{"id":469367,"date":"2026-03-11T16:59:31","date_gmt":"2026-03-11T16:59:31","guid":{"rendered":"https:\/\/www.ellahr.com\/?page_id=469367"},"modified":"2026-09-02T08:42:46","modified_gmt":"2026-09-02T08:42:46","slug":"privacy","status":"publish","type":"page","link":"https:\/\/www.ellahr.com\/nl\/privacy\/","title":{"rendered":"Privacy"},"content":{"rendered":"<div class=\"et_pb_section_0 et_pb_section et_section_regular et_block_section\"><\/div>\n\n<div class=\"et_pb_section_1 et_pb_section et_section_regular et_block_section preset--group--divi-section--divi-background--h1xv09d--vm2ohvz1jo\">\n<div class=\"et_pb_row_0 et_pb_row et_flex_row\">\n<div class=\"et_pb_column_0 et_pb_column et-last-child et_flex_column et_pb_css_mix_blend_mode_passthrough et_flex_column_24_24 et_flex_column_24_24_tablet et_flex_column_24_24_phone et_flex_column_24_24_widescreen et_flex_column_24_24_ultraWide\">\n<div class=\"et_pb_heading_0 et_pb_heading et_pb_module et_flex_module preset--group--divi-heading--divi-font--hp5h6dj--w9lqjlrgll\"><div class=\"et_pb_heading_container\"><h1 class=\"et_pb_module_header\">Privacy & anonymity<\/h1><\/div><\/div>\n\n<div class=\"et_pb_heading_1 et_pb_heading et_pb_module et_flex_module preset--group--divi-heading--divi-font--hp5h6dj--n07smfytgp\"><div class=\"et_pb_heading_container\"><h3 class=\"et_pb_module_header\">How we protect employee feedback<\/h3><\/div><\/div>\n\n<div class=\"et_pb_text_0 et_pb_text et_pb_bg_layout_light et_pb_module et_flex_module preset--group--divi-text--divi-font-body--h1yjkjr--o5vas4ebai\"><div class=\"et_pb_text_inner\"><p>At ELLA HR, we believe honest feedback only happens when people feel safe. That\u2019s why privacy and anonymity are built into how the platform works. ELLA HR is the platform provider. Your organisation is responsible for running the survey and deciding why and how employee data is used. ELLA HR processes data only on behalf of organisations.<\/p>\n<p><strong>1) We measure to improve \u2014 not to judge people<\/strong><\/p>\n<p>ELLA HR helps organisations understand patterns and themes at team or organisational level.<\/p>\n<p><strong>2) Results are protected against re\u2011identification<\/strong><\/p>\n<p>We don\u2019t show dashboards for groups that are too small, and we prevent filter combinations that could make someone identifiable. To protect anonymity, we apply a minimum group size (at least 5). In some cases, stricter thresholds or suppression may be applied if there is a risk of re\u2011identification.<\/p>\n<p><strong>3) We collect only what\u2019s needed<\/strong><\/p>\n<p>Only the minimum information required to send surveys and generate insights.<\/p>\n<p><strong>4) We keep data secure<\/strong><\/p>\n<p>Access is restricted by roles, connections are secured, and we apply appropriate security measures.<\/p>\n<p><strong>5) We don\u2019t keep data longer than necessary<\/strong><\/p>\n<p>Retention periods are agreed with organisations, and data can be deleted or anonymised when appropriate. Employees have rights under GDPR (such as access or deletion). Requests are typically handled by the employer. We support organisations in responding to such requests.<\/p>\n<p><strong>6) Where is your data stored?<\/strong><\/p>\n<p>Data is hosted in the [EU\/EEA \/ region]. If international transfers apply, we use appropriate safeguards such as Standard Contractual Clauses. Questions about privacy? Contact us by clicking the button below:<\/p>\n<\/div><\/div>\n\n<div class=\"et_pb_module et_pb_button_module_wrapper et_pb_button_0_wrapper preset--group--divi-button--divi-button--h1c8vfa--is90apskko_wrapper\"><a class=\"et_pb_button_0 et_pb_button et_pb_bg_layout_light et_pb_module et_flex_module preset--group--divi-button--divi-button--h1c8vfa--is90apskko\" href=\"mailto:privacy@ellahr.com\" data-icon=\"&amp;\">Contact us for questions<\/a><\/div>\n\n<div class=\"et_pb_heading_2 et_pb_heading et_pb_module et_flex_module preset--group--divi-heading--divi-font--hp5h6dj--n07smfytgp\"><div class=\"et_pb_heading_container\"><h3 class=\"et_pb_module_header\">Trust Center (Security & Compliance)<\/h3><\/div><\/div>\n\n<div class=\"et_pb_heading_3 et_pb_heading et_pb_module et_flex_module preset--group--divi-heading--divi-font--hp5h6dj--n07smfytgp\"><div class=\"et_pb_heading_container\"><h3 class=\"et_pb_module_header\">How we protect your people\u2019s privacy<\/h3><\/div><\/div>\n\n<div class=\"et_pb_text_1 et_pb_text et_pb_bg_layout_light et_pb_module et_flex_module preset--group--divi-text--divi-font-body--h1yjkjr--o5vas4ebai\"><div class=\"et_pb_text_inner\"><p>We know HR data is sensitive. That\u2019s why ELLA HR is built with privacy and security as a foundation.<\/p>\n<p><strong>How we keep data safe:<\/strong><\/p>\n<ul>\n<li>only the right people get access<\/li>\n<li><span>connections are secured<\/span><\/li>\n<li><span>we log admin activity<\/span><\/li>\n<li>we maintain backups and recovery procedures<\/li>\n<li>if something goes wrong, we act quickly and transparently<\/li>\n<\/ul>\n<p><strong>How we handle privacy:<\/strong><\/p>\n<ul>\n<li>we process data only on behalf of organisations<\/li>\n<li>we don\u2019t sell data, and we don\u2019t use it for advertising<\/li>\n<li>we help organisations explain surveys clearly to employees<\/li>\n<li>we protect anonymity by limiting reporting and filtering<\/li>\n<\/ul>\n<p><strong>What we never do:<\/strong><\/p>\n<ul>\n<li><span>Sell your data<\/span><\/li>\n<li><span>Use survey answers for ads<\/span><\/li>\n<li>Let managers see \u201cwho said what\u201d<\/li>\n<li>Show results that could identify someone<\/li>\n<\/ul>\n<\/div><\/div>\n\n<div class=\"et_pb_module et_pb_button_module_wrapper et_pb_button_1_wrapper preset--group--divi-button--divi-button--h1c8vfa--is90apskko_wrapper\"><a class=\"et_pb_button_1 et_pb_button et_pb_bg_layout_light et_pb_module et_flex_module preset--group--divi-button--divi-button--h1c8vfa--is90apskko\" href=\"\/privacy-policy\" data-icon=\"&amp;\">Read pricavy policy<\/a><\/div>\n\n<div class=\"et_pb_heading_4 et_pb_heading et_pb_module et_flex_module preset--group--divi-heading--divi-font--hp5h6dj--n07smfytgp\"><div class=\"et_pb_heading_container\"><h3 class=\"et_pb_module_header\">Code of Conduct (Privacy & Data Protection)<\/h3><\/div><\/div>\n\n<div class=\"et_pb_text_2 et_pb_text et_pb_bg_layout_light et_pb_module et_flex_module preset--group--divi-text--divi-font-body--h1yjkjr--o5vas4ebai\"><div class=\"et_pb_text_inner\"><p>The General Data Protection Regulation (GDPR) is the primary privacy law. This Code of Conduct describes the behavioural rules and minimum standards for all individuals working on behalf of Mijn HR Held BV | ELLA HR (including external developers and designers) who have direct or indirect access to personal data and\/or confidential information. Its purpose is to ensure that Mijn HR Held BV | ELLA HR processes personal data in accordance with the GDPR and applies appropriate security measures aligned with industry standards.<\/p>\n<ol>\n<li><strong> Purpose &amp; Scope<\/strong><\/li>\n<\/ol>\n<p>Mijn HR Held BV and ELLA HR process personal data solely to support clients with interim HR assignments, HR advisory projects, HR Support subscriptions, and through the ELLA HR dashboard for employee engagement surveys, pulse surveys, and culture assessments. Everyone working for Mijn HR Held or with the ELLA HR dashboard adheres to this Code.<\/p>\n<p>This document explains what this means in practice and how we apply these principles.<\/p>\n<ol start=\"2\">\n<li><strong> Core Principles (GDPR Art. 5)<\/strong><\/li>\n<\/ol>\n<p>The core principles are the seven foundational GDPR principles. They form the heart of our compliance and are the basis of everything we do.<\/p>\n<p><span><strong>Lawfulness, fairness and transparency<\/strong><\/span><span> We process personal data only when there is a valid legal basis.<\/span><\/p>\n<p><span><strong>Purpose limitation<\/strong><\/span><span> Data is used only for clear, predefined purposes.<\/span><\/p>\n<p><span><strong>Data minimisation<\/strong><\/span><span> We collect and store only the data we truly need. Less is more.<\/span><\/p>\n<p><span><strong>Accuracy<\/strong><\/span><span> Personnel data must be correct and up to date.<\/span><\/p>\n<p><span><strong>Storage limitation<\/strong><\/span><span> Data is not kept indefinitely. Retention periods are agreed in advance, after which data is deleted or anonymised.<\/span><\/p>\n<p><span><strong>Accountability<\/strong><\/span><\/p>\n<p><span><strong>Integrity and confidentiality<\/strong><\/span><span> We ensure strong protection against cyberattacks and handle client data with integrity. Because confidentiality and integrity are core values, we work with tiensecurity.nl (Information Security &amp; Certifications \u2013 Tien Security).<\/span><\/p>\n<p>Tien Security demonstrates that they:<\/p>\n<ul>\n<li>work according to defined procedures (structure, periodic ISMS meetings, regular risk analyses)<\/li>\n<li>continuously improve organisational and security processes<\/li>\n<li>anticipate external threats and keep information security up to date<\/li>\n<li>regularly monitor and evaluate security measures in line with ISO27001<\/li>\n<\/ul>\n<p>Within Mijn HR Held BV and the ELLA HR dashboard, we use MFA (multi\u2011factor authentication). The ELLA HR dashboard also includes login and audit trails. Later in this document, you will find our incident response plan (what we do in case of a data breach).<\/p>\n<ol start=\"3\">\n<li><strong> Roles and Responsibilities<\/strong><\/li>\n<\/ol>\n<p><span><strong>3.a.<\/strong><\/span><span> Mijn HR Held BV | ELLA HR typically qualifies as a processor when delivering HR services and the ELLA HR dashboard to clients. The client usually qualifies as the controller. <strong>3.b.<\/strong> Mijn HR Held | ELLA HR processes personal data only based on documented instructions from the client, unless legal obligations require otherwise. <strong>3.c.<\/strong> All team members are responsible for complying with this Code and for immediately reporting incidents, potential data breaches, or compliance risks.<\/span><\/p>\n<ol start=\"4\">\n<li><strong> Confidentiality &amp; Access Management<\/strong><\/li>\n<\/ol>\n<p><span><strong>4.a.<\/strong><\/span><span> Access to systems and data is role\u2011based and limited to what is necessary (\u201cleast privilege\u201d). <strong>4.b.<\/strong> Login credentials are strictly personal and may not be shared. <strong>4.c.<\/strong> Administrative access is protected with multi\u2011factor authentication (MFA) where possible. <strong>4.d.<\/strong> Access to production environments is logged and periodically reviewed.<\/span><\/p>\n<ol start=\"5\">\n<li><strong> Data Minimisation &amp; Data Quality<\/strong><\/li>\n<\/ol>\n<p><span><strong>5.a.<\/strong><\/span><span> The ELLA HR dashboard collects and processes only the personal data necessary for:<\/span><\/p>\n<ul>\n<li><span>distributing surveys<\/span><\/li>\n<li>analysis and reporting at aggregated level<\/li>\n<li>(optional) improving services based on anonymised or aggregated insights<\/li>\n<\/ul>\n<p><span><strong>5.b.<\/strong><\/span><span> Personal data in the dashboard is anonymised and non\u2011identifiable. <strong>5.c.<\/strong> Mijn HR Held BV | ELLA HR supports clients in keeping team structures and personnel lists up to date to prevent incorrect or identifiable reporting.<\/span><\/p>\n<ol start=\"6\">\n<li><strong> Anonymity &amp; Reporting Protection<\/strong><\/li>\n<\/ol>\n<p><span><strong>6.a.<\/strong><\/span><span> The ELLA HR dashboard applies minimum group sizes (e.g., n\u22655 or n\u22657) for reporting. <strong>6.b.<\/strong> ELLA HR prevents re\u2011identification through suppression and aggregation rules. <strong>6.c.<\/strong> Open text fields are designed to minimise the risk of sharing personal data (e.g., warnings, filtering, or summarisation).<\/span><\/p>\n<ol start=\"7\">\n<li><strong> Retention &amp; Deletion<\/strong><\/li>\n<\/ol>\n<p><span><strong>7.a.<\/strong><\/span><span> Retention periods are defined and documented for all data categories. If clients wish to run a follow\u2011up survey the next year for comparison, this is agreed in advance. <strong>7.b.<\/strong> Personal data is not kept longer than necessary or is anonymised in time. <strong>7.c.<\/strong> Deletion and export occur based on client instructions, according to agreed timelines and SLAs.<\/span><\/p>\n<ol start=\"8\">\n<li><strong> Security (Integrity &amp; Confidentiality)<\/strong><\/li>\n<\/ol>\n<p><span><strong>8.a.<\/strong><\/span><span> ELLA HR applies appropriate technical and organisational measures, including:<\/span><\/p>\n<ul>\n<li>encryption in transit and, where appropriate, at rest<\/li>\n<li><span>secure development practices<\/span><\/li>\n<li><span>monitoring, logging, and backup policies<\/span><\/li>\n<li><span>vulnerability management and patching<\/span><\/li>\n<\/ul>\n<p><span><strong>8.b.<\/strong><\/span><span> Mijn HR Held | ELLA HR documents security measures and reviews them periodically.<\/p>\n<p><\/span><\/p>\n<ol start=\"9\">\n<li><strong> Incidents &amp; Data Breaches<\/strong><\/li>\n<\/ol>\n<p>Any suspected incident or data breach must be reported internally immediately via privacy@ellahr.com. It is also reported within 72 hours to the relevant supervisory authority. Mijn HR Held BV | ELLA HR investigates incidents, takes mitigating actions, and informs the client in line with contractual agreements. All incidents are documented.<\/p>\n<p><strong>Rights of Data Subjects (DSAR)<\/strong><\/p>\n<p>Mijn HR Held | ELLA HR supports clients with data subject requests (access, deletion, etc.) insofar as this fits the processor role. Requests are forwarded to the client as controller unless agreed otherwise.<\/p>\n<p><strong>Sub\u2011processors &amp; International Transfers<\/strong><\/p>\n<p>Mijn HR Held BV | ELLA HR uses only sub\u2011processors with appropriate contractual safeguards. If data is transferred outside the EEA, appropriate mechanisms (such as SCCs) are applied and documented.<\/p>\n<p>&nbsp;<\/p>\n<\/div><\/div>\n<\/div>\n<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-469367","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.ellahr.com\/nl\/wp-json\/wp\/v2\/pages\/469367","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ellahr.com\/nl\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.ellahr.com\/nl\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.ellahr.com\/nl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ellahr.com\/nl\/wp-json\/wp\/v2\/comments?post=469367"}],"version-history":[{"count":7,"href":"https:\/\/www.ellahr.com\/nl\/wp-json\/wp\/v2\/pages\/469367\/revisions"}],"predecessor-version":[{"id":471309,"href":"https:\/\/www.ellahr.com\/nl\/wp-json\/wp\/v2\/pages\/469367\/revisions\/471309"}],"wp:attachment":[{"href":"https:\/\/www.ellahr.com\/nl\/wp-json\/wp\/v2\/media?parent=469367"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}