Training institute Barber School Amsterdam BV, which is responsible for the processing of personal data as described in this privacy statement, collects personal data from students, visitors, visitors to its website, and employees in the context of its activities. Barber School Amsterdam BV is located at Mr. Treublaan 18, 1097 DP Amsterdam, the Netherlands (phone number 0031 20 – 362 74 49) and Molslaan 92a, 2611 RP in Delft, the Netherlands (phone number 0031 15 – 214 81 56) with general mailing address: Barber School Amsterdam BV, postbus 10044, 3004 AA Rotterdam.
Barber School Amsterdam BV has appointed a Data Protection Officer. If you have any remarks and/or questions regarding your privacy at Barber School Amsterdam BV, you may contact Mrs. W. Dries, using the contact details above.
When do we collect your personal data?
In the following cases we are allowed to store and process your personal data.
– If you have given us permission for the processing of your personal data for one or more specific purposes;
– If the processing is necessary for the implementation of the agreement you are party to, or to take action at your request before the conclusion of an agreement;
– If processing is necessary to comply with a legal obligation we are subject to;
– If the processing is necessary to protect your or other persons’ vital interests;
– If the processing is necessary for the fulfillment of a task of general interest or of a task in the exercise of the public authority, which is entrusted to us;
– If the processing is necessary to serve the legitimate interests of us or of a third party, except when your interests or the fundamental rights and the freedom that require protection of your personal data outweigh those interests.
1.2 Barber School Amsterdam BV only uses the basis of legitimate interest in the camera surveillance images to protect your and our interests
1.3 You are not obligated to provide all requested data to us, however, not (fully) providing the requested personal data may have consequences for the conclusion and/or implementation of the agreement.
a. to protect the privacy of data subjects, whose personal data are processed, against the misuse of those data and against the processing of incorrect data;
b. to prevent processing of personal data for a purpose other than the purpose for which they were collected;
c. safeguard the rights of the data subjects.
3. WHO IS RESPONSIBLE FOR YOUR DATA?
4. WHAT PERSONAL DATA DOES BARBER SCHOOL AMSTERDAM BV PROCESS?
4.1 We can collect and process data in the following ways:
a. Information that you provide to us yourself; and
b. Information we obtain by following the training programme or the visit to our website(s).
4.2 Below, you will find an overview of the personal data that we potentially process depending on your specific situation:
a. names, first names, initials, titles, gender, date of birth, address, postal code, city of residence, phone number, and similar data intended for communication, as well as bank account number of data subject;
b. an administration number that does not contain any other information than meant under a;
c. place of birth;
d. data as meant under a, of parents, guardians, or caretakers of data subject;
e. data necessary with regard to the health or well-being of data subject;
f. data relating to the nature and course of the training, as well as study results;
g. data related to the organisation of the training and providing or making available teaching materials;
h. data related to the calculation, recording, and collection of registration fees, school and tuition fees, and contributions or reimbursements for teaching materials and extracurricular activities.
i. photo and video footage, with or without sound, of activities of the organisation or institute;
j. data of teachers and supervisors, to the extent that this data is relevant for the organisation of the institute or organisation and the provision of education, study programmes, and training;
k. camera footage (without sound) of visible surveillance cameras;
l. other data than mentioned above of which the processing is required under or necessary in view of the application of the law.
5. FOR WHICH PURPOSE DOES BARBER SCHOOL AMSTERDAM BV USE YOUR DATA?
5.1 The processing of personal data of data subjects takes place for the benefit of:
a. the organisation or the provision of education, the guidance of course participants or providing study advice;
b. providing or making available teaching materials;
c. to publish information about the organisation and teaching materials as meant under a and b, as well as information about the course participants, meant in the first paragraph, on the website;
d. to announce the activities of Barber School Amsterdam BV on its own website;
e. the calculation, recording and collection of registration fees, school fees and contributions or fees for teaching materials and extracurricular activities, including placing claims into the hands of third parties.;
f. to create a safe environment for Barber School Amsterdam BV employees and course participants;
g. dealing with disputes and conducting accountant audits;
h. (research aimed at) quality improvement in education; and
i. the implementation or application of another law.
5.2 Marketing Activities. We gladly make offers for our products and services to our business relations (also after termination of the contract). We do so by phone, email, or mail, if you have given written permission for this.
5.3 Processing of your data on the Barber School Amsterdam BV website. We collect and use your personal data on our website, primarily to communicate with you. Your data is also used for research and analysis for the purposes of improving our services and our website. In certain cases, we may also use your data on our website to be able to send (commercial) information per email about the activities of Barber School Amsterdam BV, provided you have given written permission thereto.
5.4 If we have entered into an employee or staff relationship with you, in order to comply with laws and regulations, including but not limited to identification, labour laws, tax and social security laws, fraud prevention, and national and international sanction legislation. Barber School Amsterdam BV also processes personal data if we are legally required to do so, such as data we need for our tax return.
6. ACCESS TO PERSONAL DATA
6.1 Subject to relevant legal provisions to that end, the personal data can only be accessed by:
a. those, including third parties, who are charged with or manage the activities related to the processing of data or are necessarily involved therewith;
7. PROVISION TO THIRD PARTIES
7.1 Barber School Amsterdam BV does not sell your data to third parties and only shares them with other entities of Barber School Amsterdam BV, its clients, sub-contractors (such as data processors) who offer services or carry out assignments on behalf of Barber School Amsterdam BV, suppliers, the authorities and other business relations if this is necessary for the execution of our agreement. We enter into a data processing agreement with companies who process your data on our behalf to ensure the same level of protection and confidentiality of your data. We also share your personal data in all other cases where we can be obliged to do so, for instance by a court order or a court ruling.
- The provision of the personal data takes place on the basis of a legitimate interest, your permission, legal obligation and/or to execute the agreement in accordance with the goals as mentioned above Your personal data will not be transmitted outside the EU.
8. HOW LONG DO WE RETAIN YOUR DATA?
Barber School Amsterdam BV does not retain personal data for longer than is necessary for the purposes of the processing and in accordance with the statutory retention periods. Camera footage will not be kept longer than necessary. The guideline for destroying camera footage is maximum 4 weeks.
9. SECURITY AND CONFIDENTIALITY
9.1 We ensure appropriate technical and organisational measures to prevent loss or unlawful processing of personal data. These measures ensure, taking into account the state of the art and the costs of implementation, an appropriate level of security, taking into account the risks involved in the processing and the nature of the data to be protected. The measures are also aimed at preventing unnecessary collection and further processing of personal data.
9.2 In the event of electronic processing of personal data, access to certain parts of the personal data or to all personal data will be granted through an encryption and password protection to authorised persons, to the extent that their activities so require.
9.3 Anyone who is involved in the implementation of this policy and who is given access to personal data of which they know or can reasonably suspect the confidential nature, and for whom there is no obligation to observe confidentiality by virtue of an appeal, job title or statutory provision with regard to the personal data, is obliged to observe secrecy in respect thereof. This does not apply if any statutory provision obliges him to disclose or if, in the implementation of this policy, the necessity of disclosure arises from his duties.
9.4 We shall inform the Dutch Personal Data Protection Authority without delay of a data breach that leads to a significant change of serious negative consequences or has significant negative consequences for the protection of personal data.
9.5 We will inform the data subject(s) without delay about a data breach if the breach is likely to have negative consequences for its privacy.
9.6 Anyone involved with the implementation of this policy and is made aware of a (potential) data breach is required to notify Barber School Amsterdam BV thereof without delay.
10. ACCESS, RECTIFICATION OR ERASURE OF DATA
You have the right to access, rectify, or erase your personal data. In addition, you have the right to withdraw any consent you have given for the processing of data or object to the processing of your personal data by Barber School Amsterdam BV, and you have the right to data portability. This means that you can submit a request to us to send the personal data we have from you in a computer file to you or another organisation mentioned by you. You can submit a request for access, rectification, erasure, data portability of your personal data or a request to withdraw your consent, or object to the processing of your personal data to Barber School Amsterdam BV, postbus 10044, 3004 AA Rotterdam. In principle, we shall not charge costs for the handling of your aforementioned requests, unless your requests are excessive, manifestly unfounded, or in case you request additional copies in your right to access.
In order to ensure that the request for access has been made by you, we request that you include a copy of your proof of identity with the request. In this copy, be sure to black out your passport photo, MRZ (machine readable zone, the strip of numbers at the bottom of the passport), passport number, and Citizen Service Number (BSN). This is to protect your privacy. We will respond to your request as quickly as possible, but within four weeks.
12. FORMER COURSE PARTICIPANTS
12.1 We may, by way of your written permission, decide to proceed to setting up data processing relating to former course participants. The processing of personal data of former course participants is only done for the purposes of:
a. staying in touch with former course participants;
b. sending information to former course participants;
c. the calculation, recording and collection of contributions and gifts, including the placing into the hands of third parties of claims, as well as other activities of
internal management; and
d. the handling of disputes and conducting accountant audits.
12.2 No other personal data is processed than:
a. names, first names, initials, titles, gender, date of birth, address, postcode, city of residence, phone number, and similar data required for communication, as well as bank account number of data subject;
b. a number for record keeping that contains no other data than meant under a;
c. data related to the nature of the study programme and the period during which the former student participated in the study programme; and
d. data with a view to calculating, determining, and collecting contributions and gifts.
13. INFORMATION OBLIGATION
14. AUTOMATED DECISION-MAKING AND COOKIES
14.1 Barber School Amsterdam BV does not take decisions based on automated processing on matters that can have (significant) consequences for data subjects.
15. QUESTIONS, REMARKS, OR COMPLAINTS
If you have any questions, comments or complaints about the protection of your personal data by Barber School Amsterdam BV, you can contact us in writing at the above address. You can also contact us by phone at one of the phone numbers listed above.
Barber School Amsterdam BV also points out that you have the possibility to lodge a complaint with the national supervisory authority, the Dutch Data Protection Authority. You can do so via the following link: https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons
17. OTHER PROVISIONS