Our Privacy Policy

DataIM strictly adheres to the guidelines of the General Data Protection Regulation (GDPR). The GDPR is the European regulation that standardises the rules for the processing of personal data by private companies and government agencies. The Dutch GDPR regulations (AVG) are drawn up by the Dutch Data Protection Authority (AP), the Dutch data protection authority, and the independent administrative body that supervises the processing of personal data. We also work according to various (international) codes.

We offer an overview below:

• The international Code on Market and Social Research. This code was drawn up by the European Society for Opinion and Market Research (ESOMAR), in collaboration with the International Chamber of Commerce (ICC). This code focuses on ethical and business principles for conducting market and opinion research. This includes respondent rights and the professional responsibility of the researcher. The ICC/ESOMAR code prohibits any form of sale. Market research collects opinions, data processing is done anonymously. This makes it virtually impossible to trace the results back to individual persons.
• The Gedragscode voor Onderzoek en Statistiek (Code of Conduct for Research and Statistics). This code was drawn up by all organisations directly involved in the field: the Data & Insights Network, the Vereniging voor Beleidsonderzoek (VBO, Association for Policy Research), and the Vereniging voor Statistiek en Onderzoek (VSO, Association for Statistics and Research). With this code, these three organisations commit to handle personal data responsibly and in accordance with the GDPR guidelines. DataIM is a member of the Data & Insights Network, a Dutch association which represents the interests of respondents, users, and providers of market and policy research. As a member, we adhere to all (international) codes of conduct related to privacy, including all codes in this privacy statement.

Purposes of data processing
How do we receive your data?

You share certain personal data with DataIM because you apply for a job, leave a message on the website, respond to a questionnaire, work for us, or because you are a client or partner of DataIM.

We conduct online research for various clients. In order to conduct this research, your personal data might be shared with us. The basic principle is that only data that is genuinely necessary for carrying out the research is shared, and that your data is shared with your permission for the purpose of this research. When data is shared with DataIM, a processing agreement is in place between DataIM and the client.

Your personal data is stored for as long as necessary for the purpose of the research, for example for the complete processing of the service or the duration of the research.

Which personal data do we process?
Personal data of clients / website

• If you want us to contact you, you can fill out a contact form on our website, where you share your name, email address, and telephone number.
• DataIM keeps in contact (by email and telephone) during the implementation of projects. This contact is used to confer and update on the status of projects.
• DataIM contacts clients (by emails and telephone) to maintain a relationship.
• DataIM sends newsletters. These newsletters can be either commercial or aimed at knowledge sharing.
• DataIM uses financial data of the contact's company to enable invoicing at the end of a project.

Personal data of applicants/employees

We collect and process the following personal data of applicants: first name, initials, last name, address, postal code, place of residence, telephone number, email address, date of birth, gender, photo, motivation letter, and resume.

If you are employed, we add the following information: nationality, marital status, citizen service number (BSN), a copy of your identification card, and your bank account number.

Questionnaires

We conduct online market research, which means that we regularly conduct research for our clients. This research is conducted among a specific target group. To gain relevant insights for our clients, we may need certain data to reach this target group, and to supplement research data. What data this is varies per research study. Personal data will be anonymised 12 months after the conclusion of the study.

How do we collect personal data online?
Cookies

We use cookies when offering our electronic services. A cookie is a small file that is located on websites. A cookie is stored on the hard drive of your computer or laptop. We use these cookies to store your preferences and settings. You can easily disable these cookies in your browser.

Security

DataIM takes all reasonable technical and organisational measures to protect personal data. Naturally, these measures are fully in line with the GDPR. Upon commencement of employment, new employees are made aware of the rules and procedures within the organisation, in particular the security rules and procedures. We regularly share knowledge to raise security and privacy awareness among our employees. In addition, DataIM is ISO 27001 certified, which means we comply with the international standard for information security.

Sharing data

We do not share personal data with third parties unless there is a legal basis for doing so. For example, a judge may order us to provide or show data. DataIM always stores its data within the borders of the EU. If - in the context of the provision of services - data is shared outside these boundaries, this will be done with an appropriate level of security.

Partners

We work together with various partners in order to (better) provide our services. These include HENZ ICT and Skwadraat. With your permission, data may be stored by one of our partners. DataIM has made clear agreements with all its partners about the handling of this personal data. These agreements are laid down in processing agreements.

Complaints and supervision

The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) can check our compliance with the GDPR. You have the right to submit a complaint to a supervisory authority if you believe that your rights have been violated by us. In that case, the supervisory authority is the Autoriteit Persoonsgegevens.

Questions and requests for access, correction and deletion of personal data

If you would like information about the personal data DataIM processes about you, we can only provide this information if it is sufficiently clear who you are (identifiable), and if it has been proven that you are actually the person you say you are (authenticated).

You have a number of statutory rights with regard to your personal data:

• Right of access to your recorded personal data.
• Right to submit a request for rectification or erasure of your personal data.
• Right to object to certain uses of your personal data.

A request for access, deletion or correction can be sent by email to info@dataim.nl addressed to Gijs van Blokland. You will receive a response within one week of receiving your request.

Changes to privacy statement

DataIM reserves the right to make changes to its privacy statement. This version is from February 2021.

Questions?

Do you have any questions about our privacy statement? Please contact our Data Protection Officer (fg@dataim.nl).