Privacy policy | Brightworld old

Brightworld BV is a fast-growing software company with a lot of knowledge and experience in the digital domain, combining this with passion, creativity, and execution power.

Brightworld takes the handling and protection of personal data very seriously in everything we do. Of course, we comply with the laws and regulations about, from, for this data. Brightworld itself is responsible for the processing of personal data, as described in this privacy policy. This privacy policy applies to employees, (prospective) candidates, representatives of business relations, and users of the Brightworld website. This policy describes what personal data is, why we use this data, describes the purpose of this use, and explains how this is done. It also explains what rights data subjects have and how they work.

We are available at all times for questions about this privacy policy. You can reach us at privacy@brightworld.com.

Which personal data does Brightworld process?

Personal data consists of information that says something directly about one person and can be traced back to that specific person. Brightworld processes your personal data because you use our services and/or because you provide this data to us yourself. Below you will find an overview of the personal data that we process:

First and last name
Address data
Date of birth
Birthplace
phone number
E-mail address
Sex
Iban number
IP address
Copy ID proof
Other personal data that you actively provide, for example, by creating a profile on this website, in correspondence, and by telephone
Information about your activities on our website

Which unique and/or sensitive personal data does Brightworld process?

Particular data will only be processed insofar as this is permitted under the employment contract. We will never process special data other than those of our employees. If Brightworld processes special data, these are the following:

Health
Citizen Service Number (BSN)
Race (based on passport photo only)

Events

Brightworld regularly organizes indoor and outdoor events attended by both employees and business relations. Photos and/or video images are also taken during such events, which are then distributed on the Brightworld website and via social media with the aim of reporting on those events. Insofar as the images concerned can be regarded as personal data, we believe that we have a legitimate interest in publishing them (combined with a brief report of the relevant event). If and insofar as those involved find this objectionable, they can make this known before, during or immediately after the event, and we will of course take this into account.

For what purpose does Brightworld process personal data?

Brightworld processes personal data for the following purposes:

Carrying out our projects and services;
Handling payments;
Sending our newsletter and/or advertising brochure and other marketing and communication tools;
To be able to call or e-mail you if this is necessary to be able to carry out our services;
To inform you about changes to our services and products;
To offer you the opportunity to create an account;
To implement the employment contract with our employees and for the associated recruitment and selection;
Brightworld analyzes your behavior on the website in order to improve the website and to tailor the range of products and services to your preferences;
Brightworld also processes personal data if we are legally obliged to do so, such as data that we need for our tax return.

On what basis does Brightworld process personal data?

Brightworld processes personal data based on the following principles:

Based on a legal obligation; and/or
To implement an agreement that we have with you or with the company where you are the contact person; and/or
Based on a legitimate interest; or
Based on your consent.

Automated decision making

Brightworld does not make decisions based on automated processing on matters that can have (significant) consequences for people. These are decisions taken by computer programs or systems, without involving a person (for example a Brightworld employee).

How long does Brightworld store personal data?

Brightworld does not store personal data longer than is strictly necessary to achieve the purposes for which data is collected. We use the following retention periods for the following (categories) of personal data:

Category Retention period

4 weeks (unless an employment contract is concluded):

Application letters and forms, and correspondence regarding the application.

Up to 2 years after the end of employment or so much longer if required by law:

Personnel files of our employees, employment contracts (and changes). This also includes promotions and performance appraisal reports.
Payroll tax statements and copies of IDs.
Agreements about salary and working conditions.
Name and address details of employees.

2 years after the date of inclusion of the personal data in Brightworld's records:

Personal data of candidates who are not or have not worked for Brightworld but who have shown their interest in Brightworld.

7 years:

Our financial administration

With whom does Brightworld share personal data?

Inside Brightworld
Brightworld only shares personal data within our organization with employees for whom it is necessary to have this data for the performance of their position. Of course, everyone within the organization is subject to secrecy.

Outside Brightworld
Brightworld shares your personal data with various third parties if this is necessary for the execution of the agreement and to comply with any legal obligation. We conclude a processor agreement with companies that process your data on our behalf to ensure the same level of security and confidentiality of your data. Brightworld remains responsible for these processing operations.

In addition, Brightworld provides your personal data to other third parties:

Brightworld clients
Brightworld shares personal data of employees and candidates with clients in the event of a (possible) deployment. When introducing employees and candidates to (potential) clients, we use a Brightworld CV, containing data that those involved have provided to Brightworld for this purpose.
Processors and responsible parties
Brightworld works together with suppliers who process personal data on behalf of Brightworld. Before engaging these suppliers, we review the security measures they have in place and ensure compliance with privacy regulations.

If there is a request for personal data from the police or judicial authorities, Brightworld will only provide it if there is a legal obligation.

What rights do data subjects have?

Brightworld always respects the rights of those involved with regard to personal data. Some rights data subjects can always invoke, while others can only do so under certain conditions. For example, Brightworld cannot grant data subjects' request to delete personal data if we are legally obliged to keep this data for a longer period of time.

Data subjects have the following rights:

Insight. You can view your own personal data or request a copy from Brightworld. You will then receive this in electronic form.
Correction. You can change incomplete or incorrect personal data.
Removal. You have the right to request that Brightworld delete your data. This request will be granted, unless we are legally obliged to keep the data or have compelling interests.
Withdrawal of consent. You always have the right to withdraw your consent to the processing of personal data.
Transfer of data. You have the right to request Brightworld to process personal data with another controller.
Objection. You have the right to object to the processing of personal data by Brightworld or another controller, if you have well-founded objections to this.

The aforementioned rights are only available to data subjects with regard to their own personal data. The rights cannot be exercised for personal data of others. Brightworld therefore reserves the right to request identification from data subjects.

To exercise these rights, you can always contact Brightworld via privacy@brightworld.com. We will contact you within 10 working days. To ensure that the request for access has been made by you, we ask you to send a copy of your proof of identity with the request. Make your passport photo, MRZ (machine readable zone, the strip with numbers at the bottom of the passport), passport number and Citizen Service Number (BSN) black in this copy. This is to protect your privacy. We will respond to your request as soon as possible, but within four weeks.

It is also possible, if you feel that we are not complying with the GDPR, to submit a complaint to the national supervisory authority, the Dutch Data Protection Authority.

How does Brightworld secure personal data?

Brightworld takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure, and unauthorized modification.

If you feel that your data is not properly secured or there are indications of abuse, please get in touch with us at privacy@brightworld.com.

Which cookies does Brightworld use?

Cookies are small information files that are stored on your computer when you visit the website. Cookies make it possible to make a website work properly and to gain insight into visitor behavior on the website. With this information, the web services and your user experience of a website can be improved. Cookies do not endanger the security of your computer. More information about our cookie policy can be found here.

Notification of (possible) security breach

Should you believe that a personal data security breach has occurred, we would appreciate it if you would contact us as soon as possible at avg@Brightworld.com with the subject line 'Breach of Security.

To ask?

You may have questions as a result of this privacy policy. We are ready to answer them. You can always contact the Brightworld head office in Arnhem.

Privacy Policy Brightworld, version 0.1, November 2021