Privacy Policy

Through this privacy statement, MarshBerry (hereinafter: “MB” or “we/our” ) wishes to inform the person of whom it collects, uses and stores (processes) personal data. These persons include people who apply for a job at MB, business contacts, vendors, persons working for prospective target companies, our clients and their representatives, employees and/or shareholders, as applicable. MB shall qualify as a data controller for such processing activities. In this statement, we use the word “you” to refer to anyone within the scope of this statement.

PERSONAL DATA – HOW WE COLLECT IT

Personal data is any information relating to an identified or identifiable natural person, such as you. We use personal data on a day-to-day basis to run our business, provide our services, enter into a contract, and to protect our interests.

We collect personal data when you provide it to us, or when we collect it from you, for instance in the course of your dealings with us, because you use certain services or because your information is included in our, our customers’ or our vendors ‘ invoices, contracts, business documentation, files or systems. We may also receive it from talent agencies or recruitment agencies, in the context of recruitment.

Depending on the processing activity, the information we process in relation to you may consist of:

1. In relation to job applicants: resume, motivation letter, background check, references, public internet profile
2. First and last name;
3. Job title, function within a company or group of companies and any information relating to you in public registers;
4. Phone number;
5. E-mail address;
6. Nationality;
7. Address;
8. Your communication preferences;
9. Data regarding your equipment, such as an IP address;
10. Information regarding your employer, employment or client.
11. Other information relevant for the particular service you engage us for, or for the purpose of your contact with us.

It is mandatory to provide certain personal data for us to be able to provide you with our services, as applicable. If you do not provide the personal data which is marked as mandatory from time to time, we may not be able to provide you with our services, for instance if you refuse to provide information that we need for mandatory checks.

PERSONAL DATA – WHO HAS ACCESS TO IT

Access to personal data relating to you is limited. It is MB’s policy that persons within the organization should only have access to personal data on a need-to-know basis.

In some cases we share personal data with third parties. MB may share your personal data with:

1. Internal departments that are involved in handling a transaction to which you are – directly or indirectly – a party, such as Finance, Sales, Marketing, Operations;
2. Customers, suppliers or service providers of MB, acting as data processor or data controller, such as hosting providers, IT service providers (supporting our website or content generation), and external advisors, accountants and lawyers;
3. Supervisory authorities and other governmental bodies, to comply with legal obligations;
4. Third parties involved in a transaction (such as mergers or acquisitions) pursuant to which (a part of) our business is sold or transferred.

We will only transfer your personal data to the above mentioned third parties for the purposes stated in this privacy statement, and only to the extent that is permitted under the applicable data protection law, or if you have consented thereto.

Third parties to whom we transfer your personal data are themselves responsible for compliance with data protection law, unless they act as our data processor. We are neither responsible nor liable for the processing of your personal data by third parties if they act as an independent data controller.

INTERNATIONAL TRANSFERS OR PERSONAL DATA

In connection with our business and for administrative, management and legal purposes, when processing data in line with this statement we may transfer your personal data to a recipient who is outside the EEA (including to the United States), such as in the case of document archiving. If we transfer personal information outside the EEA, for instance to our parent Marsh, Berry and Company, Inc., we will put in place appropriate safeguards in accordance with our legal obligations to ensure that your personal data is adequately protected irrespective of the country to which it is transferred. These safeguards may include obtaining contractual assurances from any third party given access to your personal data that your personal data will be protected by standards which are equivalent to those that protect your personal data when it is in the EEA.

If you would like to know more about the safeguards implemented to protect personal data when it is transferred outside the EEA, please contact Olaf Werkhorst at email: olaf.werkhorst@marshberry.com.

LEGAL GROUND FOR PROCESSING

Under data protection laws, we are allowed to process personal data only if we can rely on one or more of the legal grounds for processing. The legal grounds we are most likely to rely on for processing personal data in relation to you are:

• Consent – ​​In some situations we may rely on your consent.
• Contract – The processing is necessary for performance of a contract with you/your company or to take steps at your request to enter a contract. This covers carrying out our contractual duties and exercising our contractual rights.
• Legal obligation – The processing is necessary to comply with our legal obligations, such as mandatory screening and monitoring in the context of anti-corruption laws and regulations, and ensuring we perform our other legal and regulatory obligations. For example, to comply with our social insurances and tax-related obligations.
• Public interest – The processing is necessary for the performance of a task carried out in the public interest.
• Legitimate interests – The processing is necessary for our or a third party’s legitimate interests. We as a service provider, or a third party, have legitimate interests in carrying on, managing and administering our respective businesses effectively and properly and in connection with those interests processing your data. These interests also include IT security, the monitoring of transactions and marketing. Your data will not be processed on this basis if our or a third party’s interests are overridden by your own interests, rights and freedoms. You may ask us to explain how we make this assessment by contacting us.
• Vital interests – Where processing is needed to protect your vital interests (or someone else’s interests) and you are not capable of giving your consent. This is only likely to apply in very exceptional circumstances such as in a medical emergency.

PURPOSES AND LEGAL GROUNDS FOR THE PROCESSING OF PERSONAL DATA

MB processes your personal data for certain purposes, described below. As explained above, processing in this context might include transfers to third parties and/or outside of the EEA. We have tried to make this as comprehensive as possible but it is not possible to identify all information processed and this is not a definitive list. From time to time, the Company may publish specific notices setting out details regarding particular processes or programs being adopted by us.

We are not engaged in any automated decision making without human intervention, which affects data subjects.

YOUR RIGHTS

You, as a data subject, have the following rights:

1. Right of access, this means you can make a request to obtain access to the personal data concerning you;
2. The right to rectification or correction of your personal data;
3. The right to erase the personal data concerning you;
4. The right to restriction of the processing;
5. The right to data portability, this means that you have the right to receive your personal data in a structured, commonly used and machine-readable format, and that you have the right to transmit those data to another controller;
6. The right to object to certain types of processing;
7. The right to lodge a complaint with a supervisory authority;
8. The right to withdraw your consent.

The above stated rights (with the exception of the right to lodge a complaint) can be exercised by submitting a request to us via the contact details included in this statement, and only to the extent that you enjoy such rights under applicable law.

RETENTION PERIOD

We will not store your personal data longer than necessary to achieve the purposes stated in this privacy statement, unless we are required by law or regulations to do so. Please note that we are legally required to keep most of the personal data we hold about you (whether directly or indirectly) for a period of 7 years after the information has lost its relevance, for tax and corporate law purposes. Further to above mentioned, we will generally keep personal data collected for recruitment purposes for a period of 4 weeks following the end of the relevant process, or – if you have consented thereto – for a period of 1 year.

CHANGES TO THIS PRIVACY STATEMENT

We reserve the right to unilaterally change or update this privacy statement. You will be notified of any changes, if we are obliged to do so.

CONTACT

If you have any questions or comments about this privacy statement and/or the processing of personal data, please contact Olaf Werkhorst at email: olaf.werkhorst@marshberry.com.