The purpose of this document is to provide you with information on how EValuation Capital Management B.V. (EVCM) uses your personal data and what data protection rights you have.
Responsibility for data processing
EValuation Capital Management B.V.
OFFICIA 1 Building, De Boelelaan 7, 1083 HJ Amsterdam, The Netherlands
T: +31 (0)20 8804 192
Changes to the Privacy Statement
EVCM reserves the right to update or change this privacy statement at any time. The most recent version can be found at www.evaluationcapital.com. If EVCM makes any material changes to the privacy statement, we will notify you in advance.
Data used by EVCM
EVCM processes personal data it receives from its clients or other stakeholders in the context of its business relationship. It also processes – if this is necessary for the execution of its services – personal data obtained from public sources (trade registers, press, internet). Relevant personal data are personal details (name, address, contact details, date of birth, place of birth and nationality), identification data (including passport details and the tax identification number) and authentication details (including signature).
Purposes and legal basis of the processing
EVCM processes personal data for various purposes:
- the execution of an agreement
The processing of personal data is necessary for the management of investment funds (the EV Smaller Companies Fund and the EV Micro Companies Growth Fund) in which the client invests.
- based on your consent
The processing of personal data is possible insofar as you have given permission to process personal data for certain objectives (for example sending certain reports and newsletters). The given consent can always be withdrawn.
- on the basis of legal regulations
EVCM has to comply with various legal obligations (e.g. the Anti-Money Laundering and Terrorist Financing Act, the Financial Supervision Act and tax legislation). The purpose of processing includes acceptance of customers and compliance with duty of care towards clients, identity checks, fraud and money laundering prevention, compliance with (fiscal) control and reporting obligations.
Providing data to third parties
EVCM provides personal data to third parties if and to the extent this is necessary in the context of the execution of the agreement with you. EVCM engages third parties that provide support in business operations and therefore these parties process personal data. EVCM selects these third parties only after careful investigation and requires these parties to apply appropriate information security measures. The main parties in this respect are:
- The administrator: Circle Investment Support Services B.V.
The main tasks of the administrator, under the responsibility of the fund manager, are:
- to conduct the financial and investment administration of the funds;
- to calculate the net asset value of the funds; and
- to keep the register of unit holders in the funds up to date.
- The depositary: Caceis Bank, Netherlands Branch
The depositary is responsible for ensuring that the fund manager acts in accordance with what has been set out in the prospectuses, the conditions of management and custody, complies with applicable legislation and is charged with the custody of the assets of the fund.
In principle, personal data are only passed on to third parties if this is required by legal provisions, there is a legitimate interest, the client has given permission or EVCM is otherwise authorized to provide the information. In this context, recipients of personal data may for example be government bodies and institutions, such as tax and supervisory authorities. Should it be necessary for the provision of services to you or for the execution of the agreement to pass on personal data to parties outside the EEA, EVCM will do so only if an appropriate level is guaranteed for the protection of personal data or if a specific deviation applies.
Security of data
EVCM and its authorized delegates have well-secured systems and take continuous measures to prevent abuse of your data. The employees of EVCM and its authorized delegates have been given clear instructions on how to handle your data.
Retention of your personal data
EVCM and its duly authorized delegates do not retain your personal data for longer than is necessary for achieving the purposes for which it was collected and processed; this with due observance of the legally required retention periods. This retention period can be extended if there is an ongoing complaint, procedure or (criminal or supervisory) investigation with regard to the (former) relationship. Thereafter, personal data are periodically deleted.
Data protection rights
You have the following rights regarding the use of your personal data:
- you may request information about the data processing, and request an overview of your personal data;
- you can ask EVCM to correct or supplement personal data if they are incorrect or incomplete;
- if you no longer want EVCM to register certain data in its records, you can request this data to be deleted. Your request will be complied with, unless this is in violation of laws and regulations;
- this document indicates how your data will be used. If at any time you wish to restrict the use of your data or wish to oppose the processing of data, you can request EVCM to do so; and
- if you wish, you can ask EVCM to forward your details to a third party.
If you wish to submit a request, you can send an e-mail to the Director Risk Management & Compliance (email@example.com). Your request will be answered as soon as possible, but in any case within one month of receipt. There are no costs associated with handling a request, unless this is an exceptional burden for EVCM. EVCM will inform you in advance if costs are being charged.
More information about your privacy rights can be found on the website of the Dutch Data Protection Authority, www.autoriteitpersoonsgegevens.nl.
Questions or complaints
If you have questions and/or complaints about how EVCM deals with your personal data, you can submit them to the Director Risk Management & Compliance, firstname.lastname@example.org. If you are not satisfied with the handling of your complaint, you can contact the Dutch Data Protection Authority via www.autoriteitpersoonsgegevens.nl.