Privacy statement Ventolines

At Ventolines, we highly value the protection of personal data. In this privacy statement, we explain which personal data we process, why we process it and what rights you have.

1. Data Controller

Ventolines B.V.
P.J. Oudweg 4
1314 CH Almere
Email: info@ventolines.nl

Ventolines is the data controller responsible for the processing of personal data via the sites below, among others:

• www.ventolines.nl
• www.werkenbijventolines.nl

2. Whose Personal Data Do We Process

We may process personal data relating to:

• Visitors to our websites;
• Candidates applying through our careers website or other channels;
• Contacts at business relations;
• Individuals who contact us.

3. Which Personal Data We Process

Depending on the situation, we may process the following personal data:

Website usage

• IP address
• Browser and device information
• Pages visited and click behaviour
• Date and time of website visits

Recruitment

• Name and contact details
• CV and cover letter
• Information obtained during the recruitment process
• Any additional information you provide voluntarily

Business Contacts

• Name and job title
• Contact details
• Correspondence and business communications

We only process personal data that is necessary for the purposes described in the following section.

4. Purposes and Legal Bases

We process personal data for the following purposes:

Website Management and Analytics
To ensure our websites function properly and to help us identify ways in which to improve them.

Contact and Communication
To respond to enquiries and provide information.

Recruitment
To assess applications and fill vacancies.

Relationship management
For communication with business partners and to improve the performance of agreements.

We process personal data based on:

• The performance of a contract;
• Compliance with a legal obligation;
• A legitimate interest of Ventolines;
• Consent (where required).

Where processing is based on consent, this consent may be withdrawn at any time.

5. Sharing of Personal Data

We may share personal data with:

• Other entities within the Ventolines group;
• IT and hosting service providers;
• Software and cloud solution providers;
• Marketing and communications service providers;
• Public authorities where legally required.

For recruitment activities, we work with EN HR Solutions B.V., which supports Ventolines in the recruitment process. EN HR Solutions acts as a data processor and processes personal data solely on behalf of Ventolines.

We enter into data processing agreements with processors in accordance with the GDPR.

6. International Transfers

In principle, we process personal data within the European Economic Area (EEA).

If personal data is processed by parties outside the EEA, we ensure appropriate safeguards are in place, for example by using standard contractual clauses approved by the European Commission.

7. Retention Periods

We do not retain personal data longer than necessary for the purposes for which it was collected.

In particular:

• Recruitment data: up to 1 year after the last contact, unless a longer retention period is legally required or you consent to longer retention.
• Website data: up to 26 months.
• Business contact details: for as long as the business relationship exists and as long as necessary for administrative or legal obligations.

8. Cookies

Our websites use cookies.

Cookies are small text files placed on your device when you visit a website. We use cookies for:

• The functioning of the website;
• Analysing website usage;
• Improving our websites.

We use services including Google Analytics for analytics purposes, with data anonymised wherever possible.

Upon your first visit to our website, you will be asked to consent to the use of non-essential cookies. You can also remove or block cookies through your browser settings. Cookies for www.werkenbijventolines.nl can additionally be removed or blocked via the icon displayed in the bottom-left corner of the screen.

9. Security

Ventolines takes appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. These measures include secure IT systems, access restrictions and contractual arrangements with processors.

10. Your Rights

Under the GDPR, you have the right to:

• Access your personal data;
• Have inaccurate data corrected;
• Request deletion of personal data;
• Restrict processing;
• Object to processing;
• Transfer your personal data (data portability).

You can submit a request via info@ventolines.nl. We will generally respond within one month.

11. Complaints

If you have any complaints regarding the processing of your personal data, you may contact Ventolines via info@ventolines.nl.

You also have the right to lodge a complaint with the supervisory authority:

Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

12. Changes

Ventolines may amend this privacy statement from time to time. The most up-to-date version will always be published on our website.