Privacy Statement

SBA (Sander Brouwer Automatisering), hereinafter referred to as SBA in this document.

SBA is an ICT service provider that focuses on the business market (B2B). When delivering our services, we process personal data. This processing is operationally, technically and/or legally necessary to enable our services.

Why do we process your personal data?

SBA can be involved in the processing of your personal data in various ways. We process the personal data of direct and indirect, existing or potential relations, and of course also of our own employees. This is necessary for example to:

      • To be able to call, email or write to you if this is necessary for the performance of our services or invoicing.

      • To be able to process, deliver and place orders with suppliers.

      • To provide you with access to online self-service environments.

      • To inform you about changes in legislation and our products & services.

      • To send our newsletters and mailings with relevant content about trends, news and our services, and to be able to follow up on these.

      • To execute, manage and support an agreement with you.

      • To comply with a legal obligation to keep certain data, such as for the tax authorities.

    In all these cases, SBA is ultimately responsible for the protection of these personal data. In addition, SBA can process personal data for third parties. We do this mainly as an ICT service provider, for example when hosting a customer database. In that case, SBA is the processor of the personal data in question. Because SBA is not ultimately responsible for the protection of the personal data (this remains the controller, the owner), we make further agreements with the customer in a so-called processing agreement. This sets out which data SBA processes and how we will protect the data for that customer.

    We respect the privacy of everyone who comes into contact with SBA and our employees. We ensure that the personal information you provide us with is treated confidentially. Processing of personal data is done in accordance with the requirements of the General Data Protection Regulation (GDPR). This privacy statement describes how SBA handles personal data.

    What personal data do we process?

    SBA may process personal data about you, because you use our products and services and/or because you have provided this data yourself when filling in a form on the website and/or by sending and/or answering an e-mail to SBA. Depending on the type of agreement and your function, SBA may process the following personal data:

    Customers and related employees and directly involved persons

        • Customers and related employees and directly involved persons

        • Salutation.

        • Date of birth.

        • A copy of the identification document you provided to us.

        • A copy of the identification document you provided to us.

        • The validity (expiry date) of the identification document you provided to us.

        • Address details.

        • TelefoonPhone number(s).nummer(s).

        • Email address(es).

        • Personnel numbers/departments/cost allocations for invoice specifications and/or references.

        • Underlying specifications of purchased services/connections/hardware and software (licenses).

        • IP address(es).

        • MAC address(es).

        • Linked hardware and software (licenses).

        • Login details and actions within self-service environments.

        • Login details and actions within the services purchased.

        • Login details for linked login systems.

        • The collection, recording, organization, storage, updating, modification, retrieval, consultation, use, forwarding, dissemination, making available, combining, linking, shielding, erasing and destroying data, anonymizing, aggregating, encrypting for the purpose of Business Analytics and/or performance of the agreed service(s).

        • Underlying communication via post, email, telephone, contact forms and social media.

      Suppliers and related employees and directly involved persons

          • First and last name incl. prefix(es) and initial(s) if applicable.

          • Salutation.

          • Date of birth.

          • Address details.

          • Phone number(s).

          • Email address(es).

          • Underlying communication via post, email, telephone, contact forms and social media.

        Prospects and interested organizations and related employees and directly involved parties

            • Verbal consent, issuing of business card, CV, e-mail, online form, hardcopy form.

            • First and last name incl. prefix(es) and initial(s) if applicable.

            • Salutation.

            • Address details.

            • Phone number(s).

            • Email address(es).

            • Underlying communication via post, email, telephone, contact forms and social media.

          Employees (and partners if applicable/relevant) of SBA

              • First and last name incl. prefix(es) and initial(s) if applicable.

              • Salutation.

              • A copy of the identification document you provided to us.

              • CSN number.

              • Bank details.

              • Salary information.

              • Address details.

              • Phone number(s).

              • Email address(es).

              • Underlying communication via post, email, telephone, contact forms and social media.

            In addition to the specific points mentioned above, our office has video cameras to protect our employees and your/our property. These video cameras are clearly visible and when you enter our building you will be alerted to the presence of camera surveillance. We have a legitimate interest in recording camera images to prevent theft and for investigative purposes.

            How long and where do we store this data?

            SBA will retain your data for as long as necessary in the context of the agreement(s) concluded with you or your company, unless an administrative or legal retention obligation applies, in which case SBA will retain the data for that period.

                • In the case of video recordings in and around our premises, this is a maximum of 90 days, after which these images are automatically deleted, provided that they are not part of an ongoing (legal) investigation.

                • For prospects and interested organizations, this is during the period in which one is seen as a prospect and/or interested party.

              Your personal data is stored by us on our own servers and/or on our VPS (Virtual Private Server) environment located in the Netherlands.

              What information do we share with others and why?

              SBA uses third parties to provide certain services. To the extent that these parties have access to your data when performing the relevant services, SBA has taken the necessary contractual and organizational measures to ensure that your data is processed exclusively for the above purposes. If a supplier is located outside Europe, SBA guarantees that the processing of your data is covered by the same safeguards as when processed by a supplier in Europe. SBA only shares the necessary information.

              Information collected pursuant to this Privacy Statement, including Personal Data, may be shared with one or more third parties in connection with a change in ownership or control of SBA’s operations (whether by merger, sale or otherwise) or other reorganization or joint venture, or assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings), and such information may be used by such third party in accordance with this Privacy Statement.

              What information do we collect on our website(s) and why?

              The SBA website keeps track of general visitor data, including the IP address of your device, the time of the request and data that your browser sends. This data is collected through the use of cookies and used for statistical analyses of visitor and click behaviour on the website. SBA uses this information to improve the functioning of the website and to provide visitors with the most relevant content possible.

              Accept or refuse cookies

              According to Dutch law, there is an information and consent obligation (opt-in) for the use of cookies. An opt-in means that SBA must ask for permission in advance to place cookies on your computer, tablet or telephone. We must do this for every site or app that has not been shown to you before. That is why we show you a pop-up window during your first visit, in which we tell you which cookies we want to place.

              In this pop-up window you can indicate whether or not you agree to this. As soon as you accept or refuse cookies, your IP address will be stored in our database. Behind your IP address it will then be stated whether you have accepted the cookies (limited or complete) and at what date and time you did so. We store this information so that we can save your preference. Then we load the correct cookies every time you visit our site or app. This information remains valid until you delete your cookies or adjust your preference. You can also choose to never allow cookies at all. You do this by adjusting your browser settings. For this, please refer to the manual of the browser you use.

              How can you delete cookies yourself?

              You can refuse cookies by simply not giving permission to place cookies. If you change your cookie preferences or withdraw your permission to place cookies completely, we will no longer read cookies. However, we cannot delete existing cookies on your device, because we do not have access to your computer or telephone. You can delete existing cookies yourself via the internet browser. To do this, consult the manual of the browser you use.

              The website www.veiliginternetten.nl also explains how to delete previously created cookies. After deleting cookies, we no longer recognize your browser. That is why you may have to set your preferences or log in again when opening the website or app. You will then see a cookie notification again.

              The use of Google Analytics on our website(s)

              SBA uses Google Analytics to track how users use our website(s). The information thus obtained is completely anonymized. Google may provide this information to third parties if Google is legally obliged to do so, or to the extent that these third parties process the information on behalf of Google. SBA has no influence on this. SBA has not given Google permission to use Analytics information obtained via SBA for other Google services or advertising purposes.

              The use of LinkedIn Insight Tag on our website(s)

              The LinkedIn Insight Tag is a piece of lightweight JavaScript code that we have added to our website(s) to enable in-depth campaign reporting and to help us unlock valuable insights about our website visitors. We use the LinkedIn Insight Tag to track conversions, retarget website visitors, and unlock additional insights about how members interact with our LinkedIn ads.

              The LinkedIn Insight Tag enables the collection of metadata such as IP address information, timestamp, and events such as page views. All data is encrypted. The LinkedIn browser cookie is stored on a visitor’s browser until the visitor deletes it or the cookie expires (which expires six months after the visitor’s browser last loaded the Insight Tag). You can opt out of LinkedIn cookies on your LinkedIn settings page and we recommend reading their cookie policy for more information.

              The use of Microsoft Clarity on our website(s)

              We partner with Microsoft Clarity and Microsoft Advertising to understand how you use and interact with our website through behavioral statistics, heat maps, and session recurrence to improve and market our products/services. Website usage data is captured using first- and third-party cookies and other tracking technologies to determine product/service popularity and online activity. We also use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, please visit the Microsoft Privacy Statement.

              The use of links on our website(s)

              Our website(s) may contain links to third party websites. Although these websites have been selected with care, SBA is not responsible for the content of these websites or for the way in which these websites handle personal data. SBA always advises you to read the privacy statement of the relevant websites.

              Securing your data

              SBA takes the protection of your personal data very seriously and takes appropriate (security) measures, both organizational and technical, to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification of your personal data, including:

                  • All persons who may access your data on behalf of SBA are bound to confidentiality.

                  • We maintain a username and password policy on all our systems with MFA (Multi-Factor Authentication) and/or SSO (Single Sign On) where possible.

                  • We ensure relevant encryption of personal data if there is reason to do so.

                  • We make backups of the personal data in order to be able to restore them in the event of physical or technical incidents.

                  • We are tested on all relevant security measures and policies in accordance with the ISO 27001 standard by an external certified party.

                  • Our employees have been informed about the importance of protecting personal data.

                What rights do you have?

                Based on European privacy legislation, you have various rights that you can exercise with regard to your data. This paragraph describes your rights. If you wish to exercise one or more rights, please contact us. You can do this by sending a letter or an e-mail. In order to process your request, SBA requires at least the following information from you:

                    • Your full name.

                    • Your address.

                    • A copy of a valid ID (make sure you provide the copy with a watermark and cover the Citizen Service Number).

                  In order to safeguard your rights, it may in some cases be necessary to receive additional information from you or to request the processed data via your employer who has provided it within the business agreement.

                  Access to your data

                  You have the right to know what data of yours is processed by SBA. You can submit a request for access by letter or e-mail to us. Our contact details can be found at the bottom of this page.

                  Correction of your data

                  If the data that SBA has is incorrect, you can have the incorrect data corrected. Please contact us for this. We expect you to indicate in your message or letter which data is incorrect and how this data should be corrected.

                  Objection and deletion of your data

                  In certain cases, you can request us to stop processing your data and to delete it. Such a request is possible, for example, if you no longer use our services or if you have serious objections to the processing of your data. If you have serious objections to the processing of your data, we expect you to indicate your objections in your request.

                  Restriction of processing

                  If you want to correct or delete your data, you can – during the time that your request is being processed by us – have the processing temporarily stopped. Despite a possible limitation, we may continue to store your data. When it becomes clear that your request is justified, we will execute your request. If SBA believes that your request is unfounded, the processing of your data will be resumed.

                  Transfer of your data

                  You can request a copy of your data that we have in our possession. The copy only concerns the data that we have processed with your permission or for the execution of your agreement with your employer. We will provide the copy in a common file format.

                  File a complaint with the supervisor

                  Are you not satisfied with the way SBA safeguards your privacy? Please contact us so that we can find a solution together. You can also file a complaint with the supervisory authority, the Dutch Data Protection Authority.

                  Withdrawal of given consent

                  If you have given permission for the processing of your data, you can withdraw this permission at any time. For example, you can withdraw permission in the settings menu of the application if this application has requested permission. In this case, it is not necessary to send SBA a letter or email stating that you are withdrawing your permission.

                  Some limitations

                  You should be aware that, where permitted, fees may be charged for repeat requests from the same individual as determined by SBA and imposed only to the extent permitted by law.

                  How can you reach us?

                  If you have any questions or wish to exercise your rights, you can contact us in various ways.

                  By mail: SBA (Sander Brouwer Automation)

                  Attn. Privacy Officer

                  Antoniuslaan 1E

                  3341 GA

                  Hendrik-Ido-Ambacht

                  Via e-mail: contact@sba.nl

                  SBA may amend the content of this privacy statement. This statement (version 1.0) was last updated on 16-08-2024