PRIVACY POLICY

When you do business with KTBA, we want to ensure you get the best possible service. That’s why we always put you first. Not only do we want you to feel we’ve got everything right when it comes to service provision – also beforehand when you’re looking for the right service. To be able to help you effectively, we occasionally need some information from you. It’s important to us that you know that we handle your information with care. We have drawn up this privacy statement to explain why and how we process your personal data.

1. Who are we?

We – KTBA, a Mérieux NutriSciences Company with registered offices at De Horst 12, 5171 RA Kaatsheuvel, The Netherlands – are an all-round service provider in the food industry. Our five companies seek to enhance food safety, from safeguarding against food safety hazards and complex labelling issues to recruiting food professionals. We are also responsible for collecting and using your personal data – hence this statement.

The operating companies covered by this KTBA privacy statement are:

• KTBA Holding BV
• KTBA Netherlands BV
• KTBA Belgium NV
• Riskplaza BV

2. Which personal data do we process?

Under the GDPR, there are two types of personal data: normal personal data and sensitive personal data. We only use sensitive personal data on the basis of legal obligation because we require it for staff administration. We may collect and process the following personal data.

A. Name and other identifying information

Details such as your name, gender, date of birth and country of residence.

B. Information you share as part of a job application process

This is only information included in documents such as your CV and covering letter.

C. Contact details and information about your personal account or registration

This is if you use one of our services for which you need to log in.

D. Our communications with you

We may store this information if you email or call us.

E. Information from your use of our websites and other digital media

– We may record your IP address, browser type, operating system and referring sites.

– With your permission, we may also record your surfing behaviour.

F. Information from social media

With your permission, we may use information that you have placed on LinkedIn.

G. Information that you share with us

You may choose to share information with us, for example as part of a customer survey or dietary requirements for an event.

H. Visual material

For reasons of safety and security our premises are equipped with video cameras. Images from these cameras are stored for 30 days and then deleted automatically.

3. How do we collect your data?

We only acquire your personal data when you communicate with us, give your permission or visit our premises. It could be when you email us, register for an event or newsletter, visit our premises or apply for a job.

We only collect data on the bases specified in the General Data Protection Regulation.

4. Why do we process this personal data?

We collect data for the following purposes.

A. For our service provision

We need your contact details in order to provide the service.

B. For communication with you

We use your contact details in order to communicate with you, answer questions and handle complaints.

C. For statistical research

We use automatic tools to carry out statistical research into general trends in the use of our services, websites and social media.

We only use aggregated data and do not use any names, email addresses or other information that can identify you directly. We will not use any data for this statistical research without your permission.

Statistical research enables us to develop better services, products, facilities and offers, offer more accessible customer service and improve the design and content of our websites.

D. For marketing purposes

We may use your personal data to send you newsletters, magazines, offers and other personalised marketing communications. We may use automatic tools to analyse your personal information and establish what is relevant to you. We may use and combine the information described above for this purpose. We use the results of our analysis to match our marketing communications to your specific interests and preferences.

E. For job applications

If you apply for a job at KTBA, we will ask you to share some information that is relevant to the job application process. We will also ask for your permission to record your information in our database. This will enable us to contact you if a vacancy arises that is suitable for you.

F. For compliance with laws and regulations

We may be obliged to collect your data, such as information relating to your contract as a customer or employee.

5. How long do we store your data?

Your personal data is stored for as long as it is required for the purposes described in this statement or for as long as required in order to comply with laws and regulations and resolve disputes.

6. Release or sharing of data with third parties

We will only share your data with third parties where strictly necessary. Your data will not be sold. The third parties with whom it may be strictly necessary to share your data are processors with the aim of helping you for our purposes as listed above. We are responsible for your data and therefore enter into processing agreements with third parties, since they are obliged to adequately protect your data and only process it in accordance with our instructions.

Our websites contain links to third party websites. If you follow these links, you will leave our website. This privacy statement does not apply to third party websites. KTBA accepts no liability for the use of your data by these third parties.

7. Security and retention

KTBA has taken the following organisational measures to protect your personal data against loss or unlawful use.

1. Appointment of a privacy coordinator.
2. A review of all policies relating to security and privacy, and incorporation of the GDPR regulations
3. Review and improvement of the technical and organisational measures
4. Creation of a personal data register
5. Review of contracts and arrangements with suppliers
6. Programme to raise employees’ awareness
7. Review of the procedures in the event of incidents and incorporation of the new requirements relating to reporting data protection breaches

8. International transmission of your data

This becomes relevant when your personal data needs to be transmitted to an organisation in a country other than the country where you live. If this country is not in the European Economic Area or has not been designated as a secure country by the EU, KTBA will ensure that adequate security provisions are in place in order to comply with the requirements for the international transmission of personal data under the General Data Protection Regulation.

9. Your rights

You can request access to, correction, restriction, portability and/or deletion of your data processed by KTBA. You can do this in various ways. Unsubscribe by clicking the link at the bottom of the mailshot, log into the systems to which you have access and amend and delete data there. If you are experiencing problems with this, please email privacy@ktba.com or send a letter to KTBA, t.a.v. Privacy, Horst 12, 5171 RA Kaatsheuvel, The Netherlands.

10. How is this privacy statement kept up-to-date?

This privacy statement replaces our previous statement as of 18 June 2018. This privacy statement is under constant review. We will inform you about any changes by publishing a new statement on our websites, after which the changes will take immediate effect.