General
Schouten & Nelissen has been the leading training and consultancy firm for personal and organizational development since 1980.
In carrying out the activities, personal data is processed, which Schouten & Nelissen handles in accordance with the General Data Protection Regulation ("GDPR"), the GDPR Implementation Act ("UAVG"), the Telecommunications Act, and other applicable laws and regulations.
Schouten & Nelissen also operates in accordance with the professional code for psychologists of the Dutch Institute of Psychologists (NIP) and follows the guidelines of the NVAO (Dutch-Flemish Accreditation Organisation) for accredited higher education. It also has a quality mark from the NRTO (Dutch Council for Training and Education).
Data Controller
The data controller for this personal data is Schouten & Nelissen B.V., located in Zaltbommel ("Schouten & Nelissen"). Additionally, each subsidiary is itself responsible for the personal data that this subsidiary is processing due to its activities. For more information, please refer to the privacy statement of the relevant subsidiary on its website.
Which personal data is processed, for what purpose, and on what legal ground?
Schouten & Nelissen generally processes the following personal data of participants:
Name, first names, initials, title, gender, date of birth, address, postal code, city, phone number, and email address.
Additionally, Schouten & Nelissen collects the following data from other third parties, where necessary:
citizen social number (called BSN), other contact details in the agreement, bank details.
For website visits, Schouten & Nelissen processes the following data:
The browser type and version you use; the operating system of your device; your IP address; the time of your server request; your individual user ID, and your browsing behavior on the website.
Processing of the mentioned personal data is based on the performance of a contract for the following purposes:
Processing of the mentioned personal data and additional personal data mentioned below is based on a legal obligation for the following purposes:
Processing of the above-mentioned personal data and additional personal data mentioned below is based on a legitimate interest for the following purposes:
Processing of the above-mentioned personal data is based on consent for marketing purposes:
How long is the data stored?
Schouten & Nelissen does not retain personal data longer than necessary for the purposes for which the personal data is processed. Personal data is kept for a maximum period of 7 years after the completion of the last training, course, or coaching for the stated purposes, or as short as the law prescribes. After a retention period has expired, your personal data will be deleted, unless we ask for your permission for further communication. Your data will always be deleted promptly upon request.
Security
Schouten & Nelissen has taken the necessary measures to enhance the technical and organizational security of personal data to ensure its protection against unauthorized access, provision, alteration, and/or deletion, as well as against fire and similar hazards, burglary, and theft.
Schouten & Nelissen holds an ISO:27001 certificate, complying with the highest standard in information security.
Provision of data to third parties
Schouten & Nelissen only provides data to third parties if the law requires it or if there is a data processing agreement between Schouten & Nelissen and the external party, and the latter processes personal data based on explicit instructions from Schouten & Nelissen.
In principle, Schouten & Nelissen does not transfer personal data to recipients outside the European Economic Area (EEA). If this is the case, it will only occur if there is an adequacy decision for the third country in question or if another protection mechanism applies, such as binding corporate rules or the EU standard contractual clauses.
Cookies and third-party websites
Schouten & Nelissen has its website under sn.nl and uses cookies on it. The types and their purposes can be found in the separate cookie statement here.
Our website contains several links to websites and Social Media Plugins of other parties. Schouten & Nelissen does not accept any responsibility for how these parties handle your data. We kindly refer you to the privacy statement or privacy policy of the respective party.
Your rights and contact details
Under the GDPR, you have several rights you can exercise. These include the right to access, the right to rectification, the right to erasure, the right to restrict processing, and the right to data portability. You can also object to the processing of your personal data in certain cases. For a detailed explanation of these rights, we refer you to the website of the Dutch Data Protection Authority (DPA) (www.autoriteitpersoonsgegevens.nl).
Your data is carefully managed by Schouten & Nelissen. If this is not the case, or if you have other questions about your privacy, please contact our Privacy Officer free of charge. This can be done in writing: Schouten & Nelissen B.V., attn. Privacy Officer, van Heemstraweg West 5, 5301 PA Zaltbommel; by email: privacy.officer@sn.nl or by phone at 0418-688651.
Schouten & Nelissen will internally verify your identity, but if this cannot be (sufficiently) confirmed, we will contact you. Schouten & Nelissen will respond to your request within 30 days.
You can also always contact the DPA with a complaint via their website.
Changes
Schouten & Nelissen can change this privacy statement at any time. The latest version can be found on our website www.sn.nl.
Last version: July 2023
