PRIVACY POLICY/CERTIFICATIONS
Privacy and cookie statement statement paraDIGMA groep B.V.
This privacy and cookie statement was last updated on November 1, 2021.
Our vision of privacy and the protection of your personal data
In order to properly support you and the organization you work for, paraDIGMA employees need data from you. This data is of a confidential nature. ParaDIGMA therefore strictly sees to it that your data is protected and that only authorized persons can view your data. We can imagine that you would like to know more about exactly how we have arranged this. The protection of your personal data is central to everything we do. For example, paraDIGMA groep has appointed a Data Protection Officer to ensure that paraDIGMA groep acts in accordance with applicable privacy legislation. In our privacy and cookie statement, we explain who is allowed to see your data, how we process your data, how we store it and how long it is kept.
What personal data do we process and for what purpose do we process your data?
ParaDIGMA holds data on every employer who is a client of one of our labels. We also have data of every absentee employee who is employed by this employer or of employees who have been absentee before (but only during the period that the employer was a client of ours). Thus, this may also apply to your data. It can be divided into three types of data:
- Details of your employer such as organization name, address, industry and contract number;
- Information about yourself such as your name, address, gender and date of birth;
- Confidential data such as your citizen service number, sick report(s) and results of consultations with employer, practitioners and the UWV. There may also be personal data included that comes from your family doctor or specialist, but this is only the case if you have given permission to provide the data to paraDIGMA.
The various labels within the paraDIGMA groep, such as De Arbodienst, PSION, Resolu and PDG Health Services use employees of paraDIGMA groep B.V. for support services. This includes front and back office and administrative work. Like the medical secretariat, the front and back office of paraDIGMA groep B.V. work under the delegation of a company doctor. Thus, the employee concerned may process your medical information in the context of absence supervision or preventive services.
ParaDIGMA may therefore use your personal data, among other things, for working conditions care at your employer, guidance on sick leave, reintegration and to meet our legal obligations. We may do this on behalf of your employer, with your consent, but we may also have a legitimate interest or need to comply with legal obligations.
In addition, we process personal data when you visit one of our locations. This can happen in a variety of ways:
- Through the use of camera images. Naturally, only a limited number of colleagues have access to these images from their position. Moreover, they only view the camera images when there is a concrete reason to do so, such as when an incident has occurred or to verify the accuracy of a received complaint or liability claim.
- Through visitor registration. When you report to the front office at one of our locations, we record your name and your time of arrival and departure. We process this information to record the proper course of an appointment and to act appropriately in case of emergencies.
How is your data stored by paraDIGMA and for how long?
Your information is kept securely in our own digital records and/or absence system with a segregated section accessible only to the professional involved. This ensures that we can quickly look up or update information. The absence system can only be accessed by certain employees of paraDIGMA groep. They need personal authorization to view those parts of a file for which they are authorized. The absence system can to some extent be linked to other systems, for example for administrative matters such as passing on the sick report from your employer to paraDIGMA. However, there is no link with the medical part of the system.
There may be records about you or your employer. This data is kept by paraDIGMA in a closed, secure archive.
The medical part of your occupational health record is subject to a statutory retention period of 20 years. Generally, other personal data is kept for two years after leaving employment or until the data is no longer necessary for our legitimate purposes. Once the retention period has expired, the data will be deleted from the file as soon as possible.
By law, we are required to keep financial records for seven years from the end of the calendar year.
We retain camera images for up to four weeks. Visitor registration forms we keep only that same business day.
Who can see your data and what personal data do we provide to third parties?
Not every employee of paraDIGMA may view your records. The professional who supervises you may see your medical records. In addition, other employees who work under the responsibility of the professional may see certain data about you. During their contact with you, they collect data on, for example, your illness report. This allows the professional to do his or her job better.
It may happen that the professional engages experts. In such a case, the information needed by the expert to perform his/her work may be shared with him/her, provided you have given your consent. In addition, our front and back office have access to your data, for example to report you ill.
Strict rules apply to providing your information to your employer. Only limited information can be provided to your employer. It concerns only those data that the employer needs to be able to shape the reintegration, such as the conclusions of the professional about your ability to resume your work and the guidance agreements made with you. In addition, your employer receives general information about absenteeism within the organization. This does not reveal the reason for an individual employee's absence. In accordance with the guidelines of the Personal Data Authority, we do not provide medical information to your employer.
It may also be necessary for us to provide certain of your data to the Employee Insurance Administration Agency (UWV), absenteeism insurers and the Netherlands Center for Occupational Disease. Should we find it necessary to provide data to other parties, we will only do so on behalf of your employer.
ParaDIGMA group only shares your personal data with third parties when this is permitted under current legislation. This means that we have a basis, we engage the third party as a supplier for the purpose of service provision or if a third party is part of the paraDIGMA groep. The parties that may process personal data on our or your behalf are:
- IT suppliers and service providers
- Payment service providers
- Cookie Suppliers
- Telecom vendors
- Engaged consultants and intermediaries
paraDIGMA groep may further share your personal data with data controllers that are part of the paraDIGMA groep, based on a legitimate interest for internal administrative purposes within the group, or if this is necessary to perform the agreement with you. Within the paraDIGMA groep , your personal data will be anonymized for analytical purposes. The foregoing means that your personal data may be viewable by employees of other entities within paraDIGMA. The employees of these entities will only be granted access to your personal data to the extent necessary by virtue of their position. Naturally, all employees will handle your data with care and other entities will not use the personal data for other purposes without a basis for doing so.
How do we secure your personal data?
paraDIGMA groep takes appropriate technical and organizational measures with respect to the personal data processing to be performed, against loss or against any form of unlawful processing (such as unauthorized access, impairment, modification or disclosure of the personal data). Examples of measures we have taken are authorizations we have set up and two-factor authentication to access our systems.
Processing personal data through the contact form on our website
When you send an e-mail, submit a completed contact form or otherwise contact us, you are accepting our offer to engage with us. We use the information you send to us in your e-mail or through the form to contact you. We keep this information for as long as we deem necessary for this contact.
We use reCAPTCHA to prevent abuse of our login forms by sending spam. By indicating that you are not a robot, we verify:
- How quickly the form is completed;
- What mouse movements you make while filling in;
- The IP address of the person filling out the form.
This data is analyzed by Google LLC. From this, Google determines whether they are dealing with a legitimate visitor or a robot. A legitimate visitor only has to click a check mark, confirming that he or she is not a robot. The message can then be sent to the recipient via the form. For more information, please see Google's privacy policy.
The Different Thinking Symposium and other meetings
When you register through our website for one of our meetings, such as the Anders Denken Symposium, we process your contact information to process your registration for the meeting and to keep you informed about the meeting. You can unsubscribe via any email you receive about this. You may also contact us using the contact information at the bottom of this statement.
Newsletter
If you want to stay informed about new developments, you can subscribe to the newsletter of the paraDIGMA groep. You will receive the newsletter until you unsubscribe. With every newsletter you receive, it is possible to unsubscribe via a link in the email. You can also contact us using the contact information at the bottom of this statement.
Apply
Have you responded to one of our vacancies or submitted an open application? If so, we will process your personal data in order to process your application and in preparation for the possible conclusion of an employment contract. For this purpose we use your title, name, contact and address data. In addition, we may process your date and country of birth, CV, cover letter, salary indication, availability, a Certificate of Good Conduct and any references.
We will retain your application data for up to six weeks after the position is filled. We keep this data so that we can contact you in case the position becomes available again within the probationary period. If we cannot offer you a position at this time, we may - with your consent - keep the application data for an additional year. You can withdraw your consent at any time by sending us an e-mail. If you join us, we will keep your application data in your personnel file. This file is kept for as long as necessary and, with regard to application data, for up to two years after employment.
The use of cookies on our website
Social media
Our website includes a social media button from LinkedIn. Using this button, you can choose to indicate through your own social media account at LinkedIn that you are interested in our products and services or to share our page with your network. This will then be visible to the visitors of your personal LinkedIn page. If you click this button, one or more cookie(s) for your recognition may be placed by LinkedIn. The use of LinkedIn is subject to the privacy statement of LinkedIn.
Google Analytics and Google Tag Manager
On our website we use Google Tag Manager cookies, these allow us to load scripts from other cookies. Google Tag Manager is purely functional and is not used to collect.
We also make use of Google Analytics. This tool helps us understand visitor behavior and improve the user experience based on this information. The information obtained, including part of your computer's address (IP address), is transferred to Google and stored by Google on servers in the United States. The last part of the IP address is not visible and the cookies expire within two years after the session.
We have set up Google Analytics to be privacy-friendly, which means that we have established agreements on how to handle the data collected. In this, we have not allowed Google to share the obtained information with or use it for other Google services. Google may, however, provide information to third parties if Google is legally required to do so, or insofar as these third parties process the information on Google's behalf. We have no influence on this. More information about data processing by Google Analytics can be found in Google's privacy statement.
Google claims to adhere to Privacy Shield principles and has joined the U.S. Department of Commerce's Privacy Shield program. Until recently, joining the Privacy Shield program meant that there was an adequate level of protection for the processing of any personal data. However, with the EU Court of Justice ruling of July 16, 2020 (Schrems II case), this Privacy Shield has been declared invalid. We are currently exploring how best to overcome this. We are very committed to privacy and are trying to do everything we can to reach an appropriate solution. If we have a suitable solution, we will inform you about it via this privacy and cookie statement. Do you have any questions about the processing of your personal data? Please contact us, using the contact details in this privacy and cookie statement.
What privacy rights do you have?
If you have any questions or want to know what personal data we hold about you, you can always contact us using the contact information below.
In addition, you have the following rights:
- Get an explanation of what personal data we have and what we do with it
- Insight into the exact personal data we hold
- Getting incorrect personal data corrected
- Getting rid of outdated personal data
- Withdrawal of consent
- Objecting to a particular use
- Having the processing restricted
- Transferring (or having transferred) personal data
With your request, we may ask you to identify yourself. We request information for this purpose to ensure that you are the correct person to whom the personal data belongs.
In principle, we will comply with your request within 30 days. However, this period may be extended for reasons related to specific privacy rights or the complexity of the request. If we extend this deadline, we will notify you in a timely manner.
If you wish to exercise any of your rights you can make this known using the contact information at the bottom of this page.
Changes to this privacy and cookie statement
When our services change, we naturally also need to update our privacy and cookie statement. Therefore, please check this privacy and cookie statement regularly for the most up-to-date information.
Personal Data Authority
Of course, we are also happy to help you if you have complaints about the processing of your personal data. Are you still not satisfied with how your request is handled? Then you have the right to file a complaint with the Personal Data Authority. You can do so here.
Contact details
For questions about your data, how we handle it, or about this privacy and cookie statement, please contact us using the contact information below.
Address: Fultonbaan 56-60
3439 NE Nieuwegein
Website: www.paradigma.nl
Chamber of Commerce number: 20071621
E-mail: servicedesk@paradigma.nl
Email FG: privacy@paradigma.nl