Privacy policy

In this privacy statement, the following definitions are used:

1. 1. Rope Media: the user of this privacy statement: Rope Media B.V. trading as haccp-cursus.com located at Wilhelminaplein 1 in Rotterdam, registered with the Chamber of Commerce under KvK number 50337769;
   2. data subject: the natural person who has entered into an agreement with Rope Media, or the natural person who has contacted Rope Media on behalf of a company regarding the conclusion and/or execution of the agreement, or the natural person who visits the website;
   3. agreement: the agreement between Rope Media and the data subject whereby the data subject uses the service that Rope Media offers via the website;
   4. website: the website www.haccp-cursus.com managed by Rope Media;
   5. profiling: the processing of personal data whereby certain personal aspects of the data subject are evaluated on the basis of personal data with the aim of analysing or predicting their personal preferences, interests, online search behaviour, or location;
   6. personal data: data with which a natural person can be identified.

Personal data

1. Careful handling of personal data is of great importance to Rope Media. With regard to the processing of personal data, Rope Media acts in accordance with applicable laws and regulations.
2. Rope Media handles personal data carefully and treats it confidentially.
3. Rope Media collects personal data from the data subject when the data subject has provided this personal data to Rope Media via the website or when the data subject visits the website or has contacted Rope Media by telephone or email.
4. Rope Media collects and processes the following personal data:
   1. first and last name;
   2. telephone number;
   3. email address;
   4. IP address;
   5. Surfing behaviour;
   6. Location data;

Which personal data is processed by Rope Media depends on whether or not the data subject has an account on the website and whether the data subject is acting on behalf of a company.

1. Rope Media does not process any special personal data of data subjects.
2. The website and/or service does not intend to collect data about data subjects who are younger than 16 years old. Unless they have permission from parents or a guardian. However, Rope Media cannot check whether a data subject is older than 16. Rope Media therefore advises parents to be involved in the online activities of their children, in order to prevent data about children being collected without parental consent. If the data subject is convinced that Rope Media has collected personal data about a minor without that permission, the data subject should contact Rope Media using the contact details included in article 12.1 and Rope Media will then terminate the processing and delete the personal data.

Basis and purposes of the processing

1. The basis for the processing of personal data is the execution of the agreement or, at the request of the data subject, taking pre-contractual measures.
2. Rope Media collects and processes the personal data for the following purposes:
   1. handling a question and/or comment from the data subject;
   2. issuing a quote;
   3. the conclusion of the agreement;
   4. to be able to contact the data subject regarding the execution of the agreement;
   5. to be able to create an account for the data subject on the website and to maintain the account;
   6. to comply with administrative obligations;
   7. to send the data subject a newsletter, if they have given permission for this, see also article 5;
   8. to offer the data subject personalised advertisements and content (profiling), see also article 4;
   9. to improve the website and the services of Rope Media;
   10. generating general statistics about the use of the website.
3. The provision of the name, address, telephone number and email address of the data subject is a contractual obligation. Without the name, address, telephone number and email address, no agreement can be concluded.
4. Rope Media will not keep the personal data longer than strictly necessary to achieve the purposes, as described in article 3.2, for which the personal data is processed.
5. Rope Media only processes the personal data that is minimally necessary for the existing purposes. Rope Media strives for minimal data processing.
6. Rope Media will not process the personal data for purposes other than those described above.

Profiling

1. Profiling is only carried out if the data subject has given permission to Rope Media for this. This permission can be withdrawn by the data subject at any time.
2. The purpose of profiling is:
   1. to show the data subject advertisements or other content on the website of which Rope Media suspects that the content of the advertisement or content is in accordance with the interests of the data subject;
   2. marketing analyses;
   3. sending a personalised newsletter.
3. Profiling can take place through a combination of the data that the data subject has provided when creating an account and data originating from various cookies.
4. For profiling purposes, the following data can be processed by Rope Media:
   1. gender;
   2. age;
   3. location data;
   4. search queries entered on the website;
   5. surfing behaviour.

Newsletters

1. Newsletters are only sent to the data subject if the data subject has explicitly given unambiguous permission for this to Rope Media. The data subject can unsubscribe from newsletters at any time, see article 6.
2. Rope Media will not approach the data subject for direct marketing purposes if the data subject has not given permission for this.

Unsubscribing from newsletters

1. The data subject can unsubscribe from newsletters in the following ways:
   1. by clicking on the link in the email containing the newsletter with which the data subject can unsubscribe from such newsletters;
   2. by contacting Rope Media, see article 12.1 for the contact details.
2. In every newsletter sent to the data subject, a link is included with which the data subject can unsubscribe from the newsletters.

Erasure of personal data

1. Rope Media will delete personal data from its systems without unreasonable delay, inter alia if:
   1. the personal data is no longer necessary for the purposes for which it was processed;
   2. the data subject objects to the processing of their personal data and this objection is justified;
   3. the personal data is incorrect or outdated.
2. Rope Media is not obliged to delete personal data if there is one of the situations described in the law where the “right to be forgotten” does not apply.

Providing personal data to third parties

1. Rope Media will provide the personal data of the data subject to third parties if:
   1. Rope Media has obtained explicit prior permission for this from the data subject;
   2. one of the legal bases applies on which the provision of personal data to a third party is permitted;
   3. it is necessary for the execution of the agreement;
   4. the transfer is made to a processor engaged by Rope Media for the purposes listed in this privacy statement, with which processor Rope Media has concluded an agreement that ensures that the processor offers sufficient guarantees with regard to technical and organisational security measures with regard to the processing to be carried out.
2. The data subject can withdraw their permission to provide personal data to third parties at any time.

Right of access, right to portability, rectification and deletion

1. Upon request, Rope Media grants the data subject access to all personal data that Rope Media keeps of them and Rope Media provides the data subject free of charge with a copy of this data in such a form that the data subject can provide the personal data to a third party themselves.
2. Rope Media offers the data subject the opportunity to have any incorrect data that Rope Media keeps of them corrected or deleted free of charge.
3. The request for access, modification or deletion of data can be submitted to Rope Media in writing or by email, see article 12.1 for the contact details of Rope Media. Rope Media will respond to such a request as soon as possible and in any case within 4 weeks.

Objection

1. The data subject can object to Rope Media against the processing of their personal data if they have a good reason for this given their specific situation. After Rope Media has received the objection from the data subject, Rope Media will stop processing the personal data of the data subject, unless Rope Media has legitimate interests in the processing of personal data that outweigh the interest of the data subject.

Right of restriction

1. If a request has been submitted by the data subject regarding the adjustment, supplementation or deletion of their personal data or an objection has been submitted regarding the processing of their personal data and the handling, processing and execution of this request or that objection takes some time, the data subject can request Rope Media to restrict the processing of their personal data.

Contact

1. For questions about the way in which Rope Media processes personal data, withdrawing permission regarding the processing of personal data, access to personal data that Rope Media processes of the data subject, request for a copy of their personal data, the request for modification or deletion of their personal data, the request to restrict the processing of their personal data or submitting an objection to the processing of their personal data, the data subject can contact Rope Media via the contact details below.

Contact details:

Rope Media B.V. Address: Wilhelminaplein 1 Postcode/City: 3072DE Rotterdam

1. If Rope Media corrects, supplements or deletes personal data of the data subject at the request of the data subject or terminates or restricts the processing of the personal data or has processed a withdrawn permission, Rope Media will inform the data subject of this.

Security measures

1. To prevent access to personal data by unauthorised persons, loss, theft and unlawful use of personal data, Rope Media has taken various security measures, including measures against unauthorised access, use, modification, unlawful and accidental destruction and accidental loss of the personal data.
2. Data provided to Rope Media via the website is encrypted. Rope Media uses an HTTPS connection.

Privacy policy of third parties

1. This privacy statement does not apply to websites of third parties, such as webshops, that are connected to the website by means of links. Rope Media accepts no responsibility or liability whatsoever with regard to the way in which these websites handle personal data. For more information about the way in which these third parties handle personal data, etc., the privacy policy of the relevant website should be consulted.

Changes

1. Rope Media reserves the right to unilaterally make changes to this privacy statement. The latest version of the privacy statement of Rope Media is on the website.

Data breach

1. If a security incident has occurred at Rope Media whereby personal data of a sensitive nature has been leaked or which for another reason has a serious adverse effect on the protection of the processed personal data, Rope Media will, if possible, report this to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) within 72 hours after discovering the data breach and act in accordance with the Policy Rules on the Data Breach Notification Obligation of the Dutch Data Protection Authority.
2. If there is a data breach at Rope Media that has adverse consequences for the privacy of the data subject, Rope Media will inform the data subject of this without delay.

Cookies

1. Rope Media uses functional, analytical and tracking cookies.
2. A cookie is a small text file that is stored in the browser of the data subject's device upon the first visit to the website.
3. Rope Media only places tracking cookies if the data subject has given permission for the placement of tracking cookies prior to visiting the website. Before the data subject has granted permission for tracking cookies, only functional and analytical cookies will be placed that have no consequences for the privacy of the data subject.
4. The data subject can opt out of cookies by setting their internet browser in such a way that it no longer stores cookies. In addition, the data subject can also delete all information previously stored via the settings of their browser. The data subject can find more information about enabling, disabling and deleting cookies in the instructions and/or using the Help function of their browser. Functional cookies are necessary for the correct functioning of a website. If the data subject deletes functional cookies, this may have consequences for the correct functioning of the website and it is possible that Rope Media cannot provide its service or cannot provide it properly.
5. Types of cookies and purposes:

The party placing the cookie	The type of cookie	The purpose for which the cookie is placed
Rope Media	Functional cookie	Functional cookies ensure that the website functions properly. These cookies are used, for example, so that the data subject can log in to the website. With functional cookies, the website can recognise the data subject when the data subject visits the website again. This is useful so that the data subject does not have to log in to the website again and again with a new website visit.
Rope Media for the use of Google Analytics	Analytical cookie	Through the use of analytical cookies, Rope Media can see how the data subject uses the website and Rope Media can improve the website on that basis. Analytical cookies are not shared with third parties, are not used by third parties and are not linked to the name or email address of the data subject. Rope Media has set up Google Analytics in such a way that visitors to the website remain anonymous.
Rope Media	Tracking cookie	Carrying out marketing analyses and carrying out personalised marketing.

Submitting a complaint

If the data subject is of the opinion that the processing of personal data by Rope Media is not in accordance with this privacy statement and/or with applicable laws and regulations, the data subject can submit a complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).