Privacy Policy Barends Media

Barends Media processes personal data of visitors to this website and of clients. This policy explains which data that is, what it is used for, on which legal basis, how long it is kept and what rights you have.

This is an English translation of the Dutch privacy policy. In case of any discrepancy, the Dutch version prevails.

1. Scope of this policy

This policy covers processing for which Barends Media itself is the data controller: the use of this website and contact with (prospective) clients.

For personal data that Barends Media processes on behalf of a client — for example visitor data or form submissions on a website that Barends Media builds or manages — Barends Media acts as a data processor. That processing falls under the data processing agreement with the client concerned and under the client's own privacy policy. Questions about it are best directed to the organisation whose website you visited.

2. Who is responsible

Barends Media
Annie van Hattemtuin 63
1705 NL Heerhugowaard
The Netherlands

Chamber of Commerce (KvK) number: 71220968
Email: info@barendsmedia.nl
Phone: +31 6 24 08 63 84

Barends Media has not appointed a data protection officer, as there is no legal obligation to do so for an organisation of this size and nature. Questions about privacy can be sent using the contact details above.

3. What data is processed, and why

3.1 Contact and quote requests

Data: name, company name, email address, phone number (if you provide it), the content of your message and any attachments.

Purpose: answering your question, contacting you by phone or email, making a proposal or quote and following it up.

Legal basis: performance of, or steps prior to entering into, a contract (Article 6(1)(b) GDPR). For questions that do not lead to an assignment: the legitimate interest of Barends Media in being able to respond to messages and keep a record of the contact (Article 6(1)(f)).

Retention period: up to 2 years after the last contact, if no assignment results from it. If the request does lead to an assignment, the periods under 3.2 apply.

3.2 Clients: execution, administration and invoicing

Data: name and position of contact persons, company and address details, email address, phone number, bank details, project correspondence and login details for systems needed to carry out the assignment.

Purpose: carrying out the agreed work, communicating about the project, invoicing and keeping the financial records.

Legal basis: performance of the contract (Article 6(1)(b)) and a legal obligation (Article 6(1)(c)) insofar as the tax records are concerned.

Retention period: invoices and administrative data for seven years, under the statutory tax retention obligation. Project correspondence and documentation for up to 5 years after completion of the assignment, in connection with possible liability and aftercare. Login details for client systems are deleted as soon as the assignment has been completed.

3.3 Website statistics

Barends Media uses Google Analytics to measure how this website is used. This involves processing a randomly generated user ID, data about your device and browser, your location at city level and your behaviour on the website (pages visited, time on site, clicks and downloads).

Purpose: gaining insight into the number of visitors and the most visited pages, improving the website and our services, and assessing the effectiveness of marketing efforts.

Retention period: two months, after which Google deletes the data automatically.

Transfer: see section 6.

3.4 Server log files

Data: IP address, date and time of the visit, the page requested, the response code and the browser type.

Purpose: ensuring the technical functioning of the website, investigating malfunctions and preventing misuse such as intrusion attempts and spam.

Legal basis: legitimate interest in the security and availability of the website (Article 6(1)(f)).

Retention period: 30 days, unless a log file is needed to investigate an incident.

4. Cookies

This website uses the following types of cookies:

• Necessary cookies. These are needed for the website to work, for example to protect a form against misuse.
• Analytical cookies. These are placed by Google Analytics to measure how the website is used, as described in section 3.3.

You can delete or block cookies via your browser settings. Blocking necessary cookies may cause parts of the website to stop working properly.

5. Who receives your data

Barends Media does not sell personal data and does not provide it to third parties for commercial purposes. Data is only shared with parties needed to provide our services, or when required by law.

At present, this concerns the following categories of recipients:

Data processing agreements have been concluded with these parties, stipulating that they process the data solely on behalf of Barends Media and secure it appropriately.

6. Transfers outside the European Economic Area

Data processed via Google Analytics may be transferred to and stored on servers of Google LLC in the United States. Google is certified under the EU-US Data Privacy Framework, on the basis of which the European Commission has determined that an adequate level of protection exists. In addition, the standard contractual clauses adopted by the European Commission have been agreed with Google.

Harvest, which is used for time tracking and invoicing, also processes data on servers in the United States. That transfer is covered by the standard contractual clauses adopted by the European Commission, which form part of the data processing agreement with Harvest.

7. Security

Barends Media takes appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access and unlawful alteration. These include an encrypted connection (TLS) for the entire website, two-factor authentication on business accounts, limiting access to those who need it for their work, regular software updates and periodic backups.

If you discover a vulnerability or suspect a security issue, Barends Media would appreciate a report via the email address in section 2.

8. Your rights

Under the GDPR you have the following rights:

• Access to the personal data processed about you.
• Rectification of inaccurate or incomplete data.
• Erasure of your data, unless there is a legal or other compelling reason to retain it.
• Restriction of processing, for example while the accuracy of data is being investigated.
• Objection to processing based on a legitimate interest.
• Data portability: receiving your data in a structured, commonly used and machine-readable format.
• Withdrawal of consent, where processing is based on it. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

You can submit a request using the contact details in section 2. To prevent data from ending up with the wrong person, we may ask for additional information to verify your identity. You will receive a response within one month. If a request is complex, this period may be extended by two months; you will then be informed of this within the first month.

Lodging a complaint. If you disagree with the way Barends Media handles your data, Barends Media would like to hear from you first. You also always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.

9. Automated decision-making

Barends Media does not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

10. Changes

This privacy policy may be updated when changes to our services, the suppliers we use or legislation give reason to do so. The current version is always available on this page, with the date of the last change at the top.

Barends Media · KvK 71220968