The Controller attaches great importance to your privacy and therefore processes your personal data in accordance with the European Regulation 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data (hereinafter “GDPR”) as well as any future or additional legislation in implementation thereof, as applicable.
For further questions or comments related to the way we handle your personal data, you can always contact us, either by e-mail to email@example.com or by mail to the aforementioned postal address.
Below we clarify which of your data we may process. Depending on the specific situation, your preferences and the way you contact us, we may not process all of the following data about you.
Of all our contacts, we may process the following data:
Customers and service providers/suppliers
From our customers and our service providers/suppliers in the context of our commercial activities, we may additionally process the following data:
In addition, we may process the following data on prospective employees. Of course, this will depend to a large extent on what data you yourself wish to provide us with in relation to your application.
Personal data is processed exclusively within the framework of the company and in particular for the following purposes:
We process your data only insofar as based on one of the processing grounds listed in the GDPR, and as shown below.
Certain data is processed by us to comply with legal or regulatory obligations imposed on us. For example, in the context of tax and accounting obligations, in the area of data protection, or in the area of environmental or environmental law obligations.
Necessary for the performance of the contract.
Certain data are processed by us because it is necessary for the conclusion, performance or termination of a contract with you as a data subject. For example, for contacting, scheduling, responding to a request or requesting information within the framework of entering into a contractual relationship, as well as the effective performance of the contractual assignment within the framework of our main activity, in order to provide you with our services or receive them from you.
Certain data are processed by us based on our legitimate interest which in specific cases outweighs any possible prejudice to your rights. For example, for promoting our activities to business contacts; improving the quality of our services; training employees and evaluating and maintaining data and statistics related to our activities, in the broad sense; preserving and using evidence in the context of liability, litigation or disputes and for the purpose of archiving activities; and ensuring security, both online on this website and on our premises.
Certain data are processed by us based on your consent. For example, for promoting activities to potential business contacts; using certain analytical or marketing cookies; posting photos containing personal data on our website and social media channels. Data of job applicants after the recruitment process will be kept only with permission.
We also obtain most of the data we process from you directly. Within the scope of our services, we may obtain data from you through external service providers or public sources.
We do not pass on your data to third parties, except when strictly necessary in the light of the above-mentioned purposes, or if we are required to do so by law.
Where necessary, we use external service providers (processors) to support our operational purposes such as the management of our websites and IT systems. Where appropriate, these external service providers carry out certain data processing operations on our behalf. We will only share your data with these external service providers to the extent necessary for the relevant purpose. The data may not be used by them for other purposes. Moreover, these service providers are contractually bound to ensure the confidentiality of your data by means of a “processing agreement” concluded with these parties.
Specifically, to the extent relevant in your situation, we share your data with the following third parties for the following purposes, with these third parties in certain cases acting as processors on our behalf:
Postal companies, transport and delivery companies if we need to send you something by mail;
We retain your data for no longer than is necessary for the purpose for which the data was collected or is being processed. Since the period for which the data can be kept depends on the purposes for which the data was collected, the storage period may vary in each situation. Sometimes specific legislation will require us to keep the data for a certain period of time. Our retention periods are always based on legal requirements and a balancing of your rights and expectations with what is useful and necessary to fulfill the purposes. At the end of the retention period, your data will be deleted or anonymized.
We provide appropriate technical and organizational security measures to prevent, within the scope of our activities, the destruction, loss, falsification, alteration, unauthorized access or unauthorized disclosure to third parties, as well as any other unauthorized processing of this data.
In addition, we also take care to ensure that the processors we rely on also implement appropriate security measures to minimize risks of incidents.
If, when using specific services or software tools, your data are processed outside the European Economic Area (EEA), this will only be done in/to countries that have been confirmed by the European Commission to ensure an adequate level of protection of your data, or measures will be taken to ensure the lawful processing of your data in these third countries.
Right of access and copy
You have the right to inspect your data and obtain a copy thereof. This right also includes the possibility of requesting further information about the processing of your data, including the categories of data processed about you and for what purposes.
Right of adaptation or rectification
You have the right to have your data amended if you believe we have incorrect data.
Right of data erasure (right to oblivion).
You have the right to request that we delete your data without unreasonable delay. However, we will not always be able to comply with such a request, inter alia when we still need the data in function of an ongoing contract, or when keeping certain of your data for a certain period of time is required by law.
Right to restriction of processing
You have the right to restrict the processing of your data. In this way, the processing is temporarily stopped until, for example, there is certainty about its accuracy.
Right to withdraw your consent.
If the processing is based on your consent, you have the right to withdraw this consent at any time by contacting us. For marketing messages you receive from us via e-mail based on your consent, you can easily withdraw this consent by clicking on the unsubscribe link at the bottom of such message.
Right of objection
You have the right to object to the processing of your data based on legitimate interest. This should be based on reasons specific to your situation. You may also object to the use of your data for direct marketing purposes. For marketing messages by e-mail, an opt-out will always be provided.
Right to portability
You have the right to obtain in electronic form the data you have provided to us with your consent or in execution of a contract. In this way, they can be easily transferred to another organization. You also have the right to request us to transfer your data directly to another organization, if this is technically possible.
Right to complain to your supervisory authority
Should you believe that we are processing your data in an incorrect manner, you always have the right to lodge a complaint with your data protection supervisory authority.
Belgische Gegevensbeschermingsautoriteit (GBA)
You may exercise your rights by contacting us, either by email to firstname.lastname@example.org or by mail to 9090 Melle, Kerkstraat 23, provided that you enclose a copy of the front of your identity card or other document that identifies you. The copy will only be used to identify you in accordance with the GDPR.