This tool/website is an initiative of the Ministry of Foreign Affairs, and is developed by MVO Nederland on behalf of the Dutch Ministry. CSR Netherlands handles the data of users of this website with care. The personal details that you enter on the website will only be used for the purpose indicated, such as responding to requests for information. We adhere to the privacy legislations.
CSR Netherlands is smoothing the way towards the new economy. Together with businesses, we are working on climate-neutral, circular, inclusive business models with fair supply chains. CSR Netherlands is the accelerator for businesses heading towards the new economy. CSR Netherlands considers the privacy not only of its partners, flex-workers and employees but also of its associates and visitors to its website to be important. This is why CSR Netherlands handles your personal details with care. The CSR Netherlands Foundation (Stichting MVO Nederland) has its offices at Arthur van Schendelstraat 500 in Utrecht, The Netherlands.
WHEN DO WE PROCESS PERSONAL DATA?
When you register or sign up for one of our products, services or activities, when you order a publication, subscribe to a newsletter, participate in an event, make use of our digital services, make contact with CSR Netherlands or use our services in any other way, the personal data you provide is recorded and processed under the responsibility of CSR Netherlands.
WHAT DATA DO WE PROCESS?
We process the following data:
- your registration data: this is the data that we ask you to complete when registering as a partner or for one of our products or services, such as your name, e-mail address, telephone number, position, name of employer/company and their business address. We are only permitted to use your e-mail address to send you offers relating to CSR Netherlands services if you have provided your explicit consent.
- data concerning equipment used, such as a unique device ID.
FOR WHAT PURPOSES DO WE PROCESS PERSONAL DATA?
We process your personal data:
- In order to enter into and execute an agreement, for example to supply the products, services or information you have chosen;
- In order to invoice, if you have purchased a service or product;
- In order to send you newsletters, surveys and other notifications;
- In order to provide you with offers of CSR Netherlands services and products, providing you have given explicit permission;
- In order to enable logging on via social media (offered by third parties);
- In order to improve CSR Netherlands products and services and align them more effectively with your use or interests;
- In order to meet a statutory obligation.
CSR Netherlands processes your personal data exclusively for the purpose for which you provided the data, unless you have explicitly given permission for your personal data to be used for other purposes.
WHEN DO WE PROVIDE YOUR PERSONAL DATA TO THIRD PARTIES?
CSR Netherlands will only provide your personal data to other parties in the following cases:
- In order to perform the service you have requested;
- If the data is public;
- If CSR Netherlands is obliged in accordance with legislation and regulations to provide specific information.
WHAT ABOUT LINKS TO THIRD-PARTY WEBSITES?
If you reach a third-party website via the CSR Netherlands website or any of its products or services, the conditions and privacy rules of the third party concerned will apply. CSR Netherlands does not monitor the activity of such websites or third parties and is not liable for the content, privacy, security and regulations of the websites to which CSR Netherlands includes links. CSR Netherlands therefore advises you to acquaint yourself with the privacy conditions, security and regulations of the third-party before providing them with personal and other information.
HOW CAN YOU WITHDRAW YOUR PERMISSION?
If you no longer wish to receive marketing and promotion messages about our products and services or general news reports via e-mail, you can opt out by following the instructions about this included in every e-mail or by sending an e-mail to firstname.lastname@example.org. We will comply with your request within a period of four weeks after receiving it.
Please note that we may continue to send mailshots for other reasons, for example within the context of your partnership.
WHAT ARE YOUR RIGHTS?
You have a right of access to your personal data and the right to request correction, deletion or transfer of your personal data. You also have the right to object to the processing of your data.
If you would like to know which personal data about you CSR Netherlands processes, you can submit a written request for access. Your request will be processed within four weeks of receipt. You can consult your personal data that CSR Netherlands has collected and, if desired, have it changed by sending a request to: email@example.com. We will respond to your request within four weeks. CSR Netherlands is entitled to ask you to prove your identity if you request access or modification. If you disagree with the way in which CSR Netherlands is handling your personal data, you can submit a complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
HOW LONG DO WE RETAIN YOUR DATA?
CSR Netherlands retains your personal data for as long as necessary for the purposes stated above or to meet statutory (retention) obligations.
HOW DO WE DEAL WITH COOKIES?
HOW DO WE DEAL WITH REPORTS ABOUT SECURITY WEAKNESSES IN OUR SYSTEMS?
CSR Netherlands applies a responsible disclosure policy in which we outline how you can report your findings about the security of our systems and how we deal with this. You can find the responsible disclosure policy below the privacy statement.
CHANGES TO THIS PRIVACY STATEMENT
CSR Netherlands has the right to change its Privacy Statement. If any substantive changes are made, we will announce this via the website www.mvonederland.nl or one of the websites managed by CSR Netherlands. We will also ask you, as the user, to agree to the amended Privacy Statement. If you do not wish to confirm your agreement, your user account will be blocked and/or discontinued by CSR Netherlands. If you have any questions in the light of this Privacy Statement, you can contact firstname.lastname@example.org.
Responsible disclosure policy
CSR Netherlands considers the security of its systems to be extremely important. Despite our efforts to ensure the security of our systems, weaknesses may occur. If you notice a weakness, you can report it to us.
If you have found a weakness in one of our systems, we would like to hear from you so that
we can take measures as quickly as possible. We would very much like to work with you in order to protect our customers and our systems more effectively.
This is what we would like you to do:
- E-mail your findings to email@example.com.
- Do not make inappropriate use of the problem, for example by downloading more data than necessary in order to demonstrate the breach, or by viewing, deleting or modifying third-party data.
- Do not tell others about the problem until it has been resolved and delete all confidential data obtained via the breach as soon as the breach has been rectified.
- Do not use attacks on physical security, social engineering, distributed denial of service, spam or third-party applications.
- Provide sufficient information in order to replicate the problem so that we can resolve it as quickly as possible. Generally, the IP address or URL of the system affected and a description of the weakness is sufficient, although more information may be necessary in the event of more complex weaknesses.
What we promise:
- We will respond within three days of your report with our assessment of the report and the expected date by which it will be resolved.
- If you have kept to the above conditions, we will not take legal action against you with regard to the report.
- We will handle your report confidentially and will not share your personal data with third parties without your permission unless this is necessary in order to meet a statutory obligation. It is possible to submit your report under a pseudonym.
- We will keep you informed on progress in resolving the problem.
- In reporting about the problem, we will, if you wish, cite your name as the discoverer.
- We strive to resolve all problems as quickly as possible and are happy to be involved in any publication about the problems after it has been resolved.
Our policy is subject to a Creative Commons Attribution 3.0 Licence. The policy is based on the Floor Terra model policy.