Gielissen privacy

Privacy Statement Gielissen Group
Thank you for visiting our website and for your interest in our company. In the text below we give you information about how we handle your personal data when using our website. In this case, personal data are all data that make it possible to identify you personally.

The data controller for this website within the meaning of the General Data Processing Regulations is Gielissen | Interiors | Exhibitions | Events, Freddy van Riemsdijkweg 21 5657 EE Eindhoven, the Netherlands, email: privacy-at-Gielissen.com, hereinafter referred to as "Gielissen". The controller of the processing of personal data is the natural or legal person who alone or together with others decides with which purposes and means the processing of personal data will be carried out.

This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (such as orders placed with, or requests made to, the data controller). You can recognize an encrypted connection by the character string https://" and the padlock symbol in the address bar.

Your privacy rights: in brief
Every data subject shall have, free of charge, the right to access, rectify, supplement, delete, be forgotten, restrict, transfer and the right to object to the processing of his personal data. You can send your request to privacy-at-Gielissen.com. In order to ensure that you have made the request for inspection, we ask you to enclose a copy of your identity document with the request. We hereby ask you to include your passport photo and citizen service number (bsn)/national register number in this copy in black. This is to protect your privacy.

If the processing of your data is based on consent, you can withdraw it at any time. You can do this by contacting us at the email address privacy-at-Gielissen.com.

Gielissen will respond to your request as soon as possible, but within four weeks. You can also reach us at telephone number 31 40 2353641.

1. Data registration when visiting our website
If the website is only used to search for information, i.e. if you do not register or provide us with information in any other way, we only collect data that is passed from your browser to our server (so-called "server log files"). When you access our website, we record the following information because it is technically required for us to display the website to you: Which of our websites you have visited;
- date and time the website was opened;
- amount of data sent in number of bytes;
- source / reference from which you opened the page;
- browser used;
- operating system used;
- IP address used (possibly in anonymized form).
The processing is carried out in accordance with Article 6, paragraph 1, subsection f of the GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be given to third parties or used in any other way. We reserve the right to check the server log files at a later date, should there be any specific indications of unlawful use.

2. Cookies
In order to make visiting our website attractive and to enable the user to make use of certain functions, we also use so-called cookies. These are small text files that are stored on your terminal equipment. Some of the cookies we use are deleted after the browser session, i.e. after you close your browser (the so-called session cookies). Other cookies remain on your terminal equipment and enable us and our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies). When cookies are placed, they collect and process, to varying degrees, certain user information, such as browser and location data and IP address, if this information is made available by your browser. Persistent cookies are automatically deleted after a specified period of time, which may vary per cookie.

In part, cookies also serve to simplify the order process by saving settings. Insofar as some of the cookies implemented by us also process personal data, processing is carried out in accordance with Article 6(1)(b) of the GDPR, for the fulfilment of a contract, or Article 6(1)(f) of the GDPR, for the safeguarding of our legitimate interests in the optimum functionality of the website and also in the customer-friendly and effective design of a website visit.

Please note that you can set your browser to notify you when cookies are being stored and to decide each time whether you want to accept them. You may also refuse to accept cookies in certain cases, or at all times. The options available to you to manage cookie settings vary from browser to browser. This is described in the Help menu of the browser concerned, which explains how to change your cookie settings. For the browser in question, the explanation can be found under the following links:
• Internet Explorer: https://support.microsoft.com/nl-nl/help/17442/windows-internet-explorer-delete-manage-cookies
• Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
• Chrome: https://support.google.com/chrome/answer/95647?hl=nl&hlrm=en Safari: https://support.apple.com/kb/ph21411?locale=nl_NL
• Opera: http://help.opera.com/Windows/10.20/nl/cookies.html
Please note that if you do not accept cookies, the functionality of our website may be adversely affected.

3. When you contact us
When you contact us (e.g. via a contact form or by email), personal data are collected. You can see in the contact form which data will be registered when you contact us. This information will only be used for the purpose of answering your request or contacting you. These data are not stored on a server. The legal basis for the processing of data is our right when answering your situation according to article 6, paragraph 1, subsection f of the GDPR. If you contact us with the purpose of concluding an agreement, then an additional legal basis for the processing is article 6, paragraph 1, subsection b
of the GDPR. Your data will be deleted as soon as your request has been fully processed, this is the case when it can be concluded from the circumstances that the case in question has been finalised and insofar as legal obligations to archive allow this.

4. Data processing customers/exhibitors to comply with an agreement
In accordance with Article 6(1)(b) of the GDPR, personal data will also be recorded and processed if you have provided them to us for the purposes of executing an agreement or opening a customer account. You can have your customer account deleted at any time by sending a message to privacy@gielissen.com. We store this information provided by you and use it to process the agreement. After the contract has been fully completed or your customer account has been deleted, the data will be blocked for the purposes of the retention periods required by tax and commercial law and deleted after these periods have expired, unless you have expressly consented to our continued use of your data, or we reserve the right to carry out further processing that is legally permitted, on which we will provide you with further information below.

5. Use of social media: Use of YouTube videos
This website uses the embedded YouTube feature to link to - and display - videos from the provider "YouTube", a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
The extended data protection mode is used for this purpose, which, according to the provider's information, only then starts saving user information when the video(s) is or are started. Once you start viewing the embedded YouTube video, the provider uses "YouTube" cookies to collect information about the user's behaviour. According to the indications provided by 'YouTube', it serves, inter alia, to compile video statistics, to improve user-friendliness and to prevent abuse. When you log in to Google, your data will be assigned directly to your account as soon as you click on a video. If you do not want YouTube to assign information to your profile, you must log out before activating the button. Google stores your data (even for users who have not logged in) in the form of a user profile and analyses it. Such an analysis is in particular carried out in accordance with Article 6(1)(f) of the GDPR on the basis of Google's legitimate interest in displaying personalised advertising, market research and/or a website design tailored to demand. You have the right to object to the creation of such user profiles. To exercise your right, you must contact YouTube.
Regardless of whether or not an embedded video is shown, every time this website is called up a connection is established with the Google network "DoubleClick". Without us being able to influence this, other processes for data processing can be set in motion.
US-based Google LLC is certified for the US-European Privacy Shield, which ensures that EU data protection levels are maintained.
Additional information on data protection at "YouTube" can be found in the provider's privacy statement at: https://www.google.de/intl/de/policies/privacy.

6. Web analysis services
6.1 Google Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-called
"cookies", which are text files placed on your computer, to help analyse how you use the site. The information generated by the cookies about how you use the website (including your IP address) is usually transmitted to and stored by Google on servers in the USA.

Google Analytics uses this website exclusively with the extension "_anonymizeIp()", which guarantees anonymization of the IP address by trunking and excludes any direct reference to a person. In the Member States of the European Union, or in other treaty countries of the Agreement for the European Economic Area, Google will shorten your IP address using this supplement in advance. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. In these exceptional cases, processing takes place in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interests in the statistical analysis of user behaviour for optimisation and marketing purposes.

On behalf of Gielissen, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be combined with other Google data.

You can prevent cookies from being stored by setting your browser software accordingly, but please note that if you do this you may not be able to use the full functionality of the website. Furthermore, you can prevent the collection of data generated by the cookie about your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Instead of the browser plug-in or in the browser on mobile devices, click on this link, to place an opt-out cookie, which then prevents Google Analytics on this website from collecting data (opt-out cookie functions only for this browser and only for this domain).

US-based Google LLC is certified for the US-European Data Protection Agreement (EU-US Privacy Shield) "Privacy Shield", which ensures that EU data protection levels are maintained.
Additional information on the handling of user data by Google Analytics can be found in the Google privacy statement: https://support.google.com/analytics/answer/6004245?hl=nl10) Hulpprogramma’s en diversen

6.2 Google Maps
On our website we use Google Maps (API) from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Maps is a web service that shows interactive (country) maps with which geographic information can be visually displayed. With the help of this service we will inform you of our location and make it easier to plan the route for a possible visit.

As soon as you open such a sub-page with the map of Google Maps integrated, information that you use our website (such as your IP address) will be sent to and stored on Google's server in the USA. This happens regardless of whether or not a user account exists that Google makes available and with which you have logged in. Once you have logged in to Google, your data will be directly assigned to your account. If you do not want Google to assign information to your profile, you must log out before activating the button. Google stores your data (even for users who have not logged in) in the form of a user profile and analyses it. Such an analysis is in particular carried out in accordance with

Article 6(1)(f) of the GDPR on the basis of Google's legitimate interest in displaying personalised advertising, market research and/or a website design tailored to demand. You have the right to object to the creation of such user profiles. To exercise your right, you must contact Google.

US-based Google LLC is certified for the US/Europe Data Protection Agreement (EU-US Privacy Shield) "Privacy Shield", which ensures that EU data protection levels are maintained.

If you do not agree that your data may be passed on to Google in the future as part of your use of Google Maps, you may deactivate the Google Maps web service completely by deactivating the JavaScript program in your browser. Then it is no longer possible to use Google Maps and maps will no longer be shown.

The Google terms of use can be consulted at:
https://policies.google.com/terms?hl=nl&gl=nl, the additional terms of use for Google Maps can be found at https://www.google.com/intl/nl_US/help/terms_maps.html
Detailed information on data protection in connection with the use of Google Maps can be found on the Google website ("Google Privacy Policy"): https://policies.google.com/privacy?hl=nl&gl=nl

7. Rights of the data subject
The applicable data protection law guarantees you extensive rights as data subject (right to information and intervention) vis-à-vis the data controller, with a view to the processing of your personal data, on which we provide information below:

- The right to information according to art. 15 of the GDPR: In particular, you are entitled to information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipient or categories of recipients to whom your data have been or will be disclosed, the intended duration of storage or the criteria used to determine the duration of storage, the existence of the right of correction, deletion, limitation of the processing, objection to processing, lodging an objection with a supervisory authority, the origin of your data if we have not collected them ourselves about you, the existence of an automated decision-making process including profiling and possibly clear information about the applied logic and the scope and intended effect of the said processing, as well as your right to information about the guarantees that exist, according to art. 46 of the GDPR, when your data are transferred to other countries;

- Right to correction under Article 16 of the GDPR: You have the right to immediate correction of incorrect data relating to you and/or to supplement your incomplete data stored by us;

- Right to deletion according to art. 17 of the GDPR: You have the right to demand that your personal data be deleted if the conditions of art. 17, art. 1 of the GDPR have been met. In particular, this right shall not apply if the processing is required for the exercise of the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest or to assert, implement or defend legal claims;

- Right of restriction according to art. 18 of the GDPR: You have the right to demand that the processing of your personal data be restricted, if the accuracy of your data that you dispute is still being checked, if you refuse to have your data deleted on the grounds of unauthorised data processing and instead demand that the processing of your data be restricted, if you need your data for the purpose of asserting or defending legal claims, after we no longer need such data after we have achieved the objective, or if you have lodged an objection on the grounds of your particular
situation, as long as it has not yet been established whether our legitimate reasons are of greater importance.

- Right to information under Article 19 of the GDPR: If you have exercised the right to rectify, delete or restrict the processing vis-à-vis the data controller, the data controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of such rectification or deletion or the restriction on the processing, unless this is not possible or involves excessive effort. You have the right to demand that you be informed of the recipients.

- Right to information according to art. 20 of the GDPR: You have the right to receive your personal data made available to us in a structured, common and machine-readable format, or to demand transfer to another data controller, insofar as this is technically feasible;

- You have the right to revoke your consent according to art 7, par. 3 of the GDPR; You have the right to revoke your consent already given for the processing of data at any given moment in the future. In the event of revocation, we will delete the relevant data immediately, insofar as processing cannot continue on the legal basis of processing without consent. Revocation of your consent shall not affect the lawfulness of the processing that took place on the basis of your consent up to the date of the revocation;

- Right to object according to art. 77 of the GDPR: If you consider that the processing of personal data concerning you is in breach of the GDPR, you have a right - irrespective of any other administrative or judicial remedy - to lodge an objection with a supervisory authority, in particular in your Member State of residence, at your workplace or at the place of the suspected breach.

8. Duration of the storage of personal data
The duration of the storage of personal data depends on the relevant statutory archiving period (such as retention periods under commercial or tax law). After the expiry of this period, the data in question will be routinely deleted, insofar as they are no longer necessary to fulfil agreements or to conclude an agreement and/or if there is no legitimate interest on our part to retain the data any longer.

9. Application
Personal data are collected in the course of an application procedure. We process the application data entered by you solely for the purpose of assessing and allocating your application and also for the purpose of comparing it with the vacancies available, in the context of measures taken in preparation for a contract, in accordance with Article 6(1)(b) of the GDPR. Please note that you are responsible for the accuracy of your data.

In addition, the data will in any case also be processed in our interest, in accordance with Article 6(1)(f) of the GDPR, in order to keep them for inspection for a maximum of one year, unless an employment contract is entered into.

In addition, we must comply with legal obligations (e.g. obligations under the General Law on Equal Treatment, as well as requirements under tax and company law). In order to comply with this, we process your personal data in accordance with Article 6(1)(c) of the GDPR, only to the extent required by law.

If none of the reasons mentioned above exists, we will ask you for permission to process in accordance with Article 6(1)(a) of the GDPR. This applies especially if Gielissen, except in connection with your actual application, would like to contact you personally by telephone or post about other open vacancies within Gielissen and if we would like to keep your details available for longer.

As soon as we no longer need your personal data for the above purposes, we will delete them if there is no legal obligation to archive them.

As soon as an employment contract has been concluded, we will archive your data for the duration of the period that you work for us and, after you have left our service, we will delete them after the statutory archiving periods have expired.
If your application is rejected, your application for a particular vacancy will in any event be kept for the statutory period of six (6) months after the end of the application procedure. If you have consented to your application file being stored for longer, we will store both the data you provide and your application profile for 24 months.