EIJSINK PRIVACY STATEMENT*

*This privacy statement applies to Eijsink BV and its affiliates.

version: April 6, 2023

Eijsink values your privacy, and all our data processing activities are fully compliant with national data protection legislation. Eijsink does not, for example, sell your personal data to third parties. In this privacy statement, we explain how Eijsink further uses and protects your personal data.

What data do we collect and process?
Personal data are data that can be used to directly or indirectly identify a person, such as, for example, your name, location data (IP address), email address and telephone number. Eijsink processes your personal data only in the context of its business relationship with the company you are employed by or perform work for.

CUSTOMERS, ASSOCIATIES AND VENDORS
We process your personal data for the sake of entering into and performing agreements in line with the products and services Eijsink provides and managing the resulting relationships, including carrying out activities aimed at increasing our customer base. The basis for this processing is the legitimate interest of Eijsink: processing personal data is necessary to fulfil the agreement we have with you.

We do not keep personal data longer than necessary. After the termination of the business agreement or relationship, personal data will be kept for up to seven years.

CONTACT FORM
You can use the contact form to ask us questions or make enquiries about Eijsink's products and services. To make this possible, we use your name, your email address (usually your professional email address) and your telephone number (usually your professional phone number) and more. We need this information to process your question or comment. Your data will not be kept longer than necessary. The basis for this processing is the legitimate interest of Eijsink.

NEWSLETTER
Eijsink keeps its customers informed of the latest developments. In doing so, we act in full compliance with the requirements of the ePrivacy Directive. Some recipients of our online (update) newsletters receive them automatically, as they have an interest in receiving relevant updates on purchased products, while others have actively signed up for them. Each newsletter also contains the option to unsubscribe. You are in control!

CAMERA SURVEILLANCE.
We have installed camera surveillance at certain Eijsink branches in order to protect our assets and record incidents. Camera footage is kept for a maximum of four weeks, or until after a recorded incident has been settled. The basis for processing camera surveillance footage is the legitimate interest of Eijsink.

THIRD PARTIES
We do not provide personal data to other companies or agencies, except when necessary for Eijsink's services, e.g. to Eijsink’s vendors. Eijsink has also outsourced some ICT services to third parties.

In certain cases, we are required to provide your personal data to local authorities. If we share information with these other companies, they are not allowed to use the data for any other purpose and must keep it confidential, unless you yourself give permission to process them for some other purpose.

TRANSFER
If you choose to provide us with your personal data, we may legally transfer that data (if necessary) to our affiliates and subsidiaries or other third parties abroad, and from your country or jurisdiction to other countries or jurisdictions around the world. In case of data transfer from the European Economic Area (EEA) to countries outside the EEA, Eijsink will only do so if the country/company concerned has complied with European regulations. Eijsink will only transfer data between the EU and the US if the Privacy Shield Agreement is complied with.

COOKIES
We use cookies on our Eijsink websites. We do this to continue to improve your user experience on our website, to better understand our customers and their queries, and, for example, to gauge the success of commercial promotions. We have outlined how we handle your information, who the (possible) recipients of the data are and how you can change or delete your data (or have it changed). Above all, it is important for you to know that Eijsink will always handle your online data as carefully as possible, never simply handing it over to third parties and anonymising all data wherever possible.

WHAT IS A COOKIE?
A cookie is a small file sent along with the pages of this website [and/or Flash applications] and stored on your computer's hard drive by your browser (such as Internet Explorer, Chrome or Safari). The information stored in this file can be sent back to our servers on a subsequent visit to our website. Cookies allow us to track repeat visits. Cookies look like 'normal' plain text files, and therefore cannot execute, damage or install anything else on their own.

SETTING COOKIES
When you visit our website for the first time, a pop-up notification explaining cookies will appear. We ask your consent to set cookies. If you do not give your consent, we will only set analytical cookies that do not affect your privacy. More information on enabling, disabling and deleting cookies can be found in the instructions and/or in your browser's Help menu. Disabling cookies may mean that some features of our online services will no longer work.

ANALYTICAL COOKIES FROM GOOGLE AND GOOGLE ANALYTICS
Through our website, Google also sets a cookie as part of its Analytics service, which we use to measure the performance of our websites and track how many visitors they get. Google may provide this information to third parties if it is legally required to do so, or if third parties process the information on Google's behalf. We have no control over this. We have not allowed Google to use the information obtained through us for other Google services, in addition to limited advertising data through Google Ads.

The information collected by Google is anonymised as much as possible. Your IP address is expressly not provided. The information is transferred to and stored by Google on servers in the United States. Google claims to adhere to the Privacy Shield principles and is a participant in the US Department of Commerce's Privacy Shield programme, implying an adequate level of protection for the processing of any personal data. The Dutch Data Protection Authority has written guidance on how to set up Google Analytics in a privacy-friendly manner. For Google's privacy policy, please refer to their websites.

SOCIAL MEDIA (TRACKING) COOKIES
Our website features buttons to promote or share web pages on social networks. (We use Facebook, Twitter, LinkedIn, YouTube and Instagram) The buttons are based on snippets of code that come from the respective social media platforms themselves and are used to set cookies. We have no control over these cookies. Social media tracking cookies often store information about your browsing behaviour so that social media channels can show you targeted advertisements.

Please read the privacy statements of the social media channels you use carefully (these change regularly) to know what they do with your (personal) data that they process via these cookies. LinkedIn, Twitter, Facebook (Instagram) and Google claim to adhere to Privacy Shield principles and are participants in the US Department of Commerce's Privacy Shield programme. implying an adequate level of protection for the processing of any personal data.

We use a Facebook pixel and LinkedIn Insight Tag on our websites, which is a type of tracking pixel. This cookie registers which products you view, allowing us to show you relevant ads on Facebook and LinkedIn and optimise our products. Without these cookies, you may miss out on great promotions.

MARKETING AUTOMATION COOKIES
On the website, we use various marketing automation tools to achieve our marketing objectives. These tools process and store various data.

Hotjar
Hotjar uses cookies and other technologies to collect data about the behaviour of our users and their devices. This includes a device's IP address (processed during your session and stored anonymously), device screen size, device type (unique device IDs), browser information, geographical location (country only) and your language preferences on our website. User keyboard input (e.g. form input) is suppressed by default and is only displayed in logs with the user’s explicit consent. In the Netherlands, we are not required to ask for consent to set privacy-friendly analytical cookies. Given that Hotjar does not capture user information, it is considered a privacy-friendly application.

Algolia Search:
Algolia processes data for services such as monitoring or analysis, as well as geo-search. All logs are deleted after 90 days. Should Eijsink delete its Algolia account, all query logs after the period described will be deleted.

Algolia processes the following data:

IP-addresses	Internet provider	Browser type	Page references
Operating system	Date/time stamp	Browsing actions	Browsing patterns

These data do not contain personal data, but session data, which means Eijsink cannot use them to build profiles or identify individuals.

Algolia has implemented a distributed architecture with 400 clusters in 16 different regions and 70 data centres across the world. When we created our account, we chose to have data processed in Dutch data centres near Amsterdam.

Leadinfo
Leadinfo compares the visitor's IP address with a publicly available database of company data (such as the Chamber of Commerce) to determine which organisation visited Eijsink's website. Under the GDPR, IP addresses are considered private data and may therefore only be processed if there is a sound basis for doing so. Eijsink’s legal basis for processing IP addresses is its ‘legitimate interest’, as specified in Article 6(1)(f) of the GDPR. This article states that working with personal data is allowed if it serves a clear interest and privacy standards are upheld. All servers and data are hosted on Amazon Web Services (AWS) in Ireland.

Medallia

Eijsink uses Medallia to collect feedback from its users in order to gain insight into how Eijsink's products and services can be improved. In this respect, Medallia is a processor on behalf of Eijsink, collecting the relevant feedback on Eijsink's behalf and providing us with analytical data for the aforementioned purpose.

When you provide feedback through Medallia, they collect certain information on our behalf, such as your name, email address and any feedback or comments you provide. This information is stored securely by Medallia on our behalf and may be used to improve our products and services. Besides the usual data such as browser-related metadata, the country, language, customer ID and whether you are a booq or DISH customer are also collected. Language and brand are used to display surveys in the appropriate language and brand.

The lawful basis for this processing is Eijsink's legitimate interest in understanding how users experience its services and products. The personal data that Eijsink obtains and processes through this way will not be retained by Eijsink longer than for as long as Eijsink provides the services to you or your organisation plus a maximum period of one year after termination of its services. After the aforementioned period, the personal data will be deleted or anonymised.

Medallia may also collect personal data from you for its own purposes to which only Medallia's own privacy policy will apply.

Security
Securing personal data is very important to us, and we have taken appropriate measures to ensure the security of your data.

Changes to this privacy statement
This privacy statement will be updated when changes are made to the categories of personal data stored or the way in which they are processed, so look closely at the date of this statement and regularly check whether a new version has been published.

Accessing and changing your data
If you have any questions or want to know what personal data we have stored, please contact us. (See the contact details at the bottom of this privacy statement) As a data subject, you have the following legal rights:

• The right to be informed about the categories of personal data collected and what we do with your data

• The right to access to the exact personal data we have collected.

• The right to have errors and inaccuracies rectified.

• The right to have outdated personal data deleted.

• The right to withdraw consent.

• The right to object to the processing of personal data.

We are here to help! Please make sure you always clearly state who you are, so that we can be sure we do not edit or delete the wrong personal data.

FILING A COMPLAINT
The greatest compliment we have received over the past 35 years has been the sheer number of satisfied customers. We are here to assist you 24/7. If you have questions, comments or suggestions, please do not hesitate to contact us. If you are still not satisfied or believe we are not processing your personal data properly, you always have the right to file a complaint with the Dutch Data Protection Authority.

CONTACT DATA
If you have any questions about privacy, please send an email to informatiebeveiliging@eijsink.nl. We will get back to you as soon as possible.

*This privacy statement applies to Eijsink BV and its affiliates.

version: December 1, 2021

Eijsink values your privacy, and all our data processing activities are fully compliant with national data protection legislation. Eijsink does not, for example, sell your personal data to third parties. In this privacy statement, we explain how Eijsink further uses and protects your personal data.

What data do we collect and process?
Personal data are data that can be used to directly or indirectly identify a person, such as, for example, your name, location data (IP address), email address and telephone number. Eijsink processes your personal data only in the context of its business relationship with the company you are employed by or perform work for.

CUSTOMERS, ASSOCIATIES AND VENDORS
We process your personal data for the sake of entering into and performing agreements in line with the products and services Eijsink provides and managing the resulting relationships, including carrying out activities aimed at increasing our customer base. The basis for this processing is the legitimate interest of Eijsink: processing personal data is necessary to fulfil the agreement we have with you.

We do not keep personal data longer than necessary. After the termination of the business agreement or relationship, personal data will be kept for up to seven years.

CONTACT FORM
You can use the contact form to ask us questions or make enquiries about Eijsink's products and services. To make this possible, we use your name, your email address (usually your professional email address) and your telephone number (usually your professional phone number) and more. We need this information to process your question or comment. Your data will not be kept longer than necessary. The basis for this processing is the legitimate interest of Eijsink.

NEWSLETTER
Eijsink keeps its customers informed of the latest developments. In doing so, we act in full compliance with the requirements of the ePrivacy Directive. Some recipients of our online (update) newsletters receive them automatically, as they have an interest in receiving relevant updates on purchased products, while others have actively signed up for them. Each newsletter also contains the option to unsubscribe. You are in control!

CAMERA SURVEILLANCE.
We have installed camera surveillance at certain Eijsink branches in order to protect our assets and record incidents. Camera footage is kept for a maximum of four weeks, or until after a recorded incident has been settled. The basis for processing camera surveillance footage is the legitimate interest of Eijsink.

THIRD PARTIES
We do not provide personal data to other companies or agencies, except when necessary for Eijsink's services, e.g. to Eijsink’s vendors. Eijsink has also outsourced some ICT services to third parties.

In certain cases, we are required to provide your personal data to local authorities. If we share information with these other companies, they are not allowed to use the data for any other purpose and must keep it confidential, unless you yourself give permission to process them for some other purpose.

TRANSFER
If you choose to provide us with your personal data, we may legally transfer that data (if necessary) to our affiliates and subsidiaries or other third parties abroad, and from your country or jurisdiction to other countries or jurisdictions around the world. In case of data transfer from the European Economic Area (EEA) to countries outside the EEA, Eijsink will only do so if the country/company concerned has complied with European regulations. Eijsink will only transfer data between the EU and the US if the Privacy Shield Agreement is complied with.

COOKIES
We use cookies on our Eijsink websites. We do this to continue to improve your user experience on our website, to better understand our customers and their queries, and, for example, to gauge the success of commercial promotions. We have outlined how we handle your information, who the (possible) recipients of the data are and how you can change or delete your data (or have it changed). Above all, it is important for you to know that Eijsink will always handle your online data as carefully as possible, never simply handing it over to third parties and anonymising all data wherever possible.

WHAT IS A COOKIE?
A cookie is a small file sent along with the pages of this website [and/or Flash applications] and stored on your computer's hard drive by your browser (such as Internet Explorer, Chrome or Safari). The information stored in this file can be sent back to our servers on a subsequent visit to our website. Cookies allow us to track repeat visits. Cookies look like 'normal' plain text files, and therefore cannot execute, damage or install anything else on their own.

SETTING COOKIES
When you visit our website for the first time, a pop-up notification explaining cookies will appear. We ask your consent to set cookies. If you do not give your consent, we will only set analytical cookies that do not affect your privacy. More information on enabling, disabling and deleting cookies can be found in the instructions and/or in your browser's Help menu. Disabling cookies may mean that some features of our online services will no longer work.

ANALYTICAL COOKIES FROM GOOGLE AND GOOGLE ANALYTICS
Through our website, Google also sets a cookie as part of its Analytics service, which we use to measure the performance of our websites and track how many visitors they get. Google may provide this information to third parties if it is legally required to do so, or if third parties process the information on Google's behalf. We have no control over this. We have not allowed Google to use the information obtained through us for other Google services, in addition to limited advertising data through Google Ads.

The information collected by Google is anonymised as much as possible. Your IP address is expressly not provided. The information is transferred to and stored by Google on servers in the United States. Google claims to adhere to the Privacy Shield principles and is a participant in the US Department of Commerce's Privacy Shield programme, implying an adequate level of protection for the processing of any personal data. The Dutch Data Protection Authority has written guidance on how to set up Google Analytics in a privacy-friendly manner. For Google's privacy policy, please refer to their websites.

SOCIAL MEDIA (TRACKING) COOKIES
Our website features buttons to promote or share web pages on social networks. (We use Facebook, Twitter, LinkedIn, YouTube and Instagram) The buttons are based on snippets of code that come from the respective social media platforms themselves and are used to set cookies. We have no control over these cookies. Social media tracking cookies often store information about your browsing behaviour so that social media channels can show you targeted advertisements.

Please read the privacy statements of the social media channels you use carefully (these change regularly) to know what they do with your (personal) data that they process via these cookies. LinkedIn, Twitter, Facebook (Instagram) and Google claim to adhere to Privacy Shield principles and are participants in the US Department of Commerce's Privacy Shield programme. implying an adequate level of protection for the processing of any personal data.

We use a Facebook pixel and LinkedIn Insight Tag on our websites, which is a type of tracking pixel. This cookie registers which products you view, allowing us to show you relevant ads on Facebook and LinkedIn and optimise our products. Without these cookies, you may miss out on great promotions.

MARKETING AUTOMATION COOKIES
On the website, we use various marketing automation tools to achieve our marketing objectives. These tools process and store various data.

Hotjar
Hotjar uses cookies and other technologies to collect data about the behaviour of our users and their devices. This includes a device's IP address (processed during your session and stored anonymously), device screen size, device type (unique device IDs), browser information, geographical location (country only) and your language preferences on our website. User keyboard input (e.g. form input) is suppressed by default and is only displayed in logs with the user’s explicit consent. In the Netherlands, we are not required to ask for consent to set privacy-friendly analytical cookies. Given that Hotjar does not capture user information, it is considered a privacy-friendly application.

Algolia Search:
Algolia processes data for services such as monitoring or analysis, as well as geo-search. All logs are deleted after 90 days. Should Eijsink delete its Algolia account, all query logs after the period described will be deleted.

Algolia processes the following data:

IP-addresses	Internet provider	Browser type	Page references
Operating system	Date/time stamp	Browsing actions	Browsing patterns

These data do not contain personal data, but session data, which means Eijsink cannot use them to build profiles or identify individuals.

Algolia has implemented a distributed architecture with 400 clusters in 16 different regions and 70 data centres across the world. When we created our account, we chose to have data processed in Dutch data centres near Amsterdam.

Leadinfo
Leadinfo compares the visitor's IP address with a publicly available database of company data (such as the Chamber of Commerce) to determine which organisation visited Eijsink's website. Under the GDPR, IP addresses are considered private data and may therefore only be processed if there is a sound basis for doing so. Eijsink’s legal basis for processing IP addresses is its ‘legitimate interest’, as specified in Article 6(1)(f) of the GDPR. This article states that working with personal data is allowed if it serves a clear interest and privacy standards are upheld.

All servers and data are hosted on Amazon Web Services (AWS) in Ireland.

Security
Securing personal data is very important to us, and we have taken appropriate measures to ensure the security of your data.

Changes to this privacy statement
This privacy statement will be updated when changes are made to the categories of personal data stored or the way in which they are processed, so look closely at the date of this statement and regularly check whether a new version has been published.

Accessing and changing your data
If you have any questions or want to know what personal data we have stored, please contact us. (See the contact details at the bottom of this privacy statement) As a data subject, you have the following legal rights:

• The right to be informed about the categories of personal data collected and what we do with your data

• The right to access to the exact personal data we have collected.

• The right to have errors and inaccuracies rectified.

• The right to have outdated personal data deleted.

• The right to withdraw consent.

• The right to object to the processing of personal data.

We are here to help! Please make sure you always clearly state who you are, so that we can be sure we do not edit or delete the wrong personal data.

FILING A COMPLAINT
The greatest compliment we have received over the past 35 years has been the sheer number of satisfied customers. We are here to assist you 24/7. If you have questions, comments or suggestions, please do not hesitate to contact us. If you are still not satisfied or believe we are not processing your personal data properly, you always have the right to file a complaint with the Dutch Data Protection Authority.

CONTACT DATA
If you have any questions about privacy, please send an email to informatiebeveiliging@eijsink.nl. We will get back to you as soon as possible.