Privacy Statement

The Continental

Article 1. Definitions

1.1. In this privacy statement, the following terms, written with a capital letter, shall have the following meaning, unless expressly indicated otherwise or the context shows otherwise:

GDPR: General Data Protection Regulation;
Data Subject: The natural person whose Personal Data is processed;
Agreement: The agreement between The Continental and the Client;
Personal Data: Data relating to an identified or identifiable natural person;
The Continental: The Continental, located at Grote Kerkstraat 27B, Raamsdonksveer, registered with the Dutch Chamber of Commerce under number 55880452;
Website: The website https://the-continental.nl;
Website Visitor: The natural person who visits the Website.

1.2. Unless the context indicates otherwise, defined terms in the singular shall also include the plural.
1.3. Where “he” or “his” is used in this privacy statement, it may also be read as “she” or “her.”

Article 2. Controller and Contact Details

2.1. The controller is:
The Continental
Grote Kerkstraat 27B
4941 DM Raamsdonksveer
Chamber of Commerce number: 55880452
Email: info@the-continental.nl
Phone: +31 6 58 76 88 71

2.2. The Continental considers careful handling of Personal Data to be of great importance. In processing Personal Data, The Continental acts in accordance with the GDPR.

Article 3. Data Subjects and Legal Basis

3.1. Data Subjects are:
a. Clients of The Continental;
b. Legal representatives of clients of The Continental.

3.2. The legal basis for processing Personal Data is the performance of the Agreement, the consent of the Data Subject, and compliance with legal obligations.

3.3. The Continental processes Personal Data of a Data Subject under 16 years old solely on the basis of performance of the Agreement.

Article 4. Personal Data Processed

4.1. The following Personal Data may be processed by The Continental:
a. First and last name;
b. Gender;
c. Phone number;
d. Email address;
e. Address, postal code, and place of residence;
f. Date of birth;
g. Copy of identification document;
h. Bank account number;
i. Health information.

4.2. To enter into an Agreement with The Continental, all Personal Data requested on the consent form must be provided. Without this information, the Agreement cannot be concluded.

4.3. The Continental will not store Personal Data longer than strictly necessary to achieve the purposes described in Article 5.1, unless a legal obligation requires longer retention.

4.4. The Continental will only make a copy of the Data Subject’s identification document if legally required.

4.5. The Continental processes only the minimum amount of Personal Data necessary for the stated purposes.

4.6. The Continental does not use automated decision-making.

Article 5. Purposes of Processing

5.1. The Continental processes Personal Data for the following purposes:

a. Conclusion and execution of the Agreement, such as:
i. Performing the service requested by the Data Subject;
ii. Assessing whether execution of the Agreement poses (additional) risks to the Data Subject;
iii. Determining whether it is responsible to perform the Agreement;
iv. Establishing whether the Data Subject is under 16 years old and therefore requires the consent of a legal representative.

b. Communication purposes, such as:
i. Handling a question, comment, or complaint of the Data Subject;
ii. Contacting the Data Subject in connection with the Agreement.

c. Administrative purposes, such as:
i. Managing a client database;
ii. Processing payments.

d. Compliance with legal obligations.

5.2. The Continental will not process Personal Data for purposes other than those described in this privacy statement.

Article 6. Security Measures

6.1. To prevent unauthorized access, loss, theft, or unlawful use of Personal Data, The Continental has implemented security measures, including but not limited to:
a. Use of secure systems with strong passwords;
b. Use of antivirus software;
c. Use of an SSL certificate on the Website;
d. Regular software updates.

Article 7. Disclosure of Personal Data to Third Parties

7.1. The Continental will disclose Personal Data of the Data Subject to third parties only if:
a. A legal ground for disclosure applies;
b. The Data Subject has given consent;
c. It is necessary for execution of the Agreement;
d. Disclosure is made to a third party engaged by The Continental for the purposes listed in this privacy statement (e.g., ICT provider, accountant), with whom The Continental has entered into a data processing agreement ensuring adequate technical and organizational safeguards. These third parties have access to Personal Data only as necessary for their tasks and only where permitted by law;
e. Disclosure is requested by an authority, such as the police or judiciary, and The Continental has verified the authority’s competence.

Article 8. Deletion of Personal Data

8.1. The Continental will erase Personal Data without undue delay if:
a. The Personal Data is no longer required for the purposes for which it was collected;
b. The Data Subject objects to processing and the objection is justified;
c. The Personal Data is incorrect or outdated.

8.2. The Continental is not obliged to delete Personal Data if one of the statutory exceptions to the “right to be forgotten” applies.

Article 9. Right of Access, Portability, Rectification, and Erasure

9.1. Upon request, The Continental grants the Data Subject access to all Personal Data held and provides a free copy in a transferable format so the Data Subject can provide it to a third party.

9.2. The Continental offers the Data Subject the opportunity to correct or erase any incorrect data free of charge.

Article 10. Objection

10.1. The Data Subject may object to processing of their Personal Data if they have a legitimate reason based on their specific situation. Upon receiving the objection, The Continental will cease processing unless it has compelling legitimate grounds that override the Data Subject’s interests.

Article 11. Right to Restriction

11.1. If the Data Subject submits a request to amend, supplement, or delete their Personal Data, or submits an objection, and processing of the request takes time, the Data Subject may request The Continental to restrict processing during that period.

Article 12. Consent

12.1. The Data Subject may withdraw previously granted consent to the processing of Personal Data at any time. Withdrawal does not have retroactive effect.

Article 13. Questions, Requests, and Complaints

13.1. For:
a. Questions about how The Continental processes Personal Data;
b. Exercising the rights described in Articles 9, 10, or 11;
c. Withdrawing consent;
d. Reporting (suspected) misuse of Personal Data processed by The Continental,

the Data Subject may contact The Continental (see Article 2.1 for contact details).

13.2. If the Data Subject exercises rights under Articles 9, 10, or 11:
a. The Continental may request additional information if identity is in doubt;
b. The Continental will inform the Data Subject within one month of receipt of the request of the outcome.

13.3. If The Continental corrects, supplements, deletes, restricts, or ceases processing of Personal Data at the request of the Data Subject, or processes a withdrawal of consent, it shall notify the Data Subject.

13.4. If the Data Subject believes that processing of Personal Data by The Continental is not in line with this privacy statement and/or applicable laws, they may file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or with a supervisory authority in their country of residence.

Article 14. Security Incidents

14.1. If a security incident occurs at The Continental that results in a breach of sensitive Personal Data or otherwise seriously affects protection of Personal Data, The Continental will, if possible, notify the Dutch Data Protection Authority within 72 hours, in accordance with applicable breach notification rules.

14.2. If such a breach negatively affects the privacy of the Data Subject, The Continental will inform the Data Subject without delay.

Article 15. Cookies

15.1. The Website uses functional and analytical cookies.
15.2. A cookie is a small text file stored in the browser of the Website Visitor’s device during the first visit.
15.3. Website Visitors can disable cookies by adjusting browser settings and can delete stored cookies via their browser settings. For more details, consult the instructions or Help function of the browser.
15.4. The Continental uses functional cookies to ensure optimal operation of the Website.
15.5. Analytical cookies are used to collect and analyze information on Website usage (e.g., time spent on pages, country location, device type, performance statistics). These cookies are placed by a third party, Google, on behalf of The Continental.
15.6. The Website only uses cookies with no or very limited impact on the privacy of the Website Visitor and for which consent is not required.
15.7. No Personal Data within the meaning of the GDPR is processed through cookies.

Article 16. Amendments

16.1. The Continental reserves the right to unilaterally amend this privacy statement, for example due to legal changes. The latest version will always be available on the Website.

Article 17. Third-Party Privacy Policies

17.1. This privacy statement does not apply to third-party websites, such as social media platforms, linked via the Website. The Continental accepts no responsibility or liability for how these third parties handle Personal Data. Please consult the privacy statements of the relevant third parties for more information.