In order to be able to carry out our activities properly, it is sometimes necessary to process your personal data.
This is the privacy statement of Strukton Groep N.V. and its operating companies Strukton Civiel B.V., and Strukton Rail B.V. (hereinafter referred to individually as ‘Strukton’ or ‘we’). Our registered offices are at Westkanaaldijk 2, 3542 DA Utrecht, the Netherlands. This privacy statement applies for each of the aforementioned entities. Each entity is individually responsible for the data processing referred to in this statement, in as far as not provided otherwise in this statement. The individual entities do not have access to each other’s data.
Strukton respects your privacy as a visitor to our website. In order to be able to perform our activities on our website properly, it is sometimes necessary to process your personal data. We always do this with care and in compliance with laws and regulations in the field of protection of personal data. This privacy statement applies to the processing of all data that Strukton gathers when you visit our website, that you leave on our website and that you upload to our website. This privacy statement explains which data are processed, what we process your data for and what your rights are. The privacy statement may be changed from time to time. We inform you of any changes before they enter into force.
Processed data, purpose of and grounds for processing
Personal data are all data that provide information on an identified or identifiable natural person. A natural person who can be identified directly or indirectly is regarded as identifiable. We use the data that we gather when you visit our website, that you leave on our website and that you upload on our website for the purposes and on the basis of the statutory grounds described below.
Visiting our website
If you visit our website, we will process data, independently or jointly, including your IP address and data on your activities on our website, such as your clicking behaviour, internet browser and device type. We do this partly by means of cookies. More information on the operation of cookies, the purposes for which we use them and how you can withdraw consent for the cookies placed is available under ‘Cookies’. We use the above data:
- to analyse how visitors use this website; and
- to coordinate the content of this website and advertisements on this website, social media or third-party websites with your interests (profiling). We do not link these data to your name, address, email address and the like, if we know these.
Applying for jobs via our website
If you apply for a job via our website, we ask you to provide the necessary information, such as your name, telephone number, email address, date of birth and CV. Your data are used only for the performance of the recruitment and selection procedure at Strukton.
We process your personal data in relation to the justified interests described above. On the grounds of reasons relating to your specific situation, you have the right at all times to object to this processing (see ‘Your rights’ below).
Term for saving data
Strukton does not save your personal data for longer than is necessary. The term for which your personal data are saved depends on the purposes for which these data are processed and on the applicable statutory term for saving data. Strukton does not keep the data that you have provided for your job application any longer than is necessary, unless you have given permission for these data to be kept for longer.
For the above purposes, we use supporting or additional services of third parties, such as IT suppliers and suppliers of recruitment systems. We contract processor’s agreements with companies that process your data on our instructions, which oblige them to protect your personal data adequately and to process these only in accordance with our instructions. Strukton remains responsible for this processing. Strukton does not provide your personal data to third parties. We do this only with your explicit consent. Strukton does not sell your data to third parties for marketing, sales or other business activities.
Strukton treats the processing of your data with the greatest possible care. We continually take appropriate technical and organisational measures to protect your data against abuse, loss, unauthorised use, unwanted disclosure and unauthorised changes. This takes place partly through the IT security policy and by making use of secure storage and connections. These measures comply with the current statutory requirements and guidelines.
You can exercise all rights that accrue to you under the current privacy legislation, including (A) viewing your data, (B) rectifying your data, (C) erasing your data, (D) restricting processing of your data, (E) the right to data portability and (F) the right to object to processing, by contacting us (see ‘Contact’ below).
(A) Right to access
You may ask us whether we process your personal data. If this is the case, you can access these data in the form of a copy.
(B) Right to rectification
You have the right to rectify your personal data if these are incorrect or incomplete. We will correct inaccurate personal data and supplement incomplete personal data on request.
(C) Right to be forgotten
You have the right to arrange for erasure of your personal data. This means that we will then delete your data. Your personal data will only be erased in certain cases that are prescribed by law and are listed in Article 17 of the General Data Protection Regulation (GDPR), such as when your personal data are no longer necessary for the purposes for which they were originally processed or when they have been processed unlawfully.
(D) Right to restrict data processing
You have the right to arrange for restriction of the processing of your personal data. This means that we will suspend processing of your data for a particular period of time. Circumstances that can give rise to this include situations in which the accuracy of your personal data is contested, but we need some time in order to verify their accuracy or inaccuracy. This right does not mean that we cannot continue to save your personal data. We will let you know when the restriction is lifted.
(E) Right to data portability
Your right to data portability means that you may request that you receive your personal data in a structured, customary and machine-readable form, if this is technically possible, and can transfer these to another party responsible for processing. On request, and if this is technically possible, we will then transfer your personal data directly to the other party responsible for processing.
(F) Right to object
You have the right to object to the processing of your personal data. This means that you can request that we do not process your personal data any longer. This applies only if ‘justified interests’ constitute the legal grounds for the processing (see ‘Processed data, purpose of and grounds for processing’ above). If you exercise this right, we will no longer process your personal data for these purposes.
Withdrawal of consent
You also have the right to withdraw any consent for the processing of your data, for example if you have given us permission to keep your job application data for longer and nevertheless wish to withdraw this at a later date. You may contact us for that purpose (see ‘Contact’ below). More information on withdrawing your consent for cookies and similar technologies that we use when you visit our websites is available under ‘Cookies’.
Questions, comments or complaints
If you have any questions, comments or complaints about this privacy statement, please feel free to contact us (see ‘Contact’ below). If your problem is not solved to your satisfaction, you have the right to submit a complaint to the competent supervisory authority. In the Netherlands, this is the Dutch Data Protection Authority (DPA). This can be done via the following link: https://autoriteitpersoonsgegevens.nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons.
If you wish to exercise your rights or have questions, comments or complaints about this privacy statement, you can send us a message at email@example.com.
If you wish to contact the Data Protection Officer of the relevant entity, you will find the contact details of the Data Protection Officers of each entity on this page.
In order to verify that the request to exercise your rights was actually made by you, we may ask you to provide additional information necessary to confirm your identity. We will respond to your request as soon as possible, and you will in any event receive an initial response within four weeks.