What does Ivoren Kruis process your personal data for? Your personal data is processed by Ivoren Kruis for the following purposes:

1. Execution of the agreement(s) concluded with you;
2. Conducting the administration as well as other internal management activities;
3. calculating, recording and collecting amounts due;
4. To inform you about new services and activities of Ivoren Kruis;
5. handling information requests;
6. Conducting satisfaction surveys and marketing activities;
7. Improving the website and services of Ivoren Kruis;
8. Sending (digital) newsletters or association magazines;
9. Fulfilling and sending orders;
10. To comply with legal obligations, such as the administration and retention obligation;
11. To properly handle any complaints.

On what basis is Ivoren Kruis allowed to process this personal data?

Ivoren Kruis may process your personal data because:

• you have given permission for this;
• This is necessary for the implementation of the agreement concluded with you;
• This is necessary to comply with legal obligations and/or;
• This is necessary for the protection of the legitimate interests of Ivoren Kruis or a third party.

Legitimate interests of Ivoren Kruis can be:

• Security of Ivoren Kruis buildings and property
• Security and making the network infrastructure available to third parties. For example, making the guest wifi available
• Fraud prevention. Checking the logging of information systems For example, internet traffic
• Quality and training purposes
• Internal audits to improve the quality of services
• Scientific (or historical) research

You can object to processing based on a legitimate interest by means of the right to object. More information about the right to object can be found later in this Privacy Statement.

Who receives your personal data?

Ivoren Kruis has engaged a number of organizations that carry out work for Ivoren Kruis. For example, Ivoren Kruis uses an organization that runs the secretariat of the association and an organization that takes care of ICT (maintenance and management). The same requirements and principles apply to all these organizations as laid down in this Privacy Statement.

Is it necessary to provide personal data to Ivoren Kruis?

When we ask for personal data, Ivoren Kruis applies the principle that no more personal data is requested than necessary for the purposes described above. The provision of personal data is a necessary condition to become a member of Ivoren Kruis and/or to receive products or services from Ivoren Kruis. If you do not wish to provide personal data, you cannot use the membership and/or our services.

Does Ivoren Kruis pass on data abroad?

Your personal data may be processed within countries of the European Economic Area (EEA). No processing of your personal data takes place outside the EEA.

Does Ivoren Kruis use automated decision-making and profiling?

No, Ivoren Kruis does not use automated decision-making and profiling.

How long will my personal data be kept?

Ivoren Kruis does not store your personal data for longer than is necessary under applicable laws and regulations. Data provided in the context of membership of Ivoren Kruis will be kept for 2 years after the end of membership. For financial data, the fiscal retention period of a maximum of 7 years applies.

How does Ivoren Kruis secure your personal data?

Ivoren Kruis has taken appropriate technical and organizational measures to protect personal data against loss or against any unlawful form of processing. Various measures have been taken in that context, including encryption of data, encrypted communication and treatment of the data as confidential information. Persons who have access to your data on behalf of Ivoren Kruis are bound by confidentiality.

Ivoren Kruis requires the same technical and organizational measures from the organizations that process data on its behalf and has laid this down in processing agreements.

What are your rights with regard to personal data processed by Ivoren Kruis?

You have various rights under the law. We will briefly explain these below.

Right of inspection

You have the right to view the personal data processed by Ivoren Kruis.

Correction and deletion right

You have the right to have your data changed or even removed if the data is not (or no longer) correct, or if the processing is not (or no longer) justified.

Right of objection

The right to object means that you can object to certain processing of your personal data due to your specific situation.

Right to restriction

Under certain circumstances you also have the right to restrict the processing of your data. In short, this means that Ivoren Kruis temporarily 'freezes' the processing of your data. You can invoke this right in four situations:

• Pending review of a correction request;
• If data should actually be deleted but you do not wish to delete it;
• If Ivoren Kruis no longer needs the data while you do need the data to prepare for a court case;
• Awaiting the assessment of an objection.

Right to data portability

You have the right to receive (back) the data you have provided to Ivoren Kruis in a common file format. This right only applies to the personal data that we process from you on the basis of your consent or an agreement concluded with you. Moreover, the law only applies to
the data that we already process in digital form (so not for 'paper' processing). You are free to pass that information on to another organisation. If there is a link between our systems and the systems of the organization to which you want the data to be transferred, we may be able to arrange that transfer directly on your behalf. Please inquire about the possibilities.

Withdraw consent

If we process your data on the basis of your consent, you have the right to withdraw consent once given at any time. We will then immediately cease processing.

Withdrawal of consent does not have retroactive effect; all processing that has already taken place therefore remains lawful.

Exercise of rights

Exercising the rights is in principle free of charge for you, subject to abuse. You exercise the rights by contacting us using the contact details at the bottom of this Privacy Statement.

Terms

We do our utmost to answer your questions/requests within one month. If it takes more time to answer your question/request, we will inform you within one month. It may be that due to the complexity of the requests and/or the number of requests the
response time is up to three months in total.

Identification

Ivoren Kruis can ask for further proof of your identity with all questions / requests. Ivoren Kruis does this to prevent personal data from being provided to the wrong party or from wrongful changes being made to the personal data.

Individual consideration for each request

We point out that the rights described above are not absolute rights. There may be circumstances that mean that Ivoren Kruis cannot comply with a request, for example if your data has been or will be processed on the basis of a legal obligation.

Ivoren Kruis will always assess each request on its own merits. If Ivoren Kruis does not (or cannot) respond to a specific request, you will of course be informed of this with reasons. In that case you can then turn to the court. The right to object to the use of data for (direct) marketing purposes is absolute. Unsubscribing from our commercial communications will therefore be honored in any case.

Does Ivoren Kruis have a Data Protection Officer?

Ivoren Kruis has appointed a Data Protection Officer (FG). The DPO monitors compliance with privacy legislation and advises the board of Ivoren Kruis on privacy legislation. The DPO is independent and enjoys legal protection against dismissal. The DPO reports directly to the chairman of the board of Ivoren Kruis. The DPO is also the contact person for all questions relating to privacy, both for you as a data subject and for the supervisory authority. You will find the contact details of the DPO at the bottom of this Privacy Statement.

Do you have a complaint about the processing of personal data by Ivoren Kruis?

If you have a complaint about the processing of personal data by Ivoren Kruis, we would appreciate hearing from you as soon as possible. We will then do our utmost to resolve this complaint. If you cannot come to an agreement with us, you can submit a complaint to the supervisory authority. The Dutch Data Protection Authority supervises compliance with privacy legislation. You will find the contact details of the Dutch Data Protection Authority via the website www.autoriteitpersoonsgegevens.nl.

Change of the Privacy Statement

Ivoren Kruis may change this Privacy Statement. These changes will be announced via the website of Ivoren Kruis. Ivoren Kruis therefore advises you to regularly consult this Privacy Statement for an update.

Do you have questions?

Of course you can always ask Ivoren Kruis questions about the processing of your personal data. You can contact us for this via the contact details below.

How do you contact Ivoren Kruis?

For questions about this Privacy Statement and/or the processing of your personal data by Ivoren Kruis, please contact: Connie Brouwer 035-6942878

Additional statement in connection with the use of the Ivoren website Crotch

As part of our online services, Ivoren Kruis records data. This is the case, for example, when you place an order or use the option to ask questions or post comments via our website. As a result, it is possible that you must provide certain personal data about yourself or that you provide this on your own initiative. In those cases, your data will only be processed to fulfill your order, to provide another service requested by you and/or to establish your identity as a requester or applicant. Your data will not be provided to third parties, unless Ivoren Kruis is obliged to do so by law, a court decision or you
has agreed to this.

Visit data

General visitor data is kept on our website www.ivorenkruis.nl, without being traceable to the visitors. This concerns, for example, the most visited pages, surfing behavior, time of visit, browser used, geographical region of the visitor and the search engines used. This data is used to optimize the layout of the website. This data can also be used to put more targeted information on the website. In this way, Ivoren Kruis can further optimize its services to you.

Cookies

Some parts of the Ivoren Kruis website may contain cookies. Cookies are small pieces of information (files) that a website leaves on your computer. The website instructs the web browser you use to view websites (e.g. Internet Explorer or Chrome) to store these cookies on your computer. Cookies are not used to obtain or store personal information. By adjusting the settings of your browser you can choose to accept all cookies, to be notified when a cookie is placed or to refuse all cookies. Consult the manual of your browser for this.

Ivory Cross and other websites

On the website of Ivoren Kruis you will find a number of hyperlinks to other websites. Ivoren Kruis cannot bear any responsibility with regard to the handling of your data by those parties. Please read the Privacy Statement, if available, of the organization you are visiting.