Privacy Policy

The private limited liability company Space Business Innovation Center Noordwijk B.V. (hereinafter referred to as: “SBIC”) considers proper handling of personal data to be of great importance and is aware of privacy legislation. This privacy statement therefore explains how your personal data is handled.

Contact details

SBIC can be regarded as the controller, as referred to in the General Data Protection Regulation (hereinafter referred to as: “GDPR”), for the processing of your personal data. SBIC can be reached via the contact details below:

Tel: + 31 71 2020307
Email: info@sbicnoordwijk.nl
Address: Kapteynstraat 1, suite 140, 2201 BB Noordwijk, the Netherlands

Which personal data is processed?

We process, among other things, the following categories of personal data from customers:

  • Data such as first and last name;
  • Contact details such as address details, telephone number, email address;
  • Function;
  • Date of birth or age;
  • Gender;
  • Residence status;
  • IP address;
  • Information about your activities on our website (for example your click behaviour);
  • Internet browser by device type;
  • Copy of passport or BSN;
  • Images, such as photos and/or video images;
  • Substantive correspondence;
  • Payment details and payment history.

If you wish to use and/or make use of our services, it is in any case required for the conclusion and/or execution of the agreement that you provide your first and last name, address details, telephone number, email address and payment information provided to us. Depending on the nature of the customer contact agreement, other personal data may also be required. If this is the case, we will inform you. If you do not wish to provide us with this personal data, we cannot guarantee proper execution of the agreement. Therefore, if the processing of specific personal data is mandatory, we will inform you about the possible consequences if you choose not to provide this personal data to us.

For what purposes are your personal data processed?

We collect and process personal data for various purposes. We use the personal data we have received from you, but may also process the personal data we obtain from other sources. Think of obtaining data by using the Land Registry, the Trade Register or by using social media platforms or other public sources. We process personal data for the following purposes:

  • General customer contact: The data is used for (i) providing the information requested by you, (ii) contacting you about the implementation of the agreement you concluded with us and (iii) questions and/or complaints.
  • For the performance of an agreement: We process your personal data at least from the agreement(s) that you conclude, will conclude or have concluded with us in order to be able to deliver our services and/or products to you and/or to provide advice about our services and/or Products. You can consciously think of the provision of technical, business and financial support to (startup) companies that use space technology. We also organise special programmes, workshops and events.
  • Analysing website browsing, search and/or click behaviour and personal offers: Your personal data is processed to analyse your behaviour on our website in order to improve our website. In addition, your personal data is processed to offer products and services that may be of interest to you.
  • Direct marketing: We use your personal data to send you market offers, news, enquiries and invitations via email, text messages, telephone calls and/or post. Through direct marketing, we wish to provide you with information about products and/or services that could be of interest to you.
  • Reviews: If you want to write a review, you can choose whether your personal data is visible to other visitors. In principle, we keep track of which review you have written to be able to improve the quality of our products and/or services and so that we can ultimately contact you based on this assessment to decide whether to ask you a specific question.
  • Satisfaction surveys: In some cases, we ask customers to participate in a satisfaction survey. Participation is completely voluntary. If you participate in a satisfaction survey, we will process the information you provide.
  • Fraud: We use your personal data to investigate, prevent and combat fraud.
  • Contests/promotions: If you participate in a competition, contest and/or promotion, we process personal data so that we can approach you with information about this competition and/or promotion or if you have won a prize.
  • Legal outcome: We process your personal data and in some cases provide this personal data to third parties, if we may be required by law or regulation. Think, for example, of investigative authorities and filing tax returns.

On what basis is your personal data processed?

We process your personal data if we are legally obliged to do so and if the processing is necessary for the implementation of the agreement concluded with you for the delivery of our products and/or services. It is also possible that we process your personal data for the purposes of a legitimate interest. A legitimate interest is generally legal, financial or business in nature. We have a legitimate interest in processing your personal data in the following situations, among others:

  • To send you, as our customer, information for our (other) related products and/or services;
  • To defend against legal claims;
  • For general customer contact, such as answering questions and handling complaints;
  • For the storage of your personal data on an external server;
  • To present to you as much relevant content on our website as possible;
  • To prevent and/or detect fraud.

Finally, we process some personal data when you have given your consent for this. You have the right to withdraw your consent at any time. This withdrawal does not affect the lawfulness of the processing based on the consent before the withdrawal.

Sharing personal data with third parties

In certain cases, we may also share your personal data with third parties. The forwarding of personal data to third parties only takes place for the purposes stated in this privacy statement and exclusively on the basis of the principles stated in this privacy statement. For example, we may provide your personal data to the following categories of third parties in the following cases:

  • If this is necessary for the performance of the agreement, for example, with the European Space Agency (ESA) in relation to ESA Business Incubation Centre (ESA BIC) applications. In addition, we may use our other partners for the other services we offer, such as organising events and workshops as well as our programmes in which you can participate;
  • We may use a collection agency to collect a claim against you;
  • We may use an external server to store your personal data, for which purpose we provide your personal data to a third party;
  • We can provide your personal data to, for example, website agencies and/or agencies for analysing the personal data about your website use, for personalising and optimising the website and communication and showing relevant offers and advertisements;
  • We may provide your personal data to ICT service providers who support us in keeping our software systems secure and stable;
  • We may provide your personal data to our insurer for the purpose of our liability.

    For the rest, we only provide your personal data to third parties with your prior consent, in the event that this is necessary for the promotion of our interests or if we are obliged to do so by law and / or regulations. For example, it is possible that the police may request personal data from us in the context of fraud investigations. In that case, we may be legally obliged to provide this personal data to the police.

    Third parties to whom we provide your personal data are themselves responsible for compliance with privacy legislation. We are neither responsible nor liable for the processing of your personal data by these third parties. Insofar as a third party processes your personal data for us in the capacity of processor, we conclude a processing agreement with this third party that meets the requirements as described in the GDPR.

    We do not transfer your personal data to a third country or international organisation outside the European Community.

    Security of personal data and retention period

    We take appropriate security measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorised alteration of your personal data. For example, we ensure that only the necessary persons have access to your personal data, that access to your personal data is protected, that our website is secured by means of information security techniques (such as firewalls), that our passwords are changed regularly, that our premises are secured and that our security measures are regularly checked (by external parties). If you have the impression that your personal data is not properly secured or if there are indications of abuse, for example, please feel free to contact our customer service or via: info@sbicnoordwijk.nl.

    Retention period

    We do not store personal data longer than is reasonably necessary to achieve the goals stated in this privacy statement or to comply with laws and regulations.

    For most personal data, we do not store it longer than is necessary for the execution of the agreement, the collection of the claim and the settlement of disputes that may arise from the agreement. However, some personal data must be kept longer by law. For example, we must keep certain tax documents for 7 years.

    In principle, we store personal data of a customer who has submitted an application for 6 months after the application has been rejected or after the agreement has been terminated, unless the agreement ends earlier. In principle, we also store personal data of a customer who participates in a programme for 6 months after participation in the programme or the agreement has ended, unless the agreement ends earlier. In principle, we delete data concerning ESA BIC alumni after a period of 10 years after this personal data has been collected. We store correspondence and personal data of (potential) customers for 1 year after this correspondence has taken place and/or these personal data have been collected. Finally, we store your personal data for direct marketing purposes until you withdraw your consent and/or object to this processing.

    Exercising your rights

    You have the right to view, correct or delete your personal data. In addition, you have the right to request a restriction of the processing of your personal data as well as the right to object to the processing of your personal data and the right to data portability. The latter means that you can submit a request to receive the personal data that we process from you in a structured, commonly used and machine-readable format and/or to transfer it to an organisation mentioned by you.

    If you would like to invoke one of your rights, you can send your request to info@sbicnoordwijk.nl. To prevent misuse, we can ask you to identify yourself before processing your request by sending us a copy of a valid proof of identity. In this copy, please mask your passport photo, MRZ (machine readable zone, the strip with numbers at the bottom of the passport), passport number and citizen service number. For example, you can use the government’s “KopieID app” for this. This is to protect your privacy.

    We will respond to your request as quickly as possible, but no later than within one month. If you have a complaint about the processing of your personal data, we will of course be happy to help you. If you nevertheless cannot come to an agreement with us, we would like to point out that you have the option of submitting a complaint to the Dutch Data Protection Authority. This can be done via the following link: http://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons.

    Automated decision making

    There is no automated decision making.

    Privacy statement changes

    This privacy statement was last updated on August 21, 2018. We reserve the right to unilaterally change or amend this privacy statement by amending this page. You are therefore advised to consult this page regularly. When there is a material change to this privacy statement, a clear notification will follow via our website.

    Version: August 2018