Summary of the Metaal Flex Privacy Statement

At Metaal Flex, we take your privacy seriously and comply with current privacy legislation. We are required to ask for your consent to use your personal data.

Metaal Flex uses your name, phone number, email address or other contact details, or those you have entrusted to us, solely to make arrangements for carrying out work in line with our business objectives. If our initial contact does not lead to an assignment or further email correspondence, and you do not become a client, supplier, employee, partner, principal or contractor of ours, your data will be deleted from our files within 12 months.

If our initial contact leads to a business relationship or email correspondence at your initiative, your data will only be shared, where necessary, with third parties directly involved in the activities, in order to shape this relationship in line with our joint objectives. These parties handle your data in accordance with current privacy legislation. Due to statutory retention periods, relationship data is kept for at least 7 years after the last invoice was sent or received, until you indicate that you no longer wish this.

If desired, Metaal Flex seconds employees to you. The personal data of these employees is entrusted to you. When processing this data, you agree to exercise the same level of care as set out in this privacy agreement.

We do not sell your data to others. You can always view, correct, request or transfer the data we hold about you. We may ask you to identify yourself when making these requests.

By contacting us, you agree to this privacy statement.

Metaal Flex Privacy Statement (Nov. 2018)

Definitions

Metaal Flex:

Metaal Flex Nederland B.V., registered with the Dutch Chamber of Commerce under number 17112016, and its affiliated companies as listed in the Chamber of Commerce register.

Management:

Wil Kardol

Personal data:

• Name, company name, phone number, email address, postal address, billing address, bank account number.

• All personal data of your contacts that you entrust to us.

• All personal data of any employees seconded to you.

Relation:

Clients, suppliers, service providers, contractors, principals, employees, subscribers, partners, and hired or seconded staff with whom Metaal Flex has entered into a business agreement.

Purposes of processing

Metaal Flex uses and processes your personal data to carry out the activities that fit the objectives of Metaal Flex:

Secondment of qualified and motivated production staff

We do not use your data to create a personal profile or for any purpose other than continuing to provide you with high-quality work. Unless you have indicated that you would like to receive it, we will not send you direct mail.

Please note: we do not use your data for purposes other than those customary in a normal client-supplier relationship: invoicing, information about changes to products, services or address, delivering goods or services, sending a newsletter, and tax returns.

Metaal Flex uses your name, phone number, email address or other contact details, or those you entrust to us, solely to make arrangements for carrying out work in line with our business objectives.

If our initial contact leads to a business relationship, your data will only be shared, where necessary, with third parties directly involved in the activities, in order to shape this relationship in line with our joint objectives.

These parties handle your data in accordance with current privacy legislation and in the same way as Metaal Flex; this is laid down in an agreement with these parties.

In the event of an assignment, Metaal Flex seconds employees to you. The personal data of these employees is entrusted to you. When processing this data, you agree to comply with the same requirements as those set out in this privacy statement for your own data.

Legal basis for processing

Metaal Flex processes your personal data on the following legal basis:

• Your consent as the data subject. As a relation, you have the right to withdraw the consent you have given for the processing at any time.

• The processing of personal data is necessary for the performance of an agreement or arrangement you have made with us regarding work to be carried out or services to be provided.

Categories and source(s) of personal data

Metaal Flex has obtained your personal data from the following source(s):

• Name, address, place of residence, phone number and email address are provided by you, for example through personal contact and/or by handing over your business card.

• Where applicable, date of birth, citizen service numbers (BSN) and identity documents are obtained directly from you as a relation.

• We receive your bank account number via your bank, on the statement, after payment of an invoice.

• From the data files or documentation that you entrust to us or make available for inspection.

Transfer of personal data to a recipient within the Netherlands, in a third country or to an international organisation

All software suppliers and data storage centres used by Metaal Flex comply with the GDPR.

With regard to data processing in the field of privacy, Metaal Flex follows the practices of large national and international organisations such as Exact, Rabobank, ING, Microsoft, Google, KPN, or similar organisations and providers in this field, and cannot exert any direct influence on them.

Metaal Flex keeps a processing register recording which data is sent to which service providers/processors. If Metaal Flex considers the privacy protection measures of these processors to be sufficiently in line with the level of care that Metaal Flex itself applies and describes in this privacy statement, we demonstrably comply with the privacy statement and security measures of these service providers as published on their website or otherwise made known to us in writing. If we consider this level of care to be insufficient, we will not work with the processor concerned. If the measures taken are limited, a data processing agreement has been concluded with our service providers, in which the level of protection of your personal data is agreed in accordance with the GDPR.

Where possible, Metaal Flex opts for the highest level of privacy protection, if these organisations offer that choice.

Retention period of personal data

If our initial contact does not lead to an assignment or further email correspondence, and you do not become a client, supplier, employee, partner, principal or contractor of ours, your data will be deleted from our files within 12 months.

Due to statutory retention periods, relationship data is kept for at least 7 years after the last invoice was sent or received, until you indicate that you no longer wish this. We do not sell your data to others.

Security

Your personal data is only sent via media that comply with the same privacy rules as Metaal Flex.

In addition, we adhere to the following rules:

• If we use contact forms on a website, they are sent via an https protocol.

• All equipment we use to process personal data is protected with antivirus, anti-spam and anti-phishing software and with firewall security software and hardware.

• Our equipment (including smartphones, laptops and PCs) is secured with a password that is changed periodically and/or with fingerprint and/or facial recognition.

• Screen locking is standard.

• The storage media (USB sticks, SD cards, hard drives, etc.) we use are encrypted, where possible with the highest level of encryption currently available. Moreover, their use is avoided as much as possible.

• We are bound by a confidentiality agreement and, as a rule, do not provide personal data to external parties.

• If we engage external parties, they are bound by the same obligations; to this end, they sign an agreement, including a confidentiality agreement, in which they declare that they will keep your personal data confidential.

Data breach and incident management

Although the way we secure your personal data makes the risk of a data breach small, it always remains a possibility, for example if a hyperlink from an unreliable source is clicked by mistake. In that case, the network cable is immediately removed from the computer, the Wi-Fi connection is disconnected, the computer is switched off and our IT administrator is called in.

In the event of a data breach, the following procedure is followed:

Data breaches are documented in the incident log. The incident log records where the data breach occurred, which personal data is involved, the date on which the data breach occurred, when the data breach was resolved and how it can be prevented in the future. Management is informed immediately. Management informs the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if the data breach has a direct impact on your privacy.

We will inform you as soon as there is a data breach that concerns you.

Rights of relations

You have the right to submit a request to us to access, correct and/or delete the personal data we process about you. You also have the right to ask us to restrict the processing of your personal data and to object to the processing of your personal data.

As a relation, you also have the right to ask Metaal Flex to return the personal data you have provided to us in a structured, commonly used and machine-readable format.

Complaints

If you have a complaint about the processing of your personal data by Metaal Flex, please contact management using the contact details below. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Contact details

For more information about the safeguards taken by Metaal Flex described above, for a copy of the measures taken, or for questions about this privacy statement and the processing of your personal data by Metaal Flex, please contact us using the details below.

You can also submit a request for access, correction, transfer or deletion of your data, or for restriction and objection, in writing by email. We may ask you to identify yourself.

Declaration of consent

By contacting us, you agree to this privacy statement.

Thank you for your cooperation.

info@metaalflex.com

Postal address:

Metaal Flex Nederland B.V.

Handelsweg 3

5527 AL HAPERT

Attn. Wil Kardol