Data policy

1. Who are we?

This Privacy Policy is provided by InterXion II B.V. and subsidiary companies. We have our registered office in the Netherlands and our principal place of business at Scorpius 30, 2132 LR Hoofddorp. We are registered with the Chamber of Commerce under company number 76490866.

The countries in which we operate in Europe are the Netherlands, United Kingdom, Austria, Belgium, Denmark, France, Germany, Ireland, Spain, Sweden, Switzerland. Italy, Croatia and Greece (see our locations www.interxion.com/Locations).

In the context of our activities we collect, hold, disclose and/or otherwise process personal data. Pursuant to applicable data protection legislation, we qualify as controller with respect to the personal data that we process.

When using the term “personal data” in this Privacy Policy, we mean information that relates to you and that allows us to identify you, either directly or in combination with other information that we may hold. Your personal data may include for example your name, your contact details, information about when you have entered one of our data centres.

2. Your privacy is important to us

We value your right to privacy and strive to protect your personal data in accordance with applicable data protection legislation and more specifically with the General Data Protection Regulation and relevant national legislation (Data Protection Legislation).

In this Privacy Policy we set forth how we collect your personal data, how and for what purposes we may use your personal data and to whom your personal data may be disclosed by us. Further, this Privacy Policy includes important information regarding your rights with respect to the processing of your personal data. Therefore, we encourage you to read this Privacy Policy carefully.

3. Whose personal data do we collect?

In the context of our services we may collect the personal data relating to the following individuals:

• visitors accessing our data centres
• customer contacts
• supplier contacts
• service provider contacts
• applicants in our recruitment process
• visitors to our website
• prospects who may have or show interest in our services

4. How do we collect personal data relating to you?

We may collect information about you in various ways:

Directly from you:

• visitor’s details that we collect from you; e.g. at the entrance of our data centers and when you access the customer area’s;
• your contact details, as provided to us in the context of a contractual business relationship;
• personal details that you provide to us as a candidate in the recruitment process;
• personal details that you provide to us by filling out a form on the website (www.interxion.com);
• personal details that you provide during a business or trade event.

Indirectly from you:

• your contact details, as provided to us by our customer, e.g. by contract or through the customer portal;
• your contact details, as provided to us by our supplier, or our service provider
• your audiovisual images, as recorded by us when entering the general and customer areas of our data centers;
• your contact details, as collected by third parties, e.g. to update our database or to provide candidates for jobs at Interxion;

Otherwise:

• Information that we get from your use of our website, e.g. by using cookies or other technologies

5. What personal data do we collect and for what purposes do we use your personal data?

Personal Data: Visitors to our data centres	Purposes
Your contact details (name, company, email address, business/mobile number)	For physical security of our data centers For information security compliance purposes
Biometric information, by using fingerprint access for regular visitors	To physically secure and control the access to our data centers and the customer areas
Access log information (date, hour and badge number)	To register access log information for accessing customer spaces To provide the access log information to the customer For physical security and incident reporting (also to local authorities)
CCTV images of people entering the data center and accessing the customer areas	For the physical security of the data centers For incident reporting to the local authorities and for security compliance purposes

 

Personal Data: Customer contacts

Purposes

Your contact details (name, company, business email address, business and/or private mobile number)

Administration and management of relationship To allow access to or use of our Customer Portal For performance of our contracted services, incl provisioning, implementation and any other operational purposes For administrative and invoicing purposes, including collection of debts To maintain up to date information into our systems For marketing purposes To deal with possible complaints To establish, defend and exercise our legal position

 

Personal Data: Supplier & Service Provider contacts	Purposes
Your contact details (name, company, business email address, business and/or private mobile number)	Administration and management of relationship For performance of contracted services, including day-to-day operational purposes For administrative purposes, including payment of invoices To maintain up to date contact information into our systems To deal with possible complaints To establish, defend and exercise our legal position

 

Personal Data: Candidates Recruitment	Purposes
Your contact details (name, surname, postal address, email address, home number and/or mobile number)	Basic information to be used in the recruitment procedure
Your Curriculum vitae and motivation letter	For use within our recruitment procedure
Your assessment, and or other information, if applicable	For use within our recruitment procedure To deal with possible complaints To establish, defend and exercise our legal position

 

Personal Data: Visitors to our website (Interxion.com)	Purposes
Your contact details (name, title company, email address, business phone number)	For marketing purposes, as selected in our preference centre
Electronic localization information	For marketing purposes
Your IP-address and surfing behavior	To improve our services and the quality thereof To analyze your surfing behavior and create a profile

 

Personal Data: Prospects	Purposes
Your contact details (name, title company, profession, email address, business and/or mobile number)	For marketing purposes
Business related personal information, including participation in business events or webinars	To accomodate prospects business needs

6. The legal grounds for these processing activities:

• For the processing of your visitor’s data for security purposes we rely on legitimate interest;
• For the processing of personal data of our customer contacts, supplier contacts and service provider contacts we rely on the performance of a contract with the customer supplier and the service provider who have provided the contact details and we rely on legitimate interest to use the contact details;
• For the processing of personal data of our customer contacts for marketing purposes we rely on legitimate interest.
• For the processing of personal data of our applicants in the recruitment procedure we rely on consent; Consent is given by an affirmative action when entering and/or uploading the information on the online recruitment webpage.
• For the processing of personal data of visitors of our website we rely on consent;
  • we will only perform tracking of behavior (profiling) when a visitor has accepted the use of it
  • we will only use visitor contact details for selected marketing purposes if a visitor actively clicks to confirm.
• For the processing of personal data of prospects for marketing purposes we will generally rely on legitimate interest unless local law requires us to obtain consent in conformity with GDPR.

7. Sharing your personal data

In the context of the purposes as listed above, we may share your personal data with third parties (e.g. with customers providing them access log information of those that have accessed the customer space).

We may share the personal data that we collect within our group of companies (Interxion and its subsidiaries) in as far this is necessary, and we may engage with third parties to assist in our business operations.

We will only share personal data with third parties that guarantee to implement appropriate security measures to ensure that the processing activities meet the requirements of Data Privacy Legislation and that ensure the protection of your individual rights (see hereunder). Where relevant, we shall ensure that data processing agreements with third parties are concluded in which the purpose, protection and security of your data are described.

Parties to whom we may disclose your personal data as referred to above may be located in countries outside the EU and the European Economic Area (EEA), which countries may offer a lower level of data protection than in the EU/EEA.

In such case, it shall be ensured that adequate measures are taken to ensure adequate protection of your personal data in accordance with applicable data protection legislation. More specifically, we will implement the EU Standard Contractual Clauses.

Your personal data and/or person profiles shall not be rented, nor sold to third parties without your prior explicit consent.

8. How long do we store your personal data?

Your personal data will not be stored for longer than is necessary in relation to the purposes for which we process them (we refer to the purposes as listed above in paragraph 5). Only where we are legally obliged to, or where this is necessary for defending our interests in the context of judicial proceedings (e.g. in case of a dispute), we will store the personal data for longer periods.

Personal Data	Storage Period
Visitor Personal Data
Name, surname, company, email, phone	A maximum of 24 months after expiry of visitor’s access rights to the data center
Biometric information for security purposes	No longer than required for the secure access, as restricted by local laws
CCTV recordings	30 – 90 days, subject to the restrictions under local law
Customer and supplier and service provider personal data
Name, surname, business email, business phone number and/or mobile number	In general, there is a statutory retainment period for business records of 5-10 years for administrative and tax reasons, as defined by local laws
Applicant personal data for recruitment
All information, including name, address, email, phone, CV, Assessment	If the candidate is not hired: retention period is restricted by local laws, varying between 4 weeks to two years.
Website Visitors
Name, surname, title, company, email address, phone (if applicable)	4 weeks after opt-in has been withdrawn
Prospects
Name, surname, title, company, email address, phone (if applicable)	4 weeks after opt-in has been withdrawn

9. How do we protect your personal data?

The information that you provide to us will be held in our systems, which are located on our premises or on servers of an appointed third party.

We will implement the necessary administrative, technical and organizational measures for ensuring a level of security appropriate to the specific risks that we have identified. We protect your personal data against destruction, loss, alteration, unauthorized disclosure of or access to personal data transmitted, stored or otherwise processed. More specifically, we have taken the following measures:

• Physical access is validated and based on applicable authorizations
• Access to network and systems restricted to staff with access rights
• Users having unique passwords (password management ensuring quality passwords)
• Events logs recording user activities on data processing systems
• Two-factor authentication for access to our systems
• Firewalls
• Intrusion Prevention System
• Encryption in transit and storage is applied where required
• Mandatory Security Awareness and GDPR training deployed to all employees

Further, we seek to ensure that we keep your personal data accurate and up to date. In view thereof, we kindly request you to inform us of any changes to your personal data (such as a change in your contact details).

10. What are your rights and how can you exercise them?

Under the Data Protection Legislation, you have the following rights that you can use or exercise with respect to the data that we hold about you:
You have a right to request access to the personal data that we hold about you;

• you can have inaccurate personal data amended or erased, and have incomplete personal data completed;
• you can request the erasure of your personal data;
• you can object to or restrict the processing of your personal data (including where your personal data is processed for direct marketing purposes);
• you can request that your personal data be transferred to another data controller or provide it in a format that will permit this transfer (the so-called ‘right to portability’);
• you can object to any decision that affects you being taken solely by a computer or other automated process (including profiling);
• You can lodge a complaint about the use of your personal data with a supervisory authority.

If you have questions in relation to your personal data, or if you want to file a specific request, please contact us at: dpo@interxion.com.

11. Use of cookies and other technologies

We use certain cookies and social media plug-ins on our website. Some of them are essential to make our website work, others serve to provide you a better, faster and safer user experience.

Cookies are small pieces of data that are stored on your computer or mobile device via your browser. We use the following types of cookies:

Functional Cookies: These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site may not work then.

Performance Cookies: These cookies allow us to count visits and traffic sources, so we can measure and improve the performance of our site. They help us know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies, we will not know when you have visited our site.

Targeting Cookies: These cookies are used for marketing and advertising and can be set through our site by our advertising partners. They may be used by us or those companies to build a profile of your interests and show you relevant content and ads on other sites. They work by uniquely identifying your browser and device. If you do not allow these cookies, you will not experience our targeted advertising across different websites.
On our website we use the following cookies:

Cookie	Type	Storage Period
Add This	Functional	13 Months
Google Analytics	Performance	24 Months
DoubleClick	Targeting	18 Months
Pardot	Targeting	24 Months
Agent3 Intent Tag	Targeting	24 Months
AdWords	Targeting	18 Months

12. How can you manage/delete these cookies?

All major internet browsers offer the option to manage the cookies that were installed on your computer or mobile device.

In case you do not wish that our website places cookies on your computer or mobile device you may limit or delete these easily by adjusting your mobile or browser settings. In addition, you can set you mobile or browser settings in such a way that you get a notification every time you receive a cookie on your computer or mobile device, so that you can decide whether you wish to accept this cookie or not.

Please note that when you disable certain cookies of which we are making use, the possibility exists that certain parts of our website will no longer function properly, and you will no longer enjoy an optimal user experience.

13. Updates to our Privacy Policy

From time to time, we may make changes this Privacy Policy. The most recent version of this Privacy Policy is available on www.interxion.com/legal/privacy-policy. We encourage you to regularly review this Privacy Policy. You may also ask us to send you a copy of the most recent version of this Privacy Policy.

Contact information

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to dpo@interxion.com.

Effective: 25-May-2018
Updated: 19-July-2021