Blossem Group
GDPR POLICY

Introduction

Blossem Group is the data controller responsible for processing personal data collected through the use of our services, websites, and social media channels (hereinafter: ‘website’). Blossem Group respects the privacy of all users and ensures that personal data provided to us is collected, processed, stored, and secured in accordance with applicable privacy laws. This privacy statement outlines the policy of Blossem Group.

What Data Is Processed

Personal data is provided directly by customers, partners, interested parties, or other stakeholders (hereinafter: ‘users’), for example when filling out a contact form, signing up for a newsletter, or using functionalities on our website.

General personal data:

• last name
• first names
• date of birth
• place of birth
• address
• telephone number
• email address
• bank account number

Special categories of personal data (if applicable and strictly necessary):

• passport photo or other identification photo
• payslips
• employer’s statement
• bank statements
• Chamber of Commerce extract
• annual financial statements

Purpose of Data Processing

Blossem Group processes users’ personal data for the following purposes:

• execution of agreements and assignments;
• invoicing and financial transactions;
• delivery of products or services;
• communication about changes in products and services;
• marketing, promotion, advertising, and sending newsletters;
• telephone and email contact;
• compliance with legal obligations.

Legal Grounds for Processing

Blossem Group only processes personal data if one of the following conditions is met:

• you have explicitly given consent for the processing;
• the processing is necessary for the execution of an agreement;
• the processing is necessary to comply with a legal obligation;
• the processing is necessary for a legitimate interest, such as improving our services or for marketing purposes.

Sharing Personal Data with Third Parties

Blossem Group only shares personal data with third parties when necessary to provide our services or if legally required. This includes, among others:

• external service providers and processors acting on behalf of Blossem Group, such as IT service providers or marketing agencies;
• authorities or supervisory bodies if required by law or court order;
• partners with whom Blossem Group collaborates to expand the reach of its services, provided that such sharing is justified and adequate safeguards are in place.

Blossem Group enters into data processing agreements with external processors, which define how personal data must be handled.

Security Measures

Blossem Group applies appropriate technical and organizational security measures to protect personal data against loss, unauthorized access, or unlawful processing. Only authorized personnel have access to personal data.

In the event of a data breach, Blossem Group acts in accordance with the GDPR (General Data Protection Regulation) and other applicable regulations. If legally required, we will inform affected individuals of the breach.

Rights of Users

Users have the following rights concerning their personal data:

• access;
• rectification;
• restriction of processing;
• erasure (‘right to be forgotten’);
• data portability;
• objection to processing (including automated decision-making).

You can exercise these rights by contacting us via info@blossemgroup.nl . Blossem Group may request additional information to verify your identity.

To opt out of direct marketing, you may object at any time by contacting us at info@blossemgroup.nl . You may also withdraw any previously given consent by using the same email address.

Blossem Group does not retain personal data longer than necessary for the purposes for which it was collected or as required by law.

Questions and Complaints

If you have questions about this privacy statement or how Blossem Group handles personal data, you can contact us via:

Email: info@blossemgroup.nl
Phone: +31 (0)174 70 02 93
Postal address: Lange Wateringkade 32b, 2295 RN Kwintsheul

If you have complaints about the processing of your personal data, you may also submit a complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.

Changes to This Privacy Statement

Blossem Group reserves the right to amend this privacy statement from time to time. The most recent version will always be published on our website. We therefore advise you to review this statement regularly.

Last updated: 21 July 2025