The GDPR comes into force on 25 May 2018. This regulation represents a tightening up of the Privacy Act of 2001. A privacy statement is one part of the requirements under the GDPR. This Privacy Statement is used by GPI Group B.V., BMN B.V., GPI Tanks B.V., GPI Process Equipment B.V., GPI Poland Spzoo hereinafter referred to as GPI.
The privacy statement shown below is prominently published on all GPI Group websites. At the time of writing, this covers the following websites:
1 Privacy Statement
1.1 Collection and use of personal data from customers, suppliers, other contractors and job applicants
We will collect and use the personal data that you directly provide us with because this is necessary to conclude and carry out any agreement with you. This applies both to our (potential) customers and to parties from whom we purchase goods and/or services. If you are a (potential) customer of ours, we use your data for sending you quotations, for determining which specifications or requirements a specific item or service must meet, for delivering goods or carrying out work for you, for invoicing you and for ease of communication regarding matters connected with the implementation of the agreement.
If you are a (potential) supplier or other contractor, your personal data is also necessary for concluding and carrying out the agreement. For purchasing, this is necessary for advising you which specifications or requirements we consider a specific item or service should meet, for sending you a quotation request or for placing an order with you, for paying your invoices and for ease of communication regarding other matters connected with the agreement. You are not obliged to provide us with your personal data. If you provide us with no or insufficient personal data, then it is possible, however, that we will not be able to perform the aforementioned activities.
If you are a temporary agency worker, we will use the data that we receive from the employment agency to assess your suitability for a current or possible future vacant position and for the performance of the employment agency agreement. We may pass your personal data/company data to other parties. These other parties could be government bodies in order to comply with the law, parties who carry out work on our behalf, or parties to whom we are obliged to provide data in connection with the agreement. This relates to the following parties:
- the Tax and Customs Administration
- the Ministry of Social Affairs and Employment
- clients in the context of the Sequential Liability Act
1.2 Transfer to third parties
In connection with the performance of any agreement with you, it is possible that we will have to provide your personal data to parties that supply us with parts, materials and products or perform work on our behalf. For certain services we also use external server space for the storage of (parts of) our sales and purchasing administration in which your personal data is held. For this reason, your personal data is supplied to our server space provider. We also use Microsoft Office and the associated storage facilities for emails and other files. Your personal data is never sold on or forwarded to third parties, or used for other commercial purposes.
1.3 Direct marketing
If you regularly place orders with us or request quotations, we will store and use the personal data you have provided to inform you personally in the future by email about our existing and new products and services, and possibly to notify you about special offers. We have a legitimate interest in using your personal data for this purpose, namely to market our products and services. Every time we send you an advertising mail, you have the option to advise us that you are no longer interested in them. See the unsubscribe link at the bottom of each mailing. If you are a new contact or a once-only customer, we will only send you advertising messages if you have given us your prior consent for this.
1.4 Job Applicants
Data and documents provided by job applicants, for example via the website, will be processed in order to decide whether the applicant is eligible for a position within GPI Group. In order to properly match the selection of job applicants to the right vacancies, GPI group’s recruitment and selection process consists of comparing the applicant’s data with any vacancies and the qualifications required, possible contact with applicants for further acquaintance, and, in so far as applicable, contacting the referees/educational institutions provided.
In addition, the data can be processed to provide information to the applicant concerned about other vacancies or positions for which the applicant might be eligible. Furthermore, the data may be used to send general information to the job applicant, for example about the GPI Group’s organisation.
Initially, the applicant’s personal data will be collected through personal and/or telephone contact with the applicant, referees and/or educational institutes, or further information provided in writing. Data from public sources may also be consulted.
GPI Group only processes personal data that could be relevant to the recruitment and selection procedure. In any event, this will include data such as that which has been provided by the job applicant like curriculum vitae (CV), name and address details, other contact information, gender, applicant’s date of birth and possibly a photograph. Additionally, the applicant’s education, courses taken, internships and employment history can also be relevant. If required for the job function, applicants can be asked to undergo a psychological test or other form of assessment. In this case, those involved in carrying it out will be provided with the personal data necessary for the purposes of the test or assessment.
GPI Group retains applicants’ data during the recruitment and selection procedure and for up to four weeks after it has been completed. If the applicant has given corresponding consent, the data is removed 1 year after the completion of the recruitment procedures. If the applicant gets the job and enters into employment with GPI Group, then the data will form part of the personnel file and will be processed to set up and carry out the contract of employment.
1.6 Your rights
You have the right to ask us for access to your own personal data. If there is reason to do so, you can also request us to supplement your personal data or correct inaccuracies. You also have the right to request that your personal data be erased or to have its use restricted. You can also object to the collection and use of your data or submit a complaint to the Dutch Data Protection Authority. Finally, you can request that we provide you with your personal data or transfer that data to another party. In order to exercise your rights, you can apply to the Controller of GPI Group who is located at our head office, Handelsweg 14, 3411 NZ, Lopik, Netherlands, +31 (0)348 559 800, firstname.lastname@example.org. For any questions or for more information about the collection and use of your personal data, you can of course get in touch with us.
Date of publication: 1 August 2018