Privacy statement
All personally identifiable information, also called personal data, that BrightStone Group B.V. receives is handled in accordance with this Privacy Statement.
BrightStone Group considers the protection of personally identifiable information it receives from its website visitors, job seekers and candidates, professionals, (temporary) employees, (independent) contractors and business partners of utmost importance. All personal data are treated with the utmost care and protected in accordance with the General Data Protection Regulation (GDPR/AVG).
In this Privacy Statement we explain:
- Who we are
- In what situations we collect personal data
- Why we collect personal data
- Which personal data we collect
- Who we can/may share your personal data with
- Whether or not we collect personal data outside of the Netherlands
- Your rights
- Security
- Technical information and cookies
- Retention period
- Questions, remarks or complaints
- Changes
1. Who is Brightstone Group B.V.?
BrightStone Group B.V. is a consultancy and project organisation that supports senior management on matters in the areas of Finance, Risk, Data and Compliance. BrightStone Group B.V. collects personal data you share with us and uses this data to help you get in touch with potential clients so that you can be assigned to one or multiple projects (services).
BrightStone Group B.V. is headquartered in Utrecht (Reactorweg 301, 3542 AD). Together with Bright People B.V., its subsidiary company, BrightStone Group B.V. is the data-controller responsible for the processing of personal data, as is detailed in this Privacy Statement.
This Privacy Statement is applicable to almost all data processed by BrightStone Group, including any data processed through BrightStone Group’s website. This includes, but is not limited to, the following websites:
· Brightstonegroup.nl
· Vacaturesbrightstonegroup.nl
BrightStone Group is registered at the Dutch Chamber of Commerce (Kamer van Koophandel) with the following registration number: 59003154
BrightStone Group B.V.
Reactorweg 301
3542 AD UTRECHT
Phone: +31 (0)85 0716303
Email: info@brightstonegroup.nl
Website: www.brightstonegroup.nl
2. In what situations we collect personal data
Personal data, also called personally identifiable information, includes all data shared that can be used to identify an individual, either on its own or in combination with other data. We collect personal data in a number of ways, including but not limited to the following:
- When you visit one of our websites.
- when you leave your details on one of our websites;
- When you send us personal data on our website.
- When you provide us with your details or data in person at one of our physical locations.
- When you register (or are registered by a third party) for our services, events or activities.
- When you contact one of BrightStone Group’s employees.
- When you contact one of BrightStone Group’s employees.
3. Why we collect personal data
We collect and process personal data for the following purposes:
- For the making of offers for and/or providing and exchanging information about the services and other activities of the controller, as well as for improving these services.
- For assessing a job seeker’s or candidate’s compatibility and availability, as well as the assessing the availability of professionals, (temporary) employees and (sole) contractors, for the purpose of providing them with job offers or assigning them to a project.
- In so far it is necessary for agreements made with the jobseeker/employee/sole contractor. For the preparation, realisation, execution and termination of (any) employment contract(s), traineeship agreements or project agreements.
- In so far it’s necessary for the agreements made with the client. For the preparation, realisation, execution and termination of agreements with clients for recruitment, selection, the provision of services and/or hiring of job seekers and candidates, professionals, (temporary) employees and independent entrepreneurs.
- Staff and payroll administration.
- In so far it is necessary for agreements made with suppliers. For the preparation, realisation, execution and termination of agreements made with suppliers recruiting job seekers, candidates, professionals, (temporary) employees and self-employed individuals.
- In order to provide training, education, career guidance and personal development training.
- To develop and improve our services. By analysing the way in which you use and interact with our services, we get a better understanding of what you need, want, and how we can improve. For example, we track the results of our marketing campaigns to measure how effective and relevant they are to our target audience.
- To inform company management, perform internal checks, improve company security/safety and for internal/external audits and accounting checks.
- Laws and regulations. In order to identify individuals, combat fraud, perform internal checks, improve company safety/security, apply for grants, remittance deduction/reduction, contribution waivers and/or contribution discounts and comply with other laws and regulations.
We store and process your personal data on one or more of the following legal bases:
- The execution/performance of an agreement.
- To comply with laws and regulations.
- Justifiable interest.
- Justifiable interest.
4. The types of personal data we collect
BrightStone Group may collect your personal data if you are a job seeker, job candidate, professional, (temporary) employee, (independent) contractor and/or business contact. It is your responsibility to ensure that any and all personal data we have about you is accurate and up-to-date.
Website visitor
- Data related to the device you use to access our website/services, including but not limited to your IP-address.
- Essential cookies and similar information that the visitor has given their permission to store (view our Cookie Policy for more information)
- Data/information that has been voluntarily submitted/published on our website or social media channels (blog comments, social media comments etc)
- Data that has been voluntarily submitted or sent on/through our website (contact form submissions, registration forms etc.)
Job seekers and candidates
- NAP (Name, address, phone number) details, email address, phone number and other contact information.
- Date of birth and gender.
- Resume information, information about past/current education and work experience.
- Headshot/photograph (if added to a CV).
- Information about training programs and/or tests that you have completed/passed.
- Information regarding your availability.
- Any and all information provided by candidates and job seekers in their letter of motivation, resume or provided to BrightStone Group through other means.
- Other information that may be of importance to evaluate a candidate’s suitability/eligibility, including but not limited to references, testimonials and certifications.
- communication
Professional, (temporary) employee and (independent) contractor
If you work or have worked for BrightStone Group or its clients, BrightStone Group may collect and process the following personal data:
- NAP (Name, address, phone number) details, email address, phone number and other contact information.
- Date of birth and gender.
- Resume information, information about past/current education and work experience.
- Information about training programs and/or tests that you have completed/passed.
- Information regarding your availability
- Other information that may be of importance to evaluate a candidate’s suitability/eligibility, including but not limited to references, testimonials and certifications.
- Nationality, BSN-number (social security number/national insurance number/the equivalent in your country), identification document and work permit.
- Information that is collected when completing the pre-employment screening.
- Other information related to employee, payroll and absence registration.
- communication.
For more information about your personal data, you can reach out to BrightStone group using the following email address: info@brightstonegroup.nl.
Business contacts
BrightStone Group may collect personal data of individuals that work for external companies that have a business relationship with BrightStone Group, including employees, suppliers, sales agents and others. In these situations, we may collect the following personal data:
- Company contact information.
- Personal data provided to us for participation in events or conferences, including but not limited to dietary requirements and accessibility requirements.
LinkedIn User
- All personal data that’s made publicly available on your LinkedIn profile.
5. Who we may share your personal data with
BrightStone Group may share your personal data with BrightStone Group subsidiaries, clients, suppliers and sub-contractors that provide services for/in name of BrighStone Group, Government bodies/agencies and other business entities. We may also share personal data if we are required by law to do so, including but not limited to complying with a court order or ruling.
Third parties we share personal data with are responsible for complying with privacy regulations applicable to them. BrightStone Group isn’t responsible or liable for the storing or processing of personal data by third parties. Insofar as a third party collects and processes personal data provided by BrightStone Group, BrightStone Group will enter into a processing agreement with the third party that complies with the requirements specified in the GDPR.
6. Collecting and processing personal data outside of the Netherlands
Your personal data may be processed outside of the Netherlands, never outside of the European Union/EER. BrightStone Group has taken the necessary steps to ensure that any personal data transferred outside of the Netherlands is sufficiently protected.
7. Your rights
You have the following rights in regard to your personal data:
- You have the right to view/access your personal data. This means that you can request to see the personal data we have collected.
- The right to edit, rectify or update your personal data if it is incorrect, incomplete or outdated.
- The right to delete your personal data. If you make a request to delete your personal data, there may be certain situations in which we are required by law to keep some of your personal data for a specific amount of time, in order to comply with local, national or international regulations.
- The right to object to the collection or processing of your personal data, or to request limiting the amount of personal data we collect/process. In this case, we may still be required to store certain pieces of personal data to comply with laws and regulations.
- The right to data portability. This means that you have the right to receive your data in a structured, accessible and machine-readable format. This also gives you the right to transfer your data to a third party.
- The right to object to automated or partially automated decision-making.
- The right to file a complaint with the regulator/supervisor.
- The right to withdraw your consent to the collection and/.or processing of your personal data. The withdrawal of consent is only applicable to the collection and processing of personal data in the future.
Personal account
If you would like to view the personal data we have stored about you, or you would like to exercise any of the other rights listed above, you can reach out to BrightStone group using the following email address:
info@brightstonegroup.nl.
We aim to respond to all requests within one month after the request is received. This response will include our view on the matter and the steps BrightStone Group has taken/will take. Requests that are particularly complex in nature may take longer and can be extended by another two months. If this is the case, you will be notified within one month.
BrightStone Group may reject a request in the following situations:
- There is a ground for refusal; and/or
- the request is insufficiently specified; and/or
- your identity cannot be established with reasonable certainty; and/or
- the request is made within an unreasonable interval following a previous request or otherwise constitutes an abuse of any of these rights. An interval of 6 months or less will generally be considered an unreasonable interval.
8. Security
BrightStone Group works hard to protect and secure your personal data. BrightStone Group has the appropriate technical and organisational controls in place to protect your personal data from theft, loss, deletion, modification and publication. Should you have any questions about how we secure and protect your personal data, or should you have reason to believe your data is being abused/misused, please send an email to the following email address: info@brightstonegroup.nl.
9. Technical information and cookies
Technical information
BrightStone Group’s websites collect certain types of data automatically, including but not limited to certain information about our website visitor’s devices. This might include your computer’s Internet Protocol address (IP-address), your internet service provider’s IP-address, the date and time of accessing the website, the domain of a website that referred you to our site, your operating system, which pages/parts of our website you visit, the information you consumed on our site, information about the type of device you use to access the website, your geo-location and the materials and information you send and download to/on our site. This technical information is used to manage our website and information systems, and to improve their quality.
Cookies and similar techniques
BrightStone Group’s websites use cookies and other similar techniques to keep track of important data. You can learn more about our use of cookies in our Cookie Policy.
10. Retention period
BrightStone Group doesn’t store data any longer than necessary to achieve the goals set forth in this Privacy Statement or to comply with laws and regulations. BrightStone Group stores information provided by candidates for a period of one (1) year from the moment a candidate has given their permission. Should you want to withdraw your permission for storing your data, you can do so by sending an email to info@brightstonegroup.nl.
11. Questions, remarks, complaints
If you have any questions, remarks or complaints regarding the security of your personal data, you can contact BrightStone Group by sending an email to info@brightstonegroup.nl.
12. Changes
BrightStone Group may make changes to this Privacy Statement from time to time. The most recent version of this Privacy Statement can be found on BrightStone Group’s website. This version has last been edited on 20-08-2021.
Karien Bos – Utrecht, 05 oktober 2021