Source: https://www.kenteurope.com/nl/privacybeleid/
Timestamp: 2019-04-18 20:56:36+00:00

Document:
As KENT Nederland B.V. is part of Berner SE, they share the same general data privacy statement.
Personal data is “any information which relates to an identified or identifiable natural per-son (hereinafter referred to as either ’affected person‘ or ’person concerned‘). A natural person is considered identifiable if he or she can be directly or indirectly identified, in par-ticular by means of being allocated to an identifier, such as a name, an ID number, site data, an online identifier or one or more special features which are the expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of said natural person” (see Art. 4(1) of the General Data Privacy Regulation (GDPR)).
Processing is any procedure carried out with or without the aid of automated methods, or any such sequence of procedures in connection with personal data, such as the gathering, recording, organizing, ordering, storage, adaptation or amendment of data, the reading out of it, querying of it, use, disclosure of it by way of transmission, dissemination or any other form of provision, the comparison or linking of it, or the limitation, deletion or de-struction of it.
Limitation of processing means the marking of stored personal data with the aim of limit-ing its future processing.
Profiling means any kind of automated processing of personal data where such personal data is used to assess certain personal aspects relating to a natural person, to analyze or predict aspects regarding work performance, economic position, health, personal prefer-ences, interests, reliability, conduct, place of residence or change of location of such natu-ral person.
Pseudonymizing means processing personal data in the case where the personal data can no longer be assigned to a specific person concerned without drawing upon additional in-formation. Such additional information that is subject to the technical and organizational measures is stored separately, and it is thus guaranteed that the personal data cannot be allocated to an identified or identifiable natural person.
The party responsible, or the party responsible for processing the information, is the natu-ral or legal person, authority, institution or other body which decides, either alone or to-gether with others, for the purpose and means of processing personal data.
The recipient is a natural or legal person, authority, institution or other body to whom or which personal data is disclosed, irrespective of whether the latter is a third party or not. Authorities which may receive personal data in the context of a particular investigation mandate under EU law or the law of the Member States are not, however, deemed recipi-ents.
The person concerned can at any time prevent cookies from being placed by our website by adjusting the setting of the web browser used accordingly, and thus permanently op-pose the placing of cookies. Furthermore, any cookies already placed can be deleted via a web browser or other software program at any time. This is possible in all common web browsers. Should the person concerned disable the placing of cookies in the web browser used, it will be the case that, under certain circumstances, not all functions of our website can be used in full.
When using such general data and information, our company does not draw any conclu-sions concerning the person concerned. Rather, such information is needed to deliver the content of our website correctly, optimize the content of our website, as well as the ad-vertising for it, guarantee the ongoing functionality of our IT systems and the technology of our website, and provide law enforcement agencies with the information necessary for prosecution in the event of a cyber-attack. Such data and information gathered anony-mously is therefore evaluated by our company on the one hand statistically, and with the aim of increasing data privacy and data security at our company, in order to ultimately ensure an optimum level of protection for the personal data processed by us. The anony-mous data of the server log files is stored separately from any personal data given by a person concerned.
The data subject may register on the website of the controller, providing personal data. The personal data transferred to the controller is determined by the respective input mask used for registration. The personal data entered by the data subject are collected and stored exclusively for internal use by the controller and for the data subject's own pur-poses. The controller may arrange for the data to be transferred to one or more proces-sors, such as a packaging service provider, who also uses the personal data exclusively for internal use attributable to the controller.
Registration of the data subject with the voluntary provision of personal data serves the controller to offer the data subject content or services which, by their nature, can only be offered to registered users. Registered persons are free to modify the personal data pro-vided during registration at any time or to have them completely deleted from the data-base of the data controller.
The controller shall always, and upon request, inform each data subject of the personal data relating to that data subject. Furthermore, the controller shall correct or delete per-sonal data at the request or notice of the data subject, provided that there is no legal ob-ligation to keep such data in safekeeping.
On our website, users are given the opportunity to subscribe to the company’s newsletter. Which personal data are transmitted to the person responsible for processing when order-ing the newsletter is determined by the input mask used for this purpose.
Our company informs its customers and business partners at regular intervals about com-pany offers by means of a newsletter. The newsletter of our company can only be re-ceived by the person concerned if the person concerned has a valid e-mail address and the person concerned registers for the newsletter dispatch. For legal reasons, a confirma-tion e-mail in the double opt-in procedure is sent to the e-mail address entered by the person concerned for the first time for sending the newsletter. This confirmation e-mail serves to check whether the owner of the e-mail address has authorized the receipt of the newsletter as the person concerned.
The personal data collected when registering for the newsletter will be used exclusively for sending our newsletter. Furthermore, subscribers to the newsletter may be informed by e-mail if this is necessary for the operation of the newsletter service or for registration, as could be the case in the event of changes to the newsletter offer or changes in the technical conditions. The personal data collected in the context of the newsletter service will not be passed on to third parties. The subscription to our newsletter can be cancelled by the person concerned at any time. The consent to the storage of personal data, which the person in question has given us for the newsletter dispatch, can be revoked at any time. For the purpose of revoking consent, every newsletter contains a corresponding link to do so. Furthermore, it is possible at any time to unsubscribe directly from the newslet-ter dispatch on the website of the controller or to inform the controller in any other way.
The person responsible for the processing has integrated components of the company Facebook on our website or offers company-related information pages directly in Face-book. Facebook is a social network. A social network is an Internet-based social meeting place, an online community that usually enables users to communicate with each other and interact in virtual space. A social network can serve as a platform for the exchange of opinions and experiences or enables the Internet community to provide personal or company-related information. Facebook enables social network users to create private profiles, upload photos and network via friendship requests, among other things.
An overview of all Facebook plug-ins can be found at developers.facebook.com/docs/plugins/. As part of this technical process, Facebook is informed about which specific subpage of our website is visited by the person concerned.
If a person is logged on to Facebook at the same time, Facebook recognizes which specif-ic subpage of our website the person visits each time the person visits our website and for the entire duration of the respective stay on our website. This information is collected by the Facebook component and assigned by Facebook to the respective Facebook account of the person concerned. If the person presses one of the Facebook buttons integrated on our website, for example the "Like" button, or if the person makes a comment, Facebook assigns this information to the personal Facebook user account of the person concerned and stores this personal data.
Facebook receives information via the Facebook component that the person concerned has visited our website whenever the person concerned is logged on to Facebook at the same time as accessing our website; this happens regardless of whether the person con-cerned clicks on the Facebook component or not. If the person concerned does not want this information to be transmitted to Facebook, they can prevent it from being transmitted by logging out of their Facebook account before visiting our website.
The data policy published by Facebook, which is available at www.facebook.com/about/privacy/, provides information about the collection, pro-cessing and use of personal data by Facebook. It also explains what setting options Face-book offers to protect the privacy of the person concerned.
In addition, various applications are available that make it possible to suppress data transmission to Facebook, for example the Facebook blocker of the provider Web graph, which can be obtained at webgraph.com/resources/facebookblocker/. Such applica-tions can be used by the person concerned to suppress data transmission to Facebook.
The party responsible for the processing has integrated the Google Analytics component into this website (along with an anonymization function). Google Analytics is a web analysis service. Web analysis means the recording, gathering and evaluation of data on the con-duct of website visitors. A web analysis service covers, among other data about from which website a person concerned arrived at a webpage (the “referring site”), what sub-pages of the website were accessed, or how often, and the time spent viewing a particu-lar subpage. Web analysis is predominantly deployed to optimize a website and perform a cost/benefit analysis of web advertising.
The Google Analytics component is operated by Google, Inc., 1600 Amphitheatre, Park-way, Mountain View, CA 94043 1351, USA.
Our company uses the suffix “_gat._anonymizeIp” for the web analysis via Google Analyt-ics. Using this suffix, the IP address of the affected person’s Internet connection is trun-cated and anonymised by Google if our web pages are accessed from within any member state of the European Union or another contracting state of the treaty on the European economic area.
Google Analytics places a cookie on the IT system of the person concerned. By placing a cookie, Google is enabled to analyze the use of our website. Each time the individual pag-es of this website, which is operated by the party responsible for the processing of the data, and into which a Google Analytics component has been integrated, are accessed, the web browser on the IT system of the person concerned automatically transmits data to Google, due to the Google Analytics component, for the purpose of the online analysis. Within the context of this technical procedure, Google becomes aware of personal data, such as the IP address of the person concerned, which, among other things, enables Google to comprehend the origin of the visitor and clicks, and, subsequently, issue com-mission statements.
The person concerned can, at any time, prevent cookies from being placed by our web-site, as explained above, by adjusting the setting of the web browser used accordingly, and thus permanently reject to the placement of cookies. Such a setting of the web browser would also prevent Google from placing a cookie on the IT system of the person concerned. In addition, any cookie already placed by Google Analytics can be deleted via the web browser or any other software program.
This website also uses Dynatrace software collecting and storing data for performance and user experience purposes what requires collection of up to last eight digits shortened IP address. As well this website will store the full IP address with the usage of Elas-ticsearch software for a limited period of time to prevent hacker attacks.
This website uses Userlike, a live chat software of the company Userlike UG (limited liabil-ity). Userlike uses "cookies", which are text files that are stored on your computer and that allow personalized conversation in form of a real-time chat. Additionally the chat pro-tocol will be stored. The data contained therein is not used for personal identification of the website visitor or for other purpose.
Every time a LinkedIn component (LinkedIn Plug-In) is installed on our website, this com-ponent causes the browser used by the person concerned to download a corresponding representation of the LinkedIn component. Further information on the LinkedIn Plug-Ins can be found at developer.linkedin.com/plugins. During this technical procedure, LinkedIn is informed about which specific subpage of our website is visited by the person concerned.
If the person concerned is simultaneously logged in to LinkedIn, LinkedIn recognizes which specific subpage of the website the person visits each time they visit the website and for the entire duration of the respective stay on the website. This information is collected by the LinkedIn component and assigned by LinkedIn to the respective LinkedIn account of the person concerned. If the person clicks a LinkedIn button integrated on the website, LinkedIn assigns this information to the personal LinkedIn user account of the person con-cerned and stores this personal data.
The person responsible for processing integrated components of WiredMinds on this web-site. WiredMinds components automatically identify and qualify companies visiting a Web site. The WiredMinds component enables the operator of a website using the component to generate leads, i.e. to qualify potential new customers.
Pseudonymized user profiles are created using the data obtained. The pseudonymized user profiles are used for the purpose of analyzing visitor behavior and enable us to im-prove our Internet offering. Data collected through the WiredMinds component will not be used to identify the data subject without the prior, separate and explicit consent of the data subject. This data is not combined with personal data or with other data containing the same pseudonym.
Furthermore, the data subject has the possibility to object to the collection of data gener-ated by WiredMinds regarding the use of the website and to prevent such collection. The person concerned must click the Don’t-Track-My-Visits button under the link wm.wiredminds.de/track/cookie_mgr.php. If the person's IT system is deleted, formatted or reinstalled at a later date, the person con-cerned must set an opt-out cookie again.
The person responsible for processing integrated Xing components on this website. Xing is an Internet-based social network that enables users to connect to existing business con-tacts and make new business contacts. Individual users can create a personal profile of themselves at Xing. For example, companies can create company profiles or publish job offers on Xing.
If the person concerned is logged in to Xing at the same time, Xing recognizes every visit to our website by the person and for the entire duration of the stay on our website which specific subpage is visited. This information is collected by the Xing component and as-signed to the respective Xing account of the person concerned by Xing. If the person clicks one of the Xing buttons integrated on our website, for example the "Share" button, Xing assigns this information to the personal Xing user account of the person concerned and stores this personal data.
The data protection regulations published by Xing, which can be accessed at www.xing.com/privacy, provides information on the collection, processing and use of personal data by Xing. Xing has also published privacy notice for the XING share button at https://www.xing.com/app/share?op=data_protection.
The person responsible for processing has integrated YouTube components on this web-site. YouTube is an Internet video portal that allows video publishers to post video clips and other users to view, rate and comment on them free of charge. YouTube allows the publication of all kinds of videos, which is why complete film and television programs, but also music videos, trailers or videos produced by users themselves can be called up via the Internet portal.
Each time a YouTube component (YouTube video) is integrated into one of the individual pages of this website operated by the data controller, the Internet browser on the per-son's IT system is automatically prompted by the respective YouTube component to down-load a representation of the corresponding YouTube component from YouTube. More in-formation about YouTube can be found at www.youtube.com/yt/about/. During this technical procedure, YouTube and Google are informed which specific subpage of our website is visited by the person concerned.
YouTube and Google receive information via the YouTube component that the person con-cerned has visited our website whenever the person concerned is logged on to YouTube at the same time as accessing our website; this happens regardless of whether the person concerned clicks on a YouTube video or not. If such a transmission of this information to YouTube and Google is not wanted, the person can prevent the transmission by logging out of his or her YouTube account before accessing our website.
Based on statutory regulations, our company’s website contains details which make it pos-sible to make fast contact with our company electronically, as well as enable direct com-munication with us, which likewise comprises a general e-mail address. Should a person concerned take up contact with the party responsible for the processing via a contact form, the personal data transmitted by the person concerned will automatically be saved. Such personal data transmitted to the person responsible for the processing by a person concerned on a voluntary basis is saved for the purposes of processing the request or taking up contact with the person concerned. Such personal data is not passed on to third parties.
The party responsible for the processing only processes and stores personal data of the person concerned for the period of time which is necessary in order to achieve the pur-pose of the processing, or in so far as the latter has been stipulated in laws or regulations forming the basis for the processing by the party responsible by the legislative authority. Should the purpose of such storage lapse or should a storage period prescribed by the legislative authority expire, the personal data is routinely blocked or deleted, in line with the statutory regulations.
Every person concerned is entitled to request from the person responsible for the pro-cessing a confirmation on whether personal details concerning him or her are processed. Should a person concerned wish to lay claim to this right of confirmation, he or she may contact our Data Privacy Officer or any other employee of the party responsible for the processing for that purpose.
• the existence of automated decision making, including profiling pursuant to Article 22(1) and (4) General Data Privacy Regulation (GDPR), and — at least in such cases — meaningful information on the logic involved, as well as the reach, and the effects of such processing aimed for, for the person concerned.
Any person affected by the processing of personal data has the right to demand immedi-ate correction of any incorrect personal data concerning him or her. The person con-cerned is, furthermore, entitled, considering the purpose of the processing, to demand that incomplete personal data is completed - also by way of a supplementary statement.
• The personal data has been gathered for such purposes, or processed in another way, for which it is no longer needed.
• The person concerned revokes his or her consent, on which he or she based the pro-cessing pursuant to Art. 6(1)(a) General Data Privacy Regulation (GDPR) or Art. 9(2)(a) General Data Privacy Regulation (GDPR), and there is no other legal basis for the processing.
• Pursuant to Art. 21(1) General Data Privacy Regulation (GDPR), the person concerned is filing an opposition to the processing, and there is no overriding justified grounds for the processing, or the person concerned is filing an opposition against the pro-cessing pursuant to Art. 21(2) General Data Privacy Regulation (GDPR).
• The personal data has been processed illegitimately.
• The deletion of the personal data is necessary in order to fulfil a legal obligation in accordance with EU law or the law of the Member States to which the party responsi-ble is subject.
• The personal data has been gathered in regard to services offered in the information society pursuant to Art. 8(1) General Data Privacy Regulation (GDPR).
Should one of the above-mentioned grounds apply and an affected person wish to ar-range for the deletion of personal data that is stored with our company, he or she may contact our Data Privacy Officer for this purpose at any time. Our Data Privacy Officer will arrange for the request for deletion to be complied with without delay.
Should the personal data have been published by our company, and should our company, as the party responsible pursuant to Art. 17(1) General Data Privacy Regulation (GDPR), be obliged to delete said personal data, our company shall, taking into account the availa-ble technology and the implementation costs, take appropriate steps, also of a technical nature, to inform other parties responsible for the data processing, who process the pub-lished personal data, that the person concerned has requested from such other parties responsible for processing the data that all links to said personal data or copies or replica-tions of such personal data be deleted, provided that the processing is not necessary. The Data Privacy Officer will arrange for whatever is necessary in the individual case.
• The accuracy of the personal data is disputed by the person concerned, and in fact for a period of time which enables the party responsible to check the accuracy of the personal data.
• The processing is illegitimate, and the person concerned refuses to have the personal data deleted, and instead demands that the use of the personal data be restricted.
• The party responsible no longer requires the personal data for the purposes of the processing, the person concerned does, however, require it to assert, exercise or de-fend legal claims.
• The person affected has filed an opposition against the processing of the data pursu-ant to Art. 21(1) General Data Privacy Regulation (GDPR), and it has not yet been es-tablished whether the justified grounds of the party responsible outweigh those of the affected person.
Any person affected by the processing of personal data is entitled to receive the personal data concerning him or her, which has been provided to a party responsible by the affect-ed person, in a structured, up-to-date and machine-readable format. He or she additional-ly has the right to transmit such data to a different party responsible, without being hin-dered by the party responsible, to which or whom the personal data has been provided, as long as the processing is based on the consent pursuant to Art. 6(1)(a) General Data Privacy Regulation (GDPR) or Art. 9(2)(a) General Data Privacy Regulation (GDPR) or an agreement pursuant to Art. 6(1)(b) General Data Privacy Regulation (GDPR), and the pro-cessing is undertaken with the aid of automated procedures, as long as the processing is not necessary in order to complete a task that is in the public interest or completed to exercise official authority that has been conferred upon the party responsible.
When exercising his or her right to data portability pursuant to Art. 20(1) General Data Privacy Regulation (GDPR), the person concerned is, moreover, entitled to cause the per-sonal data to be transmitted directly from one party responsible to another party respon-sible, if the latter is technically feasible, and as long as the rights and freedoms of other persons are not thereby impaired.
In the event of a objection, our company no longer processes the personal data, unless we can provide evidence of mandatory grounds for the processing, worthy of protection, which outweigh the interests, rights and freedoms of the person concerned, or the pro-cessing serves the purpose of asserting, exercising or defending legal claims.
Any person affected by the processing of personal data has the right not to be subjected to a decision based exclusively on automated processing - including profiling - which de-velops legal validity in regard to him or her or affects him or her considerably in a similar way, as long as the decision is not required for concluding or fulfilling an agreement be-tween the person concerned and the party responsible, or admissible based on legislation of the Union or the Member States, to which the party responsible is subject, with such legislation containing appropriate steps to preserve the rights and freedoms, as well as the justified interests of the person concerned, or effected with the express consent of the person concerned.
Should the decision regarding the conclusion or fulfilment of an agreement between the person concerned and the party responsible be required, or should it be taken with the express consent of the person concerned, our company will take appropriate steps to pre-serve the rights and freedoms of the person concerned, as well as his or her justified interests, which at least includes the right to arrange for the intervention of a person on the part of the party responsible, the right to explain one’s own position and the right to contest the decision.
Any person affected by the processing of personal data has the right to revoke any con-sent given to the processing of personal data at any time. Should the person concerned wish to assert his or her right to revoke any consent granted, he or she may contact our Data Privacy Officer for this purpose at any time.
The party responsible for the processing gathers and processes the personal data of ap-plicants for the purpose of executing the application procedure. The processing may also be carried out electronically. This is the case if an applicant transmits corresponding appli-cation documents to our company electronically, for example by e-mail or via a web form to be found on the website. Should our company conclude an employment contract with an applicant, the data transmitted will be saved for the purpose of handling the employ-ment relationship, adhering to the statutory regulations. Should no employment contract with the applicant be concluded by our company, the application documents will automati-cally be deleted 2 months after announcing the decision to turn down the application, un-less such deletion is in conflict with any justified interests on the part of the party respon-sible for the processing. A justified interest, in this sense, may, for example, be an obliga-tion to provide evidence in any proceedings under the German General Equal Treatment Act (AGG).
We reserve the right to alter our security and data privacy provisions, should it be neces-sary due to technological developments. We will, in such cases, also adapt our data priva-cy statement accordingly. Please note the respective current version of our data privacy statement.

References: Art. 4
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 21
 Art. 6
 Art. 9
 Art. 6
 Art. 20