Your privacy matters

As of 25 May 2018, the General Data Protection Regulation (hereinafter ‘GDPR’) is in force. SHAPE handles your personal data carefully, securely and confidentially. SHAPE adheres in all cases to applicable laws and regulations, including the GDPR. This entails that we will in any case:

​

• Clearly state to what purposes we process personal data;

• Process your personal data in accordance with the objective for which they were provided; these objectives and types of personal data are described in the Privacy Statement;

• Process your personal data limited to only those data that are minimally necessary for the purposes for which they are processed; 

• Ask for your explicit consent if we need it to process your personal data;

• Have taken appropriate technical and organisational measures to ensure the security of your personal data;

• Not disclose personal data to other parties, unless this is necessary to fulfil the purposes for which they were provided;

• Are audited annually under the Information Security Standards, the ISO 27001 and NEN 7510, for the purpose of certification and making these certificates and their scope available for inspection;

• Are aware of your rights regarding your personal data, want to make you aware of them and respect them.