Privacy statement

“De Engh” B.V. respects your privacy and personal life. We process your personal data in accordance with the General Data Protection Regulation (GDPR). With regard to your privacy, our processes are carefully designed. Naturally, we ensure an adequate level of data security through appropriate technical and organisational measures. In this privacy statement, we explain, among other things, which personal data we process, for what purpose, and on what legal basis. In addition, we describe your rights regarding the processing of your personal data.

Contact details:

Kon. Wilhelminalaan 31, 1411 EL Naarden
P.O. Box 5090, 1410 AB Naarden
+31 (0)88 639 66 45
info@engh-investments.nl

Types of personal data, processing purposes and legal basis

We process personal data such as your name, address and place of residence details, gender, position, telephone number and email address for due diligence and portfolio management. In addition, we process personal data as part of our business operations, including recruitment and selection of personnel, administration, security, management of ICT systems, compliance with legal obligations, archiving, and handling requests, complaints and disputes.

We also process personal data for marketing and communication purposes, including managing the website. For the placement of cookies and web beacons, we ask for your consent. We process personal data for statistical and analytical purposes.

Source of personal data

We obtain your personal data directly from you, or because we receive them from third parties in the context of managing our portfolio (or one of our other processing purposes), for example from public sources such as the trade register or the land registry.

Sharing personal data with third parties

We only share personal data with third parties if this is necessary to comply with a legal obligation. Data are only shared if an equivalent level of security and confidentiality is guaranteed by the recipient. This may, for example, be laid down in a data processing agreement.

Personal data outside the EU

Our policy is to process personal data only within the EU. Since the GDPR applies within the EU, an adequate level of protection can in principle always be ensured. If we are required by law or a court order to share personal data with a third party outside the EU, we will only do so if an adequate level of protection is provided.

Retention periods

Personal data are not retained longer than the statutory retention periods and/or longer than necessary for the purpose for which the data were provided. After that, we will destroy your personal data or retain them in such a way that they can no longer be traced back to an individual.

Cookies

This website uses cookies. A cookie is a small text file that is sent along with pages of this website and stored by your browser on your computer’s hard drive. You can always delete or disable cookies yourself via your browser settings. Cookies will then no longer be stored when you visit our website.

We use cookies to facilitate logging in to our website and to remember your settings and preferences. The use of cookies allows us to improve and personalise the functionality, usability and effectiveness of our website. It also helps us measure the effectiveness of our marketing activities.

Through our website, a cookie from the American company Google is placed as part of the “Analytics” service. We use this service to track and obtain reports on how visitors use the website. Google may provide this information to third parties if Google is legally required to do so, or insofar as third parties process the information on Google’s behalf. We have no influence over this. The information that Google collects is anonymised as much as possible. Your IP address is explicitly not shared. The information is transmitted to and stored by Google on servers in the United States.

Cookie overview

Your rights

You have the right:

• to be informed about the processing activities;
• to access your data;
• to correct your data if they are incorrect;
• to have your data erased and to exercise the “right to be forgotten”;
• to restrict the processing of your data;
• to object to the processing of your data;
• to data portability;
• not to be subject to automated decision-making.

We will respond to your request to exercise any of these rights as soon as possible, but no later than one month after receipt. If we cannot comply with your request, we will provide a careful explanation in our response.
To ensure that the request has been made by you, we may contact you by telephone or email using details known to us for verification.

Right of access

You will receive a complete overview of the source, recipients and purposes of the processed data.

Right to rectification

If the personal data we process about you are incorrect, you have the right to have them amended. Corrections can be submitted by email to info@engh-investments.nl.

Right to be forgotten

After assessing a request, we will proceed to delete (part of) the personal data where possible. However, this is not possible in all cases. Certain data are subject to statutory retention periods and/or obligations. In addition, certain personal data are required for the performance of an agreement. If we cannot comply with your request, we will inform you of the reasons.

Right to restriction of processing

If there is a dispute regarding the accuracy of your personal data, unlawful processing, or if you object to the erasure of your personal data, you may request that the processing of your personal data be restricted.

Right to object

Due to particular personal circumstances, you may object to the processing of certain data in cases provided for by law. If the objection is justified, we will immediately cease processing. We are not obliged to comply with an objection if the provision of data is legally required. If we process data on the basis of legitimate interest or public interest, you may object, after which we will carry out a careful balancing of interests. In the case of direct marketing, you always have the right to object.

Right to data portability

At your request, we must transfer all personal data we hold about you to you or to another organisation of your choice. You can only exercise this right if the data are processed automatically on the basis of consent or a contract.

Complaints

If you have complaints about the processing of your personal data, we would like to hear from you. Complaints can be submitted by email to info@engh-investments.nl. If your complaint is not resolved to your satisfaction, you may submit a complaint to the data protection authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). For contact details, please visit  www.autoriteitpersoonsgegevens.nl.

Changes to this privacy statement

This privacy statement may be amended. We therefore advise you to review it regularly. The current privacy statement is available on the website www.engh-investments.nl/privacy.