privacy statement

Version 2020
Privacy Policy Vizier
General
The Dutch Data Protection Act (WBP) has been established by the Dutch legislature
to protect privacy and personal data. The law outlines the rights of individuals
whose data is used and the obligations of organizations that use this data.
According to this law, Stichting Vizier is the responsible party, while clients and service providers are the affected parties. The law refers to “processing personal data,” which encompasses all actions that can be taken with personal data: from collection to destruction.

Coöperatie TUYS UA
Within Stichting Vizier, various personal data are processed, which may apply to clients, professionals, and organizations. For clients, collecting data is essential for effective treatment, support, and advice on reports, as well as for financial processing with the funding municipalities. This is in accordance with the WGA (Municipal Anti-Discrimination Facilities Act). Additionally, processing may be necessary for legal obligations, such as the Equal Treatment Act and the WGA.

Stichting Vizier’s Obligations
Before collecting data, Stichting Vizier must define the purpose or purposes of data collection:

1. Data may only be collected for specific purposes. For clients, this includes support and continuity of services regarding reports of discrimination and intimidation on all legal grounds and social areas as stated in the Equal Treatment Act.
   Data may also be used for effective management and policy, as well as for supporting scientific research, education, and awareness. Data used for facilities, data security, monitoring, and reporting to the Ministry of the Interior, under the WGA, is always anonymized to the level of place, street, and postal code (without house numbers or names).
2. Further processing within Stichting Vizier may not occur in a way that is inconsistent with these purposes.
3. The client must be informed that personal data are being processed, unless the client already knows.
4. All Stichting Vizier employees are required to handle personal data confidentially.
5. All personal data must be adequately secured against unauthorized access.
   Version 2020
6. Personal data must not be stored longer than necessary. The retention period for client data is 7 years, which applies to all files of clients receiving personal support and advice on reports of discrimination and intimidation.
   Rights of the data subject
7. The right to know if personal data are being processed.
8. The right to access and obtain copies of data, as long as this does not infringe on the privacy of others.
9. The right to correct, supplement, or delete data if necessary.
10. The right for clients and service providers to object to data processing.
11. The right to request the destruction of data.
12. The right to add a personal statement to the file.
13. Clients and service providers must know where and how to exercise these rights.
14. If Stichting Vizier disagrees with granting any of these rights, the client or service provider may file a complaint according to the applicable complaints procedure. As a final recourse, an appeal can be made to the civil court. The client’s interests can also be represented by a representative.
    Disclosure of data to third parties
    Personal data may be disclosed to authorized individuals for matters related to discrimination or other issues, but only with the client’s consent.