PRIVACY STATEMENT WEBSITE AND (EXTERNAL) COMMUNICATION ENGINEERO B.V.

If you visit our website or, for example, use the contact forms on it, we (Engineero B.V.) process your personal data. Also if you have contact with us in another context, we process your personal data for this purpose. Personal data' stands for all information about natural persons. Think of information such as names, telephone numbers, addresses and e-mail addresses, but also for example information about your use of our website. We would like to inform you clearly about how we process your personal data and how we protect your privacy. In this privacy statement, we explain, among other things, the purposes for which we process your personal data in this context, the legal grounds on which we do so, and your rights under the General Data Protection Regulation (AVG).

Types of personal data

We process personal data that you provide to us, for example by filling in the contact forms on our website, applying for a job with us or contacting us (as an individual or on behalf of your organization). We also process certain personal data through the use of cookies and similar technologies. More information on the processing of personal data in that context can be found in our cookie policy, which can be accessed here. To the extent that certain information is not apparent from that, the information in this privacy statement applies.

Where this privacy statement refers to processing by us, this may also mean processing by processors or other recipients engaged by us. The relevant recipients are named in this privacy statement.

Purposes of the processing

We process your personal data only if and insofar as this is necessary for our (legitimate) purposes. Within that framework, we process your personal data for the following purposes:

1. Processing (and responding to requests via) the contact form on the website or other contact requests (in the broadest sense of the word) and maintaining contact, as well as keeping an administration in this regard;
2. If you make contact on behalf of a company, if this is the case: preparing and executing agreements concluded with the company in question, as well as keeping records in this regard;
3. Receiving, considering and processing your job application;
4. If you apply to us and it is decided to enter into an (employment) agreement with you: preparing (an offer for) an (employment) agreement;
5. Placing (targeted) advertisements on Google, Facebook, LinkedIn and other websites that allow Google Ads, Facebook retargeting and LinkedIn website retargeting;
   1. These tools are used to serve ads targeted to user audiences and to retarget website visitors to see our ads on other websites that allow this. Google, LinkedIn and Facebook then display the ads on websites across the Internet using cookies and device IDs based on previous visits to our website. We do not receive any additional data at the personal level in this connection, but only feedback at the target group level on the performance of the ads. For more information on the cookies placed in this regard, please refer to our cookie policy;
6. Ensuring the continuity of our website by making backups.

Principles of processing

We process your personal data only if and insofar as a processing basis within the meaning of the AVG applies. We describe the applicable processing bases below. In doing so, we indicate for which of the purposes (numbered above) the processing bases apply. Processing for some of these purposes is subject to multiple processing bases.

Legitimate interest

Part of the processing of personal data takes place on the basis of our legitimate interests in doing so. These interests lie in the ability to respond to contact requests, to maintain contact, to draw up and enter into agreements, to receive - and properly follow up - job applications, to place targeted advertisements on the Internet and to guarantee the continuity of our website.

This basis applies to the processing of personal data for the purposes listed under 1 to 6 above. This basis also applies to processing in the context of necessary cookies on our website, for which no consent is required. If you have any questions about the considerations underlying the above, please contact us using the contact details at the bottom of this document.

Execution of agreement or measures prior to it

Some of the personal data processing takes place because it is necessary for the performance of an agreement to which you are a party or to take measures at your request prior to the conclusion of such an agreement.

This basis applies to the processing of personal data for the purpose described above under 4, if we prepare an offer for an (employment) agreement.

Consent

The processing of personal data within the framework of the cookies in the categories 'Preferences', 'Statistics' and 'Marketing' takes place on the basis of your consent to this. You can withdraw this consent at any time via the settings on our website or by deleting cookies via your Internet browser. Specifically for Google cookies, this can also be changed via Google's "advertising settings". The withdrawal of your consent does not affect the lawfulness of processing operations based on that consent prior to its withdrawal.

Provision of your personal data

You are not legally or contractually obliged to provide us with your personal data. However, providing some of your personal data is a necessary condition for us to respond to your contact request or process your application. If you do not provide these personal data, we cannot respond to your contact request or process your job application.

Recipients of your personal data

We share your personal data with third parties if this is necessary for the aforementioned purposes. Examples are providers of cookies as described in our cookie policy, hosting parties and parties from whom we use administration software. The following parties receive your personal data to the extent necessary:

• Cube B.V.;
• Shock Media B.V.;
• Bullhorn Inc;
• Microsoft Corporation;
• Apple Inc;
• The parties listed in our cookie banner and cookie policy, to the extent required for the use of the relevant cookies described therein.

Bullhorn, Inc., Google LLC (Google Analytics and DoubleClick.net), Meta Platforms, Inc. (Facebook), LinkedIn Corporation, Microsoft Corporation and Apple Inc. have offices in the United States. Bullhorn, Inc. describes the safeguards in place for transfers of personal data outside the EEA here. Information about Google LLC's safeguards can be found here. Meta Platforms, Inc. describes the safeguards in place in this regard here. Information on the safeguards affected by LinkedIn Corporation can be found here. Microsoft Corporation lists the information here and Apple Inc. here.

Retention period of personal data

We process your personal data only for as long as is necessary to fulfill the purposes previously described. For personal data processing in the context of our use of cookies, the retention periods specified in our cookie banner and cookie policy apply. If you have applied for a job with us but were not hired for the position in question, we will delete your personal data within 4 weeks - unless you have given us permission to keep your personal data longer, in which case we will keep the personal data for a maximum of 1 year. We will inform you separately about the processing of your personal data if you join us. Personal data obtained in the context of a contact request are processed until your question or request has been completely dealt with. If we process your personal data as part of the preparation and conclusion of agreements with your company or the company for which you work, we will only process these personal data for as long as is necessary for the preparation or conclusion of the agreement.

Rights of data subjects

If your personal data are processed, you have various rights under the AVG. These are described below.

Right to inspection, correction and deletion of data

You have the right to learn from us whether we process your personal data and to inspect this personal data and certain information about its processing, insofar as this does not interfere with the rights (such as privacy rights) and freedoms of others.

In addition, you have the right to have us correct personal data that is inaccurate or incomplete but is processed by us.

You also have the right to have your personal data deleted under circumstances. This is the case:

1. when the personal data are no longer necessary for the purpose for which they are processed;
2. when the personal data are processed on the basis of your consent, you withdraw that consent and no other processing basis applies;
3. when you object to the processing of your personal data and there are no more weighty legitimate grounds for the processing;
4. When the personal data have been processed unlawfully;
5. when the personal data must be deleted pursuant to a legal obligation of the relevant processing controller;
6. if the personal data were collected in the context of offering so-called "information society services" to children under the age of 16.

Right to restriction of processing

You have the right to have the processing of your personal data temporarily 'stopped'. This can be done in the following cases:

1. You have disputed the accuracy of your personal data. The restriction then applies for a period that allows us to verify the accuracy of the personal data;
2. The processing of your personal data is not lawful and you have opposed the erasure of the personal data. Instead, you have requested the restriction of the use of your personal data;
3. We no longer need your personal data for the purposes of processing, but you need this personal data yourself for the establishment, exercise or substantiation of legal claims;
4. You have objected to the processing of your personal data and are awaiting the answer as to whether our legitimate grounds for processing outweigh yours.

Right to data portability

Under certain conditions, you have the right to obtain the personal data you have provided to us in a structured, common and machine-readable form. You can then transfer this personal data to another party. You can also ask us to transfer your personal data directly to that other party.

The right to portability applies only to provided data that is processed automatically on the basis of the following bases:

1. your consent (or that of your parent(s) or legal representative);
2. or the necessity of the processing for the performance of a contract to which you are a party.

Right to object

You can, under circumstances, object to the (further) processing of your personal data. We will then cease processing, unless there are compelling legitimate grounds for processing your personal data.

Identification upon exercise

You may exercise the aforementioned rights by submitting a written request to us (including a request by e-mail) using the contact information provided below. We may ask you to identify yourself when doing so.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the supervisory authority (in the Netherlands, the Authority for Personal Data). You may do so, for example, if you believe that the processing of your personal data is not in line with legal requirements or you otherwise have a complaint.

Contacting us

If you have any questions, comments or complaints regarding this privacy statement, the processing of your personal data or the exercise of your rights, please contact us by calling us at 053 569 9970 or by sending an e-mail to us.

Changes

We may amend this privacy statement. We will publish any new versions of this privacy statement on our website.