Privacy Statement Compliance Champs Integrity & Investigations

Compliance Champs Integrity & Investigations B.V. (Hereafter: “CCII”), located at Coolsingel 6 in Rotterdam, is responsible for the processing of personal data as outlined in this privacy statement.
The privacy policy of CCII is implemented through agreements, codes of conduct, and (security) measures.

Contactinformation:

www.compliancechamps.com

Coolsingel 6  

3011 AD Rotterdam 

ccii@compliancechamps.com

Data Protection Officer (DPO)

Dennis van der Meer is the Data Protection Officer of CCII. 
He is CCII’s point of contact for questions regarding how CCII processes data and can be reached via ccii@compliancechamps.com.

Processing of Personal Data

CCII may process your personal data when you use our services. It is also possible that we process your personal data because we have obtained it in the context of an investigation or consultancy assignment.

Purpose and Legal Basis for Data Processing 

CCII processes personal data for the following purposes: 

  • Carrying out investigations 
  • Providing advice in the field of Governance, Risk & Compliance 
  • Supporting dispute resolution 
  • Forensic technology services 
  • Sending our newsletter and/or promotional materials 
  • Contacting you by phone or email when necessary to perform our services 
  • Delivering services to you 
  • CCII also processes personal data when we are legally required to do so, such as data needed for our tax filings. 

CCII processes personal data solely on the legal bases specified in the General Data Protection Regulation (GDPR). When your personal data is processed, CCII will ensure that you are informed in a timely manner about the applicable legal basis and what this may mean for you. 

Retention Periods

CCII does not retain your personal data any longer than is strictly necessary to achieve the purposes for which it was collected. We apply different retention periods for different categories of personal data.

Data Processing Agreement

CCII enters into data processing agreements with companies that process personal data on its behalf to ensure the same level of security and confidentiality of your data. CCII remains responsible for these processing activities. 

Sharing Personal Data with Third Parties

CCII does not sell your data to third parties and only provides it when necessary to perform our agreement with you or to comply with a legal obligation. For companies that process your data on our behalf, we enter into a data processing agreement to ensure the same level of security and confidentiality of your data. CCII remains responsible for these processing activities.

Cookies

CCII only uses technical and functional cookies, as well as analytical cookies that do not infringe on your privacy. A cookie is a small text file that is stored on your computer, tablet, or smartphone upon your first visit to this website. The cookies we use are necessary for the technical functioning of the website and for your user convenience. They ensure that the website works properly and, for example, remember your preference settings. They also help us optimize our website. 

Accessing, Modifying, or Deleting Data
You have the right to access, correct, or delete your personal data. In addition, you have the right to withdraw any consent you have given for data processing or to object to the processing of your personal data by CCII. You also have the right to data portability, which means you can request that the personal data we hold about you be sent in a computer-readable file to you or to another organization you specify. 

Requests to access, correct, delete, transfer, withdraw consent, or object to the processing of your personal data can be sent to ccii@compliancechamps.com. To ensure that the request is made by you, we ask that you include a copy of your ID with your request. Please black out your photo, MRZ (machine-readable zone, the strip of numbers at the bottom of the passport), passport number, and citizen service number (BSN) on this copy to protect your privacy. 

We will respond as quickly as possible, and no later than four weeks after receiving your request. 

CCII also wishes to inform you that you have the right to file a complaint with the national supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). This can be done via the following link: https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons. 

Accessing, Modifying, or Deleting Data

9.1 You have certain rights involving the processing of your data:

  • You have the right to request access to the personal data that we have registered about you;
  • When the data is incorrect or no longer relevant, you can request any inaccurate personal information to be corrected, supplemented or deleted (right to rectification and supplementation).
  • In some circumstances you have the right to limit the processing of your personal data by us;
  • In some cases you have the right to be forgotten, which means we have to erase the personal data we hold from you;
  • You can object to our use of your personal data at any time and you may have the right to object to our processing of some or all of your personal data (right to object) and require them to be deleted in some other circumstances;
  • In some circumstances, you have the right to obtain a copy of your data in a usual, machine-readable format in order to be able to transfer it to another organization (right to data portability);
  • You have a right regarding automated decision-making and profiling which means you have the right to a human review when decisions are being made.

9.2 To exercise your rights involving the processing of your data, you can contact Compliance Champs at info@compliancechamps.com. We may ask you to provide information in order to determine your identity and to ensure that no one other then you is trying to execute your privacy rights. We adhere to the legal deadlines regarding the execution of the request. This means that generally a request will be processed within one month. This period can be extended to two months if it is considered a complex request. You will be notified when the period is extended. In certain cases, if legally permitted, we may deny your request. We will inform you about the reason for denying your request.

Data Security

CCII takes the protection of your data seriously and implements appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure, and unauthorized alteration. If you believe that your data is not properly secured or suspect any misuse, please contact our secretariat or email us at ccii@compliancechamps.com.

Detection of Data Breach

In the event of a data breach, CCII will act in accordance with the GDPR and the guidelines issued by the supervisory authorities. CCII will also promptly inform the client of the actual situation and take appropriate measures.

Changes to this Privacy Statement

Changes to the Privacy Statement