Privacy Statement

1. What personal data do we process?

Personal data is any information with which a natural person (the data subject) can be identified or identifiable. The personal data that we may process about you (ie from receiving and storing to modifying, forwarding and deleting) includes:

• basic information such as your first and last name, title, gender, the company where you work or your position;

• contact details such as postal address, (mobile) telephone number or e-mail address;

• additional personal data such as proof of identity, date of birth, nationality and marital status;

• financial information, such as your bank account number;

• technical data, such as your IP address, the device you use to visit our website and the pages you view;

• personal data that you give us when you apply for a job with us, such as education and career data;

• any other personal data that we obtain from or about you or that we can obtain ourselves and that we use for the purposes mentioned below.

2. How do we obtain personal data?

In most cases, we obtain your personal data from you, for example if you give us an assignment to draw up a compilation statement, if you visit our website, apply for a job with us, give us your business card or from information we receive during (telephone ) conversations and email contact with you.

In addition, we can also obtain your personal data in other ways, for example from a counterparty or from third parties, via (public) registers (such as the Trade Register of the Chamber of Commerce) or from public sources and websites.

3. What do we process personal data for?

In all relationships that we enter into, personal data is required to offer the best possible service and cooperation. We process your personal data for the following purposes:

• Accountancy and advice services

• We only process data that are necessary for the preparation, execution and completion (including invoicing) of the relevant assignment (audit work, compilation work, preparation of tax returns, provision of (tax) advice ).

• Compliance with legal obligations and (professional) rules

• We process personal data to comply with legal obligations and regulations and professional rules applicable to accountants, such as identification, data verification, administrative requirements or retention periods.

• Marketing

• In order to maintain and expand our customer base, we can approach you with relevant information, publications or invitations. This is also done to maintain the relationship with our partners, suppliers and other relations.

• Use and improvement of our

• website You can sign up for a newsletter on our website. In order to monitor and improve the content and use of our website, we collect and analyze the surfing behavior of visitors to our website.

• Participation in events

• When registering for one of our events, we ask for your personal data. We use this to confirm your registration, to keep you informed about the relevant event and to register your attendance.

• Applications

• In order to be able to process your application, we ask for your personal data. We store the data that you share with us by e-mail, the application letters and in (telephone) conversations for up to four weeks after the application procedure has ended.

4. On what grounds do we process personal data?

We may only process your personal data if there is a legal basis to do so. The above processing takes place on the basis of one of the following legal grounds from the GDPR:

• For the execution of an agreement;

• Due to a legal obligation;

• With your permission;

• Because of a legitimate interest.

5. With whom do we share personal data?

We may need to share your personal data with third parties. This is possible in the following cases:

• To be able to provide our services;

• To be able to comply with legal obligations;

• Third-party suppliers that we engage for processing as described in this privacy statement, such as our ICT suppliers; Third parties to whom we provide your personal data are themselves also responsible for the processing of that data and for compliance with the GDPR. If a third party processes your personal data as a processor on behalf of VHM Audit, we will conclude a processing agreement that, in our opinion, meets the requirements of the GDPR. In order to monitor and improve the content and use of our website, we analyze the surfing behavior of our website visitors in a privacy-friendly manner. This data is not stored by us.

6. How long do we keep personal data?

We do not store your personal data for longer than is necessary for the purpose for which we collected and recorded it.

If there is a statutory retention obligation or a retention period based on professional or behavioral rules, we will adhere to those periods.

7. How is the personal data secured?

We have taken appropriate technical and organizational measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification of your personal data.

If you have any questions about the security of your personal data or if you suspect misuse, please contact us at info@vhmaudit.nl.

8. What rights do you have?

You can view the personal data that we process about you. You have the right to have your personal data changed or even deleted if the data is not (any longer) correct, or if the processing is not (no longer) justified. You can also restrict processing, request us to transfer your data or object to the processing under certain circumstances. We will assess whether we can comply with your request on the basis of the law. You also have the right to submit a complaint to the supervisory authority (the Dutch Data Protection Authority).

We may not be able to meet your request. For example, because the processing of certain personal data is required to comply with our legal and legal obligations and/or professional requirements. If we are unable to comply with a particular request, we will of course inform you of this with reasons.

9. Contact

If you want to know more or have questions or complaints about our processing of your personal data, you can contact us (in writing) via: info@vhmaudit.nl or VHM Audit, attn Compliance Officer, Zwartewaterallee 56, 8031 DX, Zwolle.