Privacy Policy

Information provided pursuant to Articles 13-14 of the GDPR (General Data Protection Regulation) no. 2016/679 (hereinafter “Regulation”)

0. PREMISE

This page is intended to inform users of the policies followed by Ansho, located at Hoofdwal, 109 – 4207 EC, Gorinchem, Holland, regarding the collection, storage, use, and possible disclosure of any personal information collected from users through the use of the services offered on the ansho.nl website . This privacy policy is subject to updates and changes. Such changes will be communicated via newsletter or highlighted in the relevant sections of the website. It is recommended that you check this privacy policy regularly. Ansho guarantees compliance with the above-mentioned regulations and encourages users to carefully read this Privacy Policy before submitting any personal information. It is noted that this information applies only to this website. The website ansho.nl is managed and owned exclusively by Ansho.

1. DATA CONTROLLER AND DATA PROTECTION OFFICER

The data controller is Ansho, VAT number 002257672B03, with registered office at Hoofdwal, 109 – 4207 EC, Gorinchem, Holland. Ansho has appointed a Data Protection Officer (DPO), who you can contact at info@ansho.nl for any information regarding the processing of personal data by Ansho, including the list of data processors.

2. TYPES OF DATA COLLECTED

The Data Controller hereby informs you that, for the normal operation of the website, it will process data that, by its nature, can be defined as personal data. Personal data means any information relating to a natural person, identified or identifiable, even indirectly, by reference to any other information, including a personal identification number.

The personal data processed through the website are the following:

a) Browsing Data.
During the normal operation of the website, the computer systems and software procedures acquire certain personal data, the transmission of which is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of computers used by users connecting to the site, the URI (Uniform Resource Identifier) ​​addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment.

b) Common personal data.
To access certain services on the site, you may be asked to provide common personal data. Such personal data may include, but is not limited to: name, surname, email address, telephone number, etc.

c) Special categories of personal data.
When using the contact form to submit job applications, you may provide personal data falling within the categories listed in Article 13 of the GDPR. 9 of the Regulation, so-called special data: “[…] data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as […] genetic data, biometric data intended to uniquely identify a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.” These categories of data will be processed with the data subject’s consent.

We also inform you that, for the purposes of collecting job applications, Ansho may analyze your professional social media profiles, which you have made freely available online (e.g., LinkedIn).

d) Cookies
See the cookie policy at the following link .

3. PURPOSE OF THE PROCESSING

The data you provide, including any personal and potentially sensitive data, will be processed for the following purposes:

a. respond to any contact requests received via email or by completing the form on the Contact page;

b. establish an immediate question/answer channel through a real-time chat accessible from every page of the site;

c. post comments on blog articles;

d. collect applications, evaluate CVs, and contact candidates if necessary;

e. send newsletters or commercial and marketing communications;

f. perform general administrative and accounting activities. For the purposes of applying the provisions on personal data protection, processing performed for administrative and accounting purposes is that related to the performance of organizational, administrative, financial, and accounting activities, regardless of the nature of the data processed. Specifically, these purposes include internal organizational activities, those necessary for fulfilling contractual and pre-contractual obligations, and information activities.

4. METHODS OF TREATMENT

Processing will be carried out in paper and/or electronic form, but in any case with suitable measures to ensure maximum security, by specifically trained and appointed individuals. The data collected for the purposes set out in section 3(a,b,c,f) will be retained for the time strictly necessary to fulfill those purposes. Regarding data retention for the purpose of collecting applications as set out in section 3(d), the retention period is 12 months from the date of receipt of the application. For data processing for commercial and marketing purposes as set out in section 3(e), the retention period has been set at 24 months. Further information regarding the data retention period and the criteria used to determine it can be requested by writing to Ansho at the following address: info@ansho.nl

5. LEGAL BASIS AND MANDATORY OR OPTIONAL NATURE OF THE PROCESSING

The legal basis for processing personal data for the purposes referred to in Section 3 (d, e) is Art. 6(1)(a) of the Regulation, as processing is subject to explicit consent. The legal basis for processing personal data for the purposes referred to in Section 3 (a, b, c, f) is Art. 6(1)(b) of the Regulation, as processing is necessary to provide services or to respond to requests from the data subject. Providing personal data for these purposes is optional, but failure to provide it would make it impossible to activate the services provided by the site, respond to requests, or evaluate CVs. With specific reference to the purpose referred to in Section 3 (d) and the related analysis of professional social media profiles made freely available on the Internet referred to in Section 2, the legal basis for processing is Art. 6(1)(f) of the Regulation, i.e. the legitimate interest of Ansho in verifying any risks regarding the candidate’s suitability to fill specific positions.

6. RECIPIENTS OF PERSONAL DATA

Your personal data may be shared, for the purposes set out in Section 3, with:

a. parties acting as data processors, namely: parties with whom it is necessary to interact for the provision of services (for example, hosting providers), or parties delegated to carry out technical maintenance activities;

b. parties, entities, or authorities to whom it is mandatory to disclose your personal data pursuant to legal provisions or orders from authorities;

c. persons authorized by Ansho to process personal data necessary to carry out activities strictly related to the provision of services, who have undertaken to maintain confidentiality (e.g., Ansho employees).

7. TRANSFERS OF PERSONAL DATA

To enable the purposes set out in Section 3(e), the collected data may be transferred abroad, including outside the European Union, in the forms and ways established by current legislation, while always ensuring an adequate level of protection. To send commercial and marketing communications, Ansho uses MailUp, the Independent Data Controller, a proprietary mailing platform. This proprietary mailing platform uses statistical tracking systems to detect when a message is opened, how many clicks are made on links within the email, the IP address or browser type used to open the email, and other similar details. This data collection is necessary for the use of the platform and is an integral part of the functionality of the message sending system.

8. RIGHTS OF INTERESTED PARTIES

The data subject is granted specific rights:

1. The data subject has the right to obtain confirmation as to whether or not personal data concerning him or her exists, even if not yet recorded, and communication of such data in an intelligible form;

2. The data subject also has the right to obtain information on: the source of the personal data; the purposes and methods of processing; the logic applied in the event of processing carried out with the aid of electronic means; the identification details of the data controller, data processors, and designated representative and their contact details; the persons or categories of persons to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, data processors, or persons in charge of processing.

3. The data subject also has the right to obtain: the legitimate interests pursued by the data controller or by third parties, any recipients or categories of recipients of the personal data; the controller’s intention to transfer personal data to a third country or to an international organization and the existence or absence of an adequacy decision by the Commission; the period for which the data will be stored, or, if not possible, the criteria used to determine that period; the existence of an automated decision-making process; the right to lodge a complaint with the supervisory authority; the right to be informed whether the communication of data is a legal or contractual obligation or a necessary requirement for the conclusion of a contract.

4. The data subject also has the right to obtain: a) updating, rectification, or, where interested therein, integration of the data; b) erasure, anonymization, or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) certification that the operations referred to in letters a) and b) of this paragraph have been disclosed, including their content; the names of those to whom the data has been communicated or disseminated, except where such compliance proves impossible or involves a manifestly disproportionate effort compared to the right being protected.

5. Finally, the interested party has the right to object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning him or her, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning him or her for the purposes of sending advertising or direct selling materials or for conducting market research or commercial communications.

The data subject may exercise the rights listed above by contacting the Data Protection Officer at the following address: info@ansho.nl

Ansho will promptly provide an appropriate response, and in any case within a period not exceeding 1 month. In particularly complex cases, the response deadline, pursuant to the Regulation, may be 3 months. In any case, the data controller will inform the data subject within 1 month of the request, including to communicate its denial in the cases specifically provided for by the applicable provisions.

9. RIGHTS TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY

We also inform you that pursuant to Articles 77 et seq. of EU Regulation 2016/679, if you believe your rights have been infringed, you may contact the Dutch Data Protection Authority or the ordinary judicial authorities.

10. LANGUAGE

Any translation of this document into languages ​​other than English is provided for informational purposes only. In the event of any discrepancies, the English version of this document is the only legally valid and binding version.

Ansho
Hoofdwal, 109 – 4207 EC
Gorinchem
Holland
VAT No. 002257672B03
Commerce of Chambre nr 57662797