BaxterStorey’s website is ultimately controlled by BaxterStorey Netherlands, KvK 51949601. We are registered in the Netherlands and our registered office is Signature Strawinskyhuis, Strawinskylaan 6, 1077XZ, Amsterdam.
BaxterStorey is committed to protecting and respecting your privacy. We take your privacy very seriously and we ask that you read this Privacy Notice carefully as it contains important information on:
- the personal data we collect about you;
- how we look after your personal data when you visit our website (regardless of where you visit from);
- with whom your personal data might be shared; and
- your privacy rights and how the law protects you.
WHO WE ARE
BaxterStorey Limited is the controller and responsible for your personal data (collectively referred to as “BaxterStorey”, “we”, “us” or “our” in this Privacy Notice).
PERSONAL DATA WHICH WE COLLECT
Personal data provided by you.
We collect personal data about you when you:
- contact us through our website (including if you fill in the enquiry form);
- consent to the use of cookies on our website (as further described below); and
- apply for a vacancy with us.
The personal data collected in the above manner may include your:
- full name;
- email address;
- telephone number;
- CV, covering letter and other application details; and/or
- enquiry information.
Special categories of personal data
We do not proactively collect special category personal data via our website such as health information. However, our website does include text boxes which are designed for you to provide us with further information, and you should be aware that information you freely submit may reveal to us certain information that may be considered special category personal information such as information relating to your allergens.
We do not ask for any special categories of personal data to be disclosed to us as part of your job application process via our website. Depending on the nature of the role, we may have to conduct further checks at a later stage and where those checks will involve special categories of personal data, we will explain why we need that information and how we intend to use it in our recruitment and selection privacy notice.
Personal data about other individuals
If you give us information on behalf of someone else, you confirm that the other person has appointed you to act on his/her behalf and has agreed that you can:
- give consent on his/her behalf to the processing of his/her personal data;
- receive on his/her behalf any data protection notices;
- give consent to the transfer of his/her personal data outside the United Kingdom “UK” and European Economic Area “EEA”.
Monitoring and recording communications
We may monitor and record communications with you (such as emails) for the purpose of quality assurance, fraud prevention and compliance activities.
HOW WE USE YOUR PERSONAL DATA
Under data protection law, we can only use your personal data if we have a legal basis, e.g.:
- where you have given consent;
- to comply with our legal and regulatory obligations;
- for the performance of a contract with you or to take steps at your request before entering into a contract; or
- for our legitimate interests or those of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests. When relying on this legal basis, we will carry out an assessment to balance our interests against yours.
The table below explains what we use your personal data for and why:
What we use your personal data for |
Our legal basis |
|---|---|
| Assist you with your queries in relation to our business. | Performance of a contract with you or to take steps at your request before entering into a contract |
| Review any job applications you submit to us | Performance of a contract with you or to take steps at your request before entering into a contract |
| Detect and prevent fraud | Compliance with our legal and regulatory obligations |
| Customise our website and its content to your particular preferences | Consent (where we are not required to obtain your consent and do not do so, for our legitimate interests i.e. to provide you with information (as a prospect or existing customer) we consider may be useful to you)) |
| Notify you of any changes to our website or to our services that may affect you | Compliance with our legal and regulatory obligations |
| Provide you with marketing materials and information about our business and services | Consent (where we are not required to obtain your consent and do not do so, for our legitimate interests i.e. to provide you with information (as a prospect or existing customer) we consider may be useful to you)) |
| Develop and improve our website, business and services | Consent (where we are not required to obtain your consent and do not do so, for our legitimate interests i.e. to provide you with information (as a prospect or existing customer) we consider may be useful to you)) |
WHEN WE MIGHT SHARE YOUR PERSONAL DATA WITH THIRD PARTIES
We do not, and will not, sell any of your personal data to any third party, including your name or email address. As an essential part of being able to provide our services to you, we do share your data with the following categories of third parties:
- service providers that help us to run our business, such as website hosting providers, website developers, and newsletter distributors;
- professional advisers, including lawyers, bankers, auditors and insurers who provide advice to us when we require it;
- law enforcement agencies in connection with any investigation to help prevent unlawful activity; and
- third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Privacy Notice.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions. If you would like any more information about the third parties which we work with to provide our services to you, please contact us on the contact details provided later in this Privacy Notice.
HOW WE ASK FOR CONSENT
In those cases where we need your consent to hold and process your personal data, we will ask you to check a box on any form requiring consent. By checking these boxes, you are confirming that you have been informed as to why we are collecting the information, how this information will be used, for how long the information will be kept, who else will have access to this information and what your rights are as a data subject (all of which is set out in this Privacy Notice).
HOW WE KEEP YOUR PERSONAL DATA SECURE
To protect your information, we have policies and procedures in place to make sure that only authorised personnel can access the information, that information is handled and stored in a secure and sensible manner, and all systems that can access the information have the necessary security measures in place.
All employees, contractors and subcontractors receive the necessary training and resources to ensure they understand their responsibilities in relation to all of our policies and procedures.
In addition to these operational measures, we also use a range of technologies and security systems to reinforce the policies and procedures, including ensuring that:
- access to personal data is strictly restricted to those employees who need access to this information as part of their role;
- unauthorised external access to personal data is prevented through the use of a firewall; and
- your personal data is stored on secure servers.
To make sure that these measures are suitable, we run vulnerability tests regularly. Audits to identify areas of weakness and non-compliance are routinely scheduled.
HOW LONG DO WE KEEP YOUR PERSONAL DATA
We shall only retain your information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. If you would like more information about how long we retain specific types of your information, please contact us on the contact details provided later in this Privacy Notice.
TRANSFERS OF YOUR PERSONAL DATA OUT OF THE EEA
All information you provide via our website is stored on our secure servers within the United Kingdom (“UK”) and European Economic Area (“EEA”). If any data that we collect from you is transferred to, or stored at, a destination outside the UK and EEA at any time, we will update this Privacy Notice accordingly.
YOUR RIGHTS
The right to access information we hold about you
At any point you can contact us to request the information we hold about you as well as why we have that information, who has access to the information and where we got the information. Once we have received your request, we will respond within 30 days.
The right to correct and update the information we hold about you
If the information we hold about you is out of date, incomplete or incorrect, you can inform us, and we will ensure that it is updated.
The right to have your information erased
If you feel that we should no longer be using your information or that we are illegally using your information, you can request that we erase the information we hold. When we receive your request, we will confirm whether the information has been deleted or tell you the reason why it cannot be deleted.
The right to object to processing of your information
You have the right to request that we stop processing your information. Upon receiving the request, we will contact you to tell you if we are able to comply or if we have legitimate grounds to continue. If data is no longer processed, we may continue to hold your information to comply with your other rights.
The right to ask us to stop contacting you with direct marketing
You have the right to request that we stop contacting you with direct marketing.
The right to data portability
You have the right to request that we transfer your information to another controller. Once we have received your request, we will comply where it is feasible to do so.
For your security we may need to verify your identity before we process your instructions above.
The right to withdraw consent
If you have provided us with your consent to use your personal data, you have a right to withdraw that consent at any time. You may withdraw your consent by contacting us.
For further information on each of those rights and/or if you would like to exercise any of those rights including the circumstances in which they do and do not apply, please contact us on the contact details provided below.
COOKIES AND TRACKING
Use of cookies
A cookie is a small text file which is placed onto your device when you access our website. We use cookies on this website to:
- recognise you whenever you visit this website (this speeds up your access to the website as you do not have to log in each time);
- obtain information about your preferences, online movements, and use of the internet;
- carry out research and statistical analysis to help improve our content, products, and services and to help us better understand our customer requirements and interests;
- target our marketing and advertising campaigns more effectively by providing interest-based advertisements that are personalised to your interests; and
- make your online experience more efficient and enjoyable.
In most cases we will need your clear, freely given, specific and informed consent in order to use cookies on this website. The exception is where the cookie is essential, meaning that it is required to ensure that the website functions properly.
Consent to cookies
We will always ask for your permission to place cookies or other similar technologies on your device when you first visit our website, except where they are essential for us to provide you with a service that you have requested. You can withdraw any consent to the use of cookies or manage any other cookie preferences by using the cookies preference tool on our website. If you do this, please be aware that you may lose some of the functionality of this website.
For further information about cookies and how to disable them please go to the Dutch Data Protection Authority’s webpage on cookies: (www.autoriteitpersoonsgegevens.nl.).
Description of cookies
We use the following cookies and other technologies:
- Essential: These cookies are essential to the operation of our website and cannot be switched off.
- Analytics: These cookies allow us to have a better understanding of how our website is performing in terms of statistics, engagement level, content relevance and ease of navigation. We use this information to help improve our website’s functionalities and content as well as your browsing experience.
The table below provides some information on the cookies which we use on our website:
First Party |
||||
|---|---|---|---|---|
| Name | Service | What it does | Why is it used | How long it lasts |
| wp_test_cookie | Necessary (functional) | This is a test cookie and does not contain any user identifiable information | To allow the site to function correctly | Browser Session |
| wordpress_{hash} | Necessary | store your authentication details. Its use is limited to the Administration Screen area | Allows users to login to the site (Admin only) | Browser Session |
| wordpress_logged_in_{hash} | Necessary |
Indicates when you’re logged in, and who you are |
to indicate when you are logged in, and who you are |
Browser Session OR 14 Days |
| wp-settings-{time}-[UID] |
Necessary |
Stores admin display customisation. |
Allows user to customise the admin screens (Admin only) |
1 year |
| comment_author_{HASH} |
Necessary |
remembers the comment form’s name field value |
Convinence, allow the site to auto fill the coment form field |
1 year |
| comment_author_email_{HASH} |
Necessary |
remembers the comment form’s email field value |
Convinence, allow the site to auto fill the coment form field |
1 year |
| wp-wpml_current_language |
Necessary | Stores the current language |
So the user can select their language |
|
| wp-wpml_current_admin_language_{hash} |
Necessary |
Stores the current WordPress administration area language. |
So the user can select a language in the admin area (admin only) |
|
| _icl_visitor_lang_js |
Necessary |
Stores the redirected language |
Allows multi language support |
1 day |
| wpml_browser_redirect_test |
Necessary |
Tests if cookies are enabled |
To allow the site to function correctly |
Browser Session |
Third Party |
||||
|---|---|---|---|---|
| Name | Service | What it does | Why is it used | How long it lasts |
| FPLC |
Analytics |
Google Analytics |
performance and traffic monitoring statistics |
20 hours |
| _ga |
Analytics |
Google Analytics |
performance and traffic monitoring statistics |
2 years |
| _gac_ |
Advertising |
Google Analytics |
performance and traffic monitoring statistics |
90 days |
| _gid |
Analytics |
Google Analytics |
performance and traffic monitoring statistics |
24 hours |
| _gat[_] |
Analytics | Google Analytics |
performance and traffic monitoring statistics |
1 minute |
| __utma |
Analytics |
Google Analytics |
performance and traffic monitoring statistics |
2 years |
| __utmb |
Analytics |
Google Analytics |
performance and traffic monitoring statistics |
30 minutes |
| __utmc |
Analytics |
Google Analytics |
performance and traffic monitoring statistics |
Session |
| __utmt |
Analytics |
Google Analytics |
performance and traffic monitoring statistics |
10 minutes |
| __utmz |
Analytics |
Google Analytics |
performance and traffic monitoring statistics |
6 months |
| __utmv |
Analytics | Google Analytics |
performance and traffic monitoring statistics |
2 years |
| AMP_TOKEN |
Functionality |
Google Analytics |
performance and traffic monitoring statistics |
30 seconds to 1 year |
| FPID |
Analytics |
Google Analytics |
performance and traffic monitoring statistics |
2 years |
| GA_OPT_OUT |
Functionality |
Google Analytics |
performance and traffic monitoring statistics |
10 Nov 2030 (all cookies) |
| _ga_ |
Analytics |
Google Analytics 360 |
performance and traffic monitoring statistics |
2 years |
| _dc_gtm_ |
Analytics |
Google Analytics, Google Tag Manager |
performance and traffic monitoring statistics |
1 minute |
| _gaexp |
Analytics |
Google Analytics, Optimize |
performance and traffic monitoring statistics |
Set by customer; max of 93 days |
| _gaexp_rc |
Analytics |
Google Analytics, Optimize |
performance and traffic monitoring statistics |
10 seconds |
| _opt_awcid |
Analytics |
Google Analytics, Optimize |
performance and traffic monitoring statistics |
24 hours |
| _opt_awmid |
Analytics |
Google Analytics, Optimize |
performance and traffic monitoring statistics |
24 hours |
| _opt_awgid |
Analytics |
Google Analytics, Optimize |
performance and traffic monitoring statistics |
24 hours |
| _opt_awkid |
Analytics |
Google Analytics, Optimize |
performance and traffic monitoring statistics |
24 hours |
| _opt_utmc |
Analytics |
Google Analytics, Optimize |
performance and traffic monitoring statistics |
24 hours |
TAKE CARE WHEN LINKING TO OUR SOCIAL MEDIA SITES
Our website provides links to our social media sites. Once on any of these social media sites, please take care if you choose to post any information as this will be on a public domain and may be widely accessible. If you would like more information about how any information posted on these sites will be used, please read the sites’ privacy notice carefully.
HOW TO COMPLAIN
Please contact us if you have any queries or concerns about our use of your personal data (see “Contacting us” below). We hope we will be able to resolve any issues you may have.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens); directly. Further information, including contact details, is available on their website at www.autoriteitpersoonsgegevens.nl.
CONTACTING US
If you have any queries about this Privacy Notice, need further information about how we use your personal data or wish to lodge a complaint, please contact us by any of the following means:
- email us at: dataprotection@wshlimited.com; or
- write to us at: BaxterStorey Netherlands, Signature Strawinskyhuis, Strawinskylaan 6, 1077XZ,
Amsterdam - Contact us using our “Contact” page on the website.
CHANGES TO THIS PRIVACY NOTICE
We may change this Privacy Notice from time to time. You should check this Privacy Notice occasionally to ensure that you are aware of the most recent version that will apply each time you access the website.
This Privacy Notice was last updated on 30 May 2024.