Privacy policy

1. Aartsen

Under Aartsen, this privacy statement refers to: Aartsen Group B.V., Aartsen Holding B.V., Aartsen Breda B.V., Aartsen Venlo B.V., Aartsen Vastgoed B.V., Aartsen N.V., and Aartsen Asia Ltd. Aartsen places great value on careful and secure handling of privacy-sensitive information from its (website) visitors, customers, relations, candidates, and employees. We operate within the European Economic Area (EEA) and store our data on servers in the EEA, unless otherwise stated.

This privacy statement applies to the following entities:Aartsen Group B.V.

• Aartsen Holding B.V.

• Aartsen Breda B.V.

• Aartsen Venlo B.V.

• Aartsen Vastgoed B.V.

• Aartsen N.V.

• Aartsen Asia Ltd.

We process your personal data when you use our services, applications, websites, software, customer actions, and/or when you participate in events, whether organized by us or third parties. We refer to this as the "Service". In this privacy statement, we summarize when and how we collect, use, and secure your personal data.

2.  General

We may change provisions of this privacy statement. If we do, we will inform you. Nevertheless, we recommend that you occasionally check whether the privacy statement has been changed.

3. What personal data do we collect and for what purpose?

There are several ways in which we may collect your personal data. In this section, we explain which personal data we may collect from you. The personal data are sorted by the different processing purposes. Next to each purpose is stated how long the personal data for that purpose will be retained. If there are changes in legal retention periods, those will take precedence over the retention periods mentioned in this privacy statement.

3.1 Processing on the basis of a legal basis

3.1.1 Administrative obligations: we retain personal data for a maximum of 10 years

• your name

• your address

• your purchases and invoices (if applicable)

• your VAT identification number / your ID document

If you wish to use our Service, you must provide us with this personal data. The reason for this is that we need this data to comply with our legal obligations.

3.2. Processing necessary for the performance of a contract you have entered into with us:

3.1.2 General: we retain this personal data for a maximum of 2 years after the termination of the contract or after the termination of the Service.

• your name

• your personal and/or business email address (e.g., for contacting you about the Service)

• your business and personal phone number

• date of birth

• clothing size

• your personal and/or business (home) address

• other personal data you provide when contacting us

If you wish to use our Service, you must provide us with this personal data. The reason for this is that this personal data is necessary to provide the Service to you.

3.2 Processing for the protection of our legitimate interests

3.2.1 Improving our service: we retain this personal data for a maximum of 2 years after collection

• your name

• a number to identify you on our services (user or session ID)

3.2.2 Maintaining the security of the Service: we retain this personal data for a maximum of 6 months after collection

• your IP address

• a number to identify your device on our services (device ID)

• een nummer om u te identificeren op onze diensten (user- of sessie-ID)

• the operating system you used

• time, date, and location of login

3.2.3 To inform you about our other services: we retain this personal data until you indicate no longer wanting to receive marketing information

• your email address

3.2.4 If you apply for a position with us: we retain this personal data for a maximum of 4 weeks after the end of the application process, or for a maximum of 1 year after the end of the application process if requested:

• Your name

• Your address

• Your email address

• Your phone number

• Your cover letter and curriculum vitae and the data processed therein (such as your photo, education, internships, work experience, and training)

• Availability information

• Other data provided in the context of your application

We process this personal data based on a balancing of interests. If you do not wish to provide the data under 3.3.1. or 3.3.2., please let us know along with your reasons. We will consider your reasons and reconsider the balancing of interests. If, after the new balancing of interests, we conclude that you still need to provide your personal data, you will not be able to use our Service if you refuse to provide the personal data. More information about your rights can be found below under the heading 'Your rights'.

You can unsubscribe from the processing mentioned under 3.3.3. by following the unsubscribe instructions included with every marketing email. If you unsubscribe, this will not affect our ability to send you important emails about the Service and your account. Additionally, it will not affect our ability to use your personal data as described in this privacy statement.

3.3 Processing with your consent

3.3.1 To inform you (at your request) about the service you have followed or other services offered by us: we retain this personal data until you indicate no longer wanting to receive marketing information:

• your name

• the organization where you work

• your personal and/or business email address

• your personal and/or business (home) address

3.3.2 To inform you at your request and respond to your inquiries: we retain this personal data for up to 2 months after your request or inquiry has been resolved:

• your name

• the organization where you work

• your personal and/or business email address

• Other personal data you provide when contacting Aartsen

3.3.3 Visual material (at events, whether organized by third parties or not)

• Photos

• Videos

• Other visual material

3.3.4 Tracking cookies

Aartsen distributes cookies when you visit aartsen.com. Sorry, no real cookies, but small (temporary) text files for your PC.

Thanks to cookies, you don't have to repeatedly enter or download the same information when you return to us. Additionally, they help us understand how you use our website and how we can improve and make things more user-friendly. It must be said: we also use them for marketing purposes.

Furthermore, we make use of JavaScript. This allows us to do some great things, sometimes in combination with cookies and (web) beacons. Like remembering your shopping cart or displaying previously viewed products.

Accepting cookies

If you want to use our website to its full extent, it is necessary to accept our cookies. Fortunately, that's very easy.

Your cookie settings

Of course, we handle the data we collect from you with care. You can indicate yourself what we may track from you by choosing the Standard or Personal cookie package.

Read more about tracking cookies

3.3.5 External links

Our website may refer to third-party websites that may also use cookies. We have no control over the cookies used by these websites. Please refer to the privacy policy of the respective website for further information.

Deleting cookies

Cookies are stored on your computer and can be deleted at any time. Click on one of the links below for instructions on how to do this.

• Chrome

• Internet Explorer

• Firefox

• Safari

• Opera

It is important to know that the use of cookies on our website is secure. Cookies do not result in spam or unwanted emails or calls. Our cookies are not used to build a personal profile.

4. Sharing of personal data

You are not obliged to provide us with personal data. If you do not provide the personal data to us, this will not have any negative consequences for your use of the Service. You can therefore continue to use the Service as usual. We only process this personal data if you have given consent for it, and they are processed only after you have actually given consent or provided the personal data yourself. We do not sell or trade your personal information to others. This is only different if we have indicated this in this privacy statement.

4.1 Sharing with processors

We may ask others to assist in providing the Service. This may result in these third parties processing your personal data. These third parties are further referred to as "Processor" in this privacy statement. We enter into processor agreements with these Processors.

We utilize the following types of Processors:

• Storage of (personal) data and database management and maintenance;

• Research agencies and analytical software to improve our services (including privacy-friendly configured Google Analytics, where no personal data is shared with Google);

• Hosting provider(s);

• Providers of relationship management software;

• Administrators of videos and storage thereof;

• Marketing and/or communication agencies and printing companies.

In some cases, the Processor may collect your personal data on our behalf. We inform Processors that they may only use personal data obtained from us to facilitate the provision of the Service. Processors are not permitted to use this data for advertising purposes.

If you provide additional information to these processors yourself, we are not responsible for this. It is advisable to inform yourself thoroughly about the Processor and its company before providing your personal data.

4.2 Sharing with your consent

We may also share personal data with others if you give us permission to do so. For example, we may collaborate with other parties to offer you specific services or promotions. If you sign up for these services or marketing offers, we may provide your name or contact details if necessary to provide that service or contact you.

4.3 Our legal responsibility

We may also share personal data with third parties if this is:

• Reasonably necessary or appropriate to comply with legal obligations;

• Necessary to comply with legal requests from authorities;

• Necessary to respond to any claims;

• Necessary to protect the rights, property, or safety of us, our users, our employees, or the public;

• Necessary to protect ourselves or our users against fraudulent, abusive, inappropriate, or unlawful use of the Service.

We will promptly inform you if a government agency makes a request relating to your personal data, unless we are prohibited from doing so by law.

4.4 Merger or sale (part) of the business

It may occur that we disclose, share, or transfer your personal data if we transfer a portion of our business. Examples of this include (negotiations regarding) a merger, sale of parts of the business, or obtaining financing. We will, of course, try to minimize the impact on you by transferring personal data only when necessary.

5.  Data Protection

We consider it important to handle your personal data carefully and securely. Therefore, we have implemented appropriate technical and organizational security measures to safeguard your personal data. At the very least, we have taken the following measures:

• Physical and electronic measures designed to prevent unauthorized access, loss, or misuse of personal data as much as possible.

• TLS (Transport Layer Security) technology to encrypt the transmission of sensitive information or personal data to us, such as account passwords and other identifiable payment information.

• Creating backups of personal data wherever reasonably possible.

• Encrypting sensitive information whenever possible.

• Promptly addressing vulnerabilities in the software as reasonably possible.

However, please be aware that absolute security for transmitting personal data over the internet or storing personal data cannot always be guaranteed.

6. Links to Third-Party Sites

Our Services may contain links to other websites and services. Additionally, our Service may also feature advertisements from third parties. Third-party websites and services may track information about you. We have no control over these sites or their activities. If you provide your personal data to third parties, we are not involved in this process. In such cases, the privacy policy of these third parties applies.

We are not responsible for the content of the privacy policies of these parties and how these parties handle personal data. We recommend studying their privacy and security practices and policies before providing them with personal data.

7. Your rights

Privacy legislation grants you certain rights regarding your own personal data. The rights described below are not absolute rights. We will always assess whether we can reasonably comply with your request. If we cannot, or if it would, for example, compromise the privacy of others, we may refuse your request. If we refuse a request, we will provide a reasoned explanation.

Right of Access

You have the right to request information about the personal data we process about you. You can also ask us to provide insight into the processing purposes, categories of personal data involved, the (categories of) recipients of personal data, the retention period, the source of the data, and whether we use automated decision-making.

You may also request a copy of your personal data processed by us. If you require additional copies, we may charge a reasonable fee for this.

Right to Rectification

If the personal data we process about you is incorrect or incomplete, you may request us to adjust or supplement the personal data.

If we comply with your request, we will inform the parties to whom we provide data, as far as reasonably possible.

Right to Erasure of Data

Do you no longer want us to process certain personal data about you? Then you can request us to delete certain (or all) personal data about you. Whether we will delete data depends on the processing purpose. We will only delete data that we process based on a legal obligation or for the performance of the contract if the personal data is no longer necessary. If we process data based on legitimate interests, we will only delete data if your interests outweigh ours. We will make this assessment.

If we process data based on consent, we will only delete the data if you withdraw your consent. If we have accidentally processed data unlawfully or if a specific law requires us to delete data, we will delete the data. If the data is necessary for the handling of a legal procedure or a (legal) dispute, we will only delete the personal data after the conclusion of the procedure or dispute.

If we comply with your request, we will inform the parties to whom we provide data, as far as reasonably possible.

Limitation of Processing

If you dispute the accuracy of personal data processed by us, if you believe that we have processed your personal data unlawfully, if we no longer need the data, or if you object to the processing, you may also request us to restrict the processing of that personal data. For example, during the time we need to assess your dispute or objection, or if it is already clear that there is no longer a legal basis for further processing of that personal data, but you still have an interest in us not deleting the personal data yet. If we restrict the processing of your personal data at your request, we may still use that data for handling a legal procedure or a (legal) dispute.

Right to Data Portability

Upon your request, we can transfer the data we process for the performance of the contract or based on your consent and which are processed automatically, to you or another party designated by you. You may make such a request at reasonable intervals.

Automated Individual Decision-Making

We do not make decisions based solely on automated processing.

Right of Objection and Withdrawal of Consent

If we process data based on legitimate interests, you may object to the processing. If we process data based on your consent, you may withdraw that consent. For more information, please refer to the processing purposes above.

Exercising Your Rights

You can send a request for access, rectification, deletion, data portability of your personal data, or a request to withdraw your consent or object to the processing of your personal data to Marcel Hendriks: marcel.hendriks@aartsen.com.

To prevent abuse, we ask you to adequately identify yourself when submitting a written request for access, amendment, or deletion. You can do this by including a copy of a valid identification document. Please remember to shield your Citizen Service Number (BSN) and passport photo on the copy.

We aim to process your request, complaint, or objection within one month. If it is not possible to make a decision within a month, we will inform you of the reasons for the delay and the expected timeframe for providing a decision (not exceeding 3 months from receipt).

Data Protection Authority

Do you have a complaint about our processing of your personal data? Please contact us. We are here to assist you. However, if you are unable to reach a resolution with us, you also have the right under privacy legislation to lodge a complaint with the Data Protection Authority, the Autoriteit Persoonsgegevens. You can contact the Data Protection Authority via Autoriteitpersoonsgegevens.

8. Contact

If you have any questions, issues, or comments regarding this privacy statement or our data processing activities, please contact the undersigned.

Breda, March 2024

On behalf of Aartsen,

Marcel Hendriks