YOSAA assists employees of companies and other organizations who move to the Netherlands. In doing so, it processes personal data. YOSAA processes personal data with due care and in accordance with the law. This means that your personal information will be kept confidential and will only be used for communications you request related to the services provided by YOSAA. We would like to provide the following information about this.

1. Data Controller

The data controller who is responsible for the processing of personal data is YOSAA, Gustav Mahlerlaan 50B, 1082 ME Amsterdam, The Netherlands, registered in the trade register with number 63746751.

2. What personal data & source

YOSAA processes the following personal data:

• Name, (temporarily) address and place of residence, e-mail, telephone;
• Gender, nationality, marital status, family members;
• Other information that is necessary in view of the services to be provided by us, such as the employer, commencement of employment, date of relocation, accommodation requirements, information about pets, statement of employer, bank account number.

We generally obtain your personal data directly from you or via your employer. In some instances, YOSAA will collect and aggregate data using cookies. For further details please see point 4. 

3. The purpose and legal basis of the data processing

YOSAA processes personal data for the following purposes:

• Home search and entering into lease agreements;
• Support with moving;
• Arranging services and facilities such as utilities, internet, cleaning services, general;
• Providing service updates and information;
• The handling of complaints and disputes;
• Obtaining feedback about our services; Analyzing and monitoring website use;
• Archiving purposes;
• Compliance with legal obligations.

The legal basis for the processing is that the processing is necessary for the performance or the entering into of a contract between us and you, for the compliance with legal obligations and for the representation of legitimate interests of YOSAA and the users of our services. These legitimate interests include the ability for us to offer our services and the ability for expats and their employers to use them.

4. Cookies

Our website uses cookies. By using this website and agreeing to our privacy policy, you consent to YOSAA's use of cookies. Cookies are files sent by web servers to web browsers and stored by web browsers. The information is then sent back to the server each time the browser requests a page from the server. This enables a web server to identify and track web browsers. On our website we track general visitors' information, including the IP-address of your computer and the details send along with your browser. These details are used for visitation analysis and clicking behavior on our website. This helps us improve our website usability. As all the information that we gather, this information will be anonymized as far as reasonably possible and is not shared with third parties. The permission can be withdrawn at any time. Cookies used on the site are categorized and below you can read about each category:

• Necessary cookies
  Some cookies are required to provide core functionality. The website won't function properly without these cookies and they are enabled by default and cannot be disabled.
• Preferences
  Preference cookies enables the website to remember information to customize how the website looks or behaves for each user. This may include storing selected currency, region, language or colour theme.
• Analytical cookies
  Analytical cookies help us improve our website by collecting and reporting information on its usage.
• Marketing cookies
  Marketing cookies are used to track visitors across websites to allow publishers to display relevant and engaging advertisements. By enabling marketing cookies, you grant permission for personalized advertising across various platforms.

5. Google Analytics

To assess the web traffic to our website and how effectively our online campaigns are, we use Google Analytics. The information we process including your IP-addresses are processed and stored by Google in the United States. YOSAA has not given Google the permission to use the processed Analytics-information for other Google services. Read Google's privacy policy for more information .

6. Leadinfo

To measure business use of our website we use Leadinfo’s service. Based on IP addresses the names and addresses of organisations of which a person has visited our website are shown to us. The IP addresses are not shown nor saved and are not able to be traced back. Leadinfo is GDPR compliant. Read more here. 

7. Mailchimp

We use Mailchimp – a third party website that allows us to collect information from you when you subscribe to our online mailing list form. We use MailChimp as a mailing list tool, so that we can store your name, email address, company and phone number. Subscribers can opt-out and unsubscribe any time. Read Mailchimp's privacy policy here.

8. Front

Front provides us with a cloud-based communication hub that our teams use for customer-related communications. This tool helps us answer any questions from prospective customers and to help existing customers with any queries or requests. When one of our advisors is not online, it will display a form instead. Read Fronts Privacy Policy here .

9. Teamleader

For the personal data of contacts (e.g. prospects, customers, business partners) YOSAA is the data controller and Teamleader is a data processor, which means they process the personal data on behalf of and according to instructions given by YOSAA. We use Teamleader to analyse which companies are visiting our website. Teamleader is a tool that helps provide our marketing and sales team with lead generation. They deliver reports on what companies visited our website, for how long and how many visits. Read Teamleaders Privacy Policy here .

10. Microsoft Office 365

We use Microsoft Office 365. All the data is stored in one or more data center locations within the European Union. Read more about the protection and privacy policies of Microsoft. 

11. Recipients of personal data

We only share your personal data with third parties if this is necessary for the performance of our services. In that context, for example, data can be shared with:

• Real estate agents, landlords; Operators of (Serviced) Apartments
• Service partners;
• Relevant government agencies, when legally obliged;
• Your employer;
• Other third parties, if YOSAA is obliged to do so on the basis of a legal obligation or court order.

Any information you provide will not be used for commercial purposes and will not be sold to third parties.

12. Transfer of personal data outside the European Union

We will not transfer your personal data outside the European Union, unless this is necessary for the performance of our services, for example because we support you in moving to or from the country in question. In such cases - insofar as the country concerned does not have an adequate level of protection as referred to in Article 45 of GDPR - the transfer will take place on the basis of appropriate safeguards as referred to in Article 46 of GDPR, or in accordance with one of the conditions referred to in Article 49 of GDPR, if for example the transfer is necessary for an agreement between you and YOSAA, or for the performance of an agreement concluded in your interest between YOSAA and a third party, for example your employer, or because you have agreed to the transfer.

13. Retention of personal data

We do not store your data for longer than necessary for the purposes mentioned under 3. Any data will be deleted no later than 5 years after the end of our assignment, unless the data must be retained for a longer period in connection with a legal obligation. 

14. Security Measures

YOSAA is acting in compliance to GDPR and will take all necessary technical and organizational measures to ensure an appropriate level of security and to protect your data that is administrated by us. Our security measures are, pursuant to technological progress, constantly being reviewed and improved. We strive to ensure that our data- and ICT suppliers are also complying with PCIDSS, ISAE 3402 and ISO 27001.

15. Your rights

You have the right to request YOSAA to access your personal data. If the information is incorrect, incomplete or irrelevant, you have the right to request rectification. You also have the right to object to the processing and to request YOSAA to delete the data. Insofar as the processing is based on your consent, you have the right to withdraw the permission at any time. Withdrawal does not affect the lawfulness of the processing on the basis of the consent before it is withdrawn. If you wish to make use of your aforementioned rights, please contact YOSAA by letter or e-mail using the contact details provided below. YOSAA will make a decision on your request within four weeks. You also have the right to lodge a complaint with the supervisory authority. The competent supervisory authority is the Dutch Data Protection Authority (www.autoriteitpersoonsgegevens.nl).

16. Contact

For questions or comments about the processing of your personal data, and to exercise your above-mentioned rights, please contact YOSAA via: GDPR@yosaa.com