Privacy notice – suppliers
Your privacy is important for us.
All personal data that we obtain in the context of our interactions with you as (a staff member of) a (prospective) supplier will be collected and processed in accordance with applicable data protection legislation, in particular the General Data Protection Regulation 2016/679 of 27 April 2016 (“GDPR”).
This privacy notice explains why and how we collect your personal data, the measures we take to protect your data and how long we retain your data.
The GDPR also grants you certain rights as a data subject.
1. Identity and contact details
The data controller for your personal data is one or more of the following legal entities within the Aminolabs group of companies:
Blue Tower 2
Sluisweg 2, bus 11
Enterprise number 0741.604.887
Grosse Reichenstrasse 27,
|Atlantic Aminolabs Croatia D.O.O.
Trg kralja Tomislava 1
35400 Nova Gradiška
Enterprise number MBS 080090941
If you have questions regarding the processing of your personal data, you can always contact us by e-mail (email@example.com) or by letter to the postal address of EMPWR BV mentioned above (attn. Privacy).
2. Purposes and legal basis
We primarily collect your personal data because it is necessary to enter into a supplier contract and for the performance of that contract. We have a legitimate interest in this respect.
We may also need your personal data in order to comply with our legal obligations (for example, tax and accounting regulations) and in order to pursue our legitimate interests (for example, in case of a dispute or a corporate transaction).
3. Categories of personal data
For the purposes mentioned above, we may collect and process the following personal data:
- identification data (such as, name, e-mail, phone, address)
- employment data (such as, employer, function)
- financial data (such as, bank account)
- video images
- other information provided in correspondence with us
We do not collect any sensitive data (i.e. personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health or data concerning a natural person’s sex life or sexual orientation) or personal data relating to criminal convictions and offences.
4. Source of personal data
We obtain your personal data in the context of our interactions with you as (a staff member of) a (prospective) supplier. This includes interactions via our website, via e-mail, by phone and during meetings and events. In certain circumstances we may also receive your data via other parties such as Aminolabs affiliates, as mentioned above.
We capture your image via our camera surveillance system located on our premises.
5. Recipients of personal data
For the purposes mentioned above, we may have to provide your personal data to the following third parties:
|Aminolabs affiliates||public authorities|
|security partners||police and judicial authorities|
|legal counsel||third parties in case of corporate transactions|
Our IT, cloud, software and other service providers may also have access to your personal data.
6. Transfer of personal data
Your personal data will not be transferred outside the European Economic Area without appropriate safeguards.
7. Retention period
We will delete or anonymize your personal data 10 years after the termination of the supplier contract or 10 years after our last contact with you (plus a verification period of 6 months).
In case of a dispute or procedure before a court or similar judicial entity, we will delete or anonymize your personal data relating to this dispute or procedure 5 years after the termination of the dispute or procedure (plus a verification period of 6 months).
Images captured via our camera surveillance system are deleted after 6 months.
We reserve the right to continue storing your personal data if a legal obligation or legitimate interest requires us to retain your personal data longer.
You can always contact us if you would like to:
- request access to or rectification of your personal data.
- request erasure of your personal data.
- request a restriction of the processing of your personal data.
- object to the processing of your personal data.
- send us a complaint if you consider that we are not acting in accordance with applicable data protection legislation. You can also introduce a complaint with the supervisory authority.
The aforementioned rights can be exercised by e-mail (firstname.lastname@example.org) or by letter to the postal address mentioned under point 1 for EMPWR BV, accompanied by a copy of your ID card. Please remove the national registration number when you provide us with such copy. We will grant you all rights to which you are entitled in accordance with the applicable regulations.
Please also inform us when your personal data is not accurate or no longer up-to-date.
9. Automated decision-making
We do not engage in automated decision-making, including profiling.
We have implemented appropriate technical and organizational measures to ensure the confidentiality of your personal data and protect your data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access.
This privacy notice may be amended from time to time within the boundaries of applicable data protection legislation.