What are personal data?
Personal data are data that relate to an identified or identifiable natural person. The privacy statement applicable for your category explains which personal data may be processed per category.
Processing purposes
uu77 only processes your personal data for specified, explicit and legitimate purposes. Without your consent, your personal data will not be processed for any purpose that is incompatible with this starting point. The privacy statement applicable for your category explains for which purposes uu77 processes your personal data.
Processing principles
uu77 only processes your personal data if and in so far as at least one of the conditions referred to below is met:
- you have granted permission for your personal data being processed;
- the processing is required for the performance of a contract to which you are party, or it is required to take specific measures, on your request, before the contract is entered into;
- the processing is required to meet a statutory obligation we are subject to;
- the processing is required to protect your vital interests or the vital interests of other persons;
- the processing is required to perform a task carried out in the public interest or assigned to us by a public authority;
- the processing is required for the representation of our interests or a third party鈥檚 legitimate interests, except where the data subject鈥檚 interests or his fundamental rights and his fundamental freedoms that require the protection of his personal data should carry more weight than those interests, especially where the data subject is a child.
Processing of special categories of personal data exclusively takes place if the conditions explicitly mentioned in the law have been met or if one of the grounds for exception applies that is referred to in the current data protection laws and regulations.The privacy statement applicable for your category explains on which legal basis the processing of your personal data may take place.
Mandatory provision
When uu77 requests you to provide personal data, we will make clear whether the provision of these data is necessary or mandatory and what the (possible) consequences are if the data are not provided. Our starting point is always that we do not process more personal data than necessary for the purposes described.
Data exchange with third parties
In specific circumstances to do with the performance of its tasks, uu77 may provide third parties with your personal data. uu77 does not provide any personal data to third parties who will use these data for their own purposes, unless uu77 should be under a legal obligation to provide the relevant data or if you have granted permission to do so. The privacy statement applicable for your category explains whether in your situation data are provided to third parties.
Automated decision-making and profiling
At this moment uu77 does not use profiling in combination with automated decision-making.
Retention period
The privacy statement applicable for your category explains on the basis of which criteria the retention period is determined in your situation. Your data will not be retained any longer than necessary. If the relevant personal data are subject to a statutory retention period, uu77 will comply with that. If the statutory and agreed upon retention periods should differ, we will observe the longer retention period. If you should want your personal data to be erased at an earlier stage, this could be granted in specific circumstances. Please refer to the heading 鈥榬ight to rectification and erasure鈥�.
Personal data security
uu77 takes appropriate technical and organizational measures to secure your personal data against loss or any form of illegal processing. Measures that are applied in this context as much as possible include, amongst other things, encryption and anonymizing personal data, encrypted communication and confidential treatment of personal data.
Your rights
uu77 respects the rights that you have pursuant to current data protection laws and regulations. Below we give you some more information about these rights and how you can invoke them.
Right of access;
You have the right to verify which of your personal data uu77 processes.
Right to rectification and erasure;
In specific circumstances, you are entitled to have your personal data rectified or erased if the data are not 鈥� or are no longer 鈥� correct or if the processing is 鈥� or is no longer 鈥� legitimate.
Right to object;
When uu77 processes your personal data by reason of a legitimate interest or a task carried out in the public interest, you have the right to object to that processing.
If you object to your personal data being used to inform you about uu77鈥檚 activities and similar processing (鈥渄irect marketing鈥�), we will always honour this objection. In that case, your data will no longer be used for direct marketing.
If you object to any other form of processing with respect to your personal data, we will verify if we can honour your objection. If your objection carries more weight than the interest we have in processing your personal data 鈥� and in continuing to do so, we will stop processing these data. If we are of the opinion that our legitimate interest to continue processing your personal data outweighs yours, we will explain our position.
Right to restriction of processing;
In specific circumstances, you also have the right to restriction of processing your personal data. This means that uu77 temporarily 鈥渇reezes鈥� the processing of your data. You can invoke this right while waiting for the assessment of a request for rectification, if the data should have to be erased because the processing is unlawful but you should request restriction of processing instead of erasure, if uu77 no longer needs the data whereas you still need these data for legal proceedings 鈥� or the preparation of legal proceedings 鈥� or pending the assessment of an objection.
Right to data portability;
If uu77 processes your personal data on the basis of your consent or an agreement entered into, you have the right, with respect to these data, to receive (in return) the data you provided us with digitally, in a commonly used format. You are then free to transmit these data to any other party.
Withdrawal of consent;
If uu77 processes your personal data on the basis of your consent, you usually have the right to withdraw your consent. We will immediately stop the processing. Withdrawal of consent has no retro-active effect. Any processing that has taken place up to that moment will, therefore, remain lawful.
Exercising the rights referred to above
If you want to invoke one of the rights referred to above, you can contact the Data Protection Officer Dhr. R. Sarelse or send an email to myprivacy@ru.nl.
uu77 does not charge any costs when you exercise the rights referred to above 鈥� except where rights are abused.
Terms
In principle, uu77 will respond to your request within a month. If answering your question should take more time, which we hope will not be the case, we will inform you about this within a month. The complexity of the requests and/or the number of requests could lead to the response time being delayed by a maximum of three months.
Identification
uu77 may request further proof of identity when you file a request. We apply this rule to prevent personal data being provided to the wrong person or being changed incorrectly and to prevent any changes in the way in which those personal data are processed by us. In order to be able to handle your request as efficiently as possible, we ask you to present your ID.
Balancing individual interests involved in a request
uu77 would like to point out that the rights described above do not constitute absolute rights. Specific circumstances may lead to a specific request not being honoured. We will assess each request on an individual basis. In the event we cannot honour a specific request, we will explain why not, stating reasons. The right to object to the use of data for direct marketing purposes is an absolute right, unsubscribing for possibly commercial forms of communication will in any event be honoured.
Supervision
Data Protection Officer
uu77 has a Data Protection Officer (DPO). The DPO supervises compliance with the data protection laws and regulations and advises uu77 on the data protection laws and regulations. The DPO is independent. The DPO reports directly to the Executive Board. Furthermore, the DPO is the contact person for questions concerning privacy, both for you, as a data subject, and for the supervisor.
For requests with respect to exercising any of the rights referred to above, you can contact the DPO office by email via: myprivacy@ru.nl. If you should have any questions or complaints about this privacy statement or our privacy policy, you can contact the DPO office by email via: myprivacy@ru.nl.
Supervisor
Under the data protection laws and regulations you can also file complaints with the national supervisor, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). You will find further details on the website of the .
Scope and amendments
This privacy statement was approved by the Executive Board on 9 May 2018 and it is applicable, together with the accompanying (sub)privacy statements, for all data processing as from 25 May 2018. Amendments in this privacy statement will be announced on this page at least one month before they take effect. Please visit this page on a regular basis to stay informed about how uu77 processes your personal data.
