Your privacy is important to us. Elephant Path – Research & Consulting handles your personal data with the utmost care and acts within the limits of the law, i.e., the General Data Protection Regulation (GDPR). Elephant Path – Research & Consulting processes personal data and uses cookies for this website. In this Privacy Statement, we inform you which personal data are processed and for what purposes, how you can exercise your privacy-related rights, and provide other information that may be of interest to you. The Cookie Statement describes the cookies we use. We recommend that you read this Privacy Statement carefully. If you have any questions about this, please contact Elephant Path – Research & Consulting.

Contact information

Elephant Path – Research & Consulting
Karel Doormanstraat 390S
3012GR Rotterdam
The Netherlands

KvK: 72197269
Contact person: Suzan Doornwaard
info@elephantpath.net

Elephant Path – Research & Consulting is the responsible party within the meaning of the GDPR. Elephant Path – Research & Consulting believes it is essential that the personal data of its customers and website visitors are handled and protected with the utmost care.

How Elephant Path – Research & Consulting collects personal data

Elephant Path – Research & Consulting collects personal data in different ways:

• When you visit our website
• When you email us or contact us via the contact form on our website
• When you provide us with these data in order to make use of our services
• Via third parties with whom we cooperate in the context of our research services.

For what purposes  Elephant Path – Research & Consulting processes personal data

Elephant Path – Research & Consulting uses the personal data collected from you for operational management and for the proper performance of its services. The primary purposes for which Elephant Path – Research & Consulting processes personal data are:

• To enter in or execute an agreement with you
• To perform our services
• To call or email you if this is necessary to perform the services you use
• To deliver the services you have taken
• To respond to your request
• For administrative purposes
• To process your payment
• To send newsletters or mailings for which you have signed up
• To analyze the use of our website
• Elephant Path – Research & Consulting also processes personal data if we are legally obliged to do so, such as information that we need for our tax return

Which personal data Elephant Path – Research & Consulting processes

Elephant Path – Research & Consulting processes the following personal data, depending on how you use our website (e.g., contact form) and how you make use of our services:

• Name, address
• Email address
• Telephone number
• Gender
• Name organization, function
• Billing address
• Chamber of Commerce (KvK) number
• VAT (btw) number
• Bank account number (IBAN)
• IP-address
• Cookies (see Cookie Statement)
• Surf and click behavior

Special and/or sensitive personal data

Special personal data are data of a sensitive nature. For instance, data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, data concerning health or mental condition of participants and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning a natural person’s sex life or sexual orientation, and data of a criminal nature. Due to the nature of our services, we may process special categories of personal data in the context of research we conduct for our customers. We process the data you provide us in that context based on your explicit consent and for that purpose only. You can withdraw your consent at any time. Under the heading ‘Your rights’ you can read how you can do so.

Research data

When you participate in research, we may process personal data that are needed for answering the research question or questions, such as name, address, postal code, city, gender, date of birth, function, country of birth, special categories of personal data, user data of websites and apps that are being used in the context of the research. Which data are being processed in a specific research study is stated in an information letter or privacy statement pertaining to that research. Research data may be used:

• To evaluate whether you qualify for the research based on your consent
• For the research purposes as further detailed in the information letter or the appropriate privacy statement you receive or are able to check before you decide to participate in the research based on your consent

Data about persons younger than 16 years old

Within the context of our research services, it is possible that we collect personal data of persons who are younger than 16 years old. In those cases, we only collect or process data with prior consent of the legal representative(s). Other than that, our website and/or services do not intend to collect data about persons who are younger than 16 years, unless they have permission from parents or guardians. However, we cannot check if a website visitor is older than 16. We encourage parents/guardians to be involved in the online activities of their children, to prevent data about children being collected without parental consent. If you are convinced that we have collected personal information about a minor without this consent, please contact us via info@elephantpath.net, and we will delete this information.

Automated decision-making

Elephant Path – Research & Consulting does not make decisions based on automated processing (algorithms) on matters that can have (significant) consequences for you. These are decisions that are taken by computer programs or systems, without involving a person.

Google Analytics

Elephant Path – Research & Consulting uses Google Analytics, a web analytics tool offered by Google Inc. (Google). We have configured Google Analytics services in accordance with the manual for privacy-friendly configuration (“Handleiding privacyvriendelijk instellen van Google Analytics”) as enacted by the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) dated 15 August 2018. This means we entered into a data processing agreement with Google. The data we collect in Google Analytics is anonymized and encrypted. We agreed that:

• The last octet of the IP address will be deleted before saving it
• The setting “share data” is disabled
• We do not make use of any other Google services in combination with the Google Analytics-cookies

Google Web Fonts

To ensure that fonts used on this website are uniform, this website uses so-called Web Fonts provided by Google. When you access a page on our website, your browser will load the required web fonts into your browser cache to correctly display text and fonts. To do this, the browser you use will have to establish a connection with Google’s servers. As a result, Google will learn that your IP address was used to access our website. The use of Google Web Fonts is based on our interest in presenting our online content in a uniform and appealing way. According to Art. 6 Sect. 1 lit. e GDPR, this is a legitimate interest. If your browser should not support Web Fonts, a standard font installed on your computer will be used. For more information on Google Web Fonts, please follow this link: https://developers.google.com/fonts/faq and consult Google’s Data Privacy Declaration here.

Cookies

See our Cookie Statement.

How long Elephant Path – Research & Consulting stores personal data

Elephant Path – Research & Consulting does not store personal data longer than the legal retention periods or, if this is not applicable, no longer than is necessary for performing the agreement or processing the question. For administrative data, the legal retention period of seven years applies.

Sharing of personal data by Elephant Path – Research & Consulting with third parties

Elephant Path – Research & Consulting will only share your personal data with business partners and third parties if this is necessary for the performance of the services and to comply with any legal obligation. Examples are IT service providers for web hosting, bank or other payment service providers for processing payments, administration software or our accountant for doing administration. With companies that process your data on our behalf, we signed a processor agreement to guarantee the same level of security and to safeguard the confidentiality of your data. We remain responsible for these processing operations.

How Elephant Path – Research & Consulting protects personal data

We take the protection of your data very seriously and take appropriate measures to fight misuse, loss, unauthorized access, unwanted disclosure, and unauthorized change. If you feel that your data is not secured properly or there are indications of abuse, please contact us at info@elephantpath.net.

Your rights

You have the right to view, correct or delete your personal data. Furthermore, you have the right to withdraw your consent for the data processing or to object to the processing of your personal data by Elephant Path – Research & Consulting. In addition, you have the right to data portability. This means that you can submit a request to move the personal data that we have from you via a digital file to you or another organization appointed by you. In case you participate in research, direct your request to the contact person mentioned in the informative letter. In any other cases, you can send all requests to view, correct, delete and transfer your personal data, or request for withdrawal of your consent or objection to the processing of your personal data to info@elephantpath.net. To ensure that the request for access has been made by you, we will ask you to send a copy of your ID. To protect your privacy, make sure that your passport photo, MRZ (machine readable zone, the strip with numbers at the bottom of the passport), passport number and Citizen Service Number (BSN) is made black. We will respond as quickly as possible at your request, but no later than four weeks. We would like to point out that you have the opportunity to file a complaint with the Dutch national supervisory authority: the ‘Autoriteit Persoonsgegevens’.

Third party privacy policy

This privacy statement does not apply to websites of third parties that are connected to this website by means of links. We cannot accept responsibility for the way in which these parties deal with personal data. We therefore advise you to always inform yourself of the privacy policy of these parties or to contact them for further information on their policy regarding the use of personal data.

Questions

Do you have any specific questions or comments about our Privacy Statement based on this information? If so, do not hesitate to get in touch with us. You may either use the contact form on the website or send an email to info@elephantpath.net.

Changes

Elephant Path – Research & Consulting reserves the right to modify this Privacy Statement. We recommend that you regularly check this page to see if changes have been made. In case of changes to the Privacy Statement that we consider being of a large scale, we will announce this for a period of time on this website.

This Privacy Statement was last modified on November 24, 2023.