DATA PROTECTION NOTICE VERBATEX N.V.
Verbatex N.V. with its registered office in 8501 Heule and registered with the Crossroads Bank for Enterprises under enterprise number BE0460.925.885 attaches great importance to the safe, transparent and confidential collection and processing of your personal data. In particular, we want to protect the data of our customers, subcontractors and suppliers against, loss, leaks, errors, unauthorized access or unlawful processing. We would like to inform you about the collection and processing of your personal data through this Data Protection Notice. We ask that you read this Data Protection Notice carefully as it contains essential information about how your personal data is processed and for what purpose. By submitting your personal data, you expressly declare that you have read this Data Protection Notice and that you agree to it and to the processing of your personal data.
1. SCOPE OF APPLICATION
This Data Protection Notice relates to all services provided by us and in general to all activities we carry out.
2. DATA CONTROLLER AND ITS COMMITMENTS
Verbatex N.V. with its registered office at 8501 Heule and with company number BE0460.925.885 is the data controller of your personal data. When collecting and processing your personal data, we respect the Belgian regulations on the protection of personal data, as well as the General Data Protection Regulation ("GDPR") as of its entry into force on May 25, 2018.
3. PERSONAL DATA
According to your activities and your relationship to our company, you provide us with the following personal data: your identity and contact details (name, title of address, address, email address, phone and mobile number). We kindly point out that you are responsible for all data you provide us with and that we rely on its accuracy. If your data is no longer up-to-date, please inform us. You are not obliged to communicate your personal data, but you understand that the provision of certain services or cooperation becomes impossible if you do not consent to their collection and processing.
4. PROCESSING PURPOSES AND LEGAL BASIS
4.1 CUSTOMER DATA
As part of our services and our activities, we collect and process the identity and contact details of our customers and clients, their staff, employees, appointees and other useful contacts. The purposes for these processing operations are the execution of the agreements with our customers, customer management, accounting and direct marketing activities such as sending promotional or commercial information. The legal grounds are the execution of the agreement, the fulfillment of legal and regulatory obligations (such as, for example, the 30bis declaration of works) and/or our legitimate interest.
4.2 DATA FROM SUPPLIERS AND SUBCONTRACTORS
We collect and process the identity and contact details of our suppliers and subcontractors, as well as their (sub)subcontractor(s), if any, their staff, employees, appointees and other useful contacts. The purposes of these processing operations are the execution of this agreement, the management of the suppliers/subcontractors, accounting and direct marketing activities such as sending promotional or commercial information. The legal grounds are the execution of the agreement, the fulfillment of legal and regulatory obligations and/or our legitimate interest (such as for direct marketing). For direct marketing activities by e-mail (such as a newsletter or invitation to events), consent will always be requested and can also be withdrawn at any time.
4.3 STAFF DATA
We process the personal data of our employees in the context of our personnel management and payroll administration.
4.4 OTHER DATA
In addition to the data of customers, suppliers/subcontractors and personnel, we also process personal data of others, such as possible new customers/prospects, useful contacts within our sector, network contacts, expert contacts, etc. The purposes of these processing operations are in the interest of our business activities, direct marketing and public relations. The legal basis is our legitimate interest or in some cases the execution of a contract.
5. DURATION OF PROCESSING
Personal data will be retained and processed by us for a period of time that is necessary in relation to the purposes of the processing and in function of the relationship (contractual or otherwise) that we have with you. Customer data and data of suppliers or subcontractors will in any case be deleted from our systems after a period of 10 years after the termination of the contract or project, except with regard to these personal data that we must keep longer on the basis of specific legislation or in case of an ongoing dispute for which the personal data are still necessary.
In accordance with and subject to the terms of Belgian privacy legislation and the provisions of the General Data Protection Regulation, we inform you that you have the following rights
- Right of access and inspection: you have the right to acquaint yourself, free of charge, with the data we hold about you and to verify what it is used for.
- Right to rectification: you have the right to obtain rectification (correction) of your inaccurate personal data, as well as to complete incomplete personal data.
- Right to data erasure or restriction: you have the right to request us to erase your personal data or to restrict its processing in the circumstances and under the conditions defined by the General Data Protection Regulation. We may refuse the data erasure or restriction of any personal data that is necessary for us to carry out a legal obligation, the performance of the contract or our legitimate interest, and this as long as this data is necessary for the purposes for which it was collected.
- Right to data portability: you have the right to obtain the personal data you have provided to us in a structured, common and machine-readable form. You have the right to transfer this data to another data controller.
- Right to object: you have the right to object to the processing of your personal data for serious and legitimate reasons. However, please note that you cannot object to the processing of personal data that is necessary for us to carry out a legal obligation, the performance of the contract or our legitimate interest, and this as long as this data is necessary for the purposes for which it was collected.
- Right of withdrawal of consent: If the processing of personal data is based on prior consent, you have the right to withdraw this consent. These personal data will then only be processed if we have another legal basis for doing so.
- Automatic decisions and profiling: we confirm that the processing of personal data does not include profiling and that you are not subject to fully automated decisions.
You can exercise the mentioned rights by contacting the Managing Director of Verbatex S.A. at email@example.com
We make every effort to handle your personal data in a careful and legitimate manner in accordance with the applicable regulations. If, nevertheless, you believe that your rights have been violated and your concerns have not been addressed within our company, you are free to lodge a complaint with:
Commission for the Protection of Privacy
Drukpersstraat 35, 1000 Brussel
Tel. 02 274 48 00
Fax. 02 274 48 35
You can additionally turn to a court if you believe that you would suffer damage as a result of the processing of your personal data.
7. TRANSFER TO THIRD PARTIES
Certain personal data collected by us will be passed on to and possibly processed by third party service providers, such as our IT supplier, accountant, .....
It is possible that one or more of the above third parties are located outside the European Economic Area ("EEA"). However, personal data will only be transferred to third countries with an adequate level of protection.
The employees, managers and/or representatives of the above-mentioned service providers or institutions and the specialized service providers appointed by them must respect the confidential nature of your personal data and may use these data only for the purposes for which they were provided.
If necessary, your personal data may be passed on to other third parties. This may be the case, for example, if all or part of our business is reorganized, if our activities are transferred or if we are declared bankrupt. It is also possible that personal data may need to be transferred in response to a court order or to comply with a particular legal obligation. In such case, we will make reasonable efforts to inform you in advance of such communication to other third parties. However, you will recognize and understand that in certain circumstances this may not always be technically or commercially feasible or that legal restrictions may apply.
Under no circumstances will we sell or make your personal data commercially available to direct marketing agencies or similar service providers except with your prior consent.
8. TECHNICAL AND ORGANIZATIONAL MEASURES
We take the necessary technical and organisational measures to process your personal data at an adequate level of security and to protect them against destruction, loss, falsification, alteration, unauthorised access or notification to third parties, as well as any other unauthorised processing of these data. Under no circumstances can Verbatex S.A. be held liable for any direct or indirect damage arising from the incorrect or unlawful use by a third party of the personal data
9. ACCESS BY THIRD PARTIES
In order to process your personal data, we grant access to your personal data to our employees, collaborators and appointees. We guarantee a similar level of protection by providing contractual obligations to these employees, workers and contractors which are similar to this Data Protection Notice.
10. ANY QUESTIONS?
If after reading this Data Protection Notice you have any further questions or remarks concerning the collection and processing of your personal data, please contact Verbatex N.V. either by post at Mellestraat 196 - 8501 Heule or by email firstname.lastname@example.org