We see sustainability as a good opportunity to drive positive change in the industry. An important goal is to achieve a more transparent supply chain by stimulating collaboration with our partners. That way of working together requires openness, mutual trust and respect. Therefore, we take our responsibilities and the initiative to process the personal data we collect in the course of our business activities and other services from our employees, customers, vendors, website users and other stakeholders in a transparent, lawful, responsible and accurate manner for predetermined specific purposes, protected in an appropriate manner with technical and organizational measures and kept for no longer than strictly necessary.
Hereafter we set out the guidelines of Stahl when processing these personal data and describe the rights of data subjects whose personal data are processed as shown in this privacy statement.
What personal data do we process?
Stahl processes your personal data because you use our services and/or because you, mandatory or voluntary provide them yourself.
Below is an overview of the personal data we can process:
- Surname and given names
- Date of birth
- Address data
- Phone number
- E-mail address
- IP address
- Location data
- Information about your activities on our website
For what purpose and on what basis do we process personal data?
We process personal data about data subjects such as job applicants, client contacts, supplier contacts, website users, and other stakeholders.
Stahl processes such personal data for a number of business purposes, including:
- Talent Acquisition
- Research and development
- Technology infrastructure and support and facilities management
- Sending our newsletter and/or other requested documents
- To call or e-mail you if necessary to carry out our services
- Cookie preferences
- Other purposes required by law or regulation
Do we make use of automated decision-making?
Stahl does not use automated decision-making solely based on automated systems without human intervention on matters that can have (significant) consequences for Data Subjects.
Which guidelines do we observe to process and protect personal data?
We process personal data fairly and lawfully. In particular, we will not process personal data unless one of the following conditions is met:
a) The data subject concerned has consented to such processing;
b) We need to carry out such processing (1) to perform, or take steps with view to enter into, a contract with the data subject concerned, (2) to comply with legal obligation of us or (3) to protect the vital interests of the data subject concerned in a `life or death' situation; or
c) We need to carry out such processing to pursue the our legitimate interests, and those interests are not overridden because the processi ng prejudices the interests or fundamentalrights and freedoms of the data subject concerned.
How long do we process and store personal data?
We maintain retention policies and procedures, to make sure personal data are deleted after a reasonable time, given the purposes for which the personal data are held, except where, given those purposes, another law requires the data to be kept for a certain time. When we no longer need to keep personal data for the purposes for which they are held we will destroy them as soon as practicable.
We use the following retention periods for the following (categories) of personal data:
Website users > until exercising information request
Reason: complete contract
Do we share personal data with third parties?
We only provide and/or transfer personal data to third parties if this is necessary for the execution of an agreement with you or to comply with a legal obligation.
Which cookies or similar techniques do we use?
Can I view my data or have my data modified or deleted?
You have the right to view, modify or delete your personal data. In addition, you have the right to withdraw your consent to the data processing or to object to the processing of your personal data by us and you have the right to data portability. This means that you can submit a request to us to send the personal data of you that we have available to you or another organization mentioned by you in a computer file. You can send a request for access, modifying, deletion, data transfer of your personal data or request for cancellation of your consent or objection to the processing of your personal data to DPO@stahl.com.
To ensure that the request for access has been made by you, we ask you to send a copy of your ID with the request. Make your passport photo, the machine readable zone (the strip with numbers at the bottom of the passport), passport number and citizen service number (BSN) black in this copy. This is to protect your privacy. We respond as quickly as possible, but within four weeks, at your request.
We would also like to point out that you have the opportunity to file a complaint with our national supervisory authority, the Dutch Data Protection Authority.
This can be done via the following link: https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons.
How do we protect your personal data?
Stahl takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. If you have the impression that your data is not properly secured or there are indications of misuse, please contact our customer service or send an e-mail to DPO@stahl.com.
Stahl Holdings BV
5145 PE Waalwijk
PO Box 110
5140 AC Waalwijk
Telephone: +31 416 689 200