Privacy policy

Skicentrum Heemskerk attaches great importance to the protection of your personal data. In this Privacy Policy we want to provide clear and transparent information on how we deal with personal data.

We do everything to ensure your privacy and are therefore careful with personal data. Skicentrum Heemskerk abides by the applicable laws and regulations in all cases, including the General Data Protection Regulation.  This means that we will in any case:

• Process your personal data in accordance with the purpose for which they were provided; these purposes and types of personal data are described in this Privacy Policy;
• The processing of your personal data is limited to only those details that are minimally necessary for the purposes for which they are processed;
• Ask for your explicit permission if we need this for the processing of your personal data;
• Have taken appropriate technical and organisational measures so that the security of your personal data is guaranteed;
• Not pass on personal data to other parties, unless this is necessary for the execution of the purposes for which they were provided;
• Are aware of your rights concerning your personal data, want to point them out to you and respect them.

As Skicentrum Heemskerk we are responsible for the processing of your personal data. If you have any questions after reading our Privacy Policy, or in a more general sense, or if you wish to contact us, please use the contact details at the bottom of this document.

Processing of personal data of customers or suppliers

Personal data of customers or suppliers are processed by Skicentrum Heemskerk for the following purpose (s):

• Administrative purpose;
• Communication about the order and/or invitations;
• Executing or issuing an order.

The basis for this personal data is:

• The agreed assignment;

For the above purpose (s) Skicentrum Heemskerk can ask the following personal information from you:

• First name;
• Insertion;
• Surname;
• Address information;
• Phone number (for business use);
• E-mail address (for business purposes);
• Date of birth (in the case of ski school or travel customers).

Your personal data will be stored by Skicentrum Heemskerk for the aforementioned processing(s) for the period:

• During the term of the agreement and then only in the financial administration for up to 7 years.

Processing of personal data of newsletter subscribers

Personal data of newsletter subscribers are processed by Skicentrum Heemskerk for the following purpose (s):

• Informing the person by means of news items.

The basis for this personal data is:

• The Newsletter registration form;

For the above purpose (s) Skicentrum Heemskerk can ask the following personal information from you:

• First name;
• Insertion;
• Surname;
• E-mail address.

Your personal data will be stored by Skicentrum Heemskerk for the aforementioned processing(s) for the period:

• During the period of registration.

Processing of personal data of employees

Personal data of employees are processed by Skicentrum Heemskerk for the following purpose (s):

• Executing the employment contract.

Basis for this personal data is:

• The employment contract.

For the above purpose (s) Skicentrum Heemskerk can ask the following personal data from you:

• First name;
• Insertion;
• Last name;
• Telephone number; E-mail address
• E-mail address;
• Date of birth;
• Salary details;
• Copy of ID;
• BSN-number;
• Bank details.

Your personal data will be stored by Skicentrum Heemskerk for the above mentioned processing(s) for the period:

• During the period that you have a contract and then only in the financial administration for up to 7 years.

Provision to third parties

We may provide the information you give us to third parties if this is necessary for the fulfilment of the purposes described above.

For example, we use a third party for:

• Taking care of the internet environment of the AVG programme;
• Taking care of the (financial) administration;
• Providing newsletters and invitations;
• Payroll processing for our employees;
• Providing a foot analysis on our 3D scanner;
• Providing customer reviews.

We never pass on personal data to other parties with whom we have not concluded a processing agreement. With these parties (processors) we obviously make the necessary agreements to ensure the security of your personal data. Furthermore, we will not provide the data you provided to other parties, unless this is legally required and permitted. An example of this is the police requesting (personal) data from us as part of an investigation. In such a case we must cooperate and are therefore obliged to hand over these data. We may also share personal data with third parties if you give us written permission to do so.

Inside EU

We do not provide personal data to parties based outside the EU.

Minors

We only process personal data of minors (persons under 16 years of age) if written consent has been given by the parent, guardian or legal representative.

Storage period

Skicentrum Heemskerk does not retain personal data any longer than is necessary for the purpose for which it was provided or is required by law.

Protection

We have taken appropriate technical and organisational measures to protect your personal data from unlawful processing, such as the following measures;

• All persons who can take knowledge of your data on behalf of Skicentrum Heemskerk are bound to secrecy.
• We use a username and password policy on all our systems;
• We pseudonymise and encrypt personal data if there is a reason to do so;
• We make back-ups of personal data to be able to restore them in case of physical or technical incidents;
• We regularly test and evaluate our measures;
• Our employees are informed about the importance of protecting personal data.

Rights regarding your data

You have the right to inspect, correct or delete personal data that we have received from you. You can also object to the processing of your personal data (or part thereof) by us or one of our processors. You also have the right to have the data you have provided us with transferred to yourself or on your behalf directly to another party. We may ask you to identify yourself before we can comply with the aforementioned requests.

Should we process your personal data on the basis of permission granted by you, you always have the right to withdraw this permission.

Complaints

If you have a complaint about the processing of your personal data, please contact us immediately. If we are unable to resolve the matter with you, this is naturally very annoying. You always have the right to submit a complaint to the Netherlands Authority for the Protection of Privacy.

Questions

If you have any questions or comments concerning our Privacy Statement, please contact us!

Contact details

Skicentrum Heemskerk
Communicatieweg 4d
1967 PR
Heemskerk
[email protected]