Privacy statement TIGRA (Based on use of the Informens system)

By means of this Privacy Statement we want to give you clarity about the personal data that we collect, use and for what purpose. We encourage you to read this privacy statement very carefully.

About us

We are TIGRA Beheer. We are located in Leeuwarden (postal code: 8911 BN) at ‘Zaailand No. 96B’. You can reach us by e-mail via: informens@tigra.nl and by telephone at number: 088 – 1443400.

Data Protection Officer

We have registered Mr. Hans Krol (FG007138) as Data Protection Officer of TIGRA Beheer. The Data Protection Officer of TIGRA Beheer can be contacted at the e-mail address (h.krol@TIGRA.nl) and telephone number (06 45 07 43 45).

Purpose and basis of Informens

We use the online computer program "Informens". Informens is used as a tool for employers and employees to chart the age, health and fitness, and thus the degree of employability of employees.

For this we request your personal data (including health data) and other personal data. We also use these to provide you with personal advice. Your employer will only receive an anonymous group report. We will continue to use your data for a benchmark and for scientific research.

We collect your personal data via Informens based solely on your explicit consent. You are and will remain the owner of the personal data. You are in charge of determining who gets access to your data. Your personal details will not be available to your employer or insurance company, not now or even in the future. Furthermore, your personal data will not be used for commercial purposes.

Type of data and collection method

We sometimes receive names, birth dates, functions/positions and e-mail addresses from our clients. Our clients are certified health professionals who conduct Preventive Medical Research (PMR) for employers. With this e-mail address / this data, we are able to make Informens available to you and communicate about this tool with you. You can then personally enter your name, gender, date of birth and telephone number in Informens. This data is needed to return the results to you. We also (sometimes) receive information regarding the company name / department or function/position, which is used to provide anonymous group reports to your employer.

You provide us with details of your gender, date of birth, education, function/position and other personal information, including information about your health, by completing questionnaires. These details are needed by us in order to advise you on personal lifestyle, health and work capacity. Our clients also use your data to advise you on the PMR (Personal Medical Research).

You will receive an individual advice based on the data which you have entered. An anonymous group report is prepared by us for your employer. We ensure that the information provided to your employer by means of an anonymous group report cannot be traced back to you. This requires that at least 15 participants / employees take part in the Informens research of your employer. Details in the group report can never be traced back to you.

We also use your data for statistical purposes. We do this for our own benchmark and for scientific research purposes. The processing of this data is done in an entirely anonymous manner. The data cannot subsequently be traced back to an individual person.

Access by a certified health professional

Only if you have explicitly given us permission for this, will we make your data accessible to our clients (certified health professionals). They can then use your data for personal coaching purposes to support your health and / or employability. This work is performed for own accountability and risk of our clients.

Rights with regard to the data

You have the following rights with regard to your personal data:

• You have the right to inspect the data recorded by us of you;
• You are entitled to submit a request for correction, limitation or removal of the data recorded by us of you;
• You have the right to transfer the data recorded by us of you;
• You have the right to withdraw the express permission you have granted us. Subsequently, you can no longer use Informens.

Through your personal access account you can view and change your details. You can also contact us by phone or e-mail. You will receive a response from us within 4 weeks. You can also contact us anytime for questions about our privacy policy or any other questions.

Data storage period

We will store the personal data collected from you as long as your account is active. To keep your account active you need to log in at least once every two years. We will also send you notifications by e-mail during these two years, so that you are reminded of the existence of the account. What happens in case you do not log in within a period of two years? Then your account will automatically be deleted.

Unless you specifically request us to delete your account, we will keep your account active because you may wish to receive further advice about your lifestyle, health and working ability in the future.

Third parties

The Informens technique / tool has been developed by Peercode Ltd.. Peercode Ltd. also takes care of the maintenance of Informens. The storage of the Informens data and managing it is also regulated by Peercode Ltd. For this, Peercode Ltd. uses Cloud VPS. These companies do not have access to your data. Both companies are ISO27001 certified. For more information about these companies you can check: www.peercode.nl and www.cloudvps.nl.

Processing of the questionnaire results, translated to advice and reports is carried out by Immens Advies LLP (Limited Liability Partnership) and your data is managed in the database of Informens DATA Ltd. These two companies are affiliated companies. Immens Advies LLP may also engage third parties who perform the mentioned processing operations under supervision and responsibility of Immens Advies LLP.

You will also receive advice from our clients. These are certified health professionals who carry out your PMR (Personal Medical Research). They also use the questionnaire results in the context of the PMR. Anonymous data can be used for purposes of scientific research. We make anonymous data available to the Knowledge Center for Medical Inspections in Labor (KMKA], TNO, Saxion University of Applied Sciences and the University of Groningen.

Data protection

We and our selected third parties take all appropriate technical and organizational measures to optimally protect your data. We and our third parties, ensure that your data is stored securely and encrypted. We and our third parties, ensure that specifically authorized persons can only log in by means of two-factor authentication. We have taken further security measures, such as pseudonymization. Do you want to know more about this? Please contact us.

Use of this website

We have taken appropriate measures to protect your visit to our website, the use of our website and to prevent misuse of your visit to our website. All persons who can access your data are bound to keeping the data strictly confidential.

Websites of third parties

This statement does not apply to websites of third parties that are associated with this website by means of links. We cannot guarantee that these third parties handle your data in a reliable or secure manner. We advise you to always read the privacy statements of these third parties on their websites.

Cookies

We do not store permanent cookies. We also do not use tracking cookies to follow you. To log in, only temporary, functional cookies are used. These are automatically deleted when you close the browser. We do not place other cookies.

Suggestions and complaints

Our objective is to provide you with the best possible service. Yet, it may happen that you are not satisfied with our services or that you have suggestions on how to further improve our services. In that case, we would certainly like to hear from you! You can send an e-mail with your complaint or suggestion to: informens@tigra.nl.

If you feel that we have violated your rights and we do not reach an agreement, you have the right to file a complaint with the supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens], on the grounds of the new European Privacy legislation (General Data Protection Regulation). For more information, please refer to: www.autoriteitpersoonsgegevens.nl.

New developments

The text of this Privacy Statement can be adjusted / updated by us from time to time. Therefore we ask you to consult this text regularly through our website in order to ensure that you have the latest version.

Oirschot, January 2018