Privacy Policy

Privacy statement

Your privacy is respected by SGI Compliance, we therefore strive to protect your privacy as good as possible. We take the issue of safeguarding your information (personal data) very serious. When processing personal data, we observe the applicable privacy laws and regulations. SGI Compliance is designated as the controller for data processing based on the GDPR (General Data Protection Regulation).

This privacy statement therefore applies to all data processing carried out by SGI Compliance, last published on 26-01-2025.


In order to guarantee your privacy, we apply a number of core values:

· Inform – SGI Compliance would like to inform you as well as possible on how and why we process data. We do so through our privacy statement.
· Limited collection – We limit our collection of personal data to only personal data necessary for processing of the website and the services you use.
· Your data remains with us – We do not pass on your personal data to other parties, unless this is necessary, for example to be able to provide the service or when a legal obligation requires this of us.
· No marketing based on personal data – We do not share personal data with third parties for marketing purposes and will only send commercial communications upon your explicit consent.
· Security – SGI Compliance takes the appropriate security measures to protect your personal data and requires the same from parties that process data on our behalf.
· We respect your legal rights – Based on the applicable law you have several rights. This privacy statement informs you about them.

Categories of personal data

By using the website and the available services on it, you may leave certain information with us, which may be personal data. We only process personal data that are provided by you or, of which is clear, when stated that they are provided to us for processing.

SGI Compliance processes the following personal data:

· NAW Name and address details
· E-mailadres
· Telephonenumber
· Payment details
· Billing address
· IP address
· Job application data
· Appointment date and time

Basis of processing

SGI Compliance may only lawfully process personal data if there is a valid legal basis for doing so. SGI Compliance processes personal data exclusively on the basis of one or more of the following legal grounds:

· Performance of an agreement

Processing is necessary for the performance of an agreement to which you are a party, or in order to take steps at your request prior to entering into an agreement. This includes, for example, processing personal data to handle registrations, schedule appointments, and deliver our services.

· Legitimate interest

In certain cases, SGI Compliance has a legitimate interest in processing personal data, such as informing you about updates, changes, or developments related to our services, or for internal operational purposes, provided that your interests or fundamental rights and freedoms do not override these interests.

SGI Compliance will not process your personal data on any other legal basis unless you have given prior consent or unless such processing is required or permitted by law.

Purposes of data processing:

The personal data we collect is used for the following purposes:

· The creation of a customer file (CRM);
· The scheduling of an appointment;
· The invoicing of services and products provided;
· The recording of preferences indicated by you;
· The sending of a newsletter;
· The improvement of our services;
· The performance of other services requested by you.
· In addition, personal data may be processed and shared internally and within the group for legitimate internal purposes, such as group-wide reporting, key performance indicators (KPIs), management information, quality control and the improvement and efficient organisation of our services, based on the legitimate interest of the company.

We will not process your contact details for purposes other than those mentioned above, unless you have given your prior consent and unless required to do so by law. In addition, we treat your information confidentially and only use it to provide you with the right care.

Disclosure of personal data to third parties

SGI Compliance discloses personal data solely to parties involved in the performance of the agreement between you and our organisation, or where disclosure is required by law.

Data processing agreements have been concluded with all such parties, stipulating which processing activities may be carried out on behalf of SGI Compliance and under its authority and instructions. These parties are not permitted to process or use the data for their own or any other purposes.

In addition, we will never rent, sell or otherwise disclose your personal data to third parties for commercial purposes.

Retention periods

We will not keep your data longer than necessary for the purposes described in this privacy statement. SGI Compliance applies the following retention periods:

· Information requests and complaints: retained for 3 years following the handling of your request or complaint.
· Application details: 4 weeks after the application, with a maximum of 1 year with your permission
· Contact details: 3 years after ending of the agreement or your last contact moment
· Transaction data: 5 years after the last purchased product and services
· Financial data: 7 years

Security measures

In order to protect your data as well a possible, SGI Compliance. implemented appropriate technical and organizational measures. Like a privacy policy in which rules regarding access security, confidentiality and use of data are described.

Access to your personal data is arranged in such a wat that only authorized employees of SGI Compliance have access, insofar as it is necessary to perform their work. All employees who process or view personal data are obliged to maintain confidentiality.

Cookie

SGI Compliance uses cookies to ensure the proper functioning of its website. Cookies are small data files that may be automatically stored on or read from the visitor’s device (such as a PC, tablet or smartphone) when visiting a website. This takes place via the web browser on the device.

Cookies are used for different purposes. SGI Compliance uses the following types of cookies:

· Functional cookies Functional cookies are necessary for the proper functioning of the website. These cookies enable us to recognise your device and remember certain preferences or settings. Without these cookies, some parts of the website may not function correctly.

· Analytical cookies SGI Compliance uses Google Analytics to analyse how visitors use the website. The information collected, including the IP address of your device, is transmitted to and stored by Google on its servers.

SGI Compliance has not permitted Google to use the analytics information obtained for other Google services. In addition, IP addresses are anonymised.

Google may provide this information to third parties if it is legally required to do so, or insofar as such third parties process the information on Google’s behalf. SGI Compliance has no influence over this.

You may adjust your browser settings regarding the use of cookies at any time. You may also manually delete cookies. Please refer to your browser’s user guide for further instructions.

Your rights

If you have provided SGI Compliance with personal data, you have several rights under applicable privacy legislation.

You have the right to:

· Access

You may request insight into the personal data we process about you.

· Rectification

You may request the correction or completion of personal data if these are incorrect or incomplete.

· Erasure

You may request the deletion of your personal data, provided that we no longer need these data for the purposes for which they were collected or are legally required to retain them.

· Restriction of processing

You may request that the processing of your personal data be restricted, for example if the data are incorrect or no longer necessary.

· Objection

You may object to the processing of your personal data if such processing is based on a legitimate interest.

· Withdrawal of consent

Where processing is based on your consent, you may withdraw this consent at any time.

You can submit your request by sending an e-mail to privacy@sgicompliance.nl.
SGI Compliance will respond as soon as possible and in any case within four (4) weeks of receipt of your request.

Changes to the privacy statement

We reserve the right to amend our privacy statement. The changes will be announced on our website. We therefore recommend that you consult our website and privacy statement regularly so that you are aware of any changes.

Our contact details

If you have any comments or questions about our privacy statement, kindly contact us via the contact details below:

SGI Compliance
Marconistraat 16
3029 AK Rotterdam
Nederland
+31 (0)88 05 997 00
privacy@sgicompliance.nl