Privacy and cookie statement

1.1 NetRom  

This website (www.netromsoftware.com) is managed by NetRom Software B.V. (to which we refer to as NetRom and we). NetRom is a Dutch-based digital product engineering company that services clients from all over the world. We have a deep vertical specific knowledge and our experienced team of engineers can solve all kind of digital challenges. 

NetRom is responsible for the processing of personal data as outlined in this privacy statement. NetRom is located on: 

• NetRom Software B.V., Papendorpseweg 83, 3528 BJ in Utrecht, the Netherlands 
  NetRom, Nieuwe Kade 16B, 6827 AB Arnhem, the Netherlands 
  NetRom Software S.R.L., Str. Caracal nr. 178, Craiova 200746, Romania 
  NetRom, Bulevardul Take Ionescu 50-52 ISHO Offices, Timișoara 300254, Romania 

NetRom processes personal data of the following groups of individuals: 

• (Potential) Customers 
• Employees 
• Applicants 

Below is a description for each of these groups detailing the categories of personal data we process, the purposes for which we process them, the legal basis for such processing, and the retention period we adhere to. 

1.1.1 Customers: 

For customers, name, address, and other contact details are processed for the purpose of contacting them to promote our services or to fulfil and invoice an assignment. The legal basis for this is legitimate interest or an existing contract. The retention period for customer data is 7 years after the last contact. 

1.1.2 Employees: 

For employees, name, address, contact, salary, ID, and personal development data are processed for the purpose of fulfilling the employment contract and fostering professional development. The legal basis for this is the employment contract. The retention period for employee data is 7 years after the last contact. 

1.1.3 Applicants:

For applicants, in addition to name, address, and other contact details, application data (such as resumes) are processed for the purpose of assessing the suitability of candidates. The legal basis for this is the consent of the data subject. The retention period for applicant data is 1 year after completion of the application process. 

1.2 Disclosure of your personal data to third parties

We do not generally disclose your personal data to third parties. However, data disclosure occurs if necessary to fulfil the agreement between you and us and/or if a legal obligation requires us to do so. 

1.3 Events and Workshops

During events and workshops, we manage the creation and use of photos and videos selectively and with integrity. We use these photos and videos for documenting our events and workshops and may use them for online publications on our website and LinkedIn. Prior to our events and workshops, participants are asked for their consent. If a participant does not wish to be photographed, this will be communicated to our internal Privacy Coordinator prior to the event or workshop (contact details can be found at the bottom of this privacy statement). 

1.4 Accessing, correcting, or deleting data

You have the right to access, correct, or delete your personal data. Additionally, you have the right to withdraw your consent for data processing or object to the processing of your personal data by NetRom and you have the right to data portability. This means you can request us to send the personal data we have to you or another organization specified by you. 

You can send a request for access, correction, deletion, data transfer of your personal data, or a request to withdraw your consent or object to the processing of your personal data to gdpr@netrom.nl. 

To ensure that the request for access is made by you, we ask you to provide a copy of your identity document with the request. In this copy, please black out the photo, MRZ (machine-readable zone, the strip with numbers at the bottom of the passport), passport number, and Citizen Service Number (BSN) to protect your privacy. We will respond to your request as soon as possible, but within four weeks. NetRom also wants to point out that you have the possibility to lodge a complaint with the national supervisory authority, the Dutch Data Protection Authority. This can be done via the following link: https://autoriteitpersoonsgegevens.nl/een-tip-of-klacht-indienen-bij-de-ap. 

1.5 Automated decision-making

NetRom does not make decisions based on automated processing about matters that can have (significant) consequences for individuals. This refers to decisions made by computer programs or systems, without the involvement of a human (e.g., an employee of NetRom). 

2.2 Cookies

2.2.1 The essence of cookies

We use cookies on our website. Cookies are small files, which we send from our website. Your browser stores these files on your computer. They remember your preferences. Cookies are generally used for gaining insight by us and potentially third parties into activities on a website. The cookies that we use, including their use-cases and purposes, are described below.

We make a distinction between the following types of cookies:

2.2.2 What our cookies are doing

We use Functional and Analytical cookies to better understand how visitors use our website, and ultimately improve the quality of our website. We do this by storing user preferences in cookies and by tracking user trends and patterns of how visitors navigate our sites. We use this information to count the number of visitors, to understand the popularity of our content, and to see how people use our website. We also use Social media cookies to help us determine how Social media users find our website through advertisements displayed on the platform, and to optimize those campaigns. Our website uses “third party” cookies (cookies set by a third party website that provides a service for NetRom). The table below describes the web tracking cookies used by the website. 

A cookie has a certain validity period starting from the moment it is stored on a device you use and may, depending on the cookie, be renewed automatically if you visit the website again. After the validity period has lapsed, the cookie will be deleted by your browser. See the table below for a full overview of the validity periods per type of cookie we use: 

2.2.3 Which data do we collect with our cookies

We collect the following data with the log files from the placement of cookies:  

• Language settings;  
• Web pages and downloads requested;  
• IP-address (the traceability of visitors is limited as much as possible by anonymizing the last digit groups of each IP address;  
• User agents (browsers, operating system);  
• Devices used (type, brand); 
• Location (based on anonymized IP addresses); 
• Search terms used to arrive at our website via external search engines; 
• Links used to get to our website (referrers); 
• Pages visited by users (to gain insight into the popularity of website content). 

2.2.4 Specific types of cookies we use on our website. 

2.2.5 Heatmapping

Alongside cookies NetRom uses heatmapping techniques to gain a clearer insight into how our website is used. Heatmapping is different from cookies as the technology behind it does not place small tracking files in your browser. Instead, the technology behind mapping only tracks your anonymous behavior on our website. 

For the purpose of heatmapping we use the third party listed below: 

2.2.6 Your consent

By using the NetRom website, you agree to the placement of cookies in your web browser for statistical purposes for which consent is not required. Under no circumstance will NetRom use your personal data, derived from the placement of cookies, for purposes other than the specified purposes that are stated in the table above. Most browsers are standard set to accept cookies automatically. You can set your browser to refuse all cookies or to notify you when a cookie is being sent. Note that some features or services on our websites may not work properly without the use of cookies.

3.1 How to use your rights 

If you wish to assert your rights, provide feedback, or inquire about how to uphold your privacy rights, please reach out to the colleague you previously communicated with or click on the ‘Contact’ link on the NetRom website. Alternatively, you can refer to our contact details, including information on how to reach our Data Protection Officer (DPO). 

3.2 Security Measures

NetRom takes the protection of your data seriously and implements appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure, and unauthorized alteration. If you believe your data is not properly secured or there are indications of misuse, please contact us using the contact details below. 

About this Privacy Statement:

This privacy statement applies to NetRom Software B.V. This statement is subject to change to keep it current. Revisit our Privacy Policy section from our website www.netrom.nl to check for updates to the current policy. Latest versions of this policy will be presented here. 

Contact Information: 
NetRom Software B.V. 
Papendorpsweg 83 
3528 BJ Utrecht 
Phone Number: 0031 3078 201 11 
www.netrom.nl 
gdpr@netrom.nl 

NetRom Software B.V. is registered under Chamber of Commerce number 20126119.