Cannock Chase Public records your data as part of its (online) financial, legal, and collection services. In this privacy statement, we inform you about the use of your personal data by Cannock Chase Public.

Cannock Chase Public is convinced that protecting and respecting the privacy of its stakeholders, such as employees, clients, debtors, and other relations, is of great importance. Personal data is therefore handled with the utmost care.

Cannock Chase Public is the Data Controller for its amicable collection practice under the General Data Protection Regulation (GDPR). This means that Cannock Chase Public decides which personal data is processed, for what purpose, and in what manner. Cannock Chase Public is responsible for ensuring that your personal data is processed in accordance with the GDPR and in a proper and careful manner.

Cannock Chase Public is a so-called Processor under the GDPR for its invoicing and debtor management. This means that Cannock Chase Public processes personal data on behalf of our clients, the Data Controllers, and that our clients decide which personal data we process, for what purpose, and in what manner.

Personal data is any information that can be traced back to a person. Think of your name, phone number, or email address, but also, for example, your computer’s IP address or your license plate.

Processing is a legal term and a very broad concept. It covers everything you can do with data: collecting, recording, organizing, storing, updating, modifying, retrieving, consulting, using, forwarding, distributing, making available, combining, linking, securing, erasing, and destroying data.

Cannock Chase Public processes various personal data necessary for handling your case. This includes, for example, your name, date of birth, address, phone number, and email address. We also store financial data, such as information about your payment behavior, credit registrations, and details about your debts and income. We do this to assess whether you are able to pay (on time), to evaluate risks, or to arrange a suitable payment plan with you. Additionally, we process other data about you, including information you’ve provided to us yourself or data we’ve requested from other entities.

It may happen that we process special data about you, such as medical or criminal data. We only process such special data if you have given your consent or if it is necessary for establishing, substantiating, or exercising a legal claim.

We may also record phone calls. We do this to train our employees, but also to better handle any complaints or your exercise of one of your rights.

When you visit the Cannock Chase Public website, consent may be requested in certain cases to record data about you through cookies. Read more about this in our cookie statement.

Most data we receive comes from our clients or from you during the handling of your case. Additionally, we may receive supplementary data from other entities, such as the Chamber of Commerce, courts, lawyers, bailiffs, credit registration agencies, and other (public) sources.

We may share your personal data with companies that support our services or perform parts of them. This could include print and mail services, hosting companies, or telecom providers. Additionally, we may share your personal data with our client, lawyers, bailiffs, credit registration agencies, regulators, and government authorities to which we are legally obliged to provide your data.

Our employees have access to your personal data, but only if it is necessary for the purposes described. Our employees are bound by a confidentiality obligation.

We process your data to collect outstanding claims. When acting as the Data Controller, we process your data based on the legal basis of legitimate interest. We cannot carry out our activities without processing your personal data. Based on this legitimate interest, we can perform the following activities:

• investigating whether the data is accurate
• enriching your data with information obtained from other sources
• sharing your data with the aforementioned parties
• using credit scores
• for the development or modification of our IT systems, insofar as this is not possible with anonymized data.

When we act as a Processor, we process your personal data for the purpose and on the legal basis determined by our client. Our client also decides how we may process the data.

It may happen that we use credit scores during case handling. These profiles help us determine the best approach for processing your case. This is necessary for optimal business operations and the efficient, timely handling of your case. Decision-making always involves people; credit scores are merely a tool in the collection process.

Cannock Chase Public records as little personal data as possible, only what is necessary. Cannock Chase Public also takes appropriate measures to protect your personal data against loss and unlawful use, including in agreements with so-called (sub)processors, such as hosting providers.

Employees of Cannock Chase Public and any third parties who may access the data recorded by Cannock Chase Public are bound to confidentiality regarding this information. Only authorized personnel may view and edit data, and only to the extent necessary for the proper performance of their duties.

Cannock Chase does not retain your data longer than necessary for the purposes for which it was obtained and further processed. We retain your data:

• as long as it is needed for the purpose for which we obtained the data
• as long as we have a legitimate interest in retaining your data
• until the limitation period has expired
• as long as we are legally obliged to do so.

You can submit a request to us for access, correction, restriction, or deletion of the personal data we process about you. You can also object to the fact that Cannock Chase Public processes your data. If you have given Cannock Chase Public permission to process your personal data, you can withdraw this consent.

To do so, send an email with a copy of a valid ID to rechten@cannockchase.nl. We urgently request that you obscure your BSN, passport number, MRZ (‘machine readable zone’: the strip of numbers at the bottom of the passport), and passport photo on this copy by crossing them out or making them otherwise illegible. Cannock Chase Public will send you an overview or response to your request as soon as possible, but no later than within one month. Cannock Chase Public will always provide a reasoned explanation of how your request is handled and what the outcome is.

You can file a complaint about how Cannock Chase Public handles (your) personal data via klacht@cannockchase.nl. Received complaints are registered, and you will receive a confirmation. Within 10 working days, you will receive a response to your complaint from us.

For more information or complaints about privacy, you can also contact the Dutch Data Protection Authority (www.autoriteitpersoonsgegevens.nl).

Cannock Chase Public has appointed a Data Protection Officer. Do you have questions or comments about our privacy policy? Direct them to our Data Protection Officer at FG@cannockchase.nl.

Cannock Chase Public reserves the right to make changes to this privacy statement, for example, due to new developments, online services, or to ensure compliance with laws and regulations. These changes will be announced on our website.