HES Privacy Statement
HES International B.V. and all its direct and indirect subsidiaries ("HES”) possess and will collect personal data about you both prior to, during and after your affiliation with HES. HES respects your privacy and will treat your data in compliance with the applicable employment laws and data protection laws, including the General Data Protection Regulation. In this policy we describe how and for what purposes HES collects and uses your personal data.
The companies processing your personal information are:
HES International B.V.
HES collects and handles personal data in relation to (potential) clients, visitors and website visitors.
Personal data, or personal information, means any information relating to an identified or identifiable natural person. Depending on the circumstances, we may collect, store, and use (all together: process) information that you give us (for example by filling in forms on our website or corresponding with us by phone, e-mail or otherwise) or information that we collect from you (for example, when you visit our website (www.hesinternational.eu) the web server collects some basic information such as your browser type). The personal data that we process may include the following categories of your personal information:
This personal data will be updated from time to time, for example by receiving new information from you directly. It is important that the personal information we hold about you is accurate and up-to-date. Please keep us informed if your personal information changes during your working relationship with us.
We will only process your personal information when the law allows us to and/or requires us to do so.
We are required by law to have a ground set out in the law to process the information we hold about you. Our processing of your personal information is based on the following legal grounds:
We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.
If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
We will only process your personal information as necessary so that we can pursue the purposes described above, and then only where we have concluded that our processing does not prejudice you or your privacy in a way that would override our legitimate interest in pursuing those purposes.
In exceptional circumstances we may also be required by law to disclose or otherwise process your personal information.
We will tell you, when we ask you to provide information about yourself, if provision of the requested information is necessary for compliance with a legal obligation or, on the other hand, if it is purely voluntary and there will be no implications if you decline to provide the information. Otherwise you should assume that we need the information for our business or compliance purposes (as described below).
The company collects and processes personal information:
Determining or agreeing with you (or your employer or a company related to you) the terms on which we work together.
Some of the above grounds for processing will overlap and there may be several grounds which justify our use of your personal information. We may from time to time review information about you held in our systems – including the contents of and other information related to your email and other communications with us – for compliance and business-protection purposes as described above.
Your emails and other communications may also occasionally be accessed by persons other than the member of staff with whom they are exchanged for ordinary business management purposes (for example, where necessary when a staff member is out of the office or has left HES).
When our request for your personal information is a legal or contractual obligation, or a requirement necessary to enter into a contract, and you fail to provide that personal information, the consequence could be that you are not allowed to enter our offices, we cannot enter into a contract with you (or your employer or a company related to you) or we have to suspend the execution of our contract with you (or your employer or a company related to you).
We may share your personal information with other entities within the HES International group as part of our regular reporting activities on company and/or group performance, in the context of a business reorganisation or group restructuring exercise, for system maintenance support and hosting of data. We may also share your personal data with a person who takes over our business and assets or relevant parts of them.
In exceptional circumstances, we may also share your information the competent regulatory, prosecuting and other governmental agencies, or litigation counterparties, in any country or territory.
We do not transfer your personal information outside the European Economic Area.
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They may only process your personal information on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
HES aims to only collect the minimum amount of personal data required. We will only keep your personal information for as long as necessary to fulfil the purposes we collected it for. The specific period depends on the reason why we have your personal data. We determine this period in line with the HES Document Retention Policy.
In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you. Once you are no longer an employee, worker, contractor or candidate or an individual working at a clients or potential client of ours, we will retain and securely destroy your personal information in accordance with applicable laws and regulations.
Under certain circumstances as defined by law, you have the right to:
If you want to make use of any of these rights, you may contact our Compliance Officer at firstname.lastname@example.org. You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
If you have any (possible) concerns on this privacy statement you may report these to the Deputy Chief Compliance Officer (email@example.com). You can also contact the local compliance officer in case of any questions or requests.
You also have the right, at any time, to lodge a complaint about our processing of your personal information with a data protection authority. The relevant contact information can be found here: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm.
This privacy statement will be reviewed by regularly and in addition may be reviewed from time to time to take account of, for example, changes to legislation, regulatory developments and organizational changes.
A new privacy statement will be provided to you when any substantial changes are made. We may also notify you in other ways from time to time about the processing of your personal information.