Skip to main content
The International
Members

Privacy Statement

Last updated: 11 October 2026

1. Who are we?

The International Exploitatie B.V., located at Oude Haagseweg 200, 1171 PE Badhoevedorp, is responsible for the processing of personal data as described in this privacy statement. Hereinafter we refer to this organisation as “The International” or “we”.

We consider the privacy of our members, customers, suppliers, business contacts and employees important. In this statement we explain which personal data we process, for which purposes we do so, how long we keep it and which rights you have.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable laws and regulations. In doing so, we:

  • use personal data only for clearly defined and lawful purposes;
  • do not process more data than necessary;
  • ask for valid consent when required and explicit consent when the law requires it;
  • take appropriate technical and organisational security measures;
  • share personal data only when there is a valid legal basis and it fits the purpose concerned;
  • inform you about your privacy rights and respect them.

2. Personal data of members, customers and suppliers

Purposes and legal bases

We process personal data for:

  • entering into and performing membership, customer and supplier agreements;
  • keeping the membership administration;
  • providing, receiving and carrying out assignments;
  • communication about memberships, assignments and related activities;
  • keeping our accounts and complying with statutory administrative and tax obligations;
  • sending news items, newsletters and invitations to member events;
  • sending birthday cards.

For data that is necessary to enter into or perform an agreement with you, we rely on the legal basis of performance of a contract. For mandatory administrative and tax processing, we rely on the legal basis of a legal obligation.

If you are the contact person of a business customer or supplier, we process your business contact details on the basis of our legitimate interest in maintaining that business relationship and handling assignments. In doing so, we take your privacy interests into account.

We send necessary messages about your membership or assignment in the context of the agreement. For electronic newsletters and invitations of a commercial nature we ask for consent, unless a legal exception applies. You can easily unsubscribe.

Which data do we process?

Depending on the purpose, we may process the following data:

  • first name, middle name and surname;
  • private or business telephone number;
  • private or business email address;
  • postal address;
  • gender;
  • date and place of birth;
  • golf handicap.

We only process this data insofar as it is necessary for the purpose concerned.

If data is necessary to perform an agreement or to comply with a legal obligation, we will inform you of this when collecting it. Without that data we may not be able to carry out the membership or the assignment.

Retention periods

We keep data needed for an ongoing membership or other agreement for as long as necessary for its performance.

After termination we delete or anonymise data that is no longer needed. Data we are legally required to keep is retained for the applicable statutory period. For basic tax data this period is usually seven years. A different period may apply to certain other administrative data.

Data needed to handle a dispute or legal claim is kept for as long as necessary for that purpose.

3. Personal data of prospective customers, stakeholders and interested parties

We process contact details to provide information, answer questions, maintain business contacts and, where permitted, send newsletters or targeted messages.

The applicable legal basis depends on the purpose:

  • consent for newsletters that require consent;
  • taking steps at your request prior to entering into an agreement;
  • our legitimate interest in maintaining relevant business contacts, insofar as your interests and rights do not outweigh it.

For electronic advertising we take the additional legal rules into account.

Which data do we process?

We may process the following data:

  • first name, middle name and surname;
  • telephone number;
  • email address.

We obtain this data, for example, directly from you, via a business card or via business contacts on LinkedIn or Facebook.

Retention periods

We keep contact details for as long as they are needed for the stated contact purpose. We periodically assess whether continuing the contact and keeping the data is still justified.

If you withdraw consent or object to direct marketing, we stop that processing. We may keep a minimal record to prevent you from receiving unwanted marketing again.

4. Personal data of employees

We process personal data of employees for:

  • entering into and performing the employment contract;
  • personnel and payroll administration;
  • complying with statutory employment, tax and identification obligations.

The legal bases are performance of the employment contract and compliance with legal obligations, depending on the processing concerned.

Which data do we process?

For these purposes we may process the following data:

  • first name, middle name and surname;
  • telephone number;
  • email address;
  • date and place of birth;
  • salary details;
  • a copy of the identity document;
  • citizen service number (BSN);
  • bank details.

We only process the BSN and the copy of the identity document for purposes permitted by law.

Retention periods

During employment we keep personal data for as long as it is needed for the stated purposes.

After employment ends, different periods apply:

  • Certain payroll data is subject to a statutory retention period of seven years.
  • We keep copies of identity documents and payroll tax forms for five years after the end of employment, in accordance with the statutory requirements.
  • Other personal data is in principle kept no longer than two years after the end of employment, and for a shorter period if it is no longer needed sooner.
  • If data is necessary for a dispute or legal claim, we may keep it longer for as long as necessary.

5. Disclosure to third parties

We may share personal data with third parties if this is necessary for the purposes described and there is a valid legal basis for it.

Among others, we use service providers for:

  • providing and managing our digital GDPR administration;
  • financial and other administration;
  • sending newsletters and invitations;
  • payroll administration.

With service providers that process personal data on our behalf, we conclude a data processing agreement. In it we make arrangements about, among other things, security, confidentiality and use of the data.

Some recipients process data under their own responsibility. We do not conclude a data processing agreement with these parties solely because of the disclosure; we do assess whether sharing the data is lawful.

We may disclose personal data to competent authorities if we are legally required to do so. In the case of a request or demand from, for example, the police, we assess the legal basis and which data must be provided.

We may also share data with third parties on the basis of your valid consent. When we ask for written consent for this, we inform you in advance about the recipient, the data and the purpose.

6. Processing outside the European Union

We do not provide personal data to parties outside the European Union.

7. Minors

We handle personal data of persons under the age of sixteen with care.

If we process their data on the basis of consent, we ask the parent or other legal representative for consent and verify that consent appropriately. The International asks for this consent in writing.

We assess processing on the basis of another valid legal basis separately. In that case too, we only process data that is necessary and we inform minors in an understandable way.

8. General principles for retention

We do not keep personal data longer than necessary for the purpose for which it was collected, unless we are legally required to keep it longer.

After the applicable retention period ends, we delete or anonymise the data. The specific periods or criteria are given with the relevant processing in this statement.

9. Security

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access and unlawful processing.

Our measures include:

  • confidentiality obligations for persons who have access to personal data on behalf of The International;
  • access to data for authorised persons only;
  • a username and password policy;
  • pseudonymisation and encryption where appropriate;
  • backups to restore data after physical or technical incidents;
  • regular testing and evaluation of our security measures;
  • informing employees about the importance of data protection.

10. Your rights

Depending on the processing and the legal conditions, you have the right to:

  • access your personal data;
  • rectification or completion of incorrect or incomplete data;
  • erasure of your data;
  • restriction of processing;
  • object to processing based on a legitimate interest;
  • portability of data you have provided to us, when we process it automatically on the basis of consent or an agreement.

You can always object to the use of your personal data for direct marketing. We will then stop using it for that purpose.

If we process personal data on the basis of your consent, you can withdraw that consent at any time. Withdrawing is as easy as giving consent. The withdrawal does not affect the lawfulness of processing before the withdrawal.

You can submit your request via the contact details at the bottom of this statement. If we have doubts about your identity, we may ask for additional information to verify it. We will not ask for more than necessary.

We will in principle respond within one month of receiving your request. If your request is complex or you make several requests, we may extend this period by up to two months. We will then inform you within the first month of the extension and the reason.

11. Complaints

Do you have a complaint about the processing of your personal data? Please contact us so that we can investigate your complaint. You also have the right to lodge a complaint directly with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

12. Questions and contact

For questions about this privacy statement, comments, complaints or requests regarding your personal data, please contact:

The International Exploitatie B.V. Oude Haagseweg 200 1171 PE Badhoevedorp Email: administratie@theinternational.nl