Privacy statement of DAF Club Netherlands and the parts supply foundation (Stichting Onderdelenvoorziening D.C.N.)

1. Who are we?

DAF Club Netherlands and the Parts Supply Foundation (Stichting Onderdelenvoorziening D.C.N.) are responsible for the processing of personal data. In the Parts Supply Foundation D.C.N. the parts supply for the members of DAF Club Nederland has been accommodated.

The contact details of DAF Club Netherlands and the Parts Supply Foundation (Stichting Onderdelenvoorziening D.C.N.) can be found on www.dafclub.nl and in the club magazine Variomatic.

2. What data do we process from you?
2.1 N.A.W. data

Which data we process from you depends on our services. In any case, we process your contact details - name, address, place of residence, gender, date of birth, profession, telephone number and your e-mail address. Members and donors are registered with a membership or donor number. In addition, we process the vehicle data that you have provided to us.

2.2 Financial Data

We process your bank account number(s).

2.3 Contact Information

When we have had contact with you, we may process the following data:

     What was the contact about.
     When was the contact and with whom.
     How (via post, our website, e-mail, newsletter, app, etc.).

We may use this information to see what we have previously interacted with you about. Then we can read this back and provide you with a more targeted response and/or service during your next contact.

2.4 Record and save conversations and external sources

We do not store conversations or collect personal information about you from outside sources. We therefore only work with personal data that you have provided to us.

3. Why do we process your data?
Purposes for the processing of personal data are:

3.1 For (improvement of) our services.
With your personal data we can, for example, contact you, send the club magazine and inform you about activities and offers.

3.2 Reducing risks
We also use your personal data to mitigate risks, for example by:

     We may register your IP address when you visit our website. We do this, for example, when you fill in a form on which you enter data yourself. The purpose of this registration is to prevent and address fraud or other misuse of our site.
     Ensure good security. Think of usernames and passwords.

3.3 Carry out marketing activities
We are happy to keep you informed. For example with e-mails, newsletters ("the Secondary"), offers on our website or via social media. Personal data is also often required for this. This is what we can do:

     We look at which products and services you already use and which you do not.
     We may, if we deem it appropriate for our club and/or its members, track and analyze your choices and searches. This is possible, for example, if you visit our web pages or apps and register e-mails such as a newsletter.

3.4 Improving and innovating
We can also use personal data to make our services much more personal by combining and analyzing them. These analyzes lead us to new ideas and better solutions. So we can:

     Solve the cause of questions, improve pages and forms on the website and speed up processes.
     Improving security.
     Measuring how members and donors use services and what the result of a campaign is. And if necessary: improve things.
     Develop new services.
     Making reports of our analyzes and insights and thereby providing information services at an aggregated level. When analyzing, we remove the personal data that we do not need. And we can bundle data at a certain level of abstraction (aggregate), encrypt (pseudonymize) or make it anonymous.

4. What is the legal basis for using your personal data?

     Entering into and/or performing your membership or donorship and entering into and/or performing contractual agreements, such as the delivery of parts.
     To comply with legal obligations, for example providing information to the government if we are obliged to do so.
     Legitimate interest of DAF Club Netherlands and the Parts Supply Foundation (Stichting Onderdelenvoorziening D.C.N.). This applies, among other things, to direct marketing activities and checks against the requirements set out in the articles of association and internal regulations.

5. How do we secure your data?
We handle your information with great care.

5.1 Security
We have taken technical and organizational measures to protect your data against loss or unlawful processing. This includes measures to use our website and IT systems safely and to prevent misuse. But also the security of areas and data carriers where data is stored and we work in accordance with the established information security policy.

5.2 Confidentiality
We handle the data you entrust to us with care. Only board and committee members authorized to do so may view and process your data.

5.3 There is supervision of how we process personal data

     The Dutch Data Protection Authority (AP) checks whether we comply with the legislation.
     The Netherlands Authority for Consumers and Markets (ACM) monitors how we deal with cookies, direct marketing via electronic mail and the do-not-call register.

6. How long do we keep your data?
In addition to the AVG (General Data Protection Regulation), we have to deal with other legislation for the storage of your personal data. Based on the GDPR, data may not be kept longer than necessary. Other laws have both minimum and maximum terms that we must take into account. We have determined for which type of data, which retention period applies within the legal frameworks. We store your personal data for a minimum of 7 years after termination of membership and/or donorship.

7. Consent
If we process your data on the basis of your consent, you can revoke this consent at any time, subject to legal requirements.

8. Who can we share your data with?
DAF Club Netherlands provides your personal data to the D.C.N. The Parts Supply Foundation (Stichting Onderdelenvoorziening D.C.N.) does not count as a third party in the context of this scheme. DAF Club Netherlands and the Parts Supply Foundation (Stichting Onderdelenvoorziening D.C.N.) do not provide personal data to third parties, unless this is permitted by law and is necessary, for example for sending the club magazine or for the functioning of the webshop. This is also included in the House Rules of DAF Club Netherlands. If we share data with a service provider in a country outside the European Economic Area, we will of course comply with the rules that have been agreed for this in the European Economic Area.

1. The government
Sometimes we are legally obliged to pass on your data to the government.

2. Service providers and companies we work with
We engage other service providers and companies to perform services for us. Think of the shipment of the club magazine or the company that maintains the webshop. We make agreements with these parties to guarantee your privacy. DAF Club Netherlands and the Parts Supply Foundation (Stichting Onderdelenvoorziening D.C.N.) remain responsible for the processing of your data.

9. What are your rights?
9.1 View or correct data
If you want to access your data, we will only provide it if we have sufficient certainty that you are who you say you are. To do so, send a request for inspection or correction to secretariaat@dafclub.nl stating “Request for Inspection/Correction”. Then enclose a copy of your proof of identity. You can make your passport photo and citizen service number (BSN) invisible on this copy. We recommend that you indicate on the copy what it is intended for. You will receive a response from us within four weeks.

9.2 Have data deleted and the right to be 'forgotten'.
You have the right to have the personal data we hold about you erased in the following situations:

     the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
     consent to processing has been withdrawn;
     there is a well-founded objection to the processing;
     the personal data has been processed unlawfully;
     on the basis of a legal obligation to delete the personal data.

9.3 Restriction of Processing
If you believe that we are processing your personal data unlawfully or that the data processed by us is incorrect, you can request that the processing be restricted. This means that the data may no longer be processed.

9.4 Transfer of data (data portability)
You have the right to obtain a copy of the personal data you have provided to us.

9.5 Unsubscribing from Personal Offers
You have the right to unsubscribe from newsletters or personal offers that we distribute by e-mail. We do not call you for commercial purposes.

10. Email and social media (chat, Whatsapp, Facebook) and Google​​​​​​​
10.1 Email
Before we communicate with you via email, we will ask you for permission, unless you have already given this permission. We ask for this permission when registering as a member or as a donor. You can always withdraw a given consent.

10.2 Social Media
The use of social media itself is your own responsibility. This privacy statement does not apply to how social media platforms handle the data you provide. We point out that many social media platforms are based outside the European Union and store data outside the European Union. The privacy legislation of the European Union usually does not apply in that case. We recommend that you carefully read the privacy statement of these social media channels. And we encourage you to share personal questions and information with us in a different way.

11. Adjustment of the privacy statement
We can adjust this privacy statement. We can do this in the event of new developments, for example if something changes in our activities or in the law or in case law. This text was last modified on May 6, 2018.

12. Profiling
We also make different groups (profiles) of members and donors with the same characteristics or behavior with the aim of gaining insight and evaluating them. We can then respond to this, for example by sending targeted offers/information to members and donors. In doing so, we comply with laws and regulations. This means that if profiling has legal consequences or a major impact for you, we will ask for permission in advance.

13. Do you have any questions or complaints?
Do you have questions about this privacy statement? Then you can contact the secretary of DAF Club Netherlands. Send an email to: secretariaat@dafclub.nl or a letter to the secretary.

If you have any complaints about privacy, please contact us at secretariaat@dafclub.nl. If you believe that your complaint has not been resolved satisfactorily, you can submit a complaint to the Dutch Data Protection Authority.