Privacy statement

CCS offers innovative software solutions for the insurance industry. Thanks to the powerful combination of knowledge about the industry and experience in ICT, we assist our customers in competing in the complex and demanding insurance world. CCS processes personal data as part of our products and services.

In this privacy statement we describe which personal data we process and for what purpose. The retention periods will be brought up and then the security of personal data. The sharing of personal data with other parties is also discussed, as well as the use of cookies. Finally, a section follows with an explanation of your rights as a data subject and how to, if so desired, contact CCS about this.

It is important to us that it is clear to you how we handle personal data so that you can be confident that your data are in good hands with us. That is why we make every effort to protect your privacy. The rules for the protection of your privacy were established in the General Data Protection Regulation (hereinafter referred to as: GDPR). A correct implementation of the GDPR is very important to CCS.

Certain terms are used in this privacy statement that require further explanation. Below you can read what we mean with those words:

Personal data: any and all data that can be traced to a person, a so-called data subject. Examples are your name, address, telephone number and bank account number. Sometimes we anonymise your personal data so that you can no longer be traced as a person. A data subject can be a customer, an employee of a customer or business relation or another person whose personal data are being processed.
Process: everything that can be done with personal data. For example, the collection but also the retention, use and erasure of data.

Who processes your data?

The personal data are processed by: Combined Computer Services C.C.S. B.V. - Vijzelmolenlaan 9 – Woerden, The Netherlands, CoC 30089418.

What personal data do we process?

We process personal data in various ways:

Through our website (www.ccs.nl):
Information that we obtain through your use of or your visit to our website: contact details, including name, company name, email address, IP address, telephone number, user name and password of the portal account, but also information of your web browser (e.g. browser type and browser language), internet provider (ISP), operating system, date/time stamp and click-stream data and the actions that you undertake on our website (e.g. the web pages visited and the links clicked). And we also process your preferences for certain products and services.

In relation to our software and services:
Personal data to which a select number of employees of CCS shall have access or shall be able to consult in the context of the provision of these services: name and address details, telephone number, email address, date of birth, nationality, gender, BSN, IBAN, copy of identity document, employment details (start/end of employment, type of agreement, position, employee number), employment history, salary details (national insurance salary), details in the context of the Dutch Eligibility for Permanent Invalidity Benefit (Restrictions) Act (NL: Wet verbetering poortwachter), details regarding health, medical details, social benefits history, details regarding incapacity to work (Dutch Work and Income (Capacity for Work) Act (NL: WIA)), CoC details, VAT number, insurance details, financial qualifications, billing information (e.g. a billing name and address), details of partner and children, debts, WOZ values, pension details.

In addition, we receive information about the employees of customers who use our software and services: e.g. name, company name, date of birth, postal address, email address, IP address, telephone number, user name and password of the user.

In the event that, in the context of the provision of certain services, we have access to personal data, a data processing agreement was concluded with the customer.

In relation to job applicants:
Personal data that are made available to us for the benefit of an application, e.g. name, date of birth, address, telephone number, nationality, marital status and all other personal data included in the application.

Whose personal data do we process?

We process personal data of persons with whom we wish to have, have or had a relationship, such as:

private leads and prospects of customers (or of the client of the customer);
privately insured parties and clients of customers;
employees of our customers;
third parties: parties from whom claims are recovered;
visitors of our website;
persons who are linked to a business or organisation with which we have a relationship.

For what purposes do we collect personal data?

We process your personal data for the following purposes:

for the use of our products and to render our services;
for marketing and business development activities, such as newsletters, invitations for our events and other marketing communication that may be relevant;
to handle an application or registration for recruitment add or events;
for invoicing and payment;
for improvement of our products and services;
to comply with our legal and statutory obligations;
to generate statistics regarding the use of the website and/or to analyse and improve the website.

We process your personal data on the basis of one or more of the following legal grounds:

the implementation of an agreement;
compliance with a statutory obligation;
a justified interest;
your consent.

Retention period

We do not retain your personal data longer than required for the realisation of the purposes mentioned in this privacy statement or for compliance with legislation and regulations.

In the event that personal data are processed and retained by us through or from customers then those shall be retained as long as determined by the relevant customer. Personal data shall basically be destroyed after the use of the CCS software and services rendered by CCS have definitively come to an end (without keeping a copy of the same), unless the customer gives us different retention instructions.

With whom do we share your data?

For the purposes described in this privacy statement CCS can share your personal data with a company that belongs to the group of CCS.

Your personal data can be shared with third parties. It goes without saying that we shall not do this without a good reason. Namely, for some activities we engage third parties. For example the hosting provider where our data are stored and retained. We also use the email marketing services of MailChimp and the web integration services of Zapier. We only use third parties who take appropriate security measures to protect your personal data. They may not use your personal data for their own marketing activities. To safeguard this, we conclude data processing agreements with these parties. CCS remains responsible for these processing activities.

Third parties can be:

Regulatory authorities and other official authorities, to comply with statutory obligations.

External suppliers in connection with the processing of your personal data for the purposes mentioned in this privacy statement, such as ICT suppliers, suppliers of communication services or other suppliers to whom we outsource certain supporting services.

Transfer of your personal data to the aforementioned third parties only takes place for the purposes mentioned in this privacy statement and exclusively on the basis of the grounds mentioned in this privacy Statement.

Your personal data shall not be transferred to a recipient in a country outside the European Economic Area.

Security

We have taken appropriate technical and organisational measures to secure your personal data against unauthorised or unlawful processing and against loss, destruction, damage, alteration or disclosure.

If you have questions about the security of your personal data, or if there are indications of abuse, then you are requested to contact us via compliance@ccs.nl

Rights of the data subjects

The rights of data subjects include, inter alia:

The right to information - This means that you can submit a request to obtain the personal data that we processed of you. In this respect you should take into account that circumstances may occur when we are held, on the basis of an agreement with our customers, not to personally comply with your request for copies of personal data but, instead, to refer you to said customer.
The right of correction or improvement of your data, if those are incorrect or incomplete;
The right to erasure of your personal data - In this respect you should take into account that circumstances may occur where we are held to retain your data in order to comply with our legal and statutory obligations.
The right to object to or to request restriction of the processing of your personal data - Again, circumstances may occur where we are legally not allowed to comply with your request.
The right to revoke consent given – Again it is noted that circumstances may occur where we are authorised to continue processing your data, in particular if the processing of thereof is a requirement to comply with our legal and statutory obligations.

Cookies

Cookies are used on the website to improve the online services. Your IP address is processed via cookies. A cookie is a small text file that is sent with the pages of a website and that is stored on your computer, tablet or mobile telephone by the browser. We use cookies to offer more service when visiting our website, which consequently becomes easier to use.

Functional cookies - Cookies ensure, for instance, that you can stay logged in on a website portal or that your preferences, e.g. location and language settings, are remembered. Thanks to cookies we can see how often our website - and what pages - is consulted by visitors.

Cookies for website statistics - We use Google Analytics to analyse the visit to the website and to thus make the site ever better for our visitors. These data are stored anonymously and can consequently not be traced to who you are. They are only used to analyse visits to our site. How Google handles these data is in conformity with its own terms and conditions. Said terms and conditions are beyond our control.

Next to that we use the marketing automation tool Hubspot to collect details about your behaviour on our website and to process the personal data that you personally make available. The supply of those data ensures that CCS can offer an optimal website experience, can potentially seek contact and can provide information about our services and activities. By browsing on our website, you agree with the privacy policy of Hubspot.

Consent - Consent is required for the placing of certain cookies before these cookies can be used. That consent is not required if and to the extent when technically necessary (functional) cookies and analytical cookies are used, within the meaning of the applicable legislation, e.g. article 11.7a sub 3 of the (Netherlands) Telecommunications Act.

We encrypt any and all data that you share with CCS through the website with SSL security on the basis of an https protocol. These data are stored in the database of the CRM system of CCS.

Social networks and privacy - Links are included on our website to be able to promote or share pages, messages or notifications on social networks like LinkedIn and Twitter. This functionality is supplied by LinkedIn and Twitter. For more information about this, read the privacy statement of LinkedIn and Twitter. In addition, we use the Insight Tag of LinkedIn and a facebook pixel to measure the performances of our LinkedIn and facebook referrals and to show previous visitors of our website advertisements that are in line with their interests based on previous searching behaviour.

You can block the use of cookies by changing the settings in your web browser. However, this may affect the operation of our website.

Change of privacy statement

CCS can change this privacy statement. We will do that, for instance, if legislation or our policy changes. We therefore recommend regularly consulting the Privacy Statement again when visiting our website. You can find a link to the latest version of our Privacy Statement at the bottom of our website. The latest version is dated March 23, 2020.

Contact

If you would like further information or if you have questions or complaints about the processing of your personal data then you can contact us via: compliance@ccs.nl, for the attention of the Privacy Officer and/or via PO Box 426, 3440 AK Woerden, The Netherlands.