MODEL PRIVACY STATEMENT

1. Introduction

Kapita Foundation attaches great importance to careful and safe handling of privacysensitive information of its website visitors, candidates, employees and selfemployed persons.
Kapita Foundation has therefore prepared this privacy statement. Kapita Foundation treats and secures the personal information entrusted to it with the utmostcare. With this privacy statement, Kapita Foundation gives you insight into how your personal data deals with yourpersonal data in common situations in accordance with the General Data Protection Regulation (GDPR).

2. Who are we

Kapita Foundation with Chamber of Purchase Trading number 66951682 is controller within the meaning of the GDPR and thus controls the processing of the personal data and determines the purpose and resources for processing. Kapita Foundation sometimes engages other companies to perform services for it. Kapita Foundation remainsresponsible for the processing of your personal data in these situations. With these companies, Kapita Foundationmakes contractual agreements on how to handle your personal data, so that your privacy is guaranteed.

3. Technical information

When you visit our website, the website automatically collects information about the (devices of) our visitors. This includes, for example, information about which device the website is visited with, the IP address of your device, the IP address of your ISP, the operating system you use, date and time of your visit, the internet address of the website from which you directly linked, the pages you visit and the information you have viewed on the website, the (geo) location where you are located and the material you send to and download from
the website. We use this technical information forthe management of the website and to improve the quality and effectiveness of our website.

4. Cookies

Kapita Foundation uses cookies and web statistics. This allows us to see how visitors use our website. This
allowsus to better adapt our website to the usage preferences of our visitors. Cookies are small pieces of information stored onyour computer. On a return visit to our website, these small pieces of information will be recognized, which makes yourvisit easier.

5. When do we collect your personal data?

In the following cases, we are allowed to keep and process your data:

• If you have authorised Kapita Foundation to process your personal data for one or more specific purposes.
• If the processing is necessary for the implementation of an agreement to which you are a party, or to take measures atyour request before the conclusion of an agreement;
• If processing is necessary to comply with a legal obligation based on Kapita Foundation;
• If the processing is necessary to protect your or other people’s vital interests;
• If processing is necessary for the performance of a task of general interest or of a task in the course of the exercise ofpublic authority that is at Kapita Foundation has been ordered;
• If processing is necessary to defend the legitimate interests of Kapita Foundation Or a Third Party, except whereyour interests or fundamental rights and fundamental freedoms that protect your personal data outweigh those interests.

6. Why do we collect your personal data

Your personal data will be used to best provide the services offered to you, including broadcasting, secondment, payroll,payroll, payroll, employability and recruitment & selection. Kapita Foundation uses your data for the followingpurposes:

• Bring together supply and demand in the labour market.
• To inform you of interesting offers of products and services from Kapita Foundation and from third parties.
• To be able to assess your suitability and availability in connection with a mediation to permanent or temporary work or an assignment, while also using test results from our learning company;
• To enter into and maintain an employee or personnel/mediation relationship with you and to carry out the relevant administration.
• To fulfil our reintegration obligations and to comply with (the government-imposed purpose) to help people with a largedistance from the labour market get to work.
• To be able to conclude an assignment with the client in an agreement with the client and to maintain and honor the agreement with the client.
• For the benefit of our clients, process data in the context of a screening.
• To promote your personal development and employability, including training and training.
• Quality purposes such as certification.
• For compliance with laws and regulations, but not limited to identification, labour legislation, tax and social security legislation, combating fraud and national and international sanctions legislation.

7. What personal data do we collect from you?

Kapita Foundation can process the personal data below from you as a job seeker, and/or business relationship. You are responsible for enacting the personal information you have provided to be correct and up to date.

Job seeker, candidate or client
• NAW details, email address, phone number and other contact details
• Birth data, age, gender
• Nationality, BSN & ID (copy id), possible work permit
• Curriculum vitae (cv), information on training, internships and work experience
• Other information that is important in the context of the assessment of the candidate’s suitability.
• Voluntary other content that you imagine (video, photo)
• Data other than those referred to above, which requires or is necessary for the purposes of the law

8. Third parties

Kapita Foundation may transfer your personal data to other entities of Kapita Foundation, its clients, subcontractors (e.g. data processors) who provide services or carry out contracts on behalf of Kapita Foundation, suppliers, government agencies and other business relationships. And in all other cases where we can be required to do so,for example by a court order or a court order. The provision of personal data is based on a legitimate interest, legalobligation and/or in implementation of the agreement in accordance with the objectives set out in

“Why do we collect your personal data?”.
Your personal data may be transferred outside the Netherlands. Kapita Foundation has taken the necessary measures to ensure that the personal data transmitted is adequately protected. We never pass on personal data to third parties with which we have not entered into a processing agreement.

9. Your rights

We value the fact that you can easily use your rights regarding the processing of your personal data. If you wish to use one of the rights you have and named below, please contact us as described below.

Inspection and/or change data

You can request us at any time via address [email protected] or by telephone number +31 162 796 51 9 or by letter Zandheuvel 52-B 4901 HW Oosterhout requests to indicate which (categories of) data we process from you. For what purposes this happens, from what source the data comes from, and what retention times are used by us.

In addition, you can contact us at any time to supplement, improve or delete your information. If it turns out that we have provided the wrong personal data of you, we will rectify this.

When we have changed your personal information, we will inform you.

Restrict data processing

If you do not agree with the content of the data we keep from you, you may request that your data be temporarily processed. We will then wait for your data to be distributed until, in your opinion, it is back in order. You can submit a processing restriction request at any time via address [email protected] or by letter on Zandheuvel 52-B 4901 HW Oosterhout. When we limit the processing of your personal data, we will inform you.

Right to transfer data

You can request the personal data we keep about you in a structured, common and machine-readable form via address [email protected] or phone number +31 162 796 51 9. You are completely free to transfer this information to third parties.

Right to be forgotten

If you no longer wish to use our services, you can request the removal of all your personal information. You can ask us at any time via address address [email protected] or telephone number +31 162 796 51 9 or by letter on Zandheuvel 52-B 4901 HW Oosterhout to delete all your data.You can also revoke your consent to process your data at any time. We will cease the processing of your personal data for which you have granted permission. However, with drawing your consent does not affect the processing that has already taken place.

Procedure, response period and costs

We try to process your requests as mentioned in this chapter as soon as possible, but no later than one month. We are required to verify your identity before your requests can be made be met. Your requests will be handled electronically in principle, unless it is not possible, or you request otherwise. In principle, we will not charge you for the handling of your aforementioned requests, unless your requests are excessive, manifestly unfounded or if you request additional copies from the right to access.

10. Security

Kapita Foundation is committed to making sure your personal data is optimally protected from unlawful use. We do this on the basis of physical, administrative, organizational and technical measures. For example, only authorized people have access to the data. If and to the extent that data is provided to data processors who provide or carry out contracts on behalf of its services, Kapita Foundation has agreed with them that they also secure the personal data optimally.

11. Retention period

Kapita Foundation does not store personal data for longer than is necessary for the purpose of processing and in accordance with the legal retention periods.

12. Questions, comments, complaints or (suspected) data breach

If you have any questions, comments or complaints about the protection of your personal data by Kapita Foundation, you can contact us in writing or by email via email address [email protected] or Zandheuvel 52-B 4901 HW Oosterhout.

If you do not agree with Kapita Foundation use of your personal data, you can also file a complaint with the Dutch Data Protection Authority.

13. Data breach

If there is a (suspicion of) a data breach, we ask you to report it directly via [email protected] or by telephone number +31 162 796 51 9 or Zandheuvel 52-B 4901 HW Oosterhout.

14. Changes

Kapita Foundation reserves the right to amend or amend this privacy statement. None of the provisions of the privacy statement are intended to create any obligation or agreement between Kapita Foundation and a data subject.

15. Other provisions

Dutch law applies to the provisions of this privacy statement and all resulting disputes.