Privacy Statement
TIC Assurance B.V.

Privacy Statement TIC Assurance B.V.

TIC Assurance B.V. is responsible for processing personal data as outlined in this privacy statement.

Contact Details The quality controller within our firm oversees and is the first point of contact for the processing of personal data. The quality controller can be reached via the following contact details:

TIC Assurance B.V.
www.tic-assurance.nl
Grote Voort 247
8041 BL Zwolle
The Netherlands
Tel. +31 (0)85-5000393
Email: mail@tic-assurance.nl

Personal data we process

TIC Assurance B.V. processes personal data of clients when they use our services and/or when they provide this data to us.

Below is an overview of the personal data we process in relation to the following categories:

• Clients
• Applicants

For each category, the purposes of processing and who has access to the data are specified.

1. Clients

1. Personal data is processed only for the following purposes:

• Identification
• Establishing a risk profile under the Anti-Money Laundering and Anti-Terrorist Financing Act (Wwft)
• Maintaining contact with clients
• Performing agreed-upon services
• Fulfilling legal obligations
  2. Only the following data is processed:
• Name, given names, initials, title, gender, date of birth, address, postal code, city, phone number and other communication details, bank account number, and citizen service number (BSN)
• Copy of identification document
• Other data required by law
  3. Personal data is only shared with:
• Individuals or third parties involved in or responsible for the aforementioned activities
• Others, when there is a legitimate legal basis under the GDPR

1. Applicants
   1. Personal data is processed only for the following purposes:

• Assessing suitability for a current or future position
• Handling expenses incurred by the applicant
• Internal control and company security
• Fulfilling legal obligations
  2. Only the following data is processed:
• Name, given names, initials, title, gender, date of birth, address, postal code, city, phone number and other communication details, bank account number, and BSN
• Administrative number with no other content than that described above
• Nationality and place of birth
• Data of parents/guardians of underage applicants
• Information about education, courses, and internships
• Information about the position being applied for
• Information about current and previous employment, including reasons for termination
• Motivation for the role and the organization
• Other job-related information provided by the applicant or known to them
• Other data required by law
  3. Personal data is only shared with:
• Individuals or third parties involved in or responsible for the aforementioned activities
• Others, when there is a legitimate legal basis under the GDPR

Special and/or sensitive personal data we process

TIC Assurance B.V. processes the following special and/or sensitive personal data:

• Citizen Service Number (BSN)

These data are used exclusively for the agreed-upon purposes/services. If these purposes change, we will re-align with the data subject.

Wwft

TIC Assurance B.V. is legally obligated under the Wwft to collect and process specific identification data, including name(s), date of birth, address, city, and details of the identification document. In some cases, a copy of this document must also be collected. TIC Assurance B.V. must report unusual transactions to the Financial Intelligence Unit Netherlands (FIU-Nederland) and provide the necessary information.

Legal Basis and Purpose of Processing TIC Assurance B.V. processes personal data based on

• Your consent (e.g., newsletter subscriptions)
• Contractual necessity (e.g., to contact you about our services)
• Legal obligations (e.g., under NBA and tax regulations)

Retention period

TIC Assurance B.V. retains personal data only as long as necessary for the purposes for which it was collected or as required by law:

• Cookies on our website: 30 days
• Potential client inquiries not resulting in engagement: 30 days
• Client-related service records: typically 7 years
• Wwft-related data: at least 5 years after the business relationship ends or after a report is filed

Sharing personal data with third parties

TIC Assurance B.V. does not sell personal data. Data is shared only when necessary for contract execution or legal obligations. We sign (sub-)processor agreements to ensure confidentiality and security.

In some cases, personal data may be shared with external professionals (e.g., notaries, lawyers, pension specialists) under the client’s instruction, with their explicit consent.

These data are never used for commercial purposes.

Website

With regard to website visits:

Cookies and Similar Technologies

TIC Assurance B.V. uses functional, analytical, and tracking cookies via Google Analytics. These cookies ensure proper website functionality and user experience optimization. Upon first visit, users are informed and asked for consent.

Users can disable or delete cookies through browser settings. Instructions can be found online.

Rights of data subjects

Data subjects have the right to access, correct, or delete their personal data, withdraw consent, object to processing, and request data portability. Requests should be sent to: mail@tic-assurance.nl

To verify the identity of the requester, a copy of an ID (with photo, MRZ, ID number, and BSN blacked out) should be included. We respond within one month.

Complaints can be submitted to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):
https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons

Data Security

TIC Assurance B.V. takes data security seriously and implements appropriate technical and organizational measures. If you believe your data is not properly secured or suspect misuse, please contact our quality controller using the contact details listed above.