How and why does Connection Workshop collect personal data?
Connection Workshop collects personal data when carrying out its work. In most cases it relates to data that she requests from the person concerned or that the person concerned provides on his own. Think of a first telephone conversation between Connection Workshop and a (potential) customer or a situation where a (potential) customer sends an e-mail to Connection Workshop. Connection Workshop will work as carefully as possible when processing personal data. An essential part of that care is transparency. It is important that third parties and those involved understand the way in which personal data are being used and the reasons behind it. That is why this statement has been drawn up.
Who is Connection Workshop exactly?
In many cases, Connection Workshop is responsible for the processing of personal data. She is registered at number 1527581 and contactable on phone number 9028 3025 and by email at firstname.lastname@example.org
Does Connection Workshop have a Data Protection Officer?
Connection Workshop did not appoint a Data Protection Officer.
Which personal data does Connection Workshop process and why does she do this?
Connection Workshop processes various types of personal data for various reasons. The data that is processed the most:
- Identification data (name, e-mail address, contact person, phonenumber, Chamber of Commerce number)
- Location data (postal and / or corporate address)
- Financial data (bank account number, payment details)
In the case of a job application, Connection Workshop will process additional information, namely:
- Composition of family, education level and job experience(s)
The first main goal of the above data processing is to create an agreement with the customer. That is why Connection Workshop and the customer must be able to communicate with each other. Consider, for example, making an inventory of the wishes of the customer and preparing an offer. The second main goal is to be able to execute the contract. Consider, for example, periodic consultation on progress. The third main goal is to enable invoicing for the work or services, as well as to facilitate payment (and, if necessary, collection). The last main goal is to inform the customer about developments that may be relevant to him or her.
Is Connection Workshop allowed to process those details?
Connection Workshop processes personal data where necessary in order to establish or execute an agreement with a customer and / or a supplier. This is the case, for example, when a quote is requested or when an order is placed. Furthermore, Connection Workshop processes personal data if its own interests justify it. This will be the case if it is reasonably impossible for Connection Workshop to carry out its work without processing this data. Finally, in some cases Connection Workshop also requests permission to use the data. The formal legal grounds for processing are therefore:
- that processing is necessary for the performance of an agreement in which the person a part is, or is made at the request of the person concerned for the conclusion of an agreement.
- that processing is necessary for the representation of the legitimate interests of Connection Workshop (or a third party)
- that the person concerned has given permission for the processing
With regard to legal grounds (ii), it applies in all cases to processing operations that are necessary for Connection Workshop to be able to realize its services. She simply cannot do his work (communicating with the customer, assembling documents, offering support, sending out invoices, etc.) without using the personal data of the customer. The importance that Connection Workshop has in these processing operations is therefore considerable. This is especially true now that there is no possibility for Connection Workshop to achieve its goals without making use of that data. Connection Workshop believes that its importance must be given priority when weighed against the interest of the person concerned. Firstly because she knows from experience that such processing as a rule does not encounter any objections. That is why she can take that as a starting point. Secondly, because Connection Workshop only uses the data that she actually needs to achieve his goal. Thirdly, because the relevant data is not kept any longer than necessary. As a result, Connection Workshop limits the infringement of the rights of the person concerned to the minimum. With regard to category (iii), permission given can be withdrawn at any time without giving any reason. The permission to process data via the website is requested when the website is visited.
Do these personal data end up with others?
In some cases, Connection Workshop will share personal data with parties with which it cooperates. These are so-called 'processors'. Connection Workshop has concluded agreements with those processors. These serve to ensure that those processors (like Connection Workshop herself) handle this information carefully. For example, a processor is obliged under the agreement to ensure proper security, to deal confidentially with those data and to destroy the data.
Connection Workshop does not intend to share personal data with parties other than processors.
At most, she foresees that, in a single case, information will be shared with (another) employee of the customer or with parties that are in direct contact with the customer.
Will the personal data remain in Europe?
This is the context of the European Economic Area (EEA). It consists of the countries of the EU, supplemented by Norway, Liechtenstein and Iceland. All countries that fall outside it are considered a 'third country'. Connection Workshop does not transmit personal data to third countries. The personal data therefore remains in Europe. If in an exceptional case there is still a transfer to a 'third country' then this will only happen to a country of which it has been explicitly established at European level that an appropriate level of personal data is guaranteed there.
How long will these data be kept?
Connection Workshop stores the data collected by her for different time periods, depending on the category of data and the way in which they were collected. The precise terms are included in the register of processing activities that Connection Workshop has drawn up. When setting the applicable terms, Connection Workshop is initially based on statutory (minimum) periods. Think of the statutory duty to keep accounting information. Furthermore, where possible, Connection Workshop has sought to connect to the storage periods included in the Wbp Exemption Decision. For example, with regard to the contact details of the customer, a storage period of up to one year after termination of the relationship between the parties applies. Finally, Connection Workshop was guided by its interests and those of its customers when setting the storage periods. For example, it can be important for both parties that documents in which (further) agreements have been recorded are kept for more than two years. If such documents (such as mail correspondence, for example) contain personal data, they will then also be kept.
What rights do I have?
According to the law, you are a 'person concerned' and those concerned have a number of specifically defined legal rights. You can submit a request to Connection Workshop to view, receive, change or delete your personal data. You can also object to the (further) processing of your data. If Connection Workshop processes your personal data on the grounds of your consent, you can revoke that permission at any time. For all these matters and for other questions, please contact:
Connection Workshop Ltd.
Tel: 9028 3025
Connection Workshop will respond to your message within a month.
If you believe that Connection Workshop is acting in violation of applicable laws and regulations on personal data, you can submit a complaint to the Privacy Commissioner for Personal Data, Hong Kong.
Is there automated decision-making with Connection Workshop?
No automated decision making take place with Connection Workshop.
What else should I know?
- Connection Workshop does not have an automated system
- Connection Workshop has taken appropriate technical and organizational measures to protect your personal data. A description of this is also included in the processing register. Connection Workshop periodically assesses whether these measures are sufficient.
- From time to time it will be necessary to change this Statement. Connection Workshop has the right to do so. We advise you to occasionally check this Statement for possible changes.
Version 25 May 2018