Privacy statement

Nmbrs is an international HR & Payroll platform that offers support in all associated processes. In the context of the activities that we carry out, we may process personal data. We also process personal data when you use our website. Through this privacy statement we would like to inform you about which personal data we collect and why we do this, how we handle your personal data, what rights you have in regard to the processed personal data and how you can contact us.

Personal data is data that can identify you as a person, such as an email address, telephone number, home address, etc.

What personal data do we process?

Nmbrs processes different types of personal data, such as:

• Name and address details;
• Phone number;
• Email address;
• Account information;
• Passwords;
• Date of birth,
• Job position;
• Bank details;
• Data related to the recruitment process, such as the data in a motivation letter or on a curriculum vitae;
• Information relating to your visit to our website, such as surfing behavior and IP-address. Please see our Cookie Policy for more information about how we process this data by using cookies.

For what purposes and on what legal basis do we process your personal data?

Nmbrs processes the personal data for various purposes, such as:

• Carrying out requests made via the website, such as requesting certain services, receiving the newsletter, registering for an event and downloading a white paper;
• Purchase and delivery of the Nmbrs product, which includes facilitating customer orders, agreements and payments; 
• Maintaining contact and communication with you, such as marketing communication and expressions, account management, sales activities and processing requests for integrations with third parties;
• Managing recruitment processes and processing applications;

In addition to the above purposes, personal data is processed in the Nmbrs Platform. With regard to this personal data, Nmbrs qualifies as a processor within the meaning of the GDPR and processes the data on behalf of and in accordance with the instructions of the Subscriber. The agreements regarding the processing of personal data in the Nmbrs Platform are laid down in a data processing agreement between Nmbrs and the Subscriber. Nmbrs also conducts product surveys in the Nmbrs Platform (NPS and CES). In this case, Nmbrs qualifies as the controller.

We process the personal data on the basis of various legal bases. For example, we can process them because we have an agreement with you, because we have received your permission, because we have a legitimate interest or because there is a legal obligation to process the data. If we process your data on the basis of your consent, you have the right to withdraw this consent at any time. 

With whom do we share your personal data?

We will not share your personal data with third parties, without it being necessary for the reasonable execution of the purposes as described in this privacy statement. We may also share data with third parties because the law requires us to do so or if you have given us your permission to do so. Before we share personal data with third parties, we conclude a data processing agreement with them that sets out how they should handle the processing of personal data. We want to ensure that the third parties we engage have at least the same level of security as we do and that they treat the data we share confidentially.

It is possible that we share personal data with third parties where a transfer to a third country takes place. If this is a country that does not offer the same level of protection as is pursued by European privacy legislation, we ensure that these transfers are made in accordance with laws and regulations. This can be, for example, by concluding model contract clauses that have been approved by the European Commission and investigating whether additional measures need to be taken.

On the website you may find links to websites of third parties. Although these websites have been selected with care, Nmbrs bears no responsibility for the handling of your personal data by these third parties. Inform the privacy statement on the websites of these third parties.

How long do we keep your personal data?

Nmbrs will not keep your personal data longer than necessary for the performance of our contractual obligations. When we process your personal data on another legal basis, such as a legitimate interest, the data will be kept for as long as is necessary for the realization of the purpose of the processing. Therefore, your personal data may be subject to various types of retention policies, depending on the type of data and the purpose of its collection. For example, we will have to keep certain data for 7 years due to our fiscal retention obligation. We will delete data that we process for the purpose of a job application procedure 4 weeks after completion of the procedure, except if you give us permission to keep the data for 1 year.

How do we protect your personal data?

At Nmbrs we take your privacy seriously. That is why we have taken technical and organizational measures to ensure that your data is well protected. We protect your personal data against unauthorized and unlawful processing and against loss, destruction, damage, adaptation and publication.

What privacy rights do you have?

We have set up appropriate processes to enable you to exercise your privacy rights. You have the following rights with regard to the personal data that we process:

• Right to access 
• Right to be forgotten
• Right to rectification and completion
• Right to data portability
• Right to restriction of processing
• Right to object

To exercise your privacy rights, you can contact us via the contact details below. In doing so, we ask you to indicate to which processing operations and which personal data your request relates. It may be necessary to request additional identifying information to prevent us from disclosing data to the wrong person. We will process the request without undue delay and in any case within 4 weeks of receipt of the request. We can only extend this period by two months in cases where there is a complex request.

A more detailed description of your rights under the GDPR can be found at https://www.nmbrs.com/en/gdpr or the website of the Dutch Data Protection Authority.

If you have a complaint about the processing of your personal data, please let us know so that we can work on a solution. If this does not lead to the desired result, we would like to point out that you have the right to file a complaint with the national supervisory authority. 

Changes to privacy statement

Nmbrs reserves the right to change this Privacy Statement and we will always make the most recent version available on our website. We therefore recommend that you consult the Privacy Statement regularly so that you are well informed. If substantial changes are made to this Privacy Statement, we can also inform you about this via other channels, such as email or news items.

This privacy statement has last been updated on: March 23rd 2022.