EXTERNAL PRIVACY AND COOKIE POLICY COLMORE

1. Introduction

   1. This External Privacy and Cookie Policy (“Policy”) is used by Diga Holding B.V. and its affiliates Diga Colmore Venlo B.V., by DIGA B.V., Colmore Tica B.V. (hereinafter: “Diga”). Diga has its registered office in Venlo and its principal place of business in (5928RD) Venlo at Floralaan 25, registered in the Commercial Register of the Dutch Chamber of Commerce under registration number 12068454. Diga can be contacted via receptie@colmore.nl.

   2. On the one hand, the Policy aims to explain why and how data that identifies or could identify natural persons (“Personal Data”) is processed by Diga. Unless indicated otherwise, Diga is the ‘controller’, as referred to in the General Data Protection Regulation (“GDPR”) for the processing of Personal Data as described in this Policy. On the other hand, the Policy was drawn up to inform you about the use of cookies and similar techniques on the website https://colmorecollections.nl/.com.de including webshop (hereinafter: “Website”) as maintained by Diga.

2. Part I - Personal data

   1. Diga may process your Personal Data in the following situations: 

      1. You are a b2b customer of Diga.

      2. You are prospect of Diga.

      3. You are distributor of Diga. 

      4. You are a supplier of products or services to Diga.

      5. You are an applicant of Diga.

      6. You are visiting a (web)shop op Diga.

   2. The Personal Data that Diga may processes includes: 

      1. Your first name and family name.

      2. Your address details.

      3. Your gender.

      4. Your date of birth.  

      5. Your e-mail address.

      6. Your telephone number.

      7. Your bank account number.

      8. Your portrait, footage, video footage.

      9. Additional Personal Data, depending on the nature of your relationship with Diga. 

      10. Your IP address.

1. In addition to this Personal Data, there may be other situations whereby you provide further Personal Data to us. This concerns the following categories of Personal Data: 

   1. The Personal Data that you provide to Diga upon purchasing products and services using the Website using the Webshop, including but not limited to (sensitive) Personal Data that are necessary to, for example, be able to provide support to you during the purchase of our goods.

   2. The Personal Data that Diga obtains through your use of our Website, by contacting us or otherwise communicating with us, whether or not on behalf of a company. 

2. Sources

   1. In principle, Diga collects Personal Data from you. This is not the case in the following circumstances: 

      1. If Diga receives your Personal Data from a customer, distributor or supplier and this data is transferred to Diga. This enables Diga to fulfil its obligations pursuant to an agreement with the customer, distributor or supplier concerned. 

      2. If Diga receives Personal Data from another organisation.

3. Grounds for processing

   1. Diga collects Personal Data based on the following principles: 

      1. The processing is necessary for the execution of an agreement which you, your employer or customer is a party to, or to take measures at your request prior to entering into an agreement. 

      2. Based on Diga’s legitimate interest as a commercial organisation to offer its products and recruit personnel, except if your interests or fundamental rights outweigh these interests.

      3. Diga’s legitimate interest for employee security and theft prevention

      4. If required, Diga will request your additional consent to process your Personal Data.  

4. Purposes

   1. Diga processes Personal Data for the following purposes: 

      1. To enable Diga to execute the agreement with you, your employer or customer. This includes but is not limited to delivering transportation services. 

      2. To enable Diga to hire new people by – inter alia - using our job application form on our Website.

      3. To enable Diga to conduct direct marketing activities, including but not limited to informing you about our products, services, events, and options to assess the effectiveness of these activities.

      4. To enable You and Diga to order and deliver products from our Website.

   2. Providing the requested Personal Data under Article 4.1.1 is a mandatory condition for entering into an agreement with Diga. By failing to provide this information, Diga may not be able to fulfil its obligations pursuant to any current or future agreements. The provision of the requested Personal Data under 4.1.2, 4.1.3, 4.1.3 and 4.1.4 is not a requirement, or a mandatory condition for entering into an agreement with Diga. However, by failing to provide this data, Diga may not be able to meet its obligations.   

5. Data retention

   1. Diga never stores collected Personal Data longer than the purpose for which this Personal Data was originally obtained. Personal Data will never be stored longer than the periods indicated below, unless Diga is legally obligated to store this Personal Data for a longer period (for tax purposes, for example) and unless you have given your consent to store this Personal Data for a longer period.

   2. The storage periods for the following categories of Personal Data are as follows: 

• Personal Data of (persons employed by) customers and suppliers: 2 years after the termination of the last agreement with Diga.
• Personal Data of (persons employed by) prospects: 2 years after the last contact with Diga.
• Personal Data of job applicants: 4 weeks after the end of a job application procedure unless you have given us your consent to store this Personal Data for a longer period of time. In this case, we will store the Personal Data for a maximum of 1 year after the end of the job application procedure.
• Personal Data provided by the contact form on our Website or otherwise voluntarily provided to Diga: 1 year after the last contact we had with you.

1. Receivers and transfer

   1. Diga may transfer Personal Data to third parties, so-called ‘receivers’, if this is necessary for the implementation of the purposes referred to in this Policy. The (categories of) possible receivers of Personal Data include: 

      1. Companies owned by or affiliated to Diga Holding B.V.

      2. Our business relations, customers, (Cloud) suppliers and contractors, for the performance of an agreement with Diga, or pursuant to our normal business activities with you, your client or employer.

      3. Our auditors, legal advisors, accountants and other advisors.

      4. Regarding our Website: providers of tools to analyse the use of our Website subject to the conditions included in our cookie policy (see below).

      5. Possible other receivers which you explicitly or implicitly consent to for the performance of services by Diga to you, or the company that you work for. 

2. Potential receivers and transfers

   1. In addition to receivers as referred to in Article 7, Diga may disclose or reveal Personal Data in the following cases: 

      1. If Diga is involved in the purchase or sale of a company, in which case Personal Data may be supplied to a prospective buyer, in which case the Personal Data will be provided in accordance with this Policy.

      2. If Diga must provide Personal Data pursuant to a legal obligation, or to implement the Policy, the General Terms and Conditions of the agreement with you (or your employer or client), to safeguard the rights, ownership and freedoms of Diga or its customers, or others, then Diga shall take such action as required.  

3. International transfer 

   1. In principle, Diga will not transfer Personal Data to countries or organisations outside the European Economic Area (hereinafter: “EEA”).

4. Security

   1. Diga attaches great value to protecting Personal Data and has taken appropriate measures and implemented the necessary safeguards. These measures meet the requirements under the GDPR.

5. Data subject’s rights

   1. Depending on the situation and subject to certain conditions, the GDPR gives Data Subjects the following rights: 

      1. The right to request access to the Personal Data.

      2. The right to request rectification of the Personal Data.

      3. The right to request the erasure of Personal Data.

      4. The right to request limiting the processing of personal data.

      5. The right to object against the processing of personal data.

      6. The right to data portability.

      7. If the processing is based on consent: the right to withdraw consent at any time without it affecting the legitimacy of the processing prior to the withdrawal.

      8. The right to submit a complaint to a supervisory authority like the Dutch Data Protection Authority. 

1. Questions

   1. If you have questions about the processing of Personal Data by Diga and requests regarding your Personal Data (as referred to in Article 11), please contact Diga via the information mentioned in Article 1.1 of this Policy. 

2. Part II – Cookie Policy

   1. Cookies are small data files that are sent to your browser and stored on the device with which you are visiting different locations on the Internet. Diga uses these cookies to make sure that the Website can be used as intended by Diga. The cookies that are used make sure that contact details do not suddenly disappear, for example. Other cookies make it possible to make fully anonymous use of the Website for analysis, to give feedback, share messages on social media and other relevant advertisements on the Websites of third parties. 

   2. When first using the Website, you will be requested to agree to the use of cookies which Diga uses via the Website. If you wish to withdraw your consent, please notify us and remove the placed cookies via your browser settings and cease using the Website.

3. Purpose

   1. Diga uses cookies on the Website for the following purposes: 

      1. Ensuring an optimal functioning Website.

      2. Developing and improving the Website.

      3. Storing preferences like language, location, orders, etc.

      4. Enabling contact with Diga via the Website.

      5. Analysing use of the Website.

         1. Creating statistics on the use of the Website.

   2. Below follows a list of the cookies that are placed, what they do and how they work. 

   3. Cookies that ensure that the Website functions properly

These cookies are used to ensure that the Website functions properly. For example, cookies are placed to ensure that your contact details are stored while making further use of the Website. See the added list

Diga needs know which parts of the Website are viewed most. Diga does this with the help of third-party software. This enables Diga to track the number of visitors . This information is converted into statistics that show Diga how the Website is used. It is not possible to deduce the statistics to a natural person. See the added list.

Certain parts of the Website can be shared with other persons on social media via the social media buttons on our Website. To enable this, third-party cookies are used. This allows the third party to identify you when you want to share something. Third parties can collect Personal Data about you via these cookies. More information on the collecting and processing is available via the privacy statement of these third parties. Please note that these statements may regularly be altered.

Please refer to the following third parties for the privacy statements concerned: 

• Google
• Facebook
• LinkedIn

  1. Other cookies

Diga may not always have insight into the cookies placed by third parties via the Website. One example is the use of embedded elements on the Website. These are texts, images or videos that or not stored on Diga's Website but are shown via the Website. If you encounter cookies on the Website that fall under this category and are not mentioned above, please let us know. Alternatively, you can directly contact the third party and ask which cookies they place, and their reasons for placing the cookie, what the storage term of the cookie is and how your privacy is safeguarded. 

1. Browser settings

   1. If you do not agree with cookies being stored on your device and/or computer, you can adjust your browser settings to receive a warning before the cookies are stored. You can change the browser settings to refuse all cookies, or only refuse the cookies of third parties. It is also possible to delete stored cookies. Please note: you must change the settings for each browser and every device that you use. 

   2. It is important to understand that if you refuse cookies, we can no longer guarantee that the Website will function optimally. This could cause the loss of various functions or result in part of the website no longer being visible. Refusing cookies does not mean you will no longer see advertisements, it means you will no longer see personalised advertisements. 

   3. More information on your browser's settings is available via your browser's help function.

   4. The hyperlinks to pages on cookies for the most commonly used browsers are shown below. 

• Mozilla Firefox
• Google Chrome
• Internet Explorer
• Safari 

  1. To switch off the cookies of specific parties, click on Your Online Choices.

1. Changes

   1. This Policy must be adjusted every now and then following changes to rules regarding the Website or cookies. Diga reserves the right to change this Policy without notice. This page will always contain the most recent version of the cookie statement. 

2. Questions

   1. If you have any questions about the use of cookies by Diga, please contact Diga via the information shown in Article 1.1 of this Policy. 

List of Cookies: