This privacy statement relates to the website www.bpmcompany.eu (hereinafter: the “Website”). This statement describes which personal data we, BPM Company Netherlands BV, with registered offices at Utrechtseweg 82 (3702 AD) Zeist and registered at the Chamber of Commerce under number 52987221 (hereinafter: “BPM Company”, “we” or “us”), process of visitors to the Website (hereinafter: “you” and “your personal data”).
BPM Company respects the privacy of its customers and visitors to the Website. This privacy statement will explain how we use the personal data collected about you via the Website and what rights you have regarding your personal data.
- Processing personal data
What is personal data?
Personal data is any data that can identify a natural person (directly or indirectly). Thus, personal data can be a name, e-mail address or telephone number, but also, for example, a date of birth or IP address.
What personal data does BPM Company process and why?
We collect personal data for the purposes and based on the principles set out below. Insofar as we collect data through cookies, you can find more information about this in the Cookie statement.
On our Website, you can (i) subscribe to our newsletter, (ii) request a quotation for a training or (iii) request a (knowledge) document. To send the requested newsletter and/or (knowledge) document, we ask you to provide your first name, last name, e-mail address and the name of the organization you work for. When requesting a quotation for a training, we ask you to enter your phone number on the Website, in addition to your first name, last name, e-mail address, and the name of the organization you work for. We process this personal data based on your consent as laid down in Article 6, Paragraph 1(a) of the GDPR. You may withdraw your consent at any time. You can do so via the link in the newsletter or by contacting us at the contact details below.
Without requiring permission to do so, we may send news or invitations regarding events or seminars to anyone who has expressed an interest in our business by entering their e-mail address on our Website. We process this data on the basis of Article 6, Paragraph 1(f) of the GDPR. We have a legitimate interest to process personal data because it is necessary for our business operations and in the context of our customer relationships. We offer you the opportunity to object to the processing prior to collection and with every communication.
The provision of your personal data is not based on a contractual or legal obligation. However, if you do not provide us with the personal data, we cannot send you our newsletters, invitations to events, quotations or (knowledge) documents.
- Sharing personal data
We may share personal data with third parties in the context of services such as data storage, maintenance, security or other similar services. If we provide access to your personal data, we require third parties to handle your personal data confidentially and to process your personal data only for our benefit and for no other purpose.
We will not further provide your personal data to any third party that was not commissioned by us to enable the intended use of the Website, unless this follows from a legal obligation or if this follows from a judicial request.
We do not share data outside the European Economic Area.
We have taken appropriate technical and organizational measures to protect your personal data against loss or any other form of unlawful processing. In addition, we require our processors to also take such appropriate technical and organizational measures.
- Retention periods
We will not keep your personal data longer than is necessary for the purposes for which your personal data was collected, unless legal provisions state otherwise.
- What are my privacy rights?
You have the right to request us to:
– provide access to your personal data,
– have them supplemented, corrected or deleted;
– object to the processing of your personal data;
– limit your personal data; and/or
– receive your personal data or have it passed on to a third party (data portability).
We will provide you with information about the actions we have taken in response to your request as soon as possible, but in any case within one month of receiving your request. We may extend this period by two months due to the complexity of your request or the number of requests we receive. We will inform you if that is the case.
Generally, you have the right not to be subject to automated decision-making only, including profiling, unless one of the exceptions applies.
Finally, you have the right to file a complaint with the Dutch Data Protection Authority at any time.
- Changes to the privacy statement
This privacy statement is subject to change.
If you have any questions, you would like to make a complaint or you would like more information regarding this privacy statement, please contact us:
BPM Company Netherlands B.V.
3702 AD Zeist
Phone number: +31 30 207 70 06