Privacy policy

1. Introduction Machinefabriek Geurtsen Privacy policy 3
Categories of personal data 3
3. Grondslag en doel voor gegevensverwerking 4
Purposes for which Machinefabriek Geurtsen collects personal data; 4
4. Period of storage 5
Machinefabriek Geurtsen uses the following deadlines per purpose; 5
5. Recipients of personal data 6
6. Security 7
7. Your rights regarding your personal data 7
a. Right of inspection (Article 15 AVG) 7
b. Right to rectification (Article 16 AVG) 7
c. Right to transfer data (Article 20 AVG) 7
d. Right to erasure of data (Article 17 AVG) 7
e. Right to file a complaint with the Personal Data Authority 8
f. Right to stop data use, objection (Article 21 AVG) 8
8. Duties 9

1. Introduction Machinefabriek Geurtsen Privacy statement

This is the privacy statement of Machinefabriek Geurtsen. This privacy statement applies to all privacy-sensitive information or personal data provided to us, for example when an e-mail is sent to us. In this privacy statement, we aim to clarify which data are processed, how they are processed and for how long the data are kept. In addition, we provide clear insight into how certain rights can be exercised in relation to personal data and its processing. 
What exactly does Machinefabriek Geurtsen do? 
At Machinefabriek Geurtsen we work on high-level mechanical engineering. Also engineering, maintenance and more is part of the discipline of our company. Quality, reliability and transparency are very important to us. This transparency we pursue also with our privacy documentation.
There are various situations in which we process, or if necessary have processed, personal data. To indicate this as clearly as possible, Machinefabriek Geurtsen has opted for a comprehensive and precise privacy statement. Machinefabriek Geurtsen is committed to ensuring that every visitor to its website, customer or partner knows exactly what happens to (personal) data. 
All articles in this privacy statement have been drafted with the applicableGDPR Agreement (General Data Protection Regulation) in mind. This European privacy regulation has been applicable in the Netherlands and other EU member states since May 25, 2018. Internationally, this legislation is known as the General Data Protection Regulation (GDPR).
Do you have any doubts or questions about the processing of data by Machinefabriek Geurtsen? Please feel free to contact us using the details below. 
Smyrnastraat 3 l 7413 BA l Deventer
Postbus 600 I 7400 AP I Deventer
KvK Nr.  38021411  
To strengthen our way of working, we have appointed a Data Protection Officer (DPO) in this process. Our DPO, Gerard Wieferink, can be reached at the following e-mail address: g.wieferink@mfgeurtsen.nl. You can count on receiving a response within 7 days.

2. Categories of personal data 

In order to provide the best possible support to our visitors, customers and partners, it is necessary for us to collect and process certain data, including personal data. Personal data is data that can be traced back to a natural person. The personal data we (generally) request are:
  • First- and lastname;
  • (Company-)adres
  • (Personal) email address (note: under the AVG, certain corporate email addresses may be designated as personal email addresses. Consider the email address geurtsen@bedrijf.nl).
We only process and store data that has been provided directly to us, or that has been unambiguously shown to be given up for processing by Machinefabriek Geurtsen upon submission.

3. Basis and purpose for data processing

Under the AVG regulations, we are required to have lawful bases for processing personal data. In the case of Machinefabriek Geurtsen, the bases are listed in Article 6 (1) (a), (b) and (c) of the AVG: these look at processing personal data on the basis of consent, the performance of a contract or to comply with a legal obligation. 
Following Article 13 (1) (c) of the AVG we clearly define the "processing purposes" for which the personal data are intended. So what exactly are "processing purposes"? These are the purposes, also called reasons, for which personal data are collected.
Below we indicate the processing purposes for which Machinefabriek Geurtsen collects your personal data.  

Purposes for which Machinefabriek Geurtsen collects personal data; 

1. Contact
If you have attempted to contact Machinefabriek Geurtsen, the data you have provided will be used to maintain further contact. 
Did the contact lead to the preparation and sending of a quotation to you (your company)? Then we will collect certain personal data for this purpose. In most cases this includes the name and address (and e-mail address) of the contact person. 
3. Invoices
For sending invoices, the same data will be used as stated on the quotation, unless the nature of the invoice requires certain information to be added. 
4. Entering agreement
If an agreement is entered into, personal data are processed for this purpose. Including: the name of the representative of the company with which an agreement is entered into. Other data will be specified by agreement. 
5. Performing services
For the performance of our services, at least names and contact details of data subject(s) and/or contact persons involved in the work process are required. In addition, we store data of the location, where processes are carried out.
6. Delivery
For the delivery of products, we store the name of the contact person, and data regarding the delivery location. Also, data such as e-mail addresses and phone numbers are required to keep in touch about the delivery if necessary. 
7. Administration
At Machinefabriek Geurtsen, we keep thorough records at all times. For our administration, certain data are processed, including name, contact information and possibly financial data such as bank account number.  
8. Social media
Machinefabriek Geurtsen uses Social Media to promote Machinefabriek Geurtsen, the services offered, as well as developments within the company. Think for example of newly available equipment. For this, in principle no personal data are processed by us: it may be that our marketers place certain cookies. Naturally, we have a processing agreement with each party for which this is necessary. 
9. Customer evaluation
To improve the products and services we offer, Machinefabriek Geurtsen may send a customer evaluation to you. This is a form you will receive via the e-mail address you previously provided. You are under no circumstances required to complete this form. To send the customer evaluation, at least your (first) name and e-mail address are required. 
10. Sales related work 
At Machinefabriek Geurtsen, we are actively promoting and selling our products and services. For this purpose it is possible that we contact you in some way. This will always be through publicly available information, such as e-mail addresses or phone numbers displayed on a website. It is also possible that we contact you through a Social Media channel such as LinkedIn. In almost all cases this happens when you have shown interest via Social Media in the services and products we offer. In other cases this happens because we could reasonably assume that you would be interested in our services and products. 

4. Period of storage

Listed above are the purposes for which personal data are processed. By virtue of Article 13(2)(a) of the AVG we then indicate the storage period associated with these purposes. 
NOTICE: personal data will always be kept for as long as you have an agreement with Machinefabriek Geurtsen, the term of which has not yet expired. 

Machinefabriek Geurtsen uses the following deadlines per purpose; 

1. Contact
For contact purposes, personal data will be kept for a period of 5 years. The period begins from the last moment of contact. 
Quotes are kept for a period of 5 years.
3. Invoices
Invoices are kept for a legal period of 7 years, plus a period of 5 years for our own records. 
4. Entering agreement
If an agreement has been established, personal data will be kept for the period that the agreement runs. After the moment of termination, a period of 5 years is used for the retention of personal data. 
5. Performing services
For execution of the service, personal data will be kept for a period of 5 years after the service is completed. 
6. Delivery
For delivery purposes, personal data will be retained for a period of 5 years after the last delivery was made.  
7. Administration
In relation to administration, Machinefabriek Geurtsen is obliged to keep all personal data related to financial data for a minimum period of 7 years. For other types of data, as well as after expiration of this period, personal data are kept for a maximum period of 5 years. 
8. Customer evaluation

Personal data bound to a customer evaluation is kept for a period of 5 years. 

9. Sales related work 
If personal data has been processed related to sales activities, this data will be kept for a maximum period of 5 years after the last contact moment. If, after this activity, a contract was entered into/performance of a service, the period specified for this purpose will apply. 

5. Recipients of personal data

Machinefabriek Geurtsen shares data with third parties in certain cases: however, this is only done when strictly necessary. In all cases, Machinefabriek Geurtsen, as a data controller, will comply with the AVG Regulations, specifically article 28 et seq. AVG. 
We only use third parties to provide our services and/or to fulfill a legal obligation.
List of third parties that receive personal data from you:
  • CRM system: Machinefabriek Geurtsen uses an internal CRM system. It is not the case that another party can just view the data. However, we mention this because we are not the developers of this system. 
  • Tax authorities/government agencies: We have a legal duty to file tax returns. For this purpose the legally required data are passed on to the Tax Office. It is also possible that other authorized government agencies request data from Machinefabriek Geurtsen. We will always provide our cooperation in this, whereby we take your privacy into account as much as possible. 
  • Third persons: To perform our services we use third parties, think of suppliers and mechanics. These have the data required to perform and service, as described in this privacy statement.
  • Geurtsen Group: Machinefabriek Geurtsen is part of the Geurtsen Group, which work with each other. If necessary for the performance of an agreement, personal data may be shared with another party within the Geurtsen Group. This is always the strictly necessary. 

6. Security

Inspection of personal data is only possible for those authorized within Machinefabriek Geurtsen. Personal data, both digital and physical, are at all times strictly secured. 
Machinefabriek Geurtsen takes strict measures to protect your personal data. Both digitally and physically. Thus, all our devices are secured with a password and / or fingerprint scan and / or facial recognition. This includes devices such as (mobile) phones, laptops, tablets and computers. USB sticks used to transport information are also secured.  
For the website or digital transmitted data Machinefabriek Geurtsen uses Firewalls, virus scanners and a periodic backup. Of course, the backup does not include data whose retention period has expired. Passwords for systems are periodically changed and e-mails are periodically cleaned. 
For physical records, they are kept in a locked filing cabinet, within a locked office. The building in which the office is located is also equipped with an alarm system. 

7. Your rights regarding your personal data

Below are the rights you can make use of with regard to your personal data. Here we indicate in as much detail as possible the way in which the right in question can be used. 
a. Right of inspection (Article 15 AVG)
You always have the right to access the data processed and stored by Machinefabriek Geurtsen. To exercise this right, please send an e-mail with your request to our DPOg.wieferink@mfgeurtsen.nl or to info@mfgeurtsen.nl. 
b. Right on rectification (article 16 AVG)
In case the data kept by Machinefabriek Geurtsen turn out to be incorrect, you have the right to have these data rectified. Machinefabriek Geurtsen will then replace the current incorrect data with the correct data.
c. Right to transfer data (Article 20 AVG)
You have the right to have personal data transferred by Machinefabriek Geurtsen to a similar party. This means a party that offers and performs roughly the same services as Machinefabriek Geurtsen. 
d. Right to erasure of data (article 17 AVG)
In certain cases, you may request Machinefabriek Geurtsen to remove data. To do this you can contact the right to oblivion. Below is a list of situations in which Machinefabriek Geurtsen should delete your data:
  • If the data processed by Machinefabriek Geurtsen is no longer necessary for the purpose of processing. 
  • If the permission for the use of personal data is withdrawn by you. For example by means of the 'unsubscribe button' on the Machinefabriek Geurtsen newsletter.
  • If you would like to object to the processing of your data. In the case of direct marketing, you always have an absolute right to object. In case of direct marketing, you always have an absolute right to object. At the moment that your interests in relation to the processing of personal data outweigh those of Machinefabriek Geurtsen, you have a relative right. Deletion of the data will then only occur if it is demonstrated that your interests outweigh those of Machinefabriek Geurtsen. 
  • If Machinefabriek Geurtsen processes data unlawfully, you have an immediate opportunity to have the data deleted by Machinefabriek Geurtsen. This is the case, for example, if there is no legal basis for the processing of personal data.  
  • If a legal retention period has been exceeded, Machinefabriek Geurtsen is obliged to delete the processed personal data. 
  • If you as a data subject are under 16 years of age and the consent of a parent or guardian has not been granted for the processing of personal data. 
In this case, Machinefabriek Geurtsen will immediately delete your personal data. 
It is possible that there are exceptions to the right to oblivion. For more information, please visit the following page consult. 
e. Right to file a complaint with the personal data authority
At the time you believe that Machinefabriek Geurtsen does not handle your personal data in a sound manner, you always have the right to file a complaint with the Personal Data Authority. You can do this via this link. The Personal Data Authority will handle your complaint further.
f. Right to stop data use, objection (Article 21 AVG)
You have the right to object to data processing at any time. Especially in the case of 'direct marketing'.
Make use of the above rights?
In most cases, an email to our DPO g.wieferink@mfgeurtsen.nl or to info@mfgeurtsen.nl is enough to exercise the aforementioned rights. If we have doubts about the validity of your identity, we may take other measures to ascertain it. For example, by asking you to provide us with a copy of your ID. This will always be done in the manner prescribed by the national government. In most cases, a less intrusive mode of identity proof will suffice.  

8. Duties

Machinefabriek Geurtsen always processes data on the basis of a legitimate interest. Personal data will never be sold to a third party.
Data which we consider necessary to collect are minimally required to adequately perform our services. If these data are not provided to Machinefabriek Geurtsen, it is not possible to adequately perform the services.
If it appears necessary to share data with any third party, permission will always be requested. This can be done through changes in the privacy statement of Machinefabriek Geurtsen or by directly requesting permission.
Also, Machinefabriek Geurtsen reserves the right to disclose data if required to do so by law or Machinefabriek Geurtsen deems it justified to comply with legal process. This will also be the case when it concerns the property or protection of Machinefabriek Geurtsen. Here, the safeguarding of your privacy will always be observed as much as possible.  
Do you have any questions about our privacy policy? If so, please feel free to contact us using the information below.
Smyrnastraat 3 l 7413 BA l Deventer
Postbus 600 I 7400 AP I Deventer
KvK Nr.  38021411 

Do you have any questions about our privacy policy? If so, please feel free to contact us using the information below.