Who we are
Brabantse Ontwikkelings Maatschappij Holding B.V. (BOM Holding BV). Further information on BOM can be found on our website.
Our group companies
The various group companies of BOM Holding BV can be found on our contact page.
Together these group companies make up BOM, in which our activities and services are grouped into functional teams.
Scope of this privacy statement
This privacy statement pertains to the processing of the personal data of our external associates by BOM Holding BV, its group companies, and its subsidiaries.
Our mission
Entrepreneurship is the driver of change. From sustainable food sources to a healthy future, climate-neutral energy, and developing promising key technologies. The Brabant Development Agency (BOM) ensures that startups playing a role in these fields get off to a flying start and grow into scaleups, that the right facilities are always available to Brabant-based companies, and that companies that aspire to go global can actually do so.
We are party to the Regional Development Agencies' code and the Netherlands Venture Capital Association's code.
General contact details
Goirlese Weg 15
5026 PB Tilburg
PO Box 3240
5003 DE Tilburg
info@bom.nl
For queries or complaints with respect to the processing of your personal data and/or to report a data breach, please contact meldpunt_BOM_security_privacy@bom.nl.
Why we process your personal data (processing purpose)
We process your data because we require them for our mission. What that means is set out below. We process your data for one or more of the following purposes:
1. Because you are consulting with us about one of our products (b, d)
2. Because you requested information from us (a)
3. Because you have subscribed to one of our newsletters (b)
4. Because we require your data in order to assess whether we can enter into a relationship with you (b, c, d)
5. Because we require your data to fulfil the agreements we have reached with you (b)
6. Because we require your data for administrative purposes (c, d)
7. Because we require your data to compile management information (d)
8. Because we require your data for verification purposes and for fixing irregularities we have found as well as for internal training purposes (d)
9. Because you visited our website (d)
10. In order to evaluate and improve our services (d)
11. Because we require your data for another purpose that we informed you of in another manner (compatible usage)
12. Because we require your data to implement a subsidy scheme or another scheme that we are required to implement (e)
13. Because we require your data in order to perform a job application procedure (d)
14. Because we require your data in order to perform an assessment procedure (d)
15. To comply with the laws and regulations (c)
16. In the event of disputes (d)
17. In order to contact you for the purpose of market surveys (a, d)
Why we may process your data for a specific processing purpose (basis for processing)
We process your personal data (a) if you consented thereto, (b) if such is necessary for entering into or performing a contract, (c) if such is necessary so that we comply with a statutory obligation, (d) because it is required for our business operations, or (e) for the performance of a task carried out in the public interest. The ground or grounds for processing are listed above under (a) to (e) for each processing purpose.
If we process your personal data because you consented thereto, you can revoke that consent at any time. Processing your personal data is lawful until you revoke consent.
We process the following categories of data
- Identifying data and citizen service number
- Information on your interests and preferences
- Your contact details
- Your financial information
- Your background information
- Data concerning your activities on our website
We only process these data where they are required for our processing purposes.
We obtain the data from the following sources
- From you
- From public sources such as the Chamber of Commerce, LinkedIn, company information, and the bankruptcy register
- From media, being both hardcopy and electronic media, including search engines
- From websites, if you leave details there
We adhere to the following retention periods
We do not store your personal data for longer than required for the purposes for which we collected them or the purposes for which we reuse that data. More specifically, we adhere to the following retention periods for specific processes:
- If we must store data due to tax laws: 5 years
- If we must store data for accounting purposes: 7 years
- If we must store data on the grounds of the Money Laundering and Terrorist Financing (Prevention) Act: 5 years
- If we are required to store data on loans provided and participating interests: 5 or 20 years
- If we record images: images are not stored for longer than 4 weeks, unless an event has occurred that means the images must be retained for a longer period
- If we require data for evidentiary purposes: 5 or 20 years
- Data concerning job applicants are deleted four weeks after the conclusion of the application process, unless the person in question is employed or consents to the data being stored for a longer period (no more than one year)
- If we store your data for company assessment reports: 5 years
Who we could share your data with
We only share your data if it is necessary, and only do so with the following categories of recipients:
- Entities of BOM and their staff
- BOM shareholders, including the Ministry of Economic Affairs and/or the Province of Brabant
- other regional development companies and InvestNL
- Supervisory bodies, such as the tax authorities
- Processors that we engage, such as those that run hosting services
- External consultants, such as accountants and lawyers
- Partijen die betrokken zijn bij de overeenkomsten die wij met jou hebben afgesloten, zoals de partijen binnen de netwerken NFIA (Invest in Holland) en RVO (Trade & Innovate NL) met wie nadere afspraken gemaakt zijn over samenwerking in projecten in brede zin (waaronder begrepen bedrijfsbezoeken, evenementen en missies), partijen als YINC en ODIN waar BOM mee samenwerkt om een weloverwogen investeringsbeslissing te nemen en Gritd voor de uitvoering van de startup programma's: Investor Readiness Programma (IRP), Market Readiness Program (MRP) en het Business Innovation Program Food (BIPF).
We do not provide data to recipients located outside of the European Union. Where we are required to share data with recipients located outside of the European Union, we will inform you thereof. In that event, we will ensure that agreements are in place with the recipients that comply with the requirements imposed under the General Data Protection Regulation (GDPR).
Where necessary, we enter into processing agreements with companies that process your personal data on our instructions to ensure your data is secured and treated confidentially to the same degree as BOM. We remain the responsible party for processing performed by other parties. If you are linked to third-party websites from our website, your personal data may be processed by that third party. Please refer to the privacy statements of the third-party websites.
The consequences of not providing personal data
If you do not furnish us with your personal data, this means that we may be unable to provide our services.
Automated decision-making
We do not make decisions on the basis of automatic processing with respect to matters that could have (considerable) consequences for individuals or your company. Rather, this pertains to decisions made by computer software or systems without human intervention (such as a BOM member of staff).
How we secure your personal data
We take the protection of your data very seriously and take appropriate measures in order to prevent misuse, loss, and unauthorized access, disclosure, and changes. Among other things, we have introduced access control, we use suitable system and network security measures such as firewalls, encryption, and patches, we secure portable devices using appropriate passwords, and all staff are bound to treat your personal data as confidential. If you believe that your data are not properly secured or that there are indications of misuse, or if you have any other queries, then please contact us at meldpunt_BOM_security_privacy@bom.nl or using one of our other addresses.
Cookies
When it comes to the cookies that we use, please refer to our cookie policy on our website.
What are your rights?
Should you have any complaints, queries, or issues with respect to the way in which we use your personal data, then please contact us at meldpunt_BOM_security_privacy@bom.nl or using one of our other addresses..
If you get in touch for the purpose of exercising your rights, we will respond within a month. In exceptional cases, this could take longer (up to a maximum of three months), but in that event we will explain the reasons to you within a month. Please always ensure that it is clear which right you wish to exercise and how you would like to receive the information. Please bear in mind that in certain circumstances we will require further information. This might be a copy of your identity document or other proof. After all, we have to be sure we are assisting the correct person.
The right to access
You have the right to request the personal data we have concerning you. We can provide you with a free copy of the data, but not in all cases. That is because we also need to respect the rights and freedoms of others.
The right to rectification of your data
Do you think your details are incorrect or out of date? You have the right to request that we correct these data.
The right to object
You have the right to request that we cease processing your personal data.
The right to restrict processing
You can request that we restrict the processing of your personal data, such as when we check the accuracy of the personal data.
The right to erasure (Right to be Forgotten)
You have the right to request that we erase your personal data. Where we are required by law to retain specific personal data, we will be unable to comply with your request.
The right to withdraw consent
When personal data is processed on the basis of your consent, you can revoke that consent at any time.
The right to lodge a complaint
If you do not concur with the manner in which we process your personal data, you can lodge a complaint with the Dutch Data Protection Authority.
Changes to the Privacy Statement
BOM can introduce changes, amendments, and additions to this Privacy Statement for a wide range of reasons. We kindly ask that you consult this Privacy Statement at regular intervals so that you stay up to date. This version was set down on June 15, 2021.
In a number of cases BOM has set down further details on the personal data it processes in a separate privacy statement:
- For the implementation of the Corona Bridging Loan (COL): Privacyverklaring-COL-met-aanvulling-VS-en-TOPPS_10032021.pdf (rom-nederland.nl)
If you have any queries, please contact meldpunt_BOM_security_privacy@bom.nl or using one of our other addresses..