PRIVACY STATEMENT

Last updated: August 2024

1 | Who collects your personal data?

This is the privacy statement of Plato Group B.V. and its affiliated companies IGO Promo, Clipper, Interall, and Compacon (hereinafter referred to as: "Plato Group"). Plato Group may collect your personal data when you purchase services or products from us, when you contact us or provide us with a business card, receive our newsletter, apply for a job with us, or visit one of our websites:

www.platogroup.eu
www.igopromo.com
www.igopromo.ie
www.clipperinterall.com
www.clipperinterall.ie

In addition, we may obtain your personal data from other sources, such as public websites or from partners with whom we work. In all these cases, this privacy statement applies and Plato Group is the controller of your personal data.

In this privacy statement, we explain how we handle your personal data. For example, we explain when we collect which personal data and how long we keep it. It is important that you are aware of this.

If you have any questions, comments or complaints about this Privacy Notice or about our use of your personal data, please contact us using the following contact details:

Plato Group B.V.
P.O. Box 40 5700 AA Helmond, The Netherlands
[email protected]

2 | What personal data is processed, why and for how long is it stored?

Performing services and products

When you purchase services or products from us, Plato Group may use your personal data in the context of drawing up or executing the agreement we enter into with you (or your employer). Without this personal data, it is not possible for us to execute the agreement.

When you purchase personalised products from us, these products may also contain personal data, for example if your name or the names of your colleagues are printed on a product. In that case, we may obtain your personal data from the person who placed the order. In that situation, we have a legitimate interest in processing your personal data, because otherwise we will not be able to fulfil our agreement with the person (e.g. your employer) who placed the order.

For the purposes described above, we may process the following personal data of (contact persons or employees of) our customers:

Your personal data will be stored for the duration of the agreement and up to a maximum of 2 years thereafter, unless we receive a request for deletion of your personal data earlier. We cannot (fully) comply with deletion if we need to retain your personal data (longer) for certain purposes, for example for a legal obligation. For example, under Dutch law, we are required to store tax and administrative data for seven years and under German law for 10 years.

Managing the website and handling contact requests

When you visit one of our websites, we process your personal data by, among other things, placing cookies or similar technologies. We place cookies to provide functioning websites, to increase the ease of use of the websites, to personalize the services provided, to send (personalized) advertising and to analyze the use of the website and to improve the website. If and to the extent that personal data is processed in this process, we have a legitimate interest in doing so and the rights and obligations as described in this privacy statement apply. If required, we will ask for permission to place certain cookies via our cookie banner. You can find more information about the cookies placed by Plato Group in our cookie statement.

In addition, we may collect your personal data when you contact us via the website, email, telephone, social media or when you have provided us with your business card. In those cases, we will use your personal data to contact you and handle your request. We process this personal data because we have a legitimate interest in doing so. The interest lies in being able to respond to your requests (in a timely manner) and we have carefully considered this.  

For the purposes described above, we may process the following personal data:

• first and last name;
• (business) address details;
• (business) phone number;
• (business) email address; company details and positions;
• technical data and other information we collect via cookies, such as your IP address and the pages you view;
• other information you provide to us, for example, in the contact form on the website.

Plato Group stores this personal data collected in the context of the contact request for as long as this is necessary to be able to respond to your contact request. After this, your personal data will be deleted. The retention periods of the cookies can be found in the cookie statement.

Newsletters and other marketing communications

We wish to keep our customers and other interested parties informed of the latest developments in the field of our services and products. We may do this in the form of sending newsletters, e-mails or other (personalized) advertisements and marketing communications.

If we already have a customer relationship, we may use your contact details to send marketing communications about our services. However, you can always submit an objection to this by e-mail; Each news item contains a button with which you can unsubscribe. If there is no customer relationship but you are interested in our marketing communications, we will only send these communications with your consent. We obtain this, for example, by registering on our website.

For the purposes described above, we may process the following personal data:

• first and last name;
• gender (salutation);
• (business) email address;
• (business) phone number;
• company details and position;
• time of subscription and unsubscription;
• preferences and interests.

Plato Group stores your personal data for this purpose until the moment of objection or unsubscription. Each newsletter contains a button with which you can unsubscribe from the newsletter. If you are no longer a customer, we will continue to send you newsletters or other messages for a maximum of three years after the last customer contact.

Applicants

When you apply for a job with us, we need your personal data to be able to assess the application and to be able to contact you as a result of the application. Plato Group has a legitimate interest in this. When you are in the final phase of the application procedure, the personal data will be necessary for the drafting and execution of the employment contract.

For the purposes described above, we may process the following personal data:

• first and last name;
• place of residence;
• phone number;
• email address;
• motivation letter;
• CV and all the information contained therein;
• photo;
• (internship) evaluations;
• other information you provide to us in the context of the application process.

Plato Group stores your personal data for up to four weeks after the application procedure has ended. If you have given your consent, Plato Group may store your personal data for a maximum of one year. That way we can contact you again if we have an interesting vacancy for you later. 

3 | Who receives your personal data?

In order to be able to provide our services and offer products, we sometimes work together with other parties. Some parties (such as software suppliers) only process your personal data on our behalf and this is therefore laid down in a processing agreement. We only give these parties access to your personal data based on our instructions. Your personal data will be stored within the European Union.

Furthermore, Plato Group may share your personal data with:

• to its affiliates, group companies and subsidiaries, to the extent necessary for the purposes described in this Privacy Statement;
• other recipients (as independent controllers), insofar as this is necessary for the purposes described in this privacy statement. For example, Plato Group can use external suppliers and wholesalers to fulfil its orders, but also, for example, delivery services;
• another recipient to the extent required by law, court order, or other legal process, including merger, acquisition, or sale of assets, regulatory notification, or bankruptcy.

These recipients are usually (independently) controllers for the processing of your personal data. If we are joint controllers, we will make agreements about this with this party. If these agreements deviate from what is stated in this privacy statement, we will inform you accordingly.

On the websites of Plato Group you can also find a number of links to third-party websites, such as Facebook, LinkedIn or YouTube. These buttons are used to enable the integration of those websites with our website. If you click on (one of) these buttons, you activate the functionality of those buttons and advertising pixel cookies may be placed by these third parties. These cookies can be purely functional, but can also be used to keep track of which websites you visit, to build a profile of your online browsing habits and to show you personalized advertisements. More information about what these websites (may) do with your personal data can be found in their privacy and cookie statements. We therefore advise you to read these statements carefully.

4 | How is your personal data secured?

We take the protection of your personal data seriously and we take appropriate measures to prevent misuse, loss, unauthorized access and unwanted disclosure.

In order to be able to store and secure your personal data securely, we use security software and we take appropriate technical and organizational measures for this purpose, such as a firewall and two-factor authentication. If you notice a (security) incident or suspect that an incident has occurred, please contact us immediately via [email protected].

As indicated above, you may also find links to other websites on our websites. Although these websites have been carefully selected, we cannot be held responsible for the way in which these organisations handle your personal data. For this reason, we strongly advise you to also consult the privacy statements of these websites.

5 | What rights do you have?

Under the law, you have a number of rights in relation to your personal data. Below we explain what these rights are and how you can invoke them.

·        Right of access and information
You have the right to request information about how we process your personal data, who the specific recipients are, and also to receive copies of your personal data. There may be certain exceptions or limitations, which may prevent you from always receiving all the information about the personal data we process. 

·        Right to rectification
You have the right to have your personal data changed to ensure that this data is correct and up-to-date. You also have the right to request rectification of your personal data if third parties have provided us with this personal data and you believe that it is objectively incorrect or incomplete. 

·        Right to erasure         
In general, you have the right to request that (part of) your personal data be erased, for example when the personal data is no longer necessary for our purposes or when the personal data has been unlawfully processed. However, we will not always be able to delete your personal data because, for example, the processing is sometimes still necessary. This may be because the personal data is still necessary to comply with a legal obligation or to establish, exercise or substantiate a legal claim. For this reason, we will always first weigh your interest in the erasure of your personal data against our need to retain the personal data for other legitimate interests. Please also note that if you request that we erase your personal data, you may also no longer be able to use our services or products. 

·        Right to restriction of processing
Under certain circumstances, you can have us restrict the processing of your personal data. This is possible, for example, if the accuracy of your personal data is contested, the processing is unlawful or personal data is no longer necessary for the purposes of the processing. However, we may still use your personal data in certain circumstances, for example where your personal data is still necessary for legal claims or to protect the rights of another data subject. 

·        Notice of rectification, erasure or restriction
Unless it is impossible or involves a disproportionate amount of effort, we will inform the recipients of your personal data about the rectification, erasure or restriction of processing. 

·        Right to data portability
Under certain circumstances, you may request us to transfer your personal data, which has been provided by you, to another controller. You also have the right to receive your personal data, provided by you, in a structured, commonly used and machine-readable format, in order to transmit this data yourself to another controller. 

·        Right to object
Under certain circumstances, you can object to the processing of your personal data by us or third parties engaged by us, for example for direct marketing purposes or in the fulfilment of your order. We will consider several factors when assessing an objection to our processing, including: the legal basis; the reasonable expectations of our customers; the benefits and risks to you, us, other users, or third parties; other means available to achieve the same objective that may be less intrusive and do not require disproportionate effort. If your objection is upheld, we will cease processing your data. 

·        Withdrawal of consent
If we have asked for your consent to data processing, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of the processing of the consent prior to the withdrawal. 

·        Right to Complain
If you believe that the processing of your personal data is unlawful, you can always contact us at [email protected]. We will always try to find a solution together with you. If this is not possible, you have the right to file a complaint with the Dutch supervisory authority – the Autoriteit Persoonsgegevens. See here.

You can submit your request(s) to exercise these rights to us at [email protected]. To protect your privacy and security, we will take reasonable steps to verify your identity before responding to your request(s). Only you or someone legally authorized to act on your behalf can make a verifiable request regarding your personal data. For example, if you make a request, we will ask you to confirm your name, email address, or other information in our records in order to verify your identity. This is a security measure to ensure that personal data is not disclosed to anyone who has no right to do so.

We will respond to your request as soon as possible, but no later than one month after receipt of your request. In doing so, we also assess whether, and if so to what extent, we can or must comply with your request according to the law. If a longer period of up to two months is required, we will also inform you within one month of receipt of the request. The submission and processing of your request is free of charge, unless your request is manifestly unfounded or excessive, in particular due to its repetitive nature. We are also free to charge a reasonable fee if you request additional copies with your request for access.

6 | Changes to the privacy statement

Plato Group reserves the right to make changes to this privacy statement. We therefore advise you to check this webpage regularly. If we make material changes to this Privacy Notice, we will provide you with reasonable notice, such as by email or by means of a notice

© 2024 Plato Group B.V.