dated January 24, 2025

Privacy statement

Introduction

BCS B.V.

BCS B.V. offers its customers a total solution for HRM & Payroll. A reference to "BCS", "we", "us" or the "Company" is a reference to BCS B.V. and the relevant affiliated company involved in the processing activity.

BCS attaches great importance to your privacy. The personal data we process is therefore handled and secured with the utmost care. When processing personal data, we adhere to the requirements set by laws and regulations, including the General Data Protection Regulation.

This Privacy Statement describes our privacy practices with respect to the activities mentioned in this Privacy Statement. Please read this Privacy Statement carefully to understand how we collect, use, share and process personally identifiable information ("Personal Data"), and what rights and choices you have regarding our processing of your Personal Data. We have prepared a separate Privacy Statement for our employees.

Contact details

BCS B.V. Chamber of Commerce number: 16055073 Het Zuiderkruis 29
5215 MV 's-Hertogenbosch
T: 073 - 594251
E:info@bcs.nl

Questions about this Privacy Statement can be directed to the Data Protection Officer of BCS by e-mail atprivacy@bcs.nl.

Who is processing controller of personal data?

In addition to the processing described in this Privacy Statement, we may also process personal data on behalf of a customer. In those cases, we are not a controller but qualify as a processor on behalf of the customer. In that situation, we enter into an agreement with the customer in which arrangements are made regarding the way in which we process personal data on behalf of the customer. For these processing of personal data, the client is the processing controller.

BCS is the processing controller with respect to your Personal Data as described in this Privacy Statement, unless explicitly stated otherwise.

To be clear, this Privacy Statement does not apply to the extent we process Personal Data in our role as a processor on behalf of our customers such as when we offer various cloud products and services for payroll or other HRM services.

Processing Activities

This Privacy Statement applies to the processing of personal data collected by us when you:

  • Visit our websites where this Privacy Statement is displayed or where a link to this Privacy Statement can be seen;
  • Visits our social media pages;
  • Visiting our office;
  • Receiving communications from us, including emails, phone calls, text messages or faxes;
  • Uses our cloud products and services as an authorized user (for example, as an employee of one of our clients who has given you access to our services) and we are acting as a data controller.
  • Register for, attend and/or otherwise participate in our trainings, events, webinars or contests;
  • Asks us a question by any means.
  • Our websites and services may contain links to other websites, applications and services maintained by third parties. The information practices of such other services or of social media networks that host our branded social media pages are governed by the privacy statements of those third parties. You may review these to better understand the privacy practices of the third parties.

What personal data do we process from you?

We may process the following personal data:

-Personal data that we process when you are a customer or potential customer of ours.
This concerns personal data which is necessary for offering our services, such as: first name and surname (initials), gender, e-mail address (work and private), telephone number (work and private), name and business address of the organization where you work, your function, billing address, and all other information which you provide to us within the framework of our services. We also keep a record of the services you purchase and have purchased and when this took place. We may also record your preferences.

We offer our customers the option of logging into BCS Online or our SaaS Portal via the Website. Before you can use this, you must create an account. To do this, we process your email address and password. We log the use of these portals and keep track of when a particular email address has been logged in.

-Personal data you provide when you contact us
This concerns personal data that you enter on the contact form on our Website or when registering for a training or seminar in our Webshop or the personal data you provide when contacting us by telephone and/or e-mail. This may include, for example, your name, e-mail address and other data you provide when you submit a question, request or complaint.

-Personal data you provide in the context of an (open) job application
When you respond to a vacancy or send an unsolicited application, we may process personal data that you provide to us as part of the application process. This may include your name, e-mail address, information recorded in your CV and/or your motivation and/or application letter, such as data about your professional or academic background (references, grade lists, certificates, etc.) as well as the data you provide during the procedure, including reports of interviews. We may also consult public (business) websites for the purpose of an application procedure, such as LinkedIn and contact references provided by you.

-Personal data that BCS receives or generates through the use of our Website, our Webshop, through our newsletters and through our e-mail invitations.
When you use our Website or read and click on our emails, we may process personal data that tracks how you interact with the information we provide.

The server(s) hosting our Website automatically generates log files containing some information about your Internet connection and computer: your IP address, the name, version and language of your browser, and the name and any version of your computer's operating system. In addition, the date and URL (the address of a file on the Internet) of the page(s) visited are saved. We use this data to display the Website to you and for visitor analysis for the purpose of: improving the content and operation of the Website.

-Personal data you provide in the context of a business relationship that we have with you
Even if you are not our customer, we may process your personal data. This is the case, for example, when you are a supplier to us. In that case, we record, for example, the following personal data: first and last name (initials), e-mail address (work and private), telephone number (work and private), name of the organization where you work, data about the goods and services supplied and their processing.

-Personal data from public sources
When you contact us or when you are a customer of ours, we may process personal data that we obtain from (public) sources such as business websites like LinkedIn, the Trade Register of the Chamber of Commerce and the Land Registry.

Use of cookies

In order for our Website to function optimally and adapt to your preferences, we use so-called cookies. These are small text files containing information about your visit to our Website. Cookies do not alter your computer and do not contain viruses. If you have set your browser not to accept cookies, you may not be able to use (parts of) our website.

We distinguish between necessary, relevant and external cookies. Our necessary cookies do not contain any personal information. They ensure the proper functioning of our website.
The relevant and external cookies do collect personal information. This allows us to improve our website and make it more relevant. Our external cookies also enable you to share pages via social media and to see relevant ads on other websites.

For what purposes do we process your personal data?

We use your personal data for the following purposes.

  • Offering and performing the service (agreement): in the preliminary phase (quotation) and after you have given us an order to provide our services (Payroll administration, HRM administration, time administration, employee self-service, sickness registration, trainings and seminars).
  • To keep interested parties informed about our services, invite them to events and otherwise keep in touch. If necessary, we ask for your consent. You can revoke given consent at any time.
  • Hiring staff: when you apply for a job with us, we process personal data for the purpose of the application;
  • Development and improvement of our website;
  • Developing and improving our services and services;
  • Improve the security of our websites and services;
  • Handling contact and requests for user support;
  • Managing event and/or training registrations and attendance;
  • Assessing compliance with applicable terms of use;
  • Signaling customer opportunities;
  • Registering office visitors;
  • To perform analysis;
  • Comply with legal obligations; We may process your personal data because it is necessary to fulfill a legal obligation imposed on us and/or to comply with norms and standards of our industry. For example, we are required to retain financial data under the General Act on State Taxes.

What is the basis for processing your personal data?

We may only process personal data if there is a legal basis for doing so. If you are a (potential) client of ours we process your personal data because this is necessary for the execution of the agreement we enter into or have entered into with you.

BCS can also process personal data because BCS has a legitimate interest to do so. For example, we have a legitimate interest to bring our services to the attention of our clients or to improve our services. When we process personal data because we have a legitimate interest to do so, we will first carefully check that your interests do not interfere with this.

Finally, we may process your personal data because we have a legal obligation to do so.

If we cannot invoke the aforementioned bases, we may ask you for permission to process your personal data. You have the right to withdraw given consent at any time. The withdrawal of consent does not affect the lawfulness of the processing based on the consent prior to its withdrawal.

As a data controller, we do not process special personal data unless we are required to do so by law. We process special personal data only on condition that such processing is carried out with safeguards such that the privacy of the data subject is not disproportionately affected.

With whom do we share Personal Data?

We may share your personal data with parties that perform certain services on our behalf and process personal data on our behalf as processors. For example, we use (the software of) an external party for hosting the Website, sending newsletters and contracting.

When we engage a processor, we enter into a processing agreement with this party, so that they are contractually obligated to handle your personal data in a careful manner.

Where appropriate, we may pass on your personal data to (intended) legal successors in order to be able to continue all or part of our services. In accordance with applicable law, we will take reasonable steps to notify you of any transfer of Personal Data to an unrelated third party.

We may share your Personal Data with external social media networks, advertising networks and websites that typically act as independent data controllers, allowing BCS to market and advertise on external platforms and websites;

In certain cases, we share your Personal Data with professional advisors who act as processors or joint processors, including lawyers, bankers, auditors and insurers who provide us with consulting, banking, legal, insurance and accounting services, and to the extent that we are required by law to share your Personal Data or to the extent that we have a legitimate interest in doing so.

Finally, we may share your Personal Data with authorized governmental authorities. Only if and to the extent that we are required to do so by law, your Personal Data may be provided to government agencies such as regulators, tax authorities and investigative authorities, for example, if in the case of fraud or illegal activities a request comes from the police.

Is your personal data being processed outside the EEA?

Your personal data is in principle processed exclusively within the European Economic Area. We may use e-mail service providers or hosting parties located outside the EEA. Where appropriate, we take measures to legitimize the transfer of personal data, for example by concluding a transfer agreement based on the Standard Contractual Clauses.

How long do we keep your Personal Data?

We do not retain your personal data for longer than is necessary for the purposes for which the personal data are processed. The retention period we use depends on the purpose for which we process the personal data and whether we are subject to specific legal retention obligations.

If you are a customer or supplier of ours, we will retain your personal data for two years after the end of the agreement we have with you, except for the data covered by the accounting and retention obligation of 7 years.

If you respond to a vacancy or submit an open application to us, we will retain your personal data for 4 weeks after completion of the application process. If you give your consent, we will retain personal data for the purpose of the job application for up to 1 year.

After expiration of the applicable retention periods, your personal data will be deleted. If technical reasons prevent us from completely deleting data from our systems, we will take appropriate measures to prevent further use of that data.

Your rights regarding your Personal Data


Your rights
Of course, you remain in control of your data. You have the right to view, correct or remove your personal data. You also have the right to withdraw consent or object to the processing of your personal data by BCS. In addition, you have the right to data portability.

Your rights are not absolute. In some cases we cannot fulfill your request, for example because a legal obligation opposes this. In such cases we will inform you about this.


How can you exercise your rights?
If you wish to exercise your rights, please contact BCS in writing at info@bcs.nl. Before we process your request, we may ask you to provide additional information to verify your identity.

Your preferences for e-mail marketing messages
If we process your Personal Data for the purpose of sending marketing messages, you may unsubscribe from marketing messages not related to the service agreement with BCS by clicking "Unsubscribe" at the bottom of BCS marketing e-mails.

Please note that opting out of marketing messages does not opt you out of important business messages related to your current relationship with us, such as messages about your subscriptions or event registrations, service announcements and security information.


Your rights in case of BCS as a processor
As described above, we may also process personal data on behalf of a customer. If a customer of BCS has submitted your data to us and you wish to exercise your rights under applicable data protection laws, please contact the customer in question directly. If you still wish to submit your request directly to us, please provide the name of the BCS customer who submitted your data to us. This is because we may only access a customer's data on that customer's instructions. We will forward your request to the customer and, where necessary, support them in responding to your request within a reasonable timeframe.

How do we secure your personal data?

We take precautions - including organizational, technical and physical measures - to protect the personal data we process or use against accidental or unlawful destruction, loss, alteration or unauthorized disclosure or access. These measures ensure an appropriate level of security given the types of processing and the nature of the personal data to be protected.

To this end, we use the method, as prescribed by ISO 27001. This means that we continuously look at how we can improve the security of your data and include this in our improvement cycle. Your data is well protected and every year we make it even better!

You are responsible for protecting your password, restricting access to devices and logging out of our websites after sessions.

Changes to this Privacy Statement.

We may change our Privacy Statement from time to time. At the top of our Privacy
Statement is the date of the last amendment.

Questions

Do you have a question about the processing or security of your personal data? Please ask via the contact form on the website or at info@bcs.nl.

Complaints

You can file a complaint about the processing of your personal data by sending an e-mail to privacy@bcs.nl.

We are committed to working with you to resolve any complaints or concerns you may have regarding the protection of your personal data and privacy. If you believe that we were unable to help you with your complaint or question, you have the right to file a complaint with the Personal Data Authority.