Privacy Statement (En)

Privacy statement Pink Elephant B.V. 

Based on the Dutch version, published on januari 14,  2019. The Dutch version takes precedence over this English version. 

Your privacy is of great importance to Pink Elephant B.V. and its subsidiaries. We therefore comply with the privacy law. This means that your data is safe with us and that we always use it properly. In this privacy statement we explain what we use the information that we learn about you for. This data is provided by you for your website visit, information or service request, use of our services or application.

If you have any questions or would like to know exactly what we keep about you, please contact Pink Elephant B.V.

Portal access
With our portal you get access to a management environment where you can set, specify, request and change things yourself. We keep track of what you have done and when, so that there is evidence of this.

For this we use your name, address, position, payment details (of your organization), billing address, IP address, telephone number, date of birth, e-mail address and gender. We need this because of the implementation of the agreement that we have concluded with your organization. We keep this information until the end of the service to you.

Job Applications

Your application for one of our vacancies and the data, including your CV, that you provide to us for this, we of course treat carefully and strictly confidentially. After the application procedure, it may be that we have had to reject you for the vacancy in question. In such cases we would like to keep your data in our database for a period of one year for the possible filling of new vacancies and/or assignments at our organisation. For this extended retention period, we ask for your permission. At the end of the year we can ask again and without obligation whether we can keep your data for a new year in our database in order to invite you to participate in application procedures for new vacancies and / or assignments at our organization. If you do not provide this permission, we will delete your details after the relevant application procedure has been closed.

Statistics and profiling
We keep statistics about the use of our organization’s website. With these statistics we improve our website so that, for example, only relevant information is shown. We can combine your personal data to find out more about you. We will of course respect your privacy at all times. If you do not want this, you can always report this to us.

For this we can use your name and address details, position, payment details (of your organization), billing address, IP address, telephone number, date of birth, e-mail address and gender if you have provided this to us. We need this data because of the implementation of the agreement that we have concluded with your organization and / or being able to provide requested information. We keep this information for a maximum of two years.

Take out a subscription
You can take out a paid subscription with our organization for the delivery of services, where we use your personal data to process the payment and agreed services.

For this we can use your name and address details, position, payment details (of your organization), billing address, IP address, telephone number, date of birth, e-mail address and gender if you have provided this to us. We need this data because of the implementation of the agreement that we have concluded with your organization and / or being able to provide requested information. We keep this information until you cancel the subscription and seven years thereafter (that is the legal retention obligation).

Contact form and newsletter
With the contact form you can ask us questions or make requests.

For this we can use your name and address details, position, payment details (of your organization), billing address, IP address, telephone number, date of birth, e-mail address and gender if you have provided this to us. We keep this information until we are sure that you are satisfied with our response, has unsubscribed from the newsletter and no longer purchases services from our organization.

You can subscribe to our newsletter. Here you can read news, tips and information about our products and services. You can cancel this subscription at any time. Every newsletter contains an unsubscribe link. Your e-mail address will only be added to the list of subscribers with your permission. This information is saved until you cancel the subscription.

Your account
For certain parts of our services you must first register. You must then provide information about yourself and choose a username. With this we create an account, on which you can log in with that username and a password of your choice.

For this we can use your name and address details, position, payment details (of your organization), billing address, IP address, telephone number, date of birth, e-mail address and gender if you have provided this to us. We need this data because of the implementation of the agreement that we have concluded with your organization and / or being able to provide requested information. We keep this information until you cancel the account.

We save this information so that you do not have to enter it again and again and so that we can approach you more easily if necessary. You can adjust when you want through your account information.

Advertisement
We would like to send you advertising about offers and new products or services. We do this:

• by email
• via social media
• by mail
• by phone

You can object to this advertising at any time. Every e-mail contains an unsubscribe link. You can block us or use the unsubscribe option. You can indicate this when you receive a call. You can also pass this on via your account. You can also pass this on via the portal. The data will be saved until you cancel the subscription.

Cookies
Our website https://www.pinkelephant.nl/ uses cookies. Cookies are small files in which we can store information so that you do not always have to enter it. But we can also see that you visit us again.

When you visit our website for the first time, we display a message explaining cookies. Hereby we will ask for your agreement for the use of these cookies.

You can disable the placement of cookies through your browser, but some things on our website will no longer work properly.

We have made agreements with other companies that place cookies about the use of cookies. However, we do not have full control over what they do with the cookies themselves. So also read their privacy statements.

Pink Elephant uses the following social media and commercial cookies:

Switching on and off and removal of cookies
More information about switching on and off and deleting cookies can be found in the instructions and/or using the help function of your internet browser:

• Chrome: https://support.google.com/chrome/answer/95647
• Firefox: https://support.mozilla.org/en/kb/cookies-deleting-data-deleting-websites- saved
• Explorer: https://windows.microsoft.com/nl-NL/internet-explorer/delete-manage-cookies#ie=ie-11-win-7
• Safari: https://support.apple.com/kb/ph21411?locale=en_US

More information about cookies?
You can find more information about cookies on the following websites (which are in Dutch):

• www.ictrecht.nl
• www.cookierecht.nl
• Consumer Association: “What are cookies?”
• Consumers’ Association: “What are cookies for?”
• Consumers’ Association: “Delete cookies”
• Consumer Association: “Disable cookies”

Google Analytics
We use Google Analytics to keep track of how visitors use our website. We have entered into a processing agreement with Google. It contains strict agreements about what they can keep. We allow Google to use the obtained Analytics information for other Google services. We only allow Google to anonymize the IP addresses if you do not accept the cookie notification on our website. The collected data is stored for a maximum of two years.

Location information
Sometimes it is necessary for our website https://www.pinkelephant.nl/ to find out where you are. We will then ask separately if we are allowed to know this and only if you give permission, will we receive this information.

For this service we use the navigation and location software on your phone, tablet or computer. We have no control over what the creators of this software (such as Google Maps) do with it. So always read their privacy statements.

Providing to other companies or institutions
With the exception of the aforementioned partners, we will not, under any circumstances, give your personal data to other companies or institutions, unless we are legally obliged to do so (for example, if the police so require in the event of a suspicion of a crime). Social media buttons are included in our website. With this the administrators of these services collect your personal data.

Security
Security of personal data is very important to us. We ensure that your data is properly secured with us and we therefore hold an ISO9001, ISO27001 and NEN7510 certification. We continuously update our security measures and pay close attention to what can go wrong.

Changes to this privacy statement
When our website changes, we must of course also adjust the privacy statement. Always pay attention to the date above and check regularly for new versions. We will do our best to announce changes separately.

View, change and delete your data
If you have questions or want to know what personal data we have about you, you can always contact us. See the contact details below.

You have the following rights:

• receive an explanation of what personal data we have and what we do with it
• access to the precise personal data that we have
• having errors corrected
• the removal of outdated personal data
• withdrawing permission
• object to a specific use

Please note that you must always clearly state who you are, so that we are sure that we will not modify or delete data from the wrong person.

To file a complaint
If you believe that we are not helping you in the right way, you have the right to submit a complaint to us or the Dutch Data Protection Authority.

Responsible Disclosure

At Pink Elephant we think the safety of our systems is very important. Despite our concern for the security of our systems, it can happen that there is a weak spot.

If you have found a weak spot in one of our systems we would like to hear from you so that we can take measures as quickly as possible. We would like to work with you to better protect our customers and our systems.

We ask you:

• Email findings to us at Security@PinkElephant.nl:
• Not to misuse the problem by, for example, downloading more data than is necessary to demonstrate the leak or to view, delete or modify data from third parties;
• Not to share the problem with others and to erase all confidential data obtained through the leak immediately after the leak is closed;
• Not to use attacks on physical security, social engineering, distributed denial of service, spam or third-party applications, and;
• Provide sufficient information to reproduce the problem so that we can resolve it as quickly as possible. Usually the IP address or URL of the affected system and a description of the vulnerability is sufficient, but more complex vulnerabilities may require more.

What we promise:

• We respond to your report within 3 working days with our assessment of the report and an expected date for a solution;
• If you have complied with the above conditions, we will not take legal action against you regarding the report;
• We will treat your report confidentially and will not share personal information with third parties without permission unless this is necessary to comply with a legal obligation. Reporting under a pseudonym is possible;
• We will keep you informed of the progress of solving the problem;
• In reporting on the reported problem we will, if you wish, state your name as the discoverer.
• We strive to resolve all issues as quickly as possible and are happy to be involved in any publication about the issue after it has been resolved.

This Responsible Disclosure paragraph has been prepared with thanks to Floor Terra for his sample text at http://responsibledisclosure.nl/

Contact data
Pink Elephant B.V. 

T.t.o. team Legal & Compliance
Postbus 134 

5201 AC ‘s-Hertogenbosch
privacy@pinkelephant.nl  

+31 88 2356655