Privacy Statement

This Privacy Statement consists of the following sections:

1. Data controller
2. Minors
3. Types of data
4. Source of supply
5. Purposes of processing
6. Legal basis for data processing
7. Sharing of data
8. Save
9. Security
10. Rights as a data subject
11. Changes
12. Questions
13. Cookies

1. Data controller

Socia B.V. is an IT company. We offer IT-related products and services. By ‘processing’, we mean any use of your personal data, such as storing, modifying, forwarding or (partially) deleting this data.

The data controller for this is Socia B.V., located at Klokkenbergweg 50, 101AP Amsterdam.

2. Minors

Are you under 16? If so, you may only provide personal data to Socia B.V. if your parents or legal guardians have read this Privacy Statement and given their consent. This applies only if consent is also the legal basis for the processing (see ‘6. Legal bases for processing’). Taking into account the technology available, we make reasonable efforts to verify that your parents or legal representatives have actually given their consent.

3. Types of data

We use the following data for the purposes set out in this Privacy Statement:

Name and address details

• Name
• Contact details
• Email address
• Telephone number
• Company name

Technical details

• Detailed (technical) data on the use of our website(s), for example the device type and specifications, browser type and language, date and time of the interaction, and IP address; and
• Keywords used on our website(s).

Cookie data

• The data we use depends on the purpose for which we process it. We will only use your data for the purposes described in section 5 (‘Purposes of processing’) of this Privacy Notice. In most cases, not all the data you provide will be used. This therefore depends on the specific website and/or processing activity.

Finally, as a matter of principle, we do not process ‘special categories of personal data’ and will not ask you to provide us with such data. This category includes sensitive data such as race, ethnic origin, political opinions or philosophical beliefs, religion, trade union membership, sexual preferences or orientation, health data or criminal records. We are aware of the sensitivity of this data and the potential impact it may have on your privacy. Should the processing of a special category of data nevertheless be necessary, we will only process it on the basis of your explicit consent (see 6. ‘Legal bases for processing’) and will handle it with the utmost care.

4. Source of supply

The main way in which we obtain data is by asking you for it. You are free to choose whether or not you wish to provide this data to us. This includes:

The details you can enter yourself on one of our websites via a (contact) form.

When you enter personal data, we specify which details are required and which are optional. In addition, there is also data that we collect automatically. For example, (technical) data about the devices you use. We collect this data via cookies and similar technologies. See 13. ‘Cookies’.

5. Purposes of processing

We will use your data for the following purposes:

• This enables us to offer you our services, products and/or information, or to allow you to participate in them. For example, because you visit our website and register in order to be eligible for support.
• To analyse our website and associated technologies, collect statistics, maintain, secure and optimise them;
• To comply with applicable laws and regulations.

We will not use your data for any purposes other than those described above.

6. Legal basis for data processing

We process data on the basis of your consent, for example when we process your special categories of personal data or wish to store data for a long period. We also inform you and ask for your consent before we set and read cookies.

7. Sharing of data

Your data may be shared and combined within Socia B.V. See also ‘1. Data controller’.

To process your personal data, we use third parties who may have access to your data. Where possible, we require these third parties to act in the capacity of a data processor. This means that we determine the purpose and means of such processing, and the data processor may only handle your data in accordance with our instructions and our (security) standards. We set out these arrangements with each data processor in a so-called data processing agreement. In the data processing agreement, we also stipulate that your data is stored on servers within the European Union (EU). In exceptional cases (i.e. data processing by a (sub)processor outside the EU), we have made (additional) arrangements to ensure that an adequate level of protection can be guaranteed. In addition to the data processing agreement, we then enter into a model contract approved by the European Commission (also known as ‘standard contractual clauses’ or ‘SCCs’). Incidentally, the SCCs do not apply if the relevant (sub)processor is already recognised by the European Commission as a country with an adequate level of data protection.

8. Save

We have distinguished (both organisationally and technically) between the different types of data we collect (see ‘3. Types of data’). Personal data is stored in our CRM system.

9. Security

We make every reasonable effort to ensure that your personal data is protected as effectively as possible. We have therefore implemented appropriate technical and organisational security measures to protect your personal data against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use. In light of the current state of the art, we also ensure that our security standards are continuously updated and tested.

If we engage so-called third parties, we require them to handle your data in accordance with our instructions and our (security) standards. See also ‘7. Sharing of data’.

10. Rights as a data subject

You have the right to access, rectify, erase or transfer your personal data. You also have the right to restrict processing and to object to it. Finally, we would like to draw your attention to your right to lodge a complaint with the Dutch Data Protection Authority (“AP”). You may send us a request at any time to exercise your rights. You can do this by sending an email to info@socia.nl. In your request, please specify as clearly as possible which personal data your request relates to, which right you wish to exercise, and provide proof that the data in question is indeed yours. We will endeavour to respond to your request within one month.

11. Changes

We may amend this Privacy Statement at our discretion. We therefore recommend that you check this Privacy Statement regularly for any changes.

Last updated on 12 January 2022.

12. Questions

If you have any questions, comments or complaints regarding this Privacy Statement, please do not hesitate to contact us. You can do so via info@socia.nl or in writing to the management at the above address.