PRIVACY STATEMENT

GRIP Holding BV / GRIP Facility

Chamber of Commerce 65069463

1. Introduction
   GRIP takes your privacy very seriously and will process and use personal information (the data subject) in a safe and secure manner. In this Privacy Statement we explain which data we process and for what purpose. You can read about your rights in relation to our processing of your personal data. We recommend that you read this Privacy Statement carefully.

1.1. Who is GRIP?
GRIP is GRIP Holding BV, a private company with limited liability under Dutch law with registered office at Edvard Munchweg 61, Almere, registered in the trade register of the Chamber of Commerce under number 65069463.
1.2. How are you involved? We may process your personal data for various purposes. The goals partly depend on how you come into contact with GRIP. That is why we distinguish between the following ways of involvement:

1.2.1. As a visitor to our website

1.2.2. As a user of our digital solution (via website or app)

1.2.3. As a customer of GRIP (potential, former or current customer)

1.2.4. As an applicant

Your involvement may apply to several of the above situations. Determine this for yourself. For each situation, we provide relevant information about your privacy below. Finally, also read chapter ‘6 General’.
1.3. Who is responsible for your personal data? The party that has control over the personal data is called the controller. GRIP provides a digital solution to its customers. The customers themselves have control over the information in the digital solution and are therefore the controllers. In the situation where you are a user of our digital solution, we are called the processor and your organization is the controller. In other situations, we are the controller. Questions about your personal data are best addressed to the controller.

1. Involved as a visitor to our website
   In this situation, GRIP is the controller.

2.1. Our website grip -facility.com has two functions.

2.1.1. On the website you will find information about our company and the services we can offer.

2.1.2. Authorized users can log in to a protected area via this website. This area can also be accessed directly from dashboard.Grip-facility.com. If you can log in to this area, the situation as a user of our digital solution also applies to you (see section 3).

2.2. What personal data do we process?

2.2.1. Information about your activities on our website – IP address

2.2.2. Location data

2.3. Why do we process this personal data?
GRIP analyzes your behavior on the website in order to improve our website and to adapt our range of products and services to your preferences. The legal basis for this is a legitimate interest, namely a commercial interest.

2.4. How long does GRIP store my personal data?
GRIP does not store your personal data for longer than is strictly necessary to achieve the purposes for which your data is collected.

1. I am involved as a user of our digital solution
   In this situation, your organization is the controller. As a user of our digital solution, the situation as a visitor to our website also applies to you. Therefore, also read section 2 if you have not already done so. Only persons authorized by an organization that has entered into a license or other agreement with GRIP have access to the dashboard of our website. Grip-facility.com or the GRIP app. If you have access, GRIP processes certain personal data about you on behalf of your organization. If you have been granted access via a GRIP licensee and you are not employed by this organisation, then by ‘your organisation’ we mean this GRIP licensee.

3.1. What personal data do we process?
The personal data that is processed depends on the services your organization obtains through GRIP.

3.2. Why does your organization process personal data?
Depending on the services your organization acquires through GRIP, your personal data may be processed for the following purposes, for example:

3.2.1. Assign and be able to grant access to rights and roles within the digital solution.

3.2.2. As a basis for the work that your organization carries out for its customers.

3.2.3. For the proper implementation of your organization’s personnel and payroll management .

3.2.4. For evaluating (your) results and performance.

For more information about your organization’s purposes and applicable legal bases, please contact your organization.

3.3. How long does GRIP keep my personal data?
The retention period(s) for the processing we perform for your organization is agreed with your organization. For more information about this, please contact them.

1. Involved as a customer of GRIP
   In this situation, GRIP is the controller. As a customer of GRIP, we process personal data for various purposes. The purposes, personal data involved and legal grounds are set out below.

4.1. Provision of the service itself
Name and address details, e-mail address, file data, financial data, data necessary to provide the service, data generated during the servicePerformance of the agreement

As long as this is necessary for this purpose

4.2. Handling complaints
Name and address data, e-mail address, file data, financial data, data necessary to provide the service, data generated during the servicePerformance of the agreementAs long as necessary for this purpose

1. billing
   Name and address information, email address, file information, financial information, information necessary to provide the service, information generated during the service .
2. Execution of the agreement

6.1. CRM
Name, email address, location, order history, social media data, telephone number, agreements, profile picture Legitimate interest Commercial interest As long as necessary for this purpose

6.2. Newsletter (e.g. for marketing purposes)
Name and address details, e-mail address, telephone number Legitimate interest, commercial interest
As long as this is necessary for this purpose

6.3. Technical newsletter
(to inform you about changes in our services and products) Name and address details, e-mail address, telephone number Execution of the agreementAs long as this is necessary for this purpose

6.4. Verification and support
(to be able to approach you if this is necessary to perform our services) Name and address details, e-mail address, telephone number PermissionAs long as this is necessary for this purpose

1. Involved as a jobseeker with GRIP
   This applies when you send us a letter of application, possibly with CV. In this situation, GRIP is the controller. Our goal is to compare different candidates with each other and make a choice based on your personal data. We share your information with various employees at GRIP.

7.1. What personal data do we process?

7.1.1. Name, address, place of residence

7.1.2. Date of birth

7.1.3. E-mail address and phone number

7.1.4. social media data

7.1.5. CV
The legal basis for this is a legitimate interest, namely recruiting staff.

7.2. How long does GRIP keep my personal data?
GRIP stores the personal data for up to 4 weeks after the end of the application procedure.

1. General information

8.1. With whom does GRIP share personal data?
If you are a user of our digital solution, GRIP, as Processor, shares your personal data with your organization. The latter can share your personal data with third parties via GRIP. Please contact your organization for more information. In consultation with your organization, we enter into a processor or sub-processor agreement with companies that process your data on our behalf to ensure the same level of security and confidentiality of your data.
GRIP can make use of external consultants. These consultants are subject to the same confidentiality obligations as our own employees.

8.2. What about transfers to third countries or international organizations?
For example, for technical and operational reasons, it may be necessary for your personal data to be transferred to a company affiliated with GRIP outside the European Economic Area . As the privacy protection regulations may not offer the same protection as within the European Economic Area, GRIP will Shield or use the EU Model Clauses to protect your privacy as much as possible.

8.3. What are cookies and how does GRIP use them?
A cookie is a small text file that is stored on your computer, tablet or smartphone when you first visit this website. The cookies used by GRIP are necessary for the technical operation of the website and for your convenience. They ensure that the website works properly, for example by remembering your preferred settings. They also enable us to optimize our website. GRIP only uses technical, functional and analytical cookies that do not infringe your privacy.
You can opt out of cookies by setting your internet browser so that it no longer stores cookies. In addition, you can also delete all information previously stored in your browser settings.

8.4. What are my rights?
Pursuant to the European General Data Protection Regulation, you have a number of rights with regard to your data and the processing thereof. To exercise your rights with regard to personal data that we process on behalf of your organization, you must inquire with your organization about the conditions which such request must comply with. To exercise your rights in relation to personal data for which we are Controller, please send an email to [email protected]. These rights are set out below.

8.4.1. Access
You always have access to your personal data and, if necessary, you can change it in your account. If you want to see the personal data stored about you on GRIP, you can submit a request for access to your organization if GRIP is a processor or to GRIP if we are a controller.

8.4.2. Rectification
If, as a result of a request for access, you would like to correct the personal data you have seen, but cannot change it yourself in your account, you can submit a request to your organization or GRIP. You can request that your organization or GRIP changes, corrects, supplements, deletes or blocks your data.

8.4.3. Restriction of processing
You also have the right, under certain conditions, to request that your organization or GRIP restrict the processing of your personal data.

8.4.4. Right to object
If a certain processing takes place on the basis of the ‘legitimate interest’ of GRIP or a third party, you have the right to object to that processing.

8.4.5. Data portability
You have the right to obtain your personal data from your organization or GRIP. GRIP will provide these in a structured and common form, which can be easily opened in other common digital systems.

8.4.6. Withdrawal of consent
In all cases where your consent is the legal basis for a particular data processing operation, you have the right to withdraw that consent. This has no consequences for the past, but it does mean that we can no longer process this data. It is possible that GRIP will no longer be able to provide you with certain services as a result.

8.4.7. Response from GRIP
A request can be sent to [email protected]. GRIP will comply with your request as soon as possible and in any case no later than one (1) month after we have received the request. If GRIP rejects your request, we will explain why in our reply.

8.5. Can this privacy statement be changed?
This privacy statement is subject to change. We therefore advise you to read the Privacy Statement regularly for any changes.

8.6. Where can I go for complaints and questions?
If you have any questions about this Privacy Statement and the way in which GRIP uses your data, you can send an e-mail to [email protected]. If you have a complaint about the way in which GRIP processes your data, you can also send an e-mail to this address. In addition, you can always contact the competent national supervisory authority about privacy protection. In the Netherlands, this is the Dutch data protection authority.