Newblend values your privacy. This statement explains which personal data we process, why we do so, on what legal basis, how long we keep data, with whom we share it and what rights you have. If you still have questions after reading it, please contact us at info@newblend.nl.
This statement applies to our website www.newblend.nl and to our services under the name Newblend, from all our offices.
1. Who is responsible for your data?
Newblend Solutions B.V. is the controller within the meaning of the General Data Protection Regulation (GDPR) for all processing described in this statement, across all its offices.
| Detail | Newblend Solutions B.V. |
|---|---|
| Head office | Klokgebouw 146 5617 AB Eindhoven, Netherlands |
| Other offices | Lage Mosten 49, 4822 NK Breda Brusselstraat 51, 2018 Antwerp |
| Registration | Dutch Chamber of Commerce no. 42166934 |
| Phone | +31 (0)88-2022000 |
| Privacy email | info@newblend.nl |
Who is responsible for what?
- Visits to our website, cookies and marketing. Newblend Solutions B.V. is the controller. Data subject requests are handled centrally at info@newblend.nl.
- Our services, your agreement, invoicing and support. Newblend Solutions B.V. is responsible for these as well, regardless of which office your contact works from. This is stated in your quotation, contract and invoices.
- Data in systems we manage for you. If we manage your IT environment, we process the data in it on your instructions. In that case we are a processor and not a controller; what we do in that role is set out in the data processing agreement we concluded with you. This privacy statement does not cover that.
You can exercise your rights at any of our offices, regardless of where the data is actually processed. We will never refer you to another office.
Data protection officer
We are not required to appoint a data protection officer and have not done so. Privacy questions and requests reach our permanent privacy contact point: info@newblend.nl. That address is monitored so that we can handle your request within the statutory deadline.
2. Why do we process your data?
For each purpose, the table below sets out which data we process, on what legal basis and how long we keep it.
| Purpose | Data | Legal basis | Retention period |
|---|---|---|---|
| Contact and quotation requests via the website or email | Name, company name, job title, email address, phone number, content of your message | Steps taken prior to entering into a contract (Art. 6(1)(b)), or our legitimate interest in being able to answer your question (Art. 6(1)(f)) | 2 years after our last contact, unless you become a customer |
| Performance of our agreement and delivery of our services | Name and address details, contact person and job title, email address, phone number, VAT number, order and contract data, support tickets | Necessary for the performance of the contract (Art. 6(1)(b)) | Term of the agreement plus 2 years; support tickets 2 years |
| Invoicing and accounting | Name and address details, VAT number, invoice and payment data | Legal obligation (Art. 6(1)(c)) | Netherlands: 7 years (Art. 52 AWR). Belgium: 10 years (Art. 315 WIB 92 and Art. 60 VAT Code); accounting supporting documents 7 years (Art. III.86 Code of Economic Law) |
| Newsletter and commercial email | Name, email address, company name, open and click behaviour | Your consent (Art. 6(1)(a)). If you are already a customer, our legitimate interest in informing you about similar services (Art. 6(1)(f)), in line with Art. 11.7 of the Dutch Telecommunications Act and Art. XII.13 of the Belgian Code of Economic Law | Until you unsubscribe, then no longer than 12 months |
| Statistics and improvement of our website | IP address, cookie ID, pages visited, click behaviour, browser and device information, referring website | Your consent via the cookie banner (Art. 6(1)(a)) | 14 months |
| Security of our systems and blocking spam | IP address, log files, login attempts, form submissions | Our legitimate interest in network and information security and preventing abuse and fraud (Art. 6(1)(f)) | 12 months |
| Job applications | Name and address details, CV, cover letter, education, employment history | Steps taken prior to entering into an employment contract (Art. 6(1)(b)) | 4 weeks after the procedure ends; 1 year with your consent |
Mandatory or not? If you fill in a contact or quotation form, the fields marked as required are needed to handle your question; without that data we cannot help you. When entering into an agreement, your company, contact and invoicing details are contractually and legally required. All other data you provide voluntarily.
What we do not do. We do not process special categories of personal data, such as data on health, religion or ethnic origin. We do not take decisions about you based solely on automated processing that have legal effects for you or significantly affect you, and we do not build profiles of you. We do not show personalised advertising and do not use advertising or tracking cookies.
Data we do not receive from you directly. For our business services we sometimes use business contact details from public sources, such as the Dutch Commercial Register, the Belgian Crossroads Bank for Enterprises, company websites and LinkedIn. This concerns name, job title, business email address, phone number and employer. We use that data solely to contact you about our services, on the basis of our legitimate interest in business development (Art. 6(1)(f)). We inform you about this no later than at first contact, and you can object at any time.
3. With whom do we share your data?
We do not sell your data and do not provide it to third parties for their own marketing purposes. We do engage service providers that process data for us. We have concluded a data processing agreement with each of them. These are our recipients:
| Party | For what | Location | Transfer outside the EEA |
|---|---|---|---|
| Microsoft Ireland Operations Ltd | Email, document storage, collaboration and calendar (Microsoft 365) | Ireland | Limited, for support and telemetry to the United States. Safeguard: EU standard contractual clauses and the EU Data Boundary |
| Google Ireland Ltd / Google LLC | Website statistics (Google Analytics) and spam protection for our forms (reCAPTCHA) | Ireland / United States | Yes, to the United States. Safeguard: the EU-US Data Privacy Framework, supplemented by EU standard contractual clauses |
| Laposta B.V. | Distribution of our newsletter | Netherlands | Nee |
| CookieScript | Recording and managing your cookie preferences | Lithuania (EU) | Nee |
| Our accountant, bookkeeper and, where necessary, a debt collection agency or lawyer | Financial administration and collecting or defending claims | Netherlands / Belgium | Nee |
| Government authorities | Only where we are legally required to do so or upon a lawful request | Netherlands / Belgium | Nee |
Our own systems. We manage your customer and relationship data in Profinext, an application we developed and manage ourselves. We also host our website ourselves. In both cases your data is stored solely within the European Union and no external party is involved.
Transfers outside the European Economic Area. As indicated above, some data is processed in or transferred to the United States. We only do so where an appropriate basis exists: an adequacy decision of the European Commission (the EU-US Data Privacy Framework) or the standard contractual clauses adopted by the European Commission, supplemented by technical and organisational measures. A copy of the safeguards used can be requested at info@newblend.nl.
4. How do we secure your data?
We take appropriate technical and organisational measures to protect personal data. In practice, our measures include the following:
- All traffic to our website and systems is encrypted using TLS.
- Access to personal data is limited to employees who need it for their work and is secured with strong authentication, including multi-factor verification.
- We keep log files and monitor for unusual activity.
- We have documented procedures for incidents and data breaches, and report breaches to the competent supervisory authority within 72 hours where required and, where necessary, to you.
- Our employees are screened and bound by confidentiality.
- We have concluded a data processing agreement with every supplier that processes personal data.
5. What rights do you have?
Under the GDPR you have the following rights. You can exercise them by sending an email to info@newblend.nl.
| Access (Art. 15) | You may ask whether we process personal data about you and if so which, and receive a copy of it. |
|---|---|
| Rectification (Art. 16) | You may have inaccurate data corrected and incomplete data completed. |
| Erasure (Art. 17) | You may ask us to delete your data, for example when we no longer need it or when you withdraw your consent. This right is not absolute: where we have a statutory retention obligation, we must keep the data. |
| Restriction (Art. 18) | You may ask us to suspend processing temporarily, for example while we verify the accuracy of your data. |
| Objection (Art. 21(1)) | Where we process data on the basis of a legitimate interest, you may object on grounds relating to your particular situation. We will then stop, unless we have compelling legitimate grounds that outweigh yours. |
| Portability (Art. 20) | Where we process data based on your consent or a contract, and do so by automated means, you may receive that data in a commonly used digital format or have it transferred directly to another party. |
| Withdrawing consent (Art. 7(3)) | If you have given consent, you may withdraw it at any time. Doing so is as easy as giving it. Withdrawal does not affect the lawfulness of processing that already took place before it. |
| Objection to direct marketing | You may object at any time and without giving a reason to the use of your data for direct marketing, including our newsletter. If you do, we stop immediately. You can do this via the unsubscribe link at the bottom of every newsletter or by sending an email to info@newblend.nl. |
We respond to your request within one month. If your request is complex or we receive many at once, we may extend that period by two months; we will let you know within the first month. To prevent us from amending or disclosing the data of the wrong person, we may ask you to identify yourself. We will not ask for more data than necessary.
6. Filing a complaint
If you disagree with how we handle your data, please let us know first at info@newblend.nl — and we will resolve it together. You also always have the right to lodge a complaint with a supervisory authority, in particular in the country where you live, where you work or where the alleged infringement took place. You can turn to:
| Autoriteit Persoonsgegevens (Netherlands) | PO Box 93374, 2509 AJ The Hague autoriteitpersoonsgegevens.nl |
|---|---|
| Gegevensbeschermingsautoriteit (Belgium) | Drukpersstraat 35, 1000 Brussels gegevensbeschermingsautoriteit.be |
You can also take the matter to court.
7. Cookies
Cookies are small files that are stored on, or read from, your computer, tablet or phone when you visit our website. We use them to make our website work and to understand how our website is used.
We place only strictly necessary cookies without your consent. Analytics cookies are placed only after you have given consent through our cookie banner. In doing so we apply the stricter of the Dutch and Belgian rules, so that this statement is accurate in both countries. We do not use advertising cookies, tracking cookies or social media cookies.
We keep your choice for six months; after that we ask you again. You can also change or withdraw your choice at any time through the Cookie settings link at the bottom of every page. Withdrawing consent is as easy as giving it. You can also refuse or delete cookies through your browser settings; consult your browser’s help function for this. If you refuse cookies, our website remains accessible, although some parts may work less well.
Which cookies do we use?
| Cookie | Placed by | Purpose | Retention period |
|---|---|---|---|
| Strictly necessary — no consent required | |||
| CookieScriptConsent | CookieScript | Remembers the cookie preferences you have set, so we do not have to ask you again on every visit | 6 months |
| _grecaptcha | Protects our contact forms against automated abuse and spam | Stored until you clear your browser storage | |
| Analytics — only with your consent | |||
| _ga | Google Ireland Ltd | Distinguishes unique visitors for our website statistics | 14 months |
| _ga_<measurement-id> | Google Ireland Ltd | Keeps track of session state for Google Analytics | 14 months |
Google’s privacy policy is available at policies.google.com/privacy.
8. Links to other organisations’ websites
Our website contains links to websites of other organisations. This statement does not apply to those websites. We have no influence over how they handle your data. We recommend reading their privacy statement before using them.
9. Changes to this statement
We may amend this privacy and cookie statement, for example when we offer new services or when legislation changes. The current version is always on our website, with the version number and date at the top. In the event of significant changes we will inform you actively, for example by email or through a notice on our website. We recommend consulting this statement from time to time.
10. Contact
Do you have questions about this statement or about how we handle your data?
| Newblend Solutions B.V. | Klokgebouw 146 5617 AB Eindhoven, Netherlands +31 (0)88-2022000 info@newblend.nl |
|---|