Privacy statement

1Contact details

HSE Kompas, the sole proprietorship of Dennis Ruumpol, is responsible for processing personal data as described in this statement.

Contact: dennis@hsekompas.nl, +31 6 10 29 29 29. Chamber of Commerce (KvK) number 42028730.

2What data and why

Getting in touch. If you e-mail, call or use the contact form, I process your name, e-mail address and, if you provide them, your organisation, phone number and the content of your message. I use this data to answer your question and, if you wish, to make a proposal. The contact form on this website does not store or send anything itself: it opens your own e-mail program with the message filled in.

Assignments. To enter into and carry out an assignment, I process the contact details of contact persons at the client, and the data needed for quotations, invoices and accounting.

Data you provide in an assignment. When carrying out an assignment, I may view or process personal data of your employees, for example during an incident investigation or a risk inventory and evaluation (RI&E). I do so on your behalf and only for that assignment. Where required, we conclude a data processing agreement for this.

Training. For participants, I process name, organisation and attendance and, where needed, the details for a certificate of attendance.

WhatsApp. If you send me a message via WhatsApp, I process your phone number, your name as shown in WhatsApp and the content of your message, to answer your question. WhatsApp is a Meta service; WhatsApp's own privacy policy applies to your use of WhatsApp. This website does not load anything from WhatsApp: WhatsApp only opens when you click the link.

LinkedIn. If you contact me through LinkedIn, I process the data you share with me there. LinkedIn's own privacy policy applies to your use of LinkedIn.

3Legal bases

I only process personal data where there is a legal basis under the General Data Protection Regulation (GDPR):

• answering your question or preparing an agreement, at your request;
• the performance of an agreement;
• a legal obligation, such as the statutory retention period for tax purposes;
• a legitimate interest, such as keeping business contacts up to date.

4Retention periods

I do not keep personal data longer than necessary. Contact requests that do not lead to an assignment are deleted no later than one year after the last contact.

Data subject to the statutory tax retention obligation, such as quotations, invoices and accounting records, is kept for seven years.

Assignment files are kept as long as needed for the assignment and for any questions or claims afterwards. Personal data I have processed on your behalf is deleted or returned after completion, unless we agree otherwise.

5Sharing with others

I do not sell personal data and only share it where necessary for my services or where required by law. Examples are the hosting provider of this website, my e-mail and storage service, my accountant and the Dutch Tax Administration.

With parties that process personal data on my behalf, I make agreements on security and confidentiality. If a service provider processes data outside the European Economic Area, this only happens with appropriate safeguards under the GDPR.

6This website

No cookies, no tracking, no external services. This website does not place cookies, does not use analytics or advertising services and does not load anything from other parties. Everything, including the PDF of the terms and conditions, is created and loaded from this website itself.

Fonts. The fonts are hosted on this website's own server. No connection is made to Google or other parties for this.

Hosting. The server that runs this website keeps technical log files, such as IP addresses, for security and troubleshooting.

7Security

I take appropriate technical and organisational measures to protect personal data against loss and unlawful use, such as secure connections, password protection and two-factor authentication on my accounts.

8Your rights

You have the right to access your personal data, to have it corrected or deleted, to restrict its processing, to object to processing and to data portability. You can e-mail a request to dennis@hsekompas.nl. I will respond within one month.

If you are not satisfied with how I handle your data, you can lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

9Changes

This privacy statement may be updated, for example when my services or this website change. The date at the top shows when it was last updated.