We aim to collect only personal data voluntarily provided by online visitors in order to use it to offer these individuals information and/or services, or information about career opportunities. In this privacy statement, you will find more information on how we collect, use, share and protect the personal data we obtain. We encourage you to read this privacy statement carefully.

1 Collection and use of personal data

1.1 What personal data do we collect?
We collect your personal data when you choose to provide it, for example when you email us or sign up for certain services. In some cases, you may have previously provided personal data to Westerhart (for example, if you are a former employee). We may use your personal data to build or complete your profile, possibly in combination with information we already have about you. This will allow us to offer you specific services, for example as part of our sales activities.

When you register or provide personal data to Westerhart, we use this information as described in this privacy statement. Your personal data will never be used for other purposes unless we have received your consent to do so, if we have to comply with a legal obligation or if further processing is permitted under privacy legislation. For example, when you register on a Westerhart website and provide information about your preferences, we use this information to personalise your user experience. When you send Westerhart your curriculum vitae to apply for a position online, we use the information you provide to search within Westerhart for career opportunities that match. We also use your personal data to optimise your visit to our website as much as possible and to continually improve our services.

In principle, Westerhart collects only the personal data necessary to fulfil your request. If we collect additional, optional data, we will inform you of this at the time we are about to do so.

We may process the following (types of) personal data when you visit our website:

• Name
• E-mail address
• Company name
• Job title
• Telephone number
• IP address
• Your interests and preferences

1.2 On what legal grounds do we process your personal data?

Privacy legislation, including the General Data Protection Regulation (GDPR), allows us to process personal data as long as we have a legal ground to do so.

In addition, we are required by this legislation to tell you what this ground is. We will only process your personal data on one of the following grounds:

• Performance of a contract: when we need to process your personal data to fulfil our obligations under a contract; 
• Legal obligation: when we need to process your personal data to comply with a legal obligation, such as keeping records for tax purposes or providing information to a government or law enforcement agency; 
• Legitimate interest: we process your personal data if it is in our legitimate interest for the operation and optimisation of our business, as long as your interests do not outweigh our interests; or

Examples of the legitimate interests mentioned above include:

• Providing information and/or services to individuals who visit our website, or offering information on job opportunities.
• Preventing fraud or criminal activity and protecting our IT systems. 
• Improve the performance, usability and effectiveness of Westerhart’s online activities. 
• Conduct and analyse our marketing activities.
• Meeting our business obligations and our corporate social responsibility obligations.
• Exercising our fundamental rights in the EU under Articles 16 and 17 of the Charter of Fundamental Rights, including our freedom to conduct business and our right to property.

In some cases, and only where permitted by law, the personal data we collect may involve special categories of personal data, such as data relating to diversity (including information on racial and ethnic origin, political opinions, religious and other similar beliefs, trade union membership and information on a data subject’s sex life and sexual orientation), or health data and data on alleged or proven criminal offences.

1.3 Automatic collection of personal data
Westerhart sometimes uses cookies, web beacons and other technologies to automatically collect certain types of information during your online visit or through emails exchanged. Collecting this information allows us to provide you with a tailored online experience, improve the performance, usability and effectiveness of Westerhart’s online activities and measure the effectiveness of our marketing activities.

1.3.1 IP addresses
An IP address is a unique numeric code that identifies your computer when you access the Internet. IP addresses allow computers and servers to recognise and communicate with each other. The IP addresses from which visitors appear to send their messages are recorded for IT security and system diagnostics purposes. This information will usually also be used integrally for analyses of the use and functioning of websites.

1.3.2 Cookies
When you visit us online, cookies are usually placed on your computer or other Internet-enabled device. As Westerhart only uses cookies that are necessary for the functionality of the website, no so-called cookie banner is used.

More information on how to manage cookies can be found in your browser’s help file or on sites such as www.allaboutcookies.org.

2 Sharing and transfer of personal data

Westerhart will not disclose your personal data to third parties, unless this is necessary for our legitimate professional and business purposes, to fulfil visitor requests and/or if required or permitted by law or professional regulations.

3 Choices

In principle, you are not required to provide personal data to Westerhart, but we may ask you for certain personal data so that we can provide you with additional information about our services and events. Westerhart may also ask for your consent to certain uses of your personal data, in which case you may consent or refuse. If you agree to receive certain (information) services such as a digital newsletter, you may unsubscribe at any time using the instructions we include in all communications. If you wish to unsubscribe from an (information) service, we will try to remove your data in a timely manner, but we may need additional information to process your request.

4 Your rights

If Westerhart processes your personal data, you have the following rights:

• Inspection and rectification: you have the right to inspect your personal data. This is also referred to as a ‘Request for Inspection’. If we agree that we are obliged to give you access to your personal data, we will do so free of charge. Before we give you access, we may ask you to provide proof of identity and sufficient information about your interactions with us so that we can locate your personal data. If the information we hold about you is incorrect, you have the right to ask us to rectify any inaccuracies in the personal data. 
• Object to processing: you have the right to object to us processing your personal data if we are no longer allowed to use it.
• Other rights: in addition, you may have the right to have your personal data erased if we keep it for too long, to restrict its processing in certain circumstances and/or to request copies of the information we hold about you in electronic form.

You can make a request to Westerhart to exercise these rights at info@westerhart.nl. To the extent permitted by applicable law and professional rules, we will then make every reasonable and practical effort to comply with your request.

5 Data security and integrity

Westerhart has put in place appropriate security measures and procedures to protect personal data against destruction, loss, alteration or unauthorised disclosure or access. Despite Westerhart’s best efforts, security against all threats cannot be guaranteed. We will make every effort to limit access to your personal data to those who need to know about it. The persons we give access to this data are obliged to keep it confidential.

We will also take all reasonable steps to retain personal data only for as long (i) as necessary to comply with a data subject’s request, (ii) as necessary to comply with legal, regulatory, internal business or policy obligations, or (iii) until the data subject requests that the information be deleted. How long data is retained depends on the specific nature of the information and the circumstances in which the information was collected.

6 Links to other websites

Please be aware that Westerhart websites may contain links to other websites, which may differ from this Privacy Statement. Therefore, we encourage users to familiarize themselves with the privacy policy at each website they visit before providing personal information.