1. General Information
What’s the Price complies with the General Data Protection Regulation (GDRP) when dealing with personal information. This policy does not limit or exclude any of your rights under the regulation. If you wish to seek further information on the regulation, see https://www.eugdpr.org/.
Personal data refers to any information relating to an identified or identifiable natural person (“data subject”), whether this identification can be made directly or indirectly, by means of identifiers such as your name and e-mail address.
As personal data controller, we commit ourselves to protecting the privacy of our website visitors and users of our services with respect to the processing of your personal data.
As personal daWhere we collect and process your personal data, we will limit the collection and retention to what is adequate, relevant and necessary for our purposes. This data will be kept in a form which allows for your identification no longer than necessary for the purpose for which we process your personal data. We refer to this as data minimization.
If What’s the Price gets involved in a merger, acquisition or sales of assets, then we will still highly value your personal data and we will inform you before we transfer the personal data to the other party.
Our policy provides you with the legal basis for the collection of your personal data let you know how long personal data is stored and the reasons why, and how in some circumstances, they are necessary to retain. The length of this retention and how you may choose to request that we delete some or all your personal data and the consequences of the deletion are explained in this policy.
We try to ensure that the users of our services always have an open line of communication with us. You can contact us at any time if you have any questions, queries or requests about your personal data, if European law applies to the processing of your data, about your right to request access to, modify, remove or export your data, or object to our processing of your data. We appreciate if you reach out to us first before you approach any supervisory authorities or courts.
Would you like to contact What’s the Price? You can reach us in various ways. Please find our contact details and social media channels below.
|Company||What’s the Price International B.V.|
5328 AA Rossum, The Netherlands
|Data protection officer||Nico Bontenbal|
|What’s the Price (WTP)|
3. Personal data
What’s the Price processes your personal data because you use our services and because you provide them yourself. In order to execute the agreement, we need the following personal data from you.
Your company name is stored because we rather approach you with your business name than by your client number. The postal address is necessary for the preparation of invoices or to get in contact with you.
Business email address
We retain your e-mail address, so we can contact you about your account. Additionally, we use your e-mail address to keep you up-to-date via What’s the Price updates about new developments of What’s the price. Of course, we provide you the possibility to unsubscribe from our What’s the Price updates. At the bottom of every mailing you will find the possibility to change your (contact) details or to unsubscribe. We can also use your email address to send you an (electronic) invoice.
Our customers receive their (electronic) invoice by email. The payment details are solely used to meet the legal obligations and for the execution of the agreement.
We retain the contact data of our customers to get in contact with them. Additionally, we retain the contact details of our potential customers. These potential customers are customers who showed their interests in our service in the past. We retain their contact data to contact them in the future. Of course, we will only retain their contact data with their explicit consent.
3.1 The processing of other (personal) data
Additionally, we collect some personal data that is not intended for the execution of an agreement. This data is processed based on our legitimate interest or with your permission. It concerns the following data.
Work related personal data and personnel administration
If you apply for a job vacancy at What’s the Price, we are interested in your abilities and skills. We check this based on your CV, motivation letter, portfolio or the submitted job application. In case you are unfortunately not accepted, we will delete your personal data within four weeks. With your explicit consent we can retain your CV for one year, and then we can inform you if we have a new job vacancy available.
Other personal data
It sometimes happens that we receive additional personal information via social media or via e-mail that we did not ask for. If we do not need this personal information to help you further, we will delete it – as far as it is technically possible.
4. The purpose of the processing of the personal data
We process your personal data based on one or more of the following legal foundations:
- The execution of an agreement;
- The compliance of a legal obligation;
- The compliance of a legal obligation;
Of course, we do not process your personal data without underlying reasons. We need your personal data for the following reasons:
- Providing you access to our website and services;
- The engagement and execution of the agreement;
- Contact you if necessary;
- Sending our What’s the Price updates to you;
- Managing your compliant, to ensure a long and happy business relationship;
- The processing of reactions on our vacancies;
- For the testing and development of our service;
- The security of our services and the combating of fraud, i.e. someone else cannot act as you.
5. Special and/or sensitive personal data
What’s the Price does not process special or sensitive personal data. We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us via firstname.lastname@example.org. If we become aware that we have collected personal data from children without verification of parental consent, we take steps to remove that information from our servers.
6. Automated decision-making
What’s the Price does not make decisions based on automated processing about matters that can have significant consequences for their customers. These automated decisions are decisions taken by computer programs or systems, without a person (for instance, an employee of What’s the Price) involved. Profiling is the categorization of persons in distinct categories solely based on their personal data. What’s the Price does not categorize persons based on profiling.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
More information about our retention periods can be found here.
8. Sharing personal data with third parties
What’s the Price does not sell your personal data with third parties and provides these only if this is necessary for the execution of our agreement with you or to comply with a legal obligation. With the companies that process your data in our order, we conclude processor agreements to ensure the same level of security and confidentiality of your data.
Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.
9. Transfer of data
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.
Google may provide this information to third-parties if they are legally enforced, or to which extent third-parties process the data of Google. Google shall not combine your IP-address with other data they already possess. The IP tracking in Google Analytics is anonymised by us. We will only insert these cookies with your permission. If you did not accept the use of such cookies, then they will not be inserted. The information is transmitted and stored to and through Google on servers in the United States. Google needs to comply with the Privacy Shield principles and is connected by the Privacy Shield program of the U.S. Department of Commerce.
YouTube - Google sets a number of cookies on any page that includes a YouTube video. While we have no control over the cookies set by Google, they appear to include a mixture of pieces of information to measure the number and behaviour of YouTube users, including information that links your visits to our website with your Google account if you are signed in to one. Information about your use of our website, including your IP address, may be transmitted to Google and stored on servers in the United States. This cookie does not identify you personally unless you are logged into Google, in which case it is linked to your Google account. The cookies names are as follows: 1P_JAR, APISID, DSID, GPS, HSID, IDE, NID, PREF, SAPISID, SID, SIDCC, SSID, VISITOR_INFO1_LIVE, YSC. The expiry date of these cookies vary from the end of the session up to two years.
11. View, modify or delete data
You have several rights under data protection laws in relation to your personal data. You have the right to:
Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which overrides your rights and freedoms.
Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
If you want to exercise either of the above rights, email us at email@example.com. Your email should provide evidence of who you are and set out the details of your request (e.g. the personal information, or the correction, that you are requesting). Before you can exercise these rights, we will need evidence to confirm that you are the individual to whom the personal information relates.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made several requests. In this case, we will notify you and keep you updated.
12. The protection of the personal data
What's the Price takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. We make every effort to conduct out business in a fair and responsible manner. In the unlikely event of a disagreement or complaint about the way that your personal data is handled, please contact us at firstname.lastname@example.org.