PRIVACY POLICY - AMENDED June 2021
In this privacy policy, Sidekix BV (hereinafter: Sidekix) informs you about itself, how your (personal) data are processed and about your privacy rights. This privacy policy applies only to processing operations for which Sidekix is the controller, as defined by the General Data Protection Regulation (hereinafter: AVG).
1. WHO IS SIDEKIX?
Sidekix started in 2001 as a print, mail and mailing house. Since then, Sidekix has grown into a versatile and active partner in the field of marketing, communication and fulfilment. Sidekix offers a wide range of services in the areas of:
- Event & Ticket Service;
- Incentive & Prize Counselling;
- Member Acquisition;
- Loyalty & Member Management;
- Service Desk;
- Webshop & E-fulfilment.
More information on Sidekix can be read here
2. WHY ARE YOUR PERSONAL DATA PROCESSED?
The data you provide to Sidekix through your use of this web site is necessary, among other things, to deliver or provide the service you have requested. It is also used to develop and improve this site.
2.1. WHAT ARE THE PURPOSES OF THE PROCESSED (PERSONAL) DATA?
We use the data that you have entered on the website and that we process to:
- prepare and send a quote;
- handle your application;
- send you our newsletter;
- develop and improve the Sidekix website (further).
- the Sidekix website to function properly
- to perform our services properly;
- to approach customers and consumers for further acquaintance;
- to comply with the requirements and rules as set by law;
- to improve our services.
2.2. (PERSONAL) DATA UNDER 18 YEARS OF AGE
Sidekix does not have the intention or goal of collecting data from website visitors who are under the age of 18, unless a parent or guardian is aware of this. For example, in the case of a job application (holiday work, etc.). If you are convinced that we have collected data on a minor without the consent of a parent or guardian, please contact us.
3. WHAT (PERSONAL) DATA ARE PROCESSED BY SIDEKIX?
Sidekix only asks for and processes (personal) data that are necessary to achieve the desired objective, when explicit permission has been given or on the basis of a legal obligation. The (personal) data that can be collected consists of:
- personal details, such as name, telephone number and e-mail address;
- interaction data, such as cookies;
- IP address and click behaviour;
- other data that you provide voluntarily.
If you only provide the necessary information and do not use the opt-in, this will not affect the work performed by Sidekix. If you do not wish to provide the necessary information, Sidekix will not be able to carry out its work, and the requested service cannot be provided.
3.1. PROCESSED (PERSONAL) DATA
The (personal) data that Sidekix processes when you use the web site depends on what you do on the web site. Below is a brief overview of the (personal) data that is processed on the basis of activity on the website.
- Vacancy: Sidekix processes your name, e-mail address, telephone number, CV and application message.
- Request for a quotation: Sidekix processes your name, e-mail address, subject of the message and the content of the message.
- Contact form: Sidekix processes your name and e-mail address.
- Newsletter: Sidekix processes your name and e-mail address.
- Sidekix is not responsible for the accuracy of the (personal) data processed by the individual in the appropriate contact forms. If you provide (personal) data that are not required to be mentioned, these will also be processed by Sidekix.
Sidekix will always ask for a telephone number and e-mail address. The phone number is necessary to make an initial contact with the person in question. The e-mail address is necessary for sending documentation.
The use of cookies is explained later in this Privacy Policy.
4. HOW LONG WILL (PERSONAL) DATA BE STORED?
After processing, (personal) data are not kept longer than necessary for the purpose for which they were provided. Naturally, an individual can invoke his right to forget at any time. Exceptions are situations in which Sidekix is required by law to retain the (personal) data longer.
4.1.WHAT IS THE RETENTION PERIOD?
Under the AVG, there is no concrete retention period for (personal) data. Sidekix determines the retention period of (personal) data on the basis of the purpose for which it was provided. On this basis, retention periods have been set up.
- Job application data are kept for a maximum of four weeks after rejection, unless permission is given to keep the data for one year.
- (Personal) Data for quotation requests and contact forms are retained for a maximum of two years or until the individual has indicated that they wish to have the data removed.
- (Personal) Data for the provision of the newsletter are deleted when the newsletter is unsubscribed.
- When laws and regulations stipulate a retention period that differs from the period previously specified by Sidekix, Sidekix will adhere to the legal retention period. The (personal) data will then be removed from the active administration as soon as they are no longer necessary for the purpose for which they were collected.
5. COOKIES
Sidekix uses cookies (see also personal data authority) and similar techniques (hereinafter: cookies) on this website to process (personal) data for various purposes. Cookies are small text files that are stored in the browser of the computer, tablet or smartphone used to visit the website when you first visit the site. The information generated by the cookies about the use of the website is transferred to the server of the website host. The website host then uses the information to improve the user experience of the website or to analyse how the website is visited, among other things. Cookies are used, among other things, to provide additional functionality and to gain insight into how visitors use the website.
When you visit the Sidekix website for the first time, you will be informed about these cookies by a pop-up.
5.1. WHAT KIND OF COOKIES CAN BE PLACED?
Sidekix does not require the visitor's permission to place certain cookies, known as technical cookies, functional cookies and pure cookies. The cookies are necessary to make the website operational. For other cookies (such as tracking cookies), it is necessary to have the prior consent of the individual, before they are placed on the hard disk of the individual. You can read more about cookies via this link.
The information below shows which cookies are used by Sidekix, why the cookies are used and, if known, how long the data is stored.
Organisation: Google / Google Tag Manager
Value: https://www.googletagmanager.com/gtm.js?id=GTM-T7VBKDM
Explanation: Google (www.google.com) operates the Google Display Network, a collection of millions of websites and mobile applications powered by display ads, including many Google services such as YouTube. Google also operates the DoubleClick digital advertising platform, which is the foundation of advertising technology to create, run and manage digital ads for buyers, creators and sellers around the world. The DoubleClick platform includes the DoubleClick Advertising Exchange and Double Click Bid Manager. For more information on how we collect and use information for online advertising, please visit http://www.google.com/intl/en/privacy.html.
Full details: https://apps.ghostery.com/nl/apps/google_tag_manager
Retention period: Not disclosed by Google.
Organisation: Gravatar
Value: https://secure.gravatar.com/avatar/fbc44977ec14665bc615577fe8628073?s=26&d=mm&r=g
Explanation: Gravatar is an image that follows you from site to site and appears next to your name when you do things like comment or post on a blog.
Full details: https://apps.ghostery.com/apps/gravatar
Retention period: Not disclosed by Gravatar.
* IP addresses are anonymised, no full IP addresses are shared.
Through this website, a cookie is placed by the company Google, as part of the 'Google Analytics' service which is used by Sidekix to keep track of and receive reports about how visitors use this website. Sidekix allows Google to use the analytical information obtained for other Google services. Your IP address is anonymised as much as possible. This information will be transmitted to and stored by Google on servers in the United States. Google may also transfer this information to third parties for their own purposes or when required to do so by law. Sidekix has no influence on this. Google is committed to the Privacy Shield Principles and is affiliated with the Privacy Shield Program of the U.S. Department of Commerce.
Google Recaptcha
ReCaptcha is a security feature from Google that checks whether real people are filling out our contact forms and not a spam bot. Sidekix uses the reCAPTCHAservice from Google Inc. (Google) to protect data sent via this website. This function checks whether a message is sent by a person, to prevent 'spam bots' from automatically sending messages or leaving comments. Your IP address and possibly other data are sent to Google reCAPTCHA in order for it to work. The content of a message is sent to and processed by Google. The IP address is abbreviated and thus rendered anonymous in countries belonging to the EU and states participating in the treaty for the European Economic Area. In exceptional cases, the IP address is transmitted in full to a Google server in the USA and abbreviated there. On behalf of the operator of this website, Google will use this data to evaluate your use of the service. The IP address transmitted by reCAPTCHA will not be merged with other Google data.
These cookies from Google may be placed when you use these services, which appear on various pages of our site. These include the cookies:
SIDCC = To remember preferences and measure functions of the module ReCaptcha on our website. Retention time is 3 months.
SAPISID = To remember preferences and measure functions of the module ReCaptcha on our website. Retention time is 2 years.
APISID = To remember preferences and measure functions of the ReCaptcha module on our website. Retention time is 2 years.
SID = To remember the preference settings and to measure functions of the module ReCaptcha on our website. Retention time is 2 years.
For more information, please read the Google reCAPTCHA Privacy Statement.
5.2.CHANGING COOKIE SETTINGS
The settings of the browser that the individual uses to access the website can be adjusted, so that the browser in question deals with cookies differently. However, restricting or not accepting cookies may affect the functioning of the website. Click here to find out how to refuse and/or delete cookies.
5.3. THIRD-PARTY COOKIES
No other cookies are placed on the Sidekix website by third parties.
5.4. LINKS TO THIRD-PARTY SITES
Sidekix's web site contains hyperlinks to web sites that are not the responsibility of Sidekix. These third-party web sites may collect information about you. Sidekix has no control over the data these web sites collect and the activities they perform. Sidekix is not involved in or responsible for the information you provide to these web sites. Therefore, it is recommended that you always read the privacy policy when visiting a third-party website.
6. PROFILING
Profiling means that, on the basis of automatically collected information about an individual (or group of individuals), it is determined to which category or group he or she is assigned. Characteristics and behavioural patterns are used for this purpose, among other things. This makes it possible to make analyses and predictions about the interests and behaviour of the individual.
Sidekix uses profiling to improve the website experience (marketing purposes), subject to consent.
6.1. WHAT DOES SIDEKIX USE PROFILING FOR?
With the help of Google Analytics, the cookies (see article 5) are used to:
- generate website visits;
- realise ultimate customer experience;
- optimise contact moments.
For example, Google Analytics examines which browser the individual uses to visit the website in order to determine which browser provides the best contact moments.
6.2. TERMINATION OF PROFILING
When an individual actively rejects the profiling that is carried out using cookies, the use of these will be stopped.
7. HOW IS PRIVACY SAFEGUARDED?
Sidekix takes appropriate technical and organisational measures to protect (personal) data. Sidekix has its own secure server where the data is kept.
7.1. (PERSONAL) DATA ARE SHARED WITH OTHERS.
The (personal) data will only be shared with third parties in accordance with this privacy policy. The data is accessible to Sidekix employees who require access to the (personal) data in order to perform their work. Sidekix does not sell or lease its (personal) data to third parties. Sidekix employees and the third parties called in by us who need access to the (personal) data are required to respect the confidentiality of the data.
7.1.1. DATA SHARING WITHIN EUROPE
By order of Sidekix, business service providers may perform certain work on behalf of Sidekix. This is allowed on the basis of a processor agreement that meets the requirements of the AVG. Sidekix uses these so-called processors. These processors are postal companies and their subcontractors, usually PostNL, Sandd, DPD, TransMission, A-B Transport or MyParcel. Sidekix will share the processed (personal) data only when there is a legal obligation to do so, such as a demand by the police.
7.1.2. DATA SHARING OUTSIDE EUROPE
Sidekix does not share (personal) data with organisations located outside Europe.
7.1.3 HOW ARE (PERSONAL) DATA PROTECTED?
Sidekix takes the protection of your (personal) data very seriously. Therefore, the necessary measures are taken to secure and protect (personal) data. Sidekix uses firewalls and encryption measures. Only employees who need the (personal) data to perform their work have access to this data. These employees have signed a declaration of confidentiality and have followed a privacy awareness course. Sidekix controls the information processes continuously and guarantees confidentiality, integrity and business-critical information in accordance with ISO 27001. All (personal) data is stored in a location that is well secured, both physically and technically.
When you contact Sidekix via WhatsApp and/or liveChat, all messages are end-to-end encrypted, and can therefore only be read by you and Sidekix. For safe and proper use, Sidekix considers users to be familiar with the privacy (settings) and service conditions of this service / associated with the use of this application.
8. CONTACT WITH SIDEKIX
Sidekix can be contacted by telephone or by post for any questions or requests, such as when you want to know what data Sidekix has on you, when changes have to be made or when data have to be deleted. Sidekix can be reached by telephone from Monday to Friday during office hours via +31 (088) 623 70 00. You can also contact us by phone via WhatsApp on +31 (0)6 27 01 29 22. Mail can be sent to the following address:
Loopkantstraat 19
5405 NB, Uden
For the attention of the Compliance Officer / Data Protection Officer.
8.1. RIGHT OF ACCESS
If Sidekix has processed (personal) data about you, you always have the right to submit a request for inspection (Article 15 of the General Data Protection Regulation).
8.2. RIGHT TO RECTIFICATION
If Sidekix has processed (personal) data about you, you have the right to request rectification at any time. This applies when, for instance, incorrect or outdated (personal) data have been stored in Sidekix's system. You can also do this when an addition has to be made to the (personal) data (Article 20 of the General Data Protection Regulation).
8.3. RIGHT TO DATA PORTABILITY
If Sidekix has processed (personal) data of you, you have the right to receive them digitally. In this way, you may pass this data on to another organisation or request Sidekix to do this for you directly. In that case, it is important to indicate which data may be transferred and to whom (Article 20 of the General Data Protection Regulation).
8.4. RIGHT TO RESTRICTION OF PROCESSING
If Sidekix has processed (personal) data about you, in some cases you can submit a request to temporarily restrict the (personal) data. This way, we can check whether the data are correct, before they are used further. As soon as the data have been checked and possibly adjusted, the restriction will be lifted (Article 20 General Data Protection Regulation).
8.5. RIGHT TO WITHDRAW CONSENT GIVEN
If Sidekix has processed (personal) data about you, you always have the right to withdraw your permission for certain processing. This right can be exercised when you have voluntarily and actively provided Sidekix with data that are no longer necessary for the provision of a service or product. Withdrawing your permission to process (personal) data means that the (personal) data will no longer be used for the purpose for which it was originally collected.
8.6. RIGHT TO OBJECT
If Sidekix has processed (personal) data about you, you have the right to object at any time to the processing of your (personal) data. If you decide to do so, in most cases Sidekix will first weigh the interests. Until there is more clarity about whether or not the objection is sustained, the processing of the (personal) data will be restricted (Article 21 of the General Data Protection Act).
8.7. RIGHT TO OBLIVION
If Sidekix has processed your (personal) data, you have the right to have your (personal) data deleted in a number of cases under the AVG (Article 17 of the General Data Protection Regulation).
8.8. RIGHT TO LODGE A COMPLAINT OR INITIATE LEGAL PROCEEDINGS
If you have a complaint about the use of (personal) data of Sidekix processed by Sidekix, you can report it to Sidekix. We will do our best to help you. If necessary, you can lodge a complaint with the Authority for the Protection of Personal Data or initiate legal proceedings with the court.
9. WHEN WAS THIS PRIVACY POLICY LAST AMENDED?
June 2021
9.1. IMPORTANT CHANGES
N/A
