Privacy Statement Hestiva Platforms B.V. (Hestiva)

This privacy statement applies to persons who visit and use the website of Hestiva, contact Hestiva, use the services of Hestiva, create a user account through the website or want to place an advertisement on the website.

In addition, in this privacy statement we also explain how we use your personal data if you apply for a position or internship at Hestiva.

For certain forms of service, we place advertisements to which leads can respond. It is also possible that we personally approach leads by telephone, e-mail or at the office.This privacy statement also applies to the use of any other websites owned by Hestiva.

Below you will find an overview of the purposes for which Hestiva processes personal data. In each case, it is indicated what personal data Hestiva uses for that specific purpose and what the legal basis is for such processing.

Services
If you request services from Hestiva, your contact details will be requested, including your name and address. In order to provide services, it may also be necessary for us to process other data.

For example, information you provide to us for your file and documentation that contains data from third parties. This depends on the nature of the case and the services that Hestiva provides. It may also be necessary to process this data to be able to complete your request or to be able to offer and deliver the right product or service in the right way.

The processing of your personal data for this purpose is necessary for the execution of the agreement between you and Hestiva.

We may also request a copy of a valid identity document/ID card. Nevertheless, in order to process only those personal data that are strictly necessary to achieve the purpose, in particular to verify your identity and to prevent fraud, abuse or other unlawful behaviour, we will always request you to make your citizen service number (BSN) illegible in this copy. ou can use the CopyID app from the Dutch government for this.

The processing of personal data contained in these documents is necessary for the execution of the agreement between you and Hestiva (e.g. regarding your participation in an activity/action or investment). The processing is also necessary for the representation of Hestiva's legitimate interest, in particular to verify your identity and to prevent fraud, abuse or other unlawful behaviour.

We can also process data because we are required to do so by law. There are many rules and regulations that apply to our business. For example, we can take measures to combat fraud, tax evasion, terrorist financing and money laundering. This also includes identifying you and demonstrating that we know who you are. That is why we keep a copy of your identity document or perform searches in third-party databases for the purpose of compliance with your data.

User account and registration
You must create a user account to comment on houses and get in touch with a housing landlord, save a search or find a tenant and create an ad. You can register via the website. To do this, you provide Hestiva with personal data that it needs to register you as a client. Personal data that you provide is your name and e-mail address and possibly your date of birth, physical address or telephone number.

When registering to purchase securities, you must provide Hestiva with personal data, including a copy of a valid proof of identity document/ID card, your name and e-mail address and possibly your date of birth, physical address and/or telephone number. When registering for a business, you must also provide Hestiva with a Kamer van Koophandel Business Register extract. With this information, a user account will be created in de Bewaarder. This account is necessary for the performance of the contract between you and Hestiva. This account serves as a securities portfolio that you have with Hestiva, with which you can access your personal environment. Here you have an overview of your portfolio, the securities you have ordered and your return. Stichting De Bewaarder acts as a data processing entity and/or payment office and is part of the group with which Hestiva is affiliated.

The processing of your personal data for this purpose is therefore necessary for the execution of the agreement between you and Hestiva. Without your personal data, Hestiva will not be able to create your user account and unfortunately you will not be able to contact a housing landlord or create an advertisement or, when registering to purchase securities, you will not be able to access your personal environment.

When creating a user account, we may also request a copy of a valid proof of identity document/ID card. We will always ask you to provide us with only those personal data that are strictly necessary to achieve the purpose, in particular to verify your identity and to prevent fraud, abuse or other unlawful behavior. Make your citizen service number (BSN) illegible in this copy. You can use the CopyID app from the Dutch government for this.

The processing of personal data contained in these documents is necessary for the representation of Hestiva's legitimate interest, in particular to verify your identity and to prevent fraud, abuse or other unlawful behaviour.

Financial administration
In order to be able to invoice you for services rendered, we process your contact details. The processing of personal data for this purpose is necessary for the execution of the agreement between you and Hestiva.

Relationship management
Hestiva values maintaining contact with (potential) clients and other business relations. Your (contact) data may be used to invite you to meetings or other events. We also use data to maintain central customer records, conduct marketing activities, prevent fraud, and for risk management. The processing of your personal data for the aforementioned purposes is justified on the basis of Hestiva's legitimate interest.
However, for specific direct marketing activities governed by the e-privacy Directive and the Dutch Telecommunications Act, we will rely on obtaining your free and explicit consent before engaging in such activities, such as targeted ads, e-mails, text messages, WhatsApp messages and phone calls. You will have the option to provide or withdraw your consent for these specific activities.

Please note that the processing of your personal data for other purposes, such as maintaining customer records, carrying out general marketing activities, fraud prevention, and risk management, will continue to be based on Hestiva's legitimate interest.We have a central relationship administration within our group of companies. Our customer service uses this administration to see which products you have with us, so that we can answer you properly and quickly. The information we use in our records includes your name, your date of birth, your address, other contact details, information about the product or products you have with us, payment information and marketing information.

We may also share your data within the group of companies of which Hestiva is a part. In addition to all subsidiaries of the shareholder of Hestiva, this also includes the organizations of the direct shareholders and participating interests of the holding company (the "Group"). Within the Group, we share data for internal administrative purposes or to improve our service to you. The sharing of data in this context may also take place with Hestiva’s Affiliated Entities, and as a relationship with all other entities with which Hestiva is (contractually) bound.
In connection with the General Terms and Conditions, you acknowledge that Hestiva will process your personal, payment, and transaction data solely for the purpose of fulfilling the Terms and Conditions. This processing is carried out based on the legal ground outlined in GDPR Article 6.1(b) – 'processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.'
This processing includes sharing your information with Stichting De Bewaarder, acting as a data
processing entity and/or payment office, and any other (legal) entities within the economic group or holding structure of Hestiva or its Affiliated Entities.
Additionally, your data may be shared with any (legal) entities to which Hestiva is (contractually) bound, in whole or in part.
This acknowledgment extends to the necessary sharing of information with third parties for ATF/AML (“Wwft”) compliance monitoring services, payment service providers, and data storage services. Hestiva will make the necessary efforts to identify such third parties, which may change over time, on its Site or in this Privacy Statement.

Sometimes we may have to ask for your permission separately to use data. If you have given permission in such a case, you can also withdraw it. You do not have this right when we use your data on other possible bases.

Contact
You can get in touch with Hestiva in various ways, via the contact form or the chat function on the website, by e-mail and by telephone.

With a view to improving the quality of service, training, coaching and assessment of employees, we record some of the telephone conversations. When talking about your products or services, we can also save these recordings as a record of our agreements. We also record the content of chats.

We use the information we obtain from you for this contact to answer your question and to be of service to you, or to provide evidence to comply with legal obligations, to prevent fraud and to improve the quality of telephone conversations and chats.

The processing of your personal data is necessary for the representation of Hestiva's legitimate interest.

Financing register
Hestiva processes or maintains a register of the persons who have purchased securities. Personal data of the financiers are processed in that register, including the name, address, contact details, account number and the number of securities that the financier has purchased.

This Register of Security Holders also lists the names and addresses of any pledgees or usufructuaries, including the date on which they acquired this right.

The processing of this personal data is necessary for the execution of the (financing) agreement with Hestiva, other group companies, with Hestiva Affiliated Entities, or as a relationship with all other entities with which Hestiva is (contractually) connected.

Cookies
A cookie is a small text file that is stored on your computer, tablet or smartphone when you first visit this website. Functional and analytical cookies are processed on the basis of the legitimate interest of our organization, in particular optimizing our web applications and your user experience. Marketing cookies are processed on the basis of your free consent. Read more about it in our cookie statement .

Newsletter
Hestiva would like to keep you informed about developments in our field of activity. You can sign up for the newsletter. Hestiva processes your e-mail address for sending newsletters.

The processing of your e-mail address in the context of digital direct marketing is always based on your free, informed and explicit consent. You can always unsubscribe from the newsletter by clicking on the unsubscribe button in the newsletter.

Blogs
The Hestiva website may contain links to share blogs on social (media) networks or third-party websites, such as X (formerly: Twitter), LinkedIn or Facebook. Before using those services of third parties, it is advisable to first read the privacy statement of those third parties.

Working at Hestiva
Personal data provided to Hestiva by an applicant will only be used by Hestiva to enable a responsible, effective and efficient recruitment and selection process.

The data and documents provided by you, including contact details, CV and motivation letter, will be processed by Hestiva to determine your eligibility for the vacancy for which you have applied or, in the case of an unsolicited application, to determine whether you qualify for a position within Hestiva, other group companies, Hestiva’s Affiliated Entities, or as a relationship with all other entities with which Hestiva is (contractually) bound.

These processing operations are necessary for the representation of Hestiva's legitimate interest. In this case, that interest consists of recruiting suitable staff members.

Our website and/or service does not intend to collect data about website visitors who are younger than 16 years old. However, we cannot check whether a visitor is older than 16. We therefore advise parents to be involved in the online activities of their children, in order to prevent data about children from being collected without parental consent.

If you are convinced that we have collected personal information about a minor without this permission, please contact us at welcome@hestiva.nl and we will delete this information.

Hestiva does not store your personal data for longer than is strictly necessary to realize the purposes for which your data is collected.

Hestiva uses the services of external companies, subcontractors and/or suppliers (so-called processors) who perform specific tasks or assignments at the request of Hestiva and with whom your personal data can be shared. Such disclosures of your personal data are necessary for the performance of the agreement between you and Hestiva regarding the provision of requested services. The processing of personal data by these parties is subject to the privacy statement of the relevant third party. Furthermore, such processing is subject to the data processing agreement between Hestiva and the third party, in which Hestiva has ensured that the service provider will only process the personal data on behalf of Hestiva.

After creating / using a user account via the website or app, for example if you want to respond to properties and want to get in touch with a housing landlord, or want to get in touch with a (potential) renter, your personal data can be shared with these other party(ies). Your personal data that can then be provided via the website (via a contact form or chat function) to these other party(ies) is your name and possibly your e-mail address or telephone number. If you contact the other party directly via the website (via a contact form or chat function), the further transfer of your personal data that you yourself provide to the other party (or via your own means of communication) falls under your own responsibility and that of the other party. The personal privacy statement of the relevant party then applies to the processing of personal data.

We may also share your personal data with third parties who qualify as controllers. For example, we may use external consultants, independent auditors and competent authorities, who process personal data for their own purposes. The processing of personal data by these parties is subject to the privacy statement of the relevant party.

To exercise your rights, we ask you to send a request to welcome@hestiva.nl.

To ensure that the request for access has been made by you, we may ask you to send a copy of your proof of identity with the request. Make your passport photo, MRZ (machine readable zone, the strip with numbers at the bottom of the passport), passport number and Citizen Service Number (BSN) black in this copy. This is to protect your privacy.

We recommend using the CopyID from the Dutch government to make a safe copy of your identity card.

We will respond to your request as soon as possible, within one month of the receipt of the request.

Hestiva would also like to point out that you have the opportunity to file a complaint with the national supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). You can do that via this link.