privacy statement

When offering and executing the Randstad Share Purchase Plan to the employees of Randstad Group entities, we process your personal data. We value your privacy and observe due care in processing and protecting personal data.
During the processing we respect the requirements of the applicable data protection legislation, such as the General Data Protection Regulation (GDPR). This means we:

• clearly specify our purposes before we process personal data, by providing the employees this Privacy Statement;

• limit our collection of personal data to only the personal data needed for the specified purposes and not further process the personal data for other non-compatible purposes;

• only process personal data when we have a legal basis for this, such as when it is necessary to perform a contract to which you are a party or to comply with a statutory obligation;

• take appropriate security measures to protect your personal data and we demand the same from parties who process personal data on our behalf;

• respect your rights, such as to access, correct or delete your personal data held by us.

Who we are

We are Stichting Randstad Optiefonds, registered in Diemen at the Diemermere 25, 1112 TC The Netherlands (hereinafter: SRO and together with its subsidiaries: we).

SRO and the Randstad Group entities, are the parties responsible for the processing of your personal data when offering and executing the Employee Share Purchase Plan.

In this privacy statement, we will explain which personal data we collect in the course of offering the Employee Share Purchase Plan, and for which purposes we process your personal data. We recommend that you read it carefully.

Personal Data Collected

We use the following personal data from the employees of the Randstad Group entities, that we collect directly from you or via the Randstad Group entities, your employers:

• name;
• address;
• contact details;
• gender;
• bank account number;
• personnel number;
• social security number;
• location;
• subsidiary;
• information about participation in the Employee Share Purchase Plan;
• financial information, such as transaction details of shares;
• compliance group.

Purpose of processing of personal data

We use the personal data collected for the following purposes:

• providing and executing the Employee Share Purchase Plan;
• handling questions and requests about the Employee Share Purchase Plan.

We use the data:

• when we received your consent;
• to perform the agreement we have with you;
• to comply with a statutory obligation; and
• for our legitimate interests or the legitimate interests of third parties, after a careful assessment.

Providing Data to Third Parties

We may share your personal data with the following recipients:

• companies that are part of the Randstad group, for instance for payment purposes of the Employee Share Purchase Plan;
• Equiniti, the provider of the online reward software system through which we offer you the Employee Share Purchase Plan;
• other third parties, offering services to us, such as web developers and hosting providers. These third parties will only process your personal data as far as this is necessary for the offering of their services and they are bound by contractual arrangements with us; governmental institutions and other institutions, if we assess that we are required or authorized to share your personal data.

We may also share your personal data if we are obliged to share your personal data, due to a court order or judgment.

Transfer of your personal data

Your personal data may be transferred to or stored outside of the Netherlands, including countries outside of the European Economic Area. We have implemented appropriate safeguards to ensure that your personal data that is transferred is adequately protected. We will only transfer your personal data to countries of which the European Commission has decided that they offer an adequate level of protection, or where we have taken adequate security measures to safeguard the protection of your personal data. If you have any questions, you can contact us, by using the contact details that you can found in the section “Contact information”.

Security

We take security measures to reduce misuse of and unauthorized access to personal data. We take the following measures in particular:

• access to personal data requires the use of a user name and password;
• we take physical measures to protect access to the systems in which the personal data is stored;
• we make use of secure connections (SSL/TLS) to encrypt all information between you and our website when entering your personal data;
• use of back-ups;
• use of encryption;
• we keep logs of all requests for personal data.

Data Retention

We keep your personal data for as long as we need to for the purposes for which it was collected or for any period for which we are required to keep personal data to comply with our legal and regulatory requirements.

Changes to this Privacy Statement

We reserve the right to modify this statement. We recommend that you review this statement regularly, so that you remain informed of any changes.

Your Rights relating to your Personal Data

You have the right to request for:

• access to your personal data;
• correction of your personal data;
• deletion or restriction of your personal data, in certain circumstances, unless we have a legitimate interest to process or keep your personal data;
• objection against the processing of your personal data;
• portability of your personal data; and
• withdrawal of your consent, if the processing of your personal data is based on consent.

If you would like to do so, please use the contact information below. We may need to identify you before be able to comply with your request.

If you are of the opinion that your personal data is processed in a manner contrary to applicable privacy rules, you can let us know via the contact information below. However, you also have the right to submit a complaint with the competent data protection authority. For the Netherlands, this is the Autoriteit Persoonsgegevens.

We do not use your personal data for automated decision making that is solely based on automated processing, including profiling.

Contact information

Stichting Randstad Optiefonds, registered in The Netherlands No: 41208311 Registered office: Diemermere 25, 1112 TC Diemen, The Netherlands

If you have any questions or complaints, you can reach out to: spphelpdesk@randstad.com

This privacy statement was last amended on 5 October 2024.