PRIVACY STATEMENT CSR NETHERLANDS FOR THE COMMUNITY

PRIVACY STATEMENT MVO NEDERLAND ON BEHALF OF THE COMMUNTY

MVO Nederland accelerates the road to the new economy. Together with entrepreneurs we work on climate-neutral, circular, inclusive business models with fair chains. MVO Nederland is the accelerator for entrepreneurs towards the new economy. For this purpose, MVO Nederland manages, among other things this Community, an online platform in which professionals, companies and organizations are able to communicate, collaborate and share content about topics related to corporate social responsibility and sustainability. MVO Nederland utilizes the Community for various programs and projects, nationally and internationally.

We handle all personal details of all members and visitors of the Community with care. In this Privacy Statement we indicate which personal data we process and how we handle it. This Privacy Statement applies to anyone who visits the Community. By checking the checkbox you have agreed to the use of your personal data as determined in this Declaration. Foundation MVO Nederland is located at the Arthur van Schendelstraat 500 in Utrecht.

WHEN DO WE PROCESS PERSONAL DATA?

When you register yourself on the Community, the personal data you provide will be recorded and processed under the responsibility of MVO Nederland.

WHICH DATA DO WE PROCESS?

We process the following personal data when you use the Community:

a. Your registration details: we ask you to complete this data when registering as a member of our Community.

o The following information is mandatory registration information to use the Community:

- Your name

- Your e-mail address

o The following data are non-mandatory profile information. You can decide whether you want to fill it out:

-Your telephone number

- Your profile picture

- Your function

- Social media data

- Your employer

- Company data, including location, telephone number and social media data of the company

Your registration details only show your name and photo for all visitors to the Community. The remaining data is only visible to users of the Community that are logged in. You can choose whether you want to share your email address with users of the Community that are logged in.

b. Any personal data in the content items that you choose to share through the Community.

c. Other information that we process. This involves the following information:

- tracking cookies, by which we process your preferences, visit and usage history on the Community so that we could make you offers for products and services by MVO Nederland based on that.

- data that are necessary to make use of the Community and to improve the service of the Community, which include, but are not limited to your Internet Protocol (IP) address.

WITH WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?

We process your personal data for the following reasons:

• to ensure that the Community and the services and functions we provide to you and other users function and improve.

• to send you newsletters, surveys and other notifications, in case you have explicitly given your permission for this;

• to offer you services and products from MVO Nederland, in case you have explicitly given your permission for this;

• to comply with a legal obligation.

MVO Nederland will only use your personal data for the purposes for which you have provided it to us, unless you have explicitly given permission for the use of your personal data for other purposes.

WHEN DO WE PROVIDE YOUR PERSONAL DATA TO THIRD PARTIES?

MVO Nederland will only provide your personal data to other parties in the following cases:

• for the execution of the requested services, especially for functional purposes, such as the technical functioning of the Community and the development of content;

• if the data is public;

• if MVO Nederland is required by law and regulations to provide certain information.

MVO Nederland concludes processing agreements with these third parties so that they handle your personal data with due care.

WHAT ABOUT LINKS TO WEBSITES OF THIRD PARTIES?

The Community contains links to websites of third parties. If you end up via the Community on the website of a third party, the conditions and privacy rules of the third party concerned will apply. MVO Nederland does not control the activities of such websites or third parties and is not liable for the content, privacy, security and regulations of the websites to which the Community links. MVO Nederland therefore advises you to make yourself acquainted with the privacy conditions, security and regulations of the third party before you provide them with (personal) information.

HOW CAN YOU REPEAL YOUR PERMISSION?

If you no longer wish to receive marketing and promotional messages about our products and services or general news items via e-mail, you can unsubscribe (opt out) via your personal profile or by following the instructions that are included in each e-mail for this purpose or by sending a message to [email protected] We will comply with this within a period of four weeks after receipt of your request.

Please note that we may continue to use your e-mail address for the sending of e-mails regarding the use of the Community and your user account, or to use your e-mail address in any other way described in this Privacy Statement.

If you want to have your e-mail address removed from our database, you can send a message to [email protected] We will comply with this within a period of four weeks after receipt of your request.

WHAT ARE YOUR RIGHTS?

You have the right to view your personal data and the right to request correction, removal or transfer of your personal data. You also have the right to object to the processing of your data.

If you want to know what personal data MVO Nederland processes, you can make a written request for access via [email protected] We will process your request within four weeks of receipt.

You can view your personal data collected by MVO Nederland in the context of your participation in the Community and have it amended if necessary by sending a request to: [email protected] We will respond to your request within four weeks.

You should keep in mind that certain types of personal data that are necessary to verify that you are eligible to use the Community cannot be deleted unless you have deleted your user account. This includes your name and e-mail address. Please note that deleting certain personal data may result in the termination of your user account which means that you will no longer be able to access the Community.

MVO Nederland can ask you to show your identity if you submit requests for inspection or modification.

If you do not agree with the way in which MVO Nederland handles your personal data, you can submit a complaint to the Dutch Data Protection Authority.

HOW LONG ARE WE KEEP YOUR DATA?

We will delete your personal data immediately after you have terminated your user account, unless a statutory obligation of retention precludes this.

The data of the use of the Community can still be processed for historical and statistical purposes after termination of your user account, but only at an aggregated level.

HOW DO WE DEAL WITH COOKIES?

MVO Nederland uses cookies and other internet techniques on the Community. We have a cookie policy for this. You can find that here.

HOW DO WE DEAL WITH THE REPORTING OF WEAK SPOTS IN THE PROTECTION OF OUR SYSTEMS?

MVO Nederland has a responsible disclosure policy in which we indicate how you can report your findings about the safety of our systems and how we deal with them.

WHAT DOES MVO NEDERLAND DO TO PROTECT YOUR DATA?

MVO Nederland shall take appropriate technical and organizational measures to protect personal data against loss or against any form of unlawful processing. Taking into account the state of the art and the costs of implementation, these measures guarantee an appropriate level of security in view of the risks involved in the processing and the nature of the personal data to be protected.

Access to the data on the servers of MVO Nederland is secured via a username and password. The servers are also located at a secure environment. The servers themselves - both physically as well as the data on them - are protected.

Internal access to personal data is restricted to employees who must have access to the personal data in order to perform their tasks. Unauthorized access and unauthorized use of personal data by employees are grounds for disciplinary action against the employee concerned. Furthermore, our information management system is configured in such a way that personal data of users are closed for employees who do not have the required access rights that are linked to their task.

The user acknowledges and agrees that the Service Providers of CSR Nederland may be responsible for processing and recording some of the personal data that we receive. These Service Providers are contractually bound to secure and to protect the personal data that they receive from MVO Nederland. Although we strive to protect your personal data, you acknowledge and accept that sending information via the internet is not necessarily safe and can be intercepted / received by third parties. Therefore, we cannot guarantee the security of that information and we are not liable for the case where a third party intercepts and / or receives your information.

MODIFICATION OF THIS PRIVACY STATEMENT

MVO Nederland has the right to change this Privacy Statement. If substantive changes are made, we will express this via the Community website. Furthermore, as a user, we will ask you for a statement of approval with the amended Privacy Statement. If you do not agree, MVO Nederland will block and / or terminate your user account.

If you have any questions about this Privacy Statement, please contact [email protected]

Last updated:

31/01/2019