Our Privacy Statement
Beveco collects personal data in the course of carrying out its activities. In most cases, this is data it requests from the person involved or that the person involved provides of their own accord. Think of a first telephone conversation between Beveco and a (potential) customer or the situation where a (potential) customer sends an e-mail to Beveco.
When processing personal data, Beveco is as careful as possible. An essential part of that care is transparency. Beveco believes it is important for third parties and those involved to be able to see how it uses personal data and the reasons behind it. That's why it has drawn up this statement. If you have any questions or comments after reading this Statement, please contact Beveco. This also applies, of course, if you wish to exercise one of the rights described below or if you have a complaint.
Who is Beveco exactly?
Beveco is considered the data controller for the processing of personal data. It is registered with the Chamber of Commerce under number 24429527, located at Maseratilaan 8 in Oud-Beijerland, can be reached at telephone number 0186 - 65 90 30 and by e-mail at email@example.com.
Does Beveco have a Data Protection Officer?
Beveco has not appointed a Data Protection Officer. Our secretariat is the first point of contact when it comes to privacy and personal data. You can find our full address at the bottom of this statement.
Which personal information does Beveco process and why?
Beveco processes different types of personal data, for different reasons. The data it processes most frequently are:
- Identification data (name, e-mail address, contact person, telephone number).
- Location data (postal and/or branch address).
- Financial data (bank account number, payment details).
If you visit Beveco's website, it also processes other data than indicated above. This may include:
- Device information, location, software use and the like.
The first main purpose of this processing is to be able to establish a contract with the customer. After all, for this, Beveco and the customer need to be able to communicate with each other. Think for example of taking stock of the customer's wishes and drawing up a quotation.
The second main purpose is to be able to carry out the agreement entered into. Think for example of periodic consultation about the progress.
The third main purpose is to enable invoicing of the work or services, as well as to facilitate payment (and if necessary collection).
The fourth main objective is to carry out marketing activities with the aim of gaining more customers or acquiring greater brand awareness.
The last main goal is to inform the customer about developments that may be relevant to him or her.
Is Beveco allowed to process this data?
Beveco processes personal data if this is necessary to establish or execute an agreement with a customer and/or supplier. This is the case, for instance, when a quotation is requested, when an order is placed or when Beveco itself places an order. Beveco also processes personal data if its own interests justify this. This will be the case if it is reasonably impossible for Beveco to carry out its work without processing those data. Finally, in some cases Beveco will also ask for permission to use the data. The legal basis(s) for processing are thus:
1. That processing is necessary for the performance of a contract to which the data subject is a party, or is done at the request of the data subject for the conclusion of a contract.
2. That processing is necessary for the purposes of protecting the legitimate interests of Beveco (or a third party).
3. That the data subject has given consent to the processing.
With regard to category (2), in all cases the processing is necessary for Beveco to be able to realise its services. It simply cannot do its work, it cannot communicate, it cannot make offers, etc. without using the customer's personal data. Therefore, it has a legitimate interest in those processing operations. Beveco believes that this interest, when weighed against the interest of the data subject, should take precedence. Reasoning in this regard are two considerations. First, the fact that Beveco knows from experience that, as a rule, such processing does not meet with objections. Beveco therefore takes that as its starting point. Secondly, the fact that Beveco does not keep the data any longer than necessary. Nevertheless, in order to respect the rights of the data subject as much as possible, Beveco only uses the data necessary to achieve the purpose.
With regard to category (3), consent given can be withdrawn at any time without giving a reason.
Does this personal data end of with others?
In some cases Beveco will share personal data with parties it works with. These are called 'processors'. Beveco has signed agreements with those processors. The purpose of those agreements is to ensure that the processors (just like Beveco itself) handle the data with care. For example, under the terms of that agreement the processor is obliged to ensure proper security, to deal with the data confidentially and to destroy the data.
Beveco does not intend to share personal data with parties other than processors. At most, it foresees that, in a single case, information will be shared with (another) employee of the customer or with a party that is in a direct relationship with the customer.
Does this personal data stay in Europe?
In this context, we speak of the European Economic Area (EEA). This consists of the countries of the EU, plus Norway, Liechtenstein and Iceland. All countries outside the EEA are considered 'third countries'. In some cases, Beveco transfers personal data to third countries, particularly the US. This only happens if it has been explicitly established on a European level that an appropriate level of personal data is guaranteed in the country in question. With regard to the US, we only transfer data to parties certified under the EU-US Privacy Shield.
How long will the data be kept?
Beveco retains the data collected by it for various periods of time, depending on the category of data and the way in which it was collected. The exact time periods are included in the register of processing activities drawn up by Beveco.
In determining the applicable periods, Beveco has first and foremost relied on legal (minimum) periods. Think, for example, of the legal obligation to keep accounting information. Where possible, Beveco has also aligned itself with the retention periods included in the Exemptions Decree. For example, with regard to customer contact details, a retention period of up to one year applies after the relationship between the parties has ended. Finally, Beveco has been guided by its interests and those of its customers when determining the retention periods. For example, it may be important to both parties that documents in which (further) agreements are recorded are kept for longer than two years. If such documents (e.g. e-mail correspondence) contain personal data, these will therefore also be retained.
With regard to the data collected via the cookies on the website, the retention periods apply as described in the Cookie Statement (see elsewhere on this website).
What rights do I have?
By law, you are a 'data subject' and data subjects have a number of concretely defined legal rights. You can submit a request to Beveco to see, receive, change or have your personal details removed. You can also object to the (further) processing of your data. If Beveco processes your personal details on the basis of your permission, you can withdraw that permission at any time. For all these matters and for any other questions you can contact:
Beveco Gebouwautomatisering B.V.
3261 NA OUD-BEIJERLAND
Phone: 0186 - 65 90 30
Beveco will respond to your message within one month.
If you think Beveco is acting contrary to the applicable laws and regulations on personal data, you can submit a complaint to the Authority for the Protection of Personal Data (Postbus 93374, 2509 AJ DEN HAAG).
Does Beveco use automated decision making?
No automated decision-making takes place at Beveco.
What else do I need to know?
- Beveco has taken appropriate technical and organizational measures to protect your personal data. A description of these measures is also included in the processing register. Beveco periodically assesses whether these measures are still adequate.
- From time to time it will be necessary to amend this Statement. Beveco has the right to do so. We encourage you to check this Statement from time to time for any changes.
Versoin 2.0, d.d. 11-07-2019