By using any of our websites and/or services, we may collect, use, disclose and retain your personal information as described in this statement.

We collect your personal data in the following cases:

• When you sign up for a newsletter or register for a seminar;
• When you read an e-mail message from us;
• When you visit our website;
• When you use our (legal) services;
• When you respond to a vacancy and enclose your CV.

We collect the following personal data:

When you visit our website and/or use our website, we automatically collect the data sent to us by your computer, mobile device or other device you access. This data may be collected using cookies. To the extent this data is collected using cookies, in addition to this section, the Cookies section applies. The personal data that we collect include:

• browser data;
• duration of your visit;
• pages you visit;
• links you click on;
• location data based on your IP address;
• connection data, such as IP address.

We process your personal data by providing services (for example, the data provided to us via email, phone, or during a conversation). The personal data we collect include:

• (company) name;
• address;
• zip code;
• gender;
• place of residence;
• country;
• phone number;
• year of birth;
• e-mail address;
• financial data;
• identity information;
• language choice;
• other data.

How we use your personal data:

We base the processing of your personal data on the following bases:

• A. in fulfillment of agreements with you (e.g., provision of legal services);
• B. in pursuit of our legitimate interests. Our legitimate interests are:
  1. marketing purposes;
  2. improving and optimizing our services;
  3. litigation;
  4. securing and managing our systems.
• C. in fulfillment of legal obligations (if necessary);
• D. on the basis of unambiguous consent.

We process your personal data for the following purposes and bases:

Basis(s).:	Purpose:
	Cont(r)act:
A	The performance of a service contract entered into by you.
B1	Approaching you for marketing purposes targeting our services and products.
A,B1,B2, B3 or C	Contacting you via email, text message or telephone.
A,B1,B2, B3 or C	responding to questions, comments and handling complaints.
	Billing:
A, B3	Billing and taking collection action if necessary.
	Product and service development:
B1,B2, B4	finding out who uses the website, how the website is used, assisting in use, developing the website.
B1,B2	tailoring services, content and advertisements to the user.
	Fulfilling obligations under laws and regulations:
C	Meeting obligations under laws and regulations.
B2, B3, B4 and C	Detection of (attempted) unlawful and/or criminal conduct directed against BANNING, its customers and employees, as well as for participation in warning systems used to prevent fraud and manage credit risks.

Provision of your personal data to third parties:

We use the services of third parties to process your personal data. These third parties act as processors for BANNING. Your personal data are processed by our processors on secure servers within the EU. In accordance with European and Dutch privacy regulations, BANNING has concluded processor agreements with all its processors. Below is a list of our processors:

Processor:	Processor job description:
Savvy	Website hosting
MailChimp	Facilitating mail system
(Other) IT service providers	Facilitating IT services
Financial service providers	Facilitate financial services

BANNING will not provide your personal data to other parties.

We will not disclose your personal data to law enforcement, other government officials or other third parties without a court order or formal request from the government in accordance with applicable law, unless BANNING believes in good faith that the disclosure of information is justified.

Retention periods:

We will retain your data for no longer than is necessary for the fulfillment of the purposes for which it was collected and processed. We will also delete your data if it is found to be out of date or if the data subject himself requests its deletion. Previous retention periods do not apply if there is a legal exception, or in case we need this data longer for our services or a dispute.

Security of your personal data:

We will take all reasonable organizational and technical security measures to secure your personal data and protect it from loss and improper use or modification.

Links to other websites:

Our website contains links to third-party websites that may have different terms and conditions for processing your personal data. We are not liable for the processing of your personal data through such third-party websites.

Rights of data subjects:

You have the right to request BANNING to access your personal data. If you submit a request, we will provide you with an overview of all the personal data we hold about you.

If you suspect that the personal data contain inaccuracies, or have been processed incorrectly, you may ask us to correct, supplement or delete this personal data. You may also request us to restrict the personal data processing, as well as request us to transfer your personal data to another controller. Objections and requests to inspect, modify, delete or transfer your personal data will be handled by us in accordance with the law, subject to exceptions, within four weeks. You may also request the deletion or blocking of your personal data. You have the following options for this:

By post:	By mail:
BANNING N.V. Spinhuiswal 2 5211JG 's-Hertogenbosch	privacy@banning.nl
By phone:	Opt-out:
+31 73 692 77 77	Through the available opt-out options in the mailings (for marketing purposes).

Complaints:

If you have a complaint or any other question regarding the processing of your personal data, please send an e-mail message to privacy@banning.nl. Please include as much information as possible about your complaint or question. We will process complaints and questions and respond within four weeks. We make every effort to provide you with the best possible service. If you are not satisfied with the handling of the complaint, you can contact the Personal Data Authority and file a complaint if you wish.