and email, improving or solving (technical) problems with the use of, for example, our website.
• Monitoring usage of our website and improving it. You can read more about this in our cookie statement.
• To provide access to our (private) web and online environments and portals.
• To promote personal development, to let you participate in training and education and to process test results.

Access to personal data BKC handles your data securely, confidentially and carefully: Access to personal data is only obtained when necessary for the performance of duties, and personal data is only processed by persons who are obliged to maintain confidentiality by virtue of profession or statutory regulation, or by virtue of a decision of appointment. Access is recorded in BKC BV’s processing register (Register), which records all information resources and processing that takes place under its responsibility. Appropriate technical and organizational measures are taken to prevent unauthorized use. Access management is applied. The measures and securities are recorded in the Register. BKC only provides personal data to third parties if this is necessary in the context of the execution of the agreement, if there is a legal obligation, if BKC has a legitimate interest or if BKC has received permission from you. BKC will also cooperate in the event of fraud or abuse. How long does BKC keep your data? BKC does not retain data longer than is necessary and permitted by law. How long depends on the nature of the data and the purposes for which they are processed. Where possible, retention periods are included in the Register. Data Protection Officer BKC BV has a Data Protection Officer (FG). The FG is bound to secrecy/confidentiality and performs the following tasks, among others:

• Inform and advise BKC BV on the obligations under the General Data Protection Regulation (AVG).
• Supervise compliance with the AVG.
• Oversee compliance with BKC BV’s policies.
• Act as point of contact for the Personal Data Authority (AP).

The FG will notify the AP immediately (within 72 hours) of a security breach that results in a risk to the rights and freedoms of data subjects, in accordance with the Data Breach Notification Obligation. The FG can be reached by phone: +31(0)316 740 777 or by email at d.angenent@bkcbv.nl. Transfer of personal data to countries outside the EU In principle, BKC BV does not pass on personal data to a country outside the European Union, unless adequate measures have been taken. If personal data is passed on to a country outside the EU, this is recorded by BKC in the Register. Rights of those involved You have the right to inspect your personal data, to have it changed, supplemented or rectified and to have it deleted. You also have the right to object to the processing of your personal data and you have the right to data portability. If you would like to make a request for inspection, correction, deletion, data transfer of your personal data, object to the processing of your personal data or request the revocation of your permission, please send this request to info@bkcbv.nl. It is possible that BKC asks you to identify yourself in order to prevent the personal data from ending up with another person. BKC will respond to your request as quickly as possible, but no later than one month after receiving the request. If the request is followed up by BKC, it will be carried out as soon as possible. If the request is not followed up, the data subject may file a complaint with the national supervisory authority, the Personal Data Authority. Complaints If you are of the opinion that the provisions of the Act, as elaborated in this Privacy Statement, are not complied with by BKC BV, you can turn to the FG. If the submitted complaint does not lead to an acceptable result for you, you can turn to the national supervisory authority, the Authority for Personal Data (AP). Entry into force and modification In cases not provided for in this Privacy Statement, the management of BKC will decide in compliance with applicable laws and regulations and as much as reasonably possible in the interest of the Data Subjects. This Privacy Statement may be amended or revoked in compliance with applicable laws and regulations. This Privacy Statement has been adopted with the approval of the management. On this page you will always find the most recent version, the last modification was on June 4, 2021. If you have any questions or comments about our Privacy Statement, please send us an email: info@bkcbv.nl.