Falck and privacy Falck is committed to a safe, reliable and sustainable service of high quality. This also applies to managing your personal data. You can expect from us that your data are safe with us and that we treat them carefully. Privacy Statement This Privacy Statement is an addition to other arrangements that you agreed with Falck by contract. This statement explains which personal data Falck collects and for which purposes we use them. The principle is that the data Falck collects is necessary for the conscientious provision of their services. Falck stores these data in accordance with the retention periods it has established. These are aimed at deleting or archiving the information as soon as it no longer needs to be stored for its services or by virtue of a legal obligation. In principle, Falck uses 3 retention periods: fiscal data and data and applications : 7 years local files : 2 years application data 1 month or with consent : 1 year These periods commence upon receipt of the data and in the case of a business relationship, after the contract or the contact has ended. Access and rectification It is important to Falck that the data it collects are reliable. Anyone whose data is collected by Falck is therefore entitled to access his or her data and, if so required, to request from us to rectify, supplement, delete or shield the data. If you wish, you can contact Falck, preferably by using the contact form on the website or by email or post, using the contact details below: Falck B.V., Falck Fire Services NL B.V. and Falck Consulting & Technologie B.V. Princenhagelaan 13 4813 DA Breda E. fireacademy@falck.com Safety matters to Falck and in order to prevent your data being accessed by somebody else, we will first check your identity. Direct mail For newsletters and other forms of direct mail, you can always unsubscribe directly, without having to get in touch with Falck in person. Privacy Statement May 2018 1 of 5
1. What do we use your data for? Falck uses your data on the basis of your consent, to implement an agreement with you, for a legitimate interest or because of a legal obligation. Below, we will inform you about what we do with your data in each of these situations. 1.1. With your consent to inform you and answer your questions When you visit the Falck website and/or mobile services, the web server automatically collects details about the visit. More detailed information about this can be found in the Cookie Statement. In addition to this, Falck collects personal data through contact or registration forms or on subscription to an email newsletter, for example. Falck uses these personal data: to provide you with information adequately; for (targeted) marketing activities to create a relationship with you, among other things to inform you about new Falck services; for statistical analyses. 1.2. Implementation of an order or an agreement General Falck collects business and contact details of business relations, who (possibly) use the services provided by Falck. The contact details concern personal data such as name, position, sex, email address and telephone number. Falck uses these personal data of its business relations for: providing a quotation for prospects or clients; entering into and executing agreements; maintenance or expansion, among other things by keeping clients informed of new services by Falck; handling payments; obtaining visa and booking business trips for participants in order to reach a (training) location; answering questions or resolving complaints, as well as reporting on their status; conducting a satisfaction survey. Education, training, software and consultancy In order to provide the trainings, software and services at all levels of incident organizations both within the public and the industrial domain, Falck collects and processes personal data. These data are requested from the participant, the employer and/or the client. For the benefit of its software solutions, Falck tends to be the processor of these data, so for this Falck has concluded a processing agreement with its clients. This information is needed to provide a safe, reliable and sustainable service. Another objective is to avoid risks during courses and trainings. Privacy Statement May 2018 2 of 5
Falck uses these personal data of its participants and relations for: detecting and preventing safety risks during courses and trainings; planning, registering and justifying the activities carried out as well as the results achieved by the participants; providing services tailored to the needs of your organization and your employees; providing services/software to improve the business operations of its client; to give organizational advice to the client; to provide maximum fire prevention and fire safety within your company. 1.3. Execution of an employment contract Job applicants and employees 'Helping people with people', that is the mission at Falck. That is why Falck s employees are paramount to the company. Prior to employment, Falck therefore checks whether its employees are suitable and ensures that they remain suitable to live up to the expectations of both Falck and its clients. Falck uses these personal data of its employees for: assessing suitability; entering into and executing employment agreements; handling payments. 1.4. Legitimate interests and legal obligation For operational reasons, Falck processes data from its employees and relations. In some cases, Falck processes personal data on the basis of a legal obligation (tax authorities, UWV (Employee Insurance Agency), CBS (Statistics Netherlands), police, municipality executive, and so on). This processing takes place in a careful manner in the context of efficient and effective business operations and is aimed in particular at the following activities: the treatment, creation, handling and archiving of documents; sending and receiving oral, written and electronic messages; managing and supporting the proper functioning of systems and programmes; registering incidents and complaints; making backups; booking business trips; internal audit and security; resolution of disputes. Privacy Statement May 2018 3 of 5
2. Which personal data do we possibly collect from you? 2.1. Communication with Falck During your interaction with Falck, for example by registering yourself on our web site, by emailing us or through your dealings with your account manager, we may ask you for certain data or receive these, such as your: name; e-mail address; postal address; telephone number; sex; age. Additionally, we will inform you on our site about the use of cookies or similar technologies, these are also used to collect data, including, but not limited to: IP address; cookie-id; web browser; location; the web pages that you visit on our web sites. 2.2. Relations and participants If you use the services of Falck as a relation or participant, we register the information that we receive from you or your employer. In general Falck informs you about the purpose for which the data are used as soon as we request those data from you. In addition to the previous data they include your: name and the address of the company you work for; your previous training at Falck or other training providers; personal data that are relevant in the context of the business relationship 2.3. (Hired) employees The data of our Falck employees and hired employees are stored in their personnel records which, among other things, contain the employment contract and other information about the employment relationship. The data stored there include the following, among other things: name, address, email address and telephone number; identity details, such as BSN/citizen service number, passport number and the like; start date and end date of employment, location of work and position; hours worked, holidays and absence; salary and pension details; bank and tax details; personal data, such as education, qualifications, competencies, career wishes and development, appraisals, assessments; information about health, accidents and reintegration; contact details of immediate family; personality test and Certificate of Good Behaviour (VOG); memberships of professional organizations; documentation in the event of disciplinary measures such as warnings. Privacy Statement May 2018 4 of 5
With respect to safety, there are legal and contractual requirements for competencies and training of firefighters. To meet those obligations, Falck registers these data and exchanges them with its clients, safety regions and the Dutch Institute for Safety. These competencies include: Diplomas and certificates obtained, with the dates; Results of a medical examination. Privacy Statement May 2018 5 of 5