1. Scope of this privacy statement
This privacy statement applies to:
Bizcuit B.V. and Bizcuit Payments B.V. will be referred hereafter as “Bizcuit Group”.
2. Purpose of this statement
Bizcuit Group believes that privacy of the persons they do business with is very important. Bizcuit Group actively promotes its employees to be privacy aware. Employees are trained in privacy protection and information security. It has taken technical and organisational measures to protect the personal data it processes.
The purpose of this privacy statement is to inform the customers of Bizcuit Group about the personal data it processes, how this information is used and shared. The privacy statement also describes the rights data-subjects have and how they can exercise these rights.
3. What does processing of personal data mean?
Personal data is defined as any information relating to an identified or identifiable natural person (‘data subject’). Processing personal data includes the following activities: collecting, recording, saving, viewing, adapting, using, publishing, transferring and deleting of personal data.
4. What personal data is processed?
Bizcuit Group processes the personal data of:
Of these data subjects the following data is processed:
5. What is the personal data used for?
The personal data is used by Bizcuit for the following purposes:
6. Protection of Personal Data
Bizcuit Group has measures in place to ensure that client data is stored securely to prevent unauthorized access. Bizcuit Group systems are protected through a combination of physical and electronic access controls, firewall technology, and other security measures. Bizcuit Group maintains segregated access to systems, to ensure that the only staff who have access to client data are those who facilitate the purpose for which clients shared their data. IT administrators with broader access sign additional agreements obligating them to protect client data. Bizcuit Group requires the same standards of security from their service providers.
7. Personal Data shared
Bizcuit Group may use third parties for certain services that need the processing of Personal data, such as a specialized KYC service provider, a specialized provider of Compliance and Risk services, a specialized IT-security provider, payroll processors, insurers, IT-providers, other service providers and auditors. In these instances, Bizcuit Group only shares the personal data that is needed to perform that specific service, and makes sure that the personal data is being treated by the third party adhering to the same standards as upheld within Bizcuit Group with regards to data safety and privacy Bizcuit Group does not share personal data outside the EU.
8. Data minimization
9. Rights of data subjects
The persons of whom Bizcuit Group collects data (“Data subjects”) have the following rights:
10. How to exercise these rights
Data subjects can exercise their rights by sending an email to Bizcuit Group:
For the attention of the Privacy Officer
If a Data Subject requests for deletion of the Personal data, please note that this can only be executed if retention of the data is not bound by law or regulation. If access to Personal data is requested, Bizcuit Group will provide an overview of processed and stored data (e.g. showing what data Is stored in a database) or copies of documents containing personal data.
Bizcuit Group will reply within one month after receipt of a Data Subject’s request to exercise its rights. In case it is expected that the reply will take more time, the Data Subject will be informed of the expected timeframe to answer. The Data Subject will be required to provide identification when exercising his/her rights.
The address above can also be used to file a complaint on the processing of Personal Data by Bizcuit Group. Please indicate in the complaint to which Bizcuit entity the complaint refers. The person complaining will receive an acknowledgement of receipt in which the process of complaint handling will be explained. In case a Data Subject is not (completely) satisfied with the complaint handling of Bizcuit Group the Data Subject has the right to submit its complaint to the Data Protection Authority of the Netherlands.
Date of this Privacy Statement: November 20, 2019.
Bizcuit Group has the right to unilaterally change this Privacy Statement. This is the most recent version. Earlier versions are available on request from Bizcuit Group.