The following privacy statement applies to all website visits, transactions and agreements with Enigma Nederland BV (KVK 24175447), Seggeweg 13, 3237 MK te Brielle (Enigmanederland.nl).

Principle for processing personal data   

Enigma processes your regular personal data in accordance with the statutory basis of the GDPR (general data protection regulation). On the basis of this regulation, we can invoke any of the following principles:

• Consent from the person concerned (newsletters, agreements)
• Necessary for implementation of an agreement
• Necessary for the fulfillment of our statutory obligations
• Representing legitimate interests (processing of agreement/personnel administration)

Purposes of processing

Enigma processes your personal data for:

• The implementation of agreements, transactions and services
• Customer relationship management
• Product and service development
• Administrative actions
• Defining strategy and policy
• Personnel administration
• Recruitment and selection
• Submitting tenders

Entering into one or more commitments with Enigma or one of its business units, ordering the implementation of one or more of the above actions for Enigma or any of its business units implies the provision of personal data.

Retaining data   

Enigma processes your data in a Enigma database. It is protected according to European standards.

By providing your personal data to us for these purposes, you consent to processing it for those purposes. We will retain your data for as long as is necessary for the processing of our agreement and thereafter, according to legal time limits of the retention obligation in our archives. We will not retain your data for longer than is necessary.

On visiting our website, no personal data will be collected by us without your consent. However, we do register data that contains no personal information. This is to better understand how our website is being used (cookies).

Provision to third parties  

Your personal data will not be provided to third parties without your explicit consent, on the proviso that this is necessary to implement a relevant agreement, to provide a particular service or when required to do so by law. Your personal data will never be provided to third parties outside the EU. In accordance with the GDPR, the required processing agreements have been concluded with ‘third parties’ that Compass uses to provide its services.

 Data security   

Enigma makes use of prudent security procedures to protect the processed data, and this is also to prevent unauthorised persons from gaining unintended access to this data.  Enigma makes use of an internet company for its website. This company has secured the servers in accordance with applicable European safety standards.

Cookies  

Enigma makes use of cookies on its website:

In order to optimise the website to the needs of the users and to improve the service, we collect and analyse information associated with the use of this website, such as domain name, number of hits, which pages have been visited, previous websites visited and the duration of a user session. We analyse this data for the purpose of trends and statistics. This data can be collected via cookies. Cookies are a standard internet technology that does not identify any people and only recognises computers. You can configure your computer as such that no cookies are accepted. The cookies used do not contain personal data and are only used to make it easy for you on the Enigma website.

Links to other websites   

Our web pages contain links to other websites. Enigma is not responsible for the privacy policy of websites not covered by Enigma. In this situation, we refer you to the privacy statement of the relevant website.

Duty to report data leaks   

In the event of a data leak, Enigma will report this directly to our internet agency, who reports its data according to the GDPR to the Dutch Data Protection Authority. A data leak is a security breach of personal data (hack). All those involved will also be informed of the data leak and an urgent assessment of the risks will be made of the data leak that has come about.

Right of inspection, rectification, deletion and objection 

You may request Enigma to provide open access to your stored data. You may also request Enigma to modify, supplement or delete this data. Please do so by contacting us at info@enigmanederland.nl.

Upon receipt of your request, the data will be verified against legal standards prior to deleting it. You may object to the processing of your data or you may withdraw your consent to the processing of data. After your objection, Enigma will verify whether your objection does not jeopardise the processing of the purposes.

If you have any complaints about the processing of personal data, please address your complaint to: autoriteitpersoonsgegevens.nl

Changes

Enigma reserves the right to make changes to this privacy statement, for example due to new legal developments or online services. The most recent privacy statement can be found on our website: enigmanederland.nl.