Privacy statement

This statement provides information on how the Dutch Screening Group deals with personal data processed in the context of its activities and services.

1. Who processes the personal data?

Dutch Screening Group B.V., (hereinafter referred to as ‘DSG’, ‘we’ or ‘us’), respects the privacy of all visitors to its website www.dutchscreeninggroup.nl and www.hairdiagnostix.com. The information you provide will be treated confidentially. This information is also treated confidentially by third parties who are responsible for the security of our data storage. DSG processes your personal data in the capacity of data controller in accordance with the General Data Protection Ordinance (GDPA) applicable as of May 25, 2018.

Our contact details are:

Dutch Screening Group B.V.
Gaetano Martinolaan 63A
6229 GS Maastricht
The Netherlands

Chamber of Commerce 72757604

E-mail: info@dutchscreeninggroup.nl

2. What are personal data?

The definition of personal data is as follows: ‘any information relating to an identified or identifiable natural person’. It is therefore personal data that makes it possible to identify a person. Personal data include, for example, name, date of birth, address details, e-mail addresses, passport photos, fingerprints, but also IP addresses.

3. What types of personal data are processed and for what purpose are these data processed?

We use your data to process your request for information and for the purpose for which you provided it. DSG may use your personal data in order to make the websites and our services available to its users, to analyze and improve the website, to process job applications and to process requests for information and services.

a) Visiting our websites

When you visit our websites www.dutchscreeninggroup.nl and www.hairdiagnostix.com, your browser automatically sends data to our website’s server. This information is temporarily stored in a so-called log file. It contains the following information:

• Your IP address;
• Date and time of access;
• Name and URL of the retrieved file.
• Website from which access is granted (referring URL);
• The browser(s) used and, if applicable, your computer’s operating system and the name of your Access Provider.

The above data is processed by us for the following purposes, namely to ensure: a good connection to the website, convenient use of our website, evaluation of system security and stability and for administrative purposes. Under no circumstances will the processed data be used to identify you. Furthermore, cookies are used on our website, see our cookie policy.

b) Contact form and order form or e-mail

DSG will process personal information you provide to us through our contact form, order form, or e-mail for the purposes of service, such as your name, date of birth, e-mail address, telephone number, and address information. Furthermore, we may be required by law to identify you by means of a valid identification document.

If you have a question or wish to place an order, you can contact us via the contact form or order form on our website. This requires, among other things, that you enter your name, your e-mail address and, when placing an order, your home address, so that we can contact you or send you an order. The processing of these personal data only takes place on the basis of your consent.

c) Applications

In addition, in the context of an application, additional personal data are processed which are obtained by e-mail, by post, by telephone or through personal contacts. This includes the following data: name, gender, contact details, level of education, employment history, motivation letters, CVs, transcripts and references. The processing of these personal data is necessary in order to complete the application procedure. These data will be stored for six weeks and then destroyed. If you have given your permission, it is possible that these personal data will be stored for a longer period of time in order to contact you in the future.

d) Employees

Employees’ personal data are processed on the basis of the law and the employment contract. In this regard, reference is also made to the regulations and protocol applicable to the employment contract.

e) Social media

DSG is also active on various social media. If you use social media plug ins on our website or through the plug ins mentioned in our e-mail signature, we may obtain personal data through these social media. We also refer to the privacy policy of the social media page itself.

f) Marketing

Finally, we collect commercial information about companies and potential suppliers, such as market position, possible interest in our services and possible contacts. The personal data processed of potential suppliers and contact persons are: the name of the company, the place of business and the name of the contact person.

4. Third parties

The personal data received will not be transferred by DSG to third parties. The exception applies to third parties engaged by DSG for data processing. In addition, personal data will only be transferred if:

i) this is necessary for the execution of an agreement;

(e.g. the delivery of items or products via the mail deliverer/courier)

ii) this is necessary to comply with a legal requirement;

iii) it is necessary for the protection of legitimate interests;

iv) it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority;

v) you give your consent.

5. Transfer of personal data inside and outside the EU

Your personal data may be transferred by DSG from the Netherlands to abroad in accordance with the GDPR. An equivalent level of protection is guaranteed within the European Economic Area. The transfer of personal data to countries outside the EU only takes place to a country that offers sufficient protection.

6. Rights of data subjects

Pursuant to laws and regulations, you have a number of rights with regard to the processing of your personal data:

a) Right of access

You have the right to find out whether or not your personal data is being processed. You therefore have the right to view the personal data we have received from you.

If you have submitted a request for inspection, we will inform you in writing why we process your personal data, what types of personal data we process, to which organisations we have passed on this personal data, for how long we retain this personal data and what rights you can exercise with regard to this processing of personal data.

b) Right of rectification and addition

You have the right to submit a request to correct incorrect personal data. If we have proceeded to correct your personal data, you will be notified accordingly. We will also inform third parties who have received the incorrect personal data about the incorrect or incomplete data.

c) Right to restrict processing

You can submit a request to limit the use of the personal data. This means that you will make the personal data temporarily unavailable. Such a request is possible if:

i) the accuracy of personal data is disputed;

ii) the processing is unlawful and you oppose the deletion;

iii) the personal data are no longer necessary for the purposes, but for the institution, exercise or substantiation of a legal action;

iv) you have objected to the processing of the personal data.

We will also inform third parties who have received the personal data about the restrictions on the use of these personal data.

d) Right of objection

You have the right to object to the processing of personal data. If you object to the processing of your personal data, the data will not be processed, unless we can provide compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms.

e) Right to data portability

You have the right to request a copy of the processed personal data that you have provided to us in a structured, customary digital file format. This concerns digital data and not paper files.

f) Right of forgetting (right of data erasure)

Under certain conditions, you have the right to remove your personal data, namely when:

i) personal data are no longer needed for the purposes;

ii) you withdraw your consent on which the processing is based and there is no other legal basis for processing;

iii) you object to the processing and there are no compelling reasons not to comply with your objection;

iv) the personal data have been unlawfully processed by us;

v) the personal data must be deleted on the basis of a legal obligation;

vi) the personal data have been collected by means of mobile telephony or Internet services;

Finally, it is possible to file a complaint with The Dutch Data Protection Authority (Dutch DPA)  regarding the use of the personal data by DSG. If your data have been processed on the basis of your consent, you have the right to withdraw your consent.

7. Exercising rights

If you wish to exercise the above rights, please contact the Data Protection Officer: Mr. C. Depondt

We will respond to your request within one month at the latest. In the case of a complex request, we will respond within two months at the latest.

8. Storage period

The personal data received by DSG will only be kept for the above mentioned purposes. In addition, personal data processed shall not be kept longer than necessary for the purpose or longer than required by law.

9. Data Protection

DSG has taken appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, damage, alteration or disclosure. All persons who have access to your personal data on behalf of DSG are bound to secrecy.

10. Questions and Modifications

If you have any questions about this privacy statement, please send an e-mail to info@dutchscreeninggroup.nl. This privacy statement may be amended from time to time.

This privacy statement is currently valid and dates from July 2020.