This document has been translated into English by Google Translate. In case of discrepancy, the Dutch document ‘Privacy Statement MIJNNABV‘ is leading.

Short summary of the privacy statement MIJNNABV

The MIJNNABV privacy statement is long and we can imagine that you do not read it all the way through. That is why we will briefly summarize the most important points for you below.

1. The MIJNNABV privacy statement applies to members and guests. For the general public website we use a separate privacy statement, which can be consulted via the website.
2. If you are a NABV member or an introducer, we process your personal data to comply with our legal obligations, to make membership possible and to offer you various services such as training, the MIJNNABV portal, our website, our application and the newsletter. We then process contact information, identifying data and data about your membership.
3. You can unsubscribe from the newsletter at any time. This does not mean that we cannot still send you emails about important information related to the NABV. Think of important changes in the law, new regulations, a new privacy statement, etc.
4. Sometimes we send you emails via Mailchimp. This party is located in the United States. In that case, we share your name, email address and the content of the email with Mailchimp. Your data will then be processed in the United States. We have entered into the processing agreement and contractual standard provisions of the European Commission with Mailchimp, which are required by the privacy law. Mailchimp may therefore only use the personal data to send the email to you.
5. The data we process from our members is usually stored for up to 2 years after the end of the membership. If you are removed from membership, the storage period is 3 years after the end of the membership.
6. We do not sell your personal data to third parties. We also only share your personal data with parties that process personal data on our instructions (such as hosting providers) or if this is strictly necessary (for example an organizer if you participate in an event or a lawyer if you have a dispute with the NABV).
7. Afhankelijk van onze verwerkingsgrondslag en de omstandigheden, heb je diverse rechten die je kunt uitoefenen:
   • Right of access;
   • Right to rectification;
   • Right to erasure of data;
   • Right to restriction of processing;
   • Right to transfer of personal data, and;
   • Right to file a complaint with the Dutch Data Protection Authority (‘Autoriteit Persoonsgegevens’)

For a complete overview of the data we process, the processing purposes, the retention periods and your rights, you can consult the MIJNNABV privacy statement.

Privacy statement MIJNNABV

Table of contents

1. General
2. What personal data do we process and why?

2.1 Legal obligation for membership.

2.2 Membership (execution of an agreement).

2.3 Bringing guests and passing on activities (legal obligation).

2.4 Data processing of guests(legal obligation and performance of the agreement).

2.5 Training for NABV members (executing an agreement).

2.6 Use of the NABV application, the MIJNNABV portal and the member forum (legitimate interest and consent).

2.7 Payment reminders and VOG application reminders for members (legitimate interest).

2.8 Processing of personal data in the minutes (legitimate interest).

2.9 Data to handle incidents (legitimate interest).

2.10 Newsletter and general information provision (legitimate interest of NABV).

2.11 Newsletter (consent).

2.12 Application for Certificate of Good Conduct (VOG) (permission).

2.13 member survey (consent).

3. How we protect personal data.
4. Sharing personal data with third parties.
5. Cookies, or similar techniques, that we use.
6. Your rights.

6.1 Right of access.

6.2 Right to rectification.

6.3 Right on data erasure.

6.4 Restriction of processing.

6.5 Recht to portability.

6.6 Automated individual decision-making.

6.7 Right to object and withdraw consent.

6.8 Exercising your rights.

1. General

The Dutch Airsoft Interests Association (NABV) processes and stores personal data of its members, domestic and foreign introducees and visitors in the European Economic Area (EEA), unless otherwise indicated below. The data of members are necessary in connection with the membership and the data regarding the introducees are necessary due to the legal conditions that apply to this.

If you have any questions, please contact secretariaat@nabv.nl or by phone: 085–40154 01 (limited availability – see website for current opening hours).

We may change provisions of this privacy statement. If we do so, we will let you know. However, we recommend that you check yourself from time to time whether this privacy statement has been changed.

2. What personal data do we process and why?

2.1 Legal obligation for membership

Based on the Weapons and Ammunition Act, the Weapons and Ammunition Regulation and the Weapons and Ammunition Circular, we are required to process certain personal data of our members. We process the data below for the stated purpose during the membership.

This concerns the following personal data:

• name and address details (membershipcard);
• date of birth (to verify that you are old enough);
• passport photo (membership card);
• membership of the NABV and relationship number;
• date of issue of Statement of Conduct(VOG)  and VOG document number. The retention period of the original VOG is a maximum of 1 month after the document has been processed by our secretariat. We will use your VOG to check whether the information you provided is correct.

We receive the above data from you. The data must be provided if you want to become a member of the NABV. We need this data to meet our legal obligations. Given our legal obligation, we may contact you to verify whether the data known to us is still correct.

2.2 Membership (execution of an agreement)

The NABV processes personal data of members that are necessary for membership of the NABV. The data is used, among other things, to conclude the membership agreement, to process your payments, to create and send the membership card and to create and use an account on MIJNNABV (to be used via our website or our application).

We process the data for this purpose during the membership and up to 2 years after the end of the membership. If you are terminated from your membership, we will store the data for this purpose for at least 3 years and possibly longer if necessary given the reason for termination. If your membership ends, we will anonymize data about age, residential area and the duration of your membership for statistical purposes within the specified deletion period. We ensure that this data is processed in such a way that it can no longer be individualized or traced back to you. If you do not complete the membership application, we will store the data for a maximum of 6 months to give you the opportunity to complete the application.

This concerns the following personal data:

• name and address details;
• email adress;
• communication between the NABV and its members (will be deleted 3 years after the communication);
• date of birth;
• telephone number;
• payment provider and payment status;
• passport photo;
• start date of membership;
• end date of membership;
• relationship number;
• password for MIJNNABV (encrypted);
• events created or attended;
• wether automatically sent email has been received.

If you are a new member, we will send you an invitation for an introductory meeting via our e-mail provider. If you are removed from your membership due to non-payment, we will send you an e-mail about this via our e-mail provider. The e-mail provider we use for this stores your e-mail address in the United States in such cases. The provider is bound by the standard provisions approved by the European Commission and may not process your data for other purposes.

We receive this information from you, except for the start and end date of your membership and the relationship number that we create in our systems. The information that is processed in the context of membership must be provided if you want to become a member of the NABV. We need this information to provide your membership and to implement the agreement that you conclude with us.

If you pay via the payment provider (Mollie), we can view data regarding payments and receive your identity from the party with which you paid or from our bank (ING). These payment providers are independently responsible for processing. We recommend that you read the privacy statement of the payment provider you use, so that you know how they handle your data. We only process in our system that the payment has been made.

We may share membership data with our accountant if this is necessary for our administration.

2.3 Bringing guests and passing on activities (legal obligation)

If you bring an introducer as a member, we also process your personal data. This data is stored for 7 years after the end of the introduction based on a legal obligation.

This concerns the following personal data:

• name;
• relationship number;
• created introduction statements;

If you, as a member, report an activity to the NABV, we will also process your personal data. This data is stored on the basis of a legal obligation for up to 2 years after the year in which the activity took place.

• name;
• relationship number;
• date of the activity;
• submitted comments;
• location of the activity;
• type of activity.

We receive this information from you, except for the relationship number that has been created in our system. The above information must be provided if you want to bring guests or pass on activities. We need this information to meet our legal obligations.

The above information can be shared with the event organizer for the execution of the event.

2.4 Data processing of guests(legal obligation and performance of the agreement)

Based on our legal obligation, we make a distinction between guests living in the Netherlands and guests living abroad. Guests living in the Netherlands may participate in events a maximum of 6 times per year. Guests living abroad may participate an unlimited number of times. If a member registers you as an guest, we will receive your data from that member. The legal retention period for the data of Dutch guests for this purpose is 7 years. The retention period for foreign participants for this purpose has been set at 2 years for administrative reasons.

This concerns the following personal data of the guest:

• name and address details;
• date of birth;
• email adress;
• name and date of event being participated in;
• number of visits per year by the guest living in the Netherlands;
• country of residence (in case of foreign participant);
• wether automatically sent email has been received.

We receive this information from the member who brings you as an introducer if you are an introducer living in the Netherlands. Otherwise, we receive the information from you. The processing of this information is required by law and is necessary for being able to participate in the event. If you do not want us to process this information from you, you cannot bring introducers or participate as an introducer as a member.

The above-mentioned data may be shared with the event organizer for the execution of the event.

 

2.5 Training for NABV members (executing an agreement)

If you follow courses from the NABV, you enter into an agreement with the NABV as soon as you register for a course. In that case, we process the following personal data for this purpose as long as you are a member of the NABV and up to 2 years after the end of your membership or up to 3 years if you are removed from your membership:

• name and address details;
• email adress;
• relationship number;
• the courses taken and their results;
• date and place of birth (for inclusion on diplomas and certificates);
• wether automatically sent email has been received.

If you follow a course certified by the NABV with an external trainer, the NABV will share your name and relationship number with the trainer and your trainer will share your name, relationship number, e-mail address, the training you followed and your result with us after the training. We process this data to create a diploma or certificate for you, to register it and to determine whether the required safety courses and requirements for follow-up training have been met. We do not determine how the trainer handles your personal data. We therefore recommend that you check with the external trainer which personal data he processes and how he handles it, before you provide your personal data to the external trainer.

We receive the above personal data from you, except for the relationship number that has been created in our systems and the results of the course that are provided by the trainer. The above data must be provided if you want to follow NABV training courses. We need this data to meet our contractual obligations.

2.6 Use of the NABV application, the MIJNNABV portal and the member forum (legitimate interest and consent)

If you use the NABV application, the MYNABV portal and the member forum, we process some of your personal data.

NABV application and MYNABV (legitimate interest)

In order to keep our portal and applications safe and to be able to offer them, we process personal data of you. This concerns the following data:

• session token by means of a cookie (so that you can be recognized after logging in when you surf through pages);
• IP-adress;
• relationship number (only when using MIJNNABV (on the website or in the application) and the member forum);
• password (encrypted and only when using MYNABV (on the website or in the application) and the member forum).

We store this data for this purpose as long as you are a member. We store the IP address for this purpose for a maximum of 6 months after you have visited our portal or application and the session cookie and token only during your session (your visit to the portal or application). We process the relationship number and your password for this purpose as long as you are a member of the NABV and up to 2 years after the end of your membership or up to 3 years if you have been terminated from your membership.

The personal data is automatically created by us, except for the password, which you can change yourself and which we only store in encrypted form.

We process the above-mentioned personal data on the basis of a balancing of interests. Our legitimate interest is to be able to deliver our portal, our application and our member forum and to be able to secure our online environments. In order to safeguard these interests, it is necessary that we process the above-mentioned personal data, so that you can log in to our online environments and we can investigate any incidents based on the IP address. In our opinion, these interests outweigh your privacy interests. The reason for this is that we have limited the data processing to a minimum and you can choose not to provide the data to us by not logging in to our NABV application and/or member forum. We only process the IP address of every visitor to the online environments, in order to be able to secure our online environments. We only store this data for 6 months, so that the infringement of your privacy is limited as much as possible but we still have the opportunity to investigate incidents. In addition, you can of course always delete the session cookie or shield your IP address with software. If you do not wish to provide this information, we ask you to let us know, stating your reasons. We will take your reasons into account and once again weigh up the interests. If, after the new weighing up of interests, we come to the conclusion that you must provide your personal data, you will not be able to use our online environments if you refuse to provide the personal data. You can find more information about your rights below under the heading ‘Your rights’.

NABV member forum (consent and legitimate interest)

If you use the NABV member forum, we process the following personal data for as long as you are a member of the NABV and up to 2 years after your membership ends:

• uesername;
• email adress;
• relationship number;
• password for MIJNNABV (encrypted);
• IP-adress;
• data that you post on the forum (note: this data will not be deleted unless you explicitly request it and your interests outweigh the interest of the NABV not to disrupt the logic of the discussion and/or to guarantee freedom of expression and/or a journalistic interest).

We receive the above personal data from you, except for the relationship number that has been created in our systems and your IP address that we process automatically.

We process the above personal data on the basis of a balancing of interests. Our legitimate interest is to be able to offer and secure our member forum. In order to promote these interests, it is necessary that we process the above personal data, so that you can log in to the member forum, use the member forum and we can investigate any incidents based on the IP address. In our opinion, these interests outweigh your privacy interests. The reason for this is that we have limited the data processing to a minimum and you can choose not to provide the data to us by not using the member forum. If you do not want to provide this data, we ask you to let us know, stating your reasons. We will take your reasons into account and make the balancing of interests again. If, after the new balancing of interests, we come to the conclusion that you must provide your personal data, you will not be able to use our member forum if you refuse to provide the personal data. More information about your rights can be found below under the heading ‘Your rights’.

2.7 Payment reminders and VOG application reminders for members (legitimate interest)

In order to inform you as a NABV member about paying your contribution and to ensure that you apply for a new VOG in time, we can send you an (automated) reminder about this by e-mail, via the NABV application and letter. The personal data will be processed for this purpose as long as you are a member.

This concerns the following personal data:

• name and address details;
• relationship number;
• email adress;
• date of issue of VOG and expiry date of VOG;
• wether automatically sent email has been received.

Our provider for sending reminders by email for requesting a VOG stores your email address in the United States. The provider is bound by the standard provisions approved by the European Commission and may not process your data for other purposes.

We receive the above personal data from you, except for the relationship number that has been created in our systems.

If you do not meet your payment obligations, we may share your contact details and outstanding invoices with a debt collection agency.

We process the above personal data on the basis of a balancing of interests. Our legitimate interests correspond with your interests, namely to remind you of your obligations to ensure that you pay your contribution on time and that you reapply for the VOG on time. Your interest is to be able to continue your membership with the NABV without interruption and our joint interest is the (financial) continuity of the association. In order to safeguard these interests, it is necessary for us to process the above personal data so that we can send you the reminders on time. In our opinion, these interests outweigh your privacy interests. The reason for this is that we have limited the data processing to a minimum and we do not process any additional personal data for this purpose. In addition, you can request us to stop sending the reminders. If you want this, we ask you to let us know by e-mail.

2.8 Processing of personal data in the minutes (legitimate interest)

We are an association and therefore hold meetings at member level and board level. In these meetings, members can be discussed. Matters discussed in the meeting are recorded in the minutes. We will keep names and personal data out of the minutes as much as possible or pseudonymize them. In view of our interests, it may however happen that personal data are included in the minutes. We will then ensure that there is no more data in the minutes than necessary. We will not leave sensitive personal data in the minutes longer than necessary, other personal data will be deleted as far as possible at the request of the person concerned.

We receive the above personal data from the participants in the meeting.

We process the personal data mentioned above on the basis of a balancing of interests. Our legitimate interests are being able to read back what was discussed at the meeting, being able to pick up action points and enabling members who could not attend the meeting to read back what was said. In order to safeguard these interests, it is necessary that we process the personal data mentioned above in the minutes. In our opinion, these interests outweigh your privacy interests, because we will always try to keep personal data out of the minutes as much as possible and only include personal data if there is a good reason to do so. In addition, we will limit the data processing to a minimum and you can request us to remove the personal data from the minutes. We will take your motivation into account and once again make the balancing of interests. If, after the new balancing of interests, we come to the conclusion that you must provide your personal data after all, the personal data will remain in the minutes for the time being. You can find more information about your rights below under the heading ‘Your rights’.

2.9 Data to handle incidents (legitimate interest)

In order to handle incidents that are in any way related to the NABV and its affiliated members, we may process your personal data if you are involved or a witness. We store this personal data for this purpose during the handling of the incident and for up to 6 months after the incident has been resolved. If you are removed from membership due to the incident, we store the personal data for up to 3 years after the end of the membership. If the Sports Law Institute imposes a sanction on you (such as a suspension or expulsion), the data will be stored for the duration of the sanction.

This concerns the following personal data:

• name and address details;
• relationship number;
• email adress (for communication purposes);
• incident-related communications between members and the NABV and between members themselves;
• facts and circumstances of the incident
• all other personal data that are relevant in the context of handling the incident.

This personal data may be shared with the Institute for Sports Law if it is decided to submit the incident or dispute to that party for settlement of the dispute.

Organisers of competitions and events can report incidents to us. In that case, we receive your name, e-mail address, telephone number, relationship number and facts and circumstances of the incident from the organiser.

Third parties can report an unsafe situation on our public website. It is possible that your personal data is included in that report. If that is the case, we will process your personal data in accordance with this paragraph.

We receive the above personal data from the person who reports the incident and enrich it with information that we have in our systems (such as name and address details and relationship number).

We process the personal data mentioned above on the basis of a balancing of interests. Our legitimate interests are to be able to handle incidents in order to keep the sport safe and enjoyable for everyone. In order to safeguard these interests, it is necessary that people can report incidents and that we can handle these incidents properly. The above personal data are required for this. In our opinion, these interests outweigh your privacy interests, because we have limited the data processing to a minimum and the retention period is in principle short. If you do not want us to process this data, we ask you to let us know, stating your reasons. We will take your reasons into account and make the balancing of interests again. If, after the new balancing of interests, we come to the conclusion that we will continue to process your personal data, we will do so. You can find more information about your rights below under the heading ‘Your rights’.

2.10 Newsletter and general information provision (legitimate interest of NABV)

We believe it is important to keep members informed. We do this by means of a newsletter and sometimes by separate targeted information about events or occasions. In this context, we have to process some data. We store the data for this purpose until you unsubscribe from the newsletter or up to 3 years after the end of your membership.

This concerns the following personal data:

• name;
• email adress;
• or automatically sent email has been read;
• in certain cases the telephone number to send text messages.

Our newsletter provider stores your email address in the United States. The provider is bound by the standard provisions approved by the European Commission and may not process your data for other purposes.

We receive the above personal data from you.

We process the above personal data on the basis of a balancing of interests. Our legitimate interest is to be able to inform members about developments and updates within the NABV and the airsoft sport. In order to promote these interests, it is necessary that we can send you the newsletter and other information by email and in some cases by text message. The above personal data is required for this. In our opinion, this interest outweighs your privacy interests, because we have limited the data processing to a minimum and you can unsubscribe from the newsletter or information by text message at any time, by following the unsubscribe instructions included with each message.

If you unsubscribe, this will not affect our ability to send important messages about the NABV, your membership and our website and portal. In addition, it does not affect our ability to process your personal data for other purposes, as we have described in this privacy statement.

2.11 Newsletter (consent)

If you are no longer a member of the NABV but would still like to stay informed about developments at the NABV and within airsoft, you can give us permission to send you the newsletter. We store the data for this purpose until you unsubscribe from the newsletter.

This concerns the following personal data:

• name;
• email adress;
• or automatically sent email has been read;

Our newsletter provider stores your email address in the United States. The provider is bound by the standard provisions approved by the European Commission and may not process your data for other purposes.

We receive the above personal data from you.

2.12 Application for Certificate of Good Conduct (VOG) (permission)

To apply for a VOG, we will forward your name and email address to Dienst Justis (the government organization responsible for screening people) if you give us the order and therefore permission to do so. You can also apply for the VOG yourself at the municipality or other requesting agencies or companies.

2.13 member survey (consent)

We believe it is important to be able to conduct research into our members, our association and how we can further improve our services. That is why we periodically conduct a member survey. Participation in the member survey is voluntary and is therefore based on consent. We store data from the member survey for a maximum of 6 months after the survey has taken place.

This concerns the following data that we receive from you:

• name;
• email adress;
• anonymized statistics (age, province of residence, gender and answers to airsoft-related questions);
• wether automatically sent email has been received.

If you want to have a chance to win a prize, you can enter your email address in the research portal in the designated field if the opportunity is offered. If you agree to us contacting you as a result of the research, you can enter your email address in the designated field if the opportunity is offered.

3. How we protect personal data

The NABV takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. We ensure encrypted transfer of personal data, use two-step authentication for access to personal data, sign confidentiality agreements with our employees, require our employees to have a Certificate of Conduct and provide work instructions.

If you have the idea that your data is not properly secured or there are indications of misuse, please contact our administration or via privacy@nabv.nl.

4. Sharing personal data with third parties

NABV does not sell your data to third parties and will only provide it if this is necessary for the execution of our agreement with you or to comply with a legal obligation. We conclude a processing agreement with companies that process your data on our behalf to ensure the same level of security and confidentiality of your data. NABV remains responsible for this processing.The types of processors that we use are:

• storage of (personal) data and database management and maintenance;
• hosting provider(s);
• ontwikkelaars van onze software;
• providers to conduct surveys;
• software to send emails and newsletters;
• collection agencies (if you do not pay on time), and;
• supplier of membership card.

If you provide personal data to a third party, NABV is not responsible for this. We advise you to first consult the privacy statement of that party.

5. Cookies, or similar techniques, that we use

A cookie is a small text file that is stored on your computer, tablet or smartphone when you first visit a website or application. NABV uses cookies with a purely technical functionality. These ensure that the website works properly and that, for example, your preferences are remembered. We also use cookies to ensure that the website works properly and to be able to optimise it.

In addition, we place cookies that track your surfing behaviour so that we can offer customised content. When you first visited our website, we already informed you about these cookies and asked your permission to place them. You can opt out of cookies by setting your internet browser so that it no longer stores cookies. In addition, you can also delete all information that was previously stored via the settings of your browser.

For more information, we refer you to our cookie statement.

6. Your rights

Privacy legislation gives you certain rights with regard to your own personal data. The rights that we describe below are not absolute rights. We will always consider whether we can reasonably comply with your request. If this is not possible or would, for example, be at the expense of the privacy of others, we can refuse your request. If we refuse a request, we will inform you of this with reasons.

6.1 Right of access

You have the right to view your personal data. You may also request access to the processing purposes, the categories of personal data involved, the (categories of) recipients of personal data, the retention period, the source of the data and the existence of automated decision-making.

You may also request a copy of your personal data that is processed by us. Do you want additional copies? Then we can charge a reasonable fee.

The data mentioned under points 2.1 to 2.5 are displayed on MYNABV and can be consulted there by the member, with the exception of:

• VOG document number;
• password for MIJNNABV (encrypted);
• communication;
• bank account details.

6.2 Right to rectification

If personal data is incorrect or incomplete, you can request us to adjust or supplement the personal data.

If we grant your request, we will, to the extent reasonably possible, inform the parties to whom we provide data.

6.3 Right on data erasure

Do you no longer want us to process certain personal data of you? Then you can request us to delete certain (or all) personal data of you. Whether we delete data depends on the processing purpose. Data that we process on the basis of a legal obligation or for the performance of the agreement, we only delete if the personal data is no longer necessary. If we process data on the basis of legitimate interest, we only delete data if your interest outweighs ours. We will make this assessment. If we process the data on the basis of consent, we only delete the data if you withdraw your consent. In that case, we will always weigh your interests against our interests. Have we accidentally processed data unlawfully or does a specific law prescribe that we must delete data? Then we will delete the data. If the data is necessary for the handling of legal proceedings or a (legal) dispute, we will only delete the personal data after the end of the procedure or dispute.

If we grant your request, we will, to the extent reasonably possible, inform the parties to whom we provide data.

6.4 Restriction of processing

You may also ask us to limit the further processing of your personal data, if the accuracy of the data is disputed, if we have processed the data unlawfully, if we no longer need the data or if you have objected to the processing. We may then still use the data for the handling of legal proceedings or a (legal) dispute.

6.5 Recht to portability

At your request, we can transfer the data that we process for the performance of the agreement or on the basis of your consent and that is processed automatically to you or another party designated by you.

6.6 Automated individual decision-making

We do not make decisions based solely on automated processing.

6.7 Right to object and withdraw consent

If we process data on the basis of a legitimate interest, you may object to the processing. If we process data on the basis of your consent, you may withdraw that consent. If you withdraw your consent, this does not affect the lawfulness of the processing before you withdrew your consent. For more information, we refer you to the relevant processing purposes above.

6.8 Exercising your rights

You can send a request for access, correction, deletion, data transfer of your personal data or request for withdrawal of your consent or objection to the processing of your personal data to privacy@nabv.nl.

In order to prevent abuse, we ask you to identify yourself adequately. You can do this by logging in to the MIJNNABV environment and exercising some of your rights there. If you cannot exercise your rights via MIJNNABV or if you are not a member, you can send us an e-mail with the e-mail address that we have on file. If you cannot e-mail us, do not have an e-mail address on file or do not have access to the e-mail address, we may ask for additional information to identify you (such as your date of birth, membership number and/or the last 3 digits of your account number). Of course, it is also possible to visit us and identify yourself there using an ID.

We aim to process your request, complaint or objection within one month. If it is not possible to make a decision within one month, we will inform you of the reasons for the delay and the time at which the decision is expected to be provided (no later than 3 months after receipt).

Do you have a complaint about our processing of your personal data? Please contact us. We will of course be happy to help you. If you are still unable to reach an agreement with us, you also have the right under privacy legislation to file a complaint with the privacy supervisor, the Dutch Data Protection Authority. You can contact the Dutch Data Protection Authority for this at https://autoriteitpersoonsgegevens.nl.