Moofpeople, located at De Dynamo 51 in Amersfoort (‘Moofpeople’), is the party responsible for processing personal data as described in this privacy policy. Moofpeople is an HR service provider in the broadest sense of the word, with payrolling as its core activity. Our main aim is to unburden clients in the HR field and to put good employment practice into effect for payroll employees (we call this ‘Good Work’).
Moofpeople is NEN 4400-1 certified, and an audit takes place every six months to confirm that we carry out our services correctly. We are aware of the risks involved in collecting, recording and storing aggregated data from employees and clients. This policy plan is therefore part of the Moofpeople GDPR handbook, in which we regularly evaluate and improve our working methods, the security of the data we record and the way we handle it.
Moofpeople maintains a strict privacy policy. We take the privacy of our clients and payroll employees seriously and handle their personal data with the utmost care.
Moofpeople collects data from clients (contact person details) and from payroll employees. This arises partly from legal obligations, such as verifying and holding a copy of identity documentation, and partly from practical considerations, such as recording a bank account number and the name of the account holder.
The main objectives of our policy on privacy and information security are:
Moofpeople collects data from clients, payroll employees and other relations. We record the following basic data.
As an all-round HR service provider, Moofpeople processes data for the following purposes.
Everyone at Moofpeople involved in processing personal data is bound to confidentiality about the data they come to know, and to treating it with the utmost care within the scope of their duties.
This is set out in the employment contract of Moofpeople staff members. In addition, all new Moofpeople employees must be able to produce a certificate of conduct (VOG).
Moofpeople has also taken technical and organisational measures to protect personal data against loss or unlawful processing. Personal data is only provided over secure connections.
The measures we take are:
Moofpeople processes personal data for as long as is necessary to carry out its services, and for as much longer as a statutory retention obligation requires. That period is at least 7 years where the payroll administration is concerned. A retention obligation of 2 years applies to the absence administration, and in the case of a WGA procedure this may run on to 10 years. The retention periods are set out in section 3 ‘Retention periods’ of our GDPR handbook.
Moofpeople provides data to third parties only in so far as the law requires it, or in so far as it is necessary for carrying out the services described above. Only the data that is necessary is provided.
Moofpeople gives new employees thorough information about every aspect of the GDPR. Twice a year a GDPR meeting takes place, in which we go through the handbook and review the procedures and agreements.
Every Moofpeople employee or client has the right to access their personal data at any time, though at reasonable intervals. You also have the right to request the deletion, correction, supplementation or shielding of your personal data.
You can send such a request to the Moofpeople address. To establish your identity, we ask you to visit us with your passport or identity document, or to enclose a proper copy of it with your request.
The management of Moofpeople is responsible for carrying out the GDPR policy correctly. It is shaped and continuously improved by the GDPR coordinator.
Moofpeople does everything it can to protect your privacy. If you have a question or a complaint about the processing of your personal data by Moofpeople, or if you wish to object to a risk profile that has been drawn up, you can contact us at the following address:
Moofpeople
Attn. Coordinator Privacy and Information Security
De Dynamo 51
3821 CJ Amersfoort
info@moofpeople.com
