Privacy – and cookie statement

Merapar Technologies Holding B.V., (henceforth be known as: merapar) having its registered seat in Eindhoven, and its office address at De Run 8417, Veldhoven and registered in the Dutch trade register under number 69094659, and all of its legal subsidiaries in the world (“we/our/us”) is the controller in respect of the processing of personal data as reflected in this privacy statement. This privacy- and cookie statement is only available in English. Contact information: De run 8417. Veldhoven 088 134 2300 info@merapar.com www.merapar.com

Personal data we process.

Your enquiries

If you contact us about our services, the emails you send may include information about you, such as your name, address, age, gender, email address and your enquiry. We use this information to carry out the following:

• in line with the legitimate interest, we have in promoting our business, we will process your enquiries to provide you with information about the services we offer.
• this includes replying to your enquiry. We use a CRM Application to process your email address and information supplied by you in the course of an enquiry through the website, and to send you invitations and marketing materials.
• We may also process enquires to take steps you ask of us with a view to entering into an agreement to provide you with our services.

Marketing

We might use your information to send you marketing e-mails about our services and invitations to our events which are similar or related to those which you have previously received (or attended, in the case of events). If you would like to be removed from the mailing list, click unsubscribe at the bottom of each marketing e-mail.

Recruitment

When you apply for a job, the personal data contained in your application will be collected by us. Your personal data was either provided to us by you or someone who referred you for potential employment.

Your personal data will be processed for the purpose of managing our recruitment related activities in line with our legitimate interest, which include evaluating your candidacy/application for employment with us, setting up and conducting interviews and test for applicants, evaluating and assessing the results thereto, and as in otherwise needed in the recruitment and hiring processes.

When you give us consent, we retain your personal data for 12 months from the date of the application. The data is used in order to improve our recruitment efforts and selection procedure but also as a talent pool. Whenever we have a new opening we can easily access the data of candidates who have shown interest in our company in the past and contact them to see if they are available for a new opportunity. Otherwise we will remove your data 4 weeks after completing the application procedure.

Consultancy and software development

We are providing software development, services- and strategic IT and business advice in specialist domains. merapar unleashes the potential of new technologies, smarter and with the objective to scale fast. To enable our services, we need to process your personal data, such as your name, company name, address, age, email address and information you provide us with in the context of consultancy. We process this data in order to be able to execute the agreement we concluded with you.

Purpose for which and basis on which we process personal data

We only process personal data when there is a legal basis for this, and we have a legitimate reason for doing so. This may include the following:

• processing is necessary for the performance of a contract. This includes providing our services, responding to questions and comments, and informing you of changes to our products and/or services;
• processing is necessary to fulfil a statutory duty. This might for instance include data we need for our tax return;
• legitimate interests. Examples include sending invitations, handling complaints, processing job applications as well as camera surveillance to protect our offices and venues, and property present therein, after work hours;
• with the consent of the data subject(s). If it is not possible to process your personal data on the basis of any of the aforementioned grounds, we may ask you for your consent.

Automated decision-making

merapar does not engage in automated decision-making, including profiling, which produces legal effects or similarly significantly affects you. This means that all significant decisions about you, such as hiring decisions, service provisions, or contractual matters, are made with meaningful human involvement.

While we may use certain automated tools and processes to help us analyze data and improve our services, these are only used to support our decision-making processes, not to make final decisions automatically. For example:

• We may use automated tools to help screen initial job applications for basic requirements
• We may use analytics tools to help us understand website usage
• We may use automated systems to protect our networks and systems from security threats

However, in all these cases:

• The final decisions are always made by our employees
• You always have the right to express your point of view
• You can always contact us to request human intervention
• You can contest any decision made about you

If our practices regarding automated decision-making change in the future, we will update this privacy statement and, where necessary, seek appropriate consent in accordance with applicable law.

How long do we keep personal data?

merapar does not retain personal data any longer than is necessary for the purposes for which it is processed, unless doing so is necessary to comply with legal obligations. Most administrative (personal) data and documents are subject to a retention period of at least 10 years, for example, based on tax laws. An exception applies in the case of a job application, as described above.

Sharing personal data with third parties

We handle your personal data carefully and do not provide personal data to third parties unless we are required by law to do so or if disclosure is necessary to provide the service you have requested, or to give you information. If we engage other companies to process your data on our behalf, we conclude a data processing agreement with them to ensure the same level of security and confidentiality of your data.

Data sharing outside the EEA

merapar shares your personal data with parties located outside the European Economic Area (EEA). merapar builds software solutions on all popular cloud platforms, like Amazon Web Services, Microsoft Azure and Google Cloud. To enable this service, merapar has to exchange (personal) data with these organizations. merapar concludes processing agreements with these organizations, part of the agreements are standard GDPR Docusign Envelope ID: 5AA1F14D-15AF-49B3-9C57-E69502BDD897 contractual clauses, that ensure an adequate level of protection of personal data as merapar upholds itself.

How do we secure personal data?

merapar takes the protection of your personal data very seriously and takes appropriate measures to prevent abuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. If you feel that your personal data is not properly secured or if there are signs of abuse, please contact us immediately at info@merapar.com.

Incidents involving personal data

You will be promptly notified by us of any data breach in which your personal data has been compromised, and there is a strong likelihood of negative effects on your privacy and its enjoyment, unless there are compelling reasons for not doing so. In addition, we will report a data breach to the Dutch Data Protection Authority when required to do so by law.

Social media

You can access social media (LinkedIn) through our website. This party may place cookies on your computer if you are referred to them via our website. We exert no control over this. More information about these cookies can be found on the website of the service concerned.

Accessing, correcting or deleting data

You have the right to access, correct or delete your personal data. You also have the right to withdraw any consent you may have given for data processing, or object to the processing of your personal data by merapar, you have the right to data portability and the right to be forgotten. This means that you can submit a request to us to send the personal data we have about you in a computer file to you or another organization named by you. Docusign Envelope ID: 5AA1F14D-15AF-49B3-9C57-E69502BDD897 You can send your request to info@merapar.com. We will respond to your request as soon as possible, but within four weeks at the latest. merapar also advises you of your right to file a complaint with the national regulator, the Dutch Data Protection Authority. For the most up to date contact information, see: www.autoriteitpersoonsgegevens.nl.

Changes

We reserve the right to change the privacy and cookie statement at any time. These changes will be announced on our website www.merapar.com. The most up to date version can be found on our website.

Questions

If you have any questions or comments, please contact us at info@merapar.com.

Cookie statement

Our website uses cookies and other mechanisms to collect log and analyze information, such as your internet protocol (IP) address, to help analyze how visitors use the site and to compile statistical reports on website activity.

• We process this information to understand how visitors use our website and to compile statistical reports regarding that activity (for example your IP address is used to approximate the country from which you access our website, and we aggregate this information together, so we know that, for example, most of the visitors to our website come from a certain country/area).
• This processing is necessary for us to pursue our legitimate interests in improving our website, by enhancing the user experience and making the website as personal and relevant as possible. Cookie preferences can be changed via our website, however, disabling certain cookies may prevent you from taking full advantage of our services, and the functionality of the website may be limited.