Privacy Statement

The General Data Protection Regulation (GDPR) requires Rijfers River Cruises to inform all employees and other parties involved about what happens to his or her data. This privacy statement therefore describes how Rijfers River Cruises handles personal data. How Rijfers River Cruises protects personal data, what Rijfers River Cruises does with the personal data and on what grounds this is done. In addition, you can read about your rights regarding our processing of your personal data.

We encourage you to read this privacy statement carefully. For questions you can always contact info@rijfersrivercruises.nl.

Who is Rijfers River Cruises?
Rijfers River Cruises is the private limited company Rijfers River Cruises Ltd. (B.V.), with head office at Arnhem (6825 MS) at Delta 60, registered in the trade register of the Chamber of Commerce under number 24358846.

How does Rijfers River Cruises use your data?
Below is an overview of the purposes for which Rijfers River Cruises processes personal data about you. The data that Rijfers River Cruises uses for that specific purpose is specified in each case, which is the legal basis for processing this data and for how long the data is kept by Rijfers River Cruises. To keep things organized, we have grouped everything by type of data.

Purpose: Providing our services
Data: Name and address details, E-mail address, Dossier data, Financial data, Data required to provide the service, Data generated during the service
On what base: Execution of the agreement
Retention period: As long as necessary for this purpose

Purpose: Financial administration
Data: Company name, Invoice address, Bank details (Bank name / IBAN / BIC), Outstanding balance
On what base: Legal obligation
Retention period: As long as necessary for this purpose

Purpose: Invoicing
Data: Name and address details, E-mail address, Dossier data, Financial data, Data required to provide the service, Data generated during the service
On what base: Execution of the agreement
Retention period: As long as necessary for this purpose

Purpose: Processing personnel administration
Data: Work-related data (NAW, BSN, work performance, absence / leave and labor conflict)
On what base: Legal obligation (Employment contract)
Retention period: As long as necessary for this purpose

Purpose: Processing applications
Data: Name and address details, work-related data (which patents are held), employment history, telephone number, e-mail address.
On what base: Justified interest
Retention period: As long as necessary for this purpose

How do we protect your data?
We protect your data against infringement by third parties. Therefore we have appointed our ICT supplier for the maintenance and management of our information provision. We have carefully selected this supplier and made clear agreements with them about confidentiality and security. If, in spite of our measures, it is possible that third parties gain unauthorized access to your data, we will report this to the Dutch Data Protection Authority.

How do we obtain your personal data?
Rijfers River Cruises holds data about you because you have provided that information to us.

What are your rights?
Under the European General Data Protection Regulation you have a number of rights with regard to your data and their processing:

Insight
If you want to see the personal data that has been recorded about you at Rijfers River Cruises, you can request access to it.

Modify
If you wish to make changes to the personal data you have seen as a result of a request for perusal, you can request this at Rijfers River Cruises. You can request Rijfers River Cruises to modify, correct, supplement, delete or shield your data.

Limiting the processing
In addition, under certain conditions, you also have the right to request Rijfers River Cruises to limit the processing of your personal data.

Right of objection
If a certain processing takes place on the grounds of the ‘legitimate interest’ of Rijfers River Cruises or a third party, you have the right to object to such processing.

Data transfer
You have the right to obtain your personal data from Rijfers River Cruises. Rijfers River Cruises will provide these in a structured and current form, which can easily be opened in other common digital systems. This way you can also transfer your data to another provider.

Retract permission
In all cases where the basis for a certain data processing is your consent, you have the right to withdraw that permission. This has no consequences for the past, but does mean that we will no longer be allowed to process this data. It may be that Rijfers River Cruises can no longer provide you with certain services.

Recipients of personal data
It may be that Rijfers River Cruises is obliged to provide your details to a third party, for example on the basis of a legal obligation.

What are cookies and how does Rijfers River Cruises use them?
Cookies are small pieces of (text) information that are sent to your browser when you visit the Rijfers River Cruises website and then they will be saved on the hard drive or in the memory of your computer, tablet, mobile phone or other device (hereinafter: “Device”). The cookies placed via the Rijfers River Cruises website can not damage your Device or the files stored on it. When we talk about ‘cookies’, we mean not only these small pieces of (text) information, but also comparable techniques with which information is collected, such as device fingerprinting.

Can this privacy statement be changed?
This privacy statement can be changed. We therefore advise you to regularly read the privacy statement for possible changes.

Where can you go with complaints and questions?
If you have any questions about this privacy statement and how Rijfers River Cruises uses your data, you can send an e-mail to info@rijfersrivercruises.nl. If you have complaints or compliments about the way we handle your data, please contact the management of Rijfers River Cruises. If you do not agree with the way the management of Rijfers River Cruises takes care of these data, you have the right to report your complaint to the Dutch Data Protection Authority.