Privacy statement

This is the privacy statement of Speel-o-theek De Boemerang located at Marktstraat 27, 7941 KP Meppel registered in the trade register of the Chamber of Commerce under number KVK-NUMBER 41019965 As Speel-o-theek De Boemerang we are responsible for the processing of your personal data. That is why we have set out for you in this statement how we handle your personal data and what rights you have. We do everything we can to guarantee your privacy and therefore handle personal data with care. Speel-o-theek De Boemerang complies in all cases with the applicable laws and regulations, including the General Data Protection Regulation. In the table below you can quickly and easily find out for what purpose we collect which personal data from you, how long we keep it and who may receive this personal data from us.

Purpose	What Personal Data	Basis	Retention period
Performance of the membership agreement and administrative purposes	Important Surname Address Date of birth of children Phone number Email address Bank details Payment details Membership number	Membership Agreement	During the term of the agreement and up to 2 years thereafter. Then only in the financial administration for 7 years based on the legal requirements.
Informing by means of a Newsletter, etc.	Important Surname Address Email address	Implementation of the membership agreement	During the period that one is registered.
Implementation of the volunteer agreement and administrative purposes	Important Surname Address Birth date Phone number Email address Bank details Invoice Bsn-number Copy ID	Volunteer Agreement	During the term of the agreement and up to 2 years thereafter. Then only in the financial administration for 7 years based on the legal requirements.
Administrative purposes	Important Surname Address Phone number Email address	Sponsorship agreement	During the term of the agreement and up to 2 years thereafter. Then only in the financial administration for 7 years based on the legal requirements.
For approach after termination of volunteer agreement or membership , for example for a reunion or special event.	Important Surname Address Telephone number or Email address Birth date Date of entry and end date of membership or volunteer work	Permission	As long as the consent has not been withdrawn
Provision of information in the form of a Newsletter and/or targeted communication	Important Surname Address Telephone number Email address	Verbal agreement, Issue of business card Link on Social Media	During the period that one is seen as a sponsor or interested party.

Minors

We only process personal data of minors (persons under the age of 16) if written permission has been given by the parent, guardian or legal representative.

Provision to third parties

We will not provide the data provided by you to other parties without your permission, unless this is legally required and permitted or if this is necessary for the execution of the agreement that SPEEL-O-THEEK DE BOEMERANG has with you. For example, we use a third party for:

• Taking care of the internet environment;

We naturally make the necessary agreements with these parties (processors) to guarantee the security of your personal data through, among other things, a processing agreement. We never pass on personal data to other parties with whom we have not concluded a processing agreement.

Within the EU

We do not provide personal data to parties located outside the EU.

Security of personal data

SPEEL-O-THEEK DE BOEMERANG has taken appropriate technical and organizational measures to protect your personal data against loss, unauthorized access, publication and unlawful processing. For example, we have taken the following measures;

• Only necessary persons have access to your data.
• We have a username and password policy on all our systems;
• We make back-ups of the personal data in order to be able to restore them in the event of physical or technical incidents;
• We keep the software such as browsers, virus scanners of the used computers up-to-date via automatic updates.
• We use a secure website via https.
• We have a protocol for dealing with data leaks and security incidents.

 Data breach In the event of a data breach, the person concerned who caused the leak must report this immediately to the board. The board assesses the severity of the leak and, if possible, takes immediate action to repair the leak. The secretary reports the data breach to the Dutch Data Protection Authority if necessary. Automated decision-making SPEEL-O-THEEK DE BOEMERANG does not make decisions based on automated processing on matters that can have (significant) consequences for people. These are decisions that are taken by computer programs or systems, without involving a person (for example, a board member of SPEEL-O-THEEK DE BOEMERANG).

Rights regarding your data

You have the right to inspect, rectify or delete personal data that we have received from you. Unless SPEEL-O-THEEK DE BOEMERANG is not obliged to provide this access on the basis of the General Data Protection Regulation (GDPR). You can also object to the processing of your personal data (or part of it) by us or by one of our processors. You also have the right to have the data provided by you transferred by us to yourself or on your behalf directly to another party. We may ask you to identify yourself before we can respond to the aforementioned requests. If we are allowed to process your personal data on the basis of a permission given by you, you always have the right to withdraw this consent. Complaint about the processing of your Personal Data Of course we are also happy to help you if you have a complaint about the processing of your personal data. Under the GDPR, you also have the right to file a complaint with the Dutch Data Protection Authority, which is the supervisory authority in the field of privacy protection, about our processing of your personal data. You can contact the Dutch Data Protection Authority for this. Ask If, after reading our Privacy Statement, or in a more general sense, you have questions about the processing of your personal data or want to request speel-O-theek DE BOEMERANG to inspect, correct and/or delete your personal data, you can contact us by e-mail to: info@speelotheekmeppel.nl.