Privacy & Cookies
Last update 25 November 2019
We ask you to read this text carefully because it contains essential information about how your personal data are processed and for what purpose.
By providing your personal data you explicitly declare to be familiar with this Data Protection Notice and you explicitly consent to it as well as the processing itself.
02. Area of application
This Data Protection Notice concerns all services provided by us and all activities that we carry out in general.
03. Data controller
ALTEZ NV, with registered office at Szamotulystraat 5, 8700 Tielt, and with company registration number BE 0452.418.589, is the data controller for your personal data.
With the collection and processing of your personal data we comply with the Belgian regulations relating to the protection of personal data, as well as the General Data Protection Regulation (“or the GDPR”) since its coming into force on 25 May 2018.
04. Personal data
We would kindly inform you that you bear responsibility for all data that you provide to us and that we trust in the correctness of the data. Should your data no longer be up to date, we request you to mention this by return.
You are not bound to share your personal data, but understand that the provision of certain services or cooperation become impossible if you do not consent to the collection and processing of the data.
05. Processing purposes and legal grounds
Within the context of our service and our activities we collect and process the identity and contact details of our customers and clients, their personnel, employees, appointed parties and other useful contact persons. The purposes of this processing are carrying out the agreements with our customers, customer management, accountancy and direct marketing such as sending promotional or commercial information. The legal grounds are the carrying out of the agreement, the fulfilment of legal and regulatory obligations (such as the 30bis declaration of work) and/or our legitimate interest. Permission will always be requested for direct marketing by email (such as a newsletter or invitation to events) that can also be cancelled at any time.
5.2 Data from suppliers and subcontractors
We collect and process the identity and contact details of our suppliers and subcontractors, as well as any of their (sub)contractor(s), their personnel, employees, appointed parties and other useful contact persons. The purposes of this processing are the carrying out of this agreement, the management of customers/subcontractors and accounting purposes. The legal grounds are the carrying out of the agreement, the fulfilment of legal and regulatory obligations (such as compulsory electronic attendance registration, the 30bis declaration of works, the attendance list or other obligations with public procurements, etc.) and/or our legitimate interest (such as for direct marketing). The E-ID data or the Limosa number are also processed for electronic attendance registration if appropriate. Data on personnel.
5.3 Data on personnel
We process the personal data of our employees within the context of our personnel management and pay administration. In view of its specific nature, this processing is more comprehensively controlled under Policy Data Protection for employees.
5.4 Other data
Besides the data on customers, suppliers/subcontractors and personnel, we also process personal data on others such as potential new customers/prospects, useful contacts within our sector, network contacts, contacts of experts, etc. The purpose of this processing is the interest of our activities, direct marketing and public relations. The legal basis is our legitimate interest or in some cases the carrying out of an agreement.
06. Duration of processing
The personal data are saved and processed by us for a period that is required depending on the purposes of the processing and depending on the contractual (or not contractual) relationship we have with you.
Customer data and data on suppliers or subcontractors will in each case be deleted from our systems after a period of ten years after the termination of the agreement or project, with the exception of personal data that based on specific legislation we must save for a longer period, or in the event of an ongoing dispute for which the personal data are still required.
In conformity with and under the conditions of Belgian privacy law and the provisions of the General Data Protection Regulation, we inform you that you have the following rights:
- Right to access and view: you have the right, free of charge, to view the data that we have concerning you and know for what it is processed.
- Right to rectification: you have the right to rectify (correct) your incorrect personal data, as well as to complete incomplete personal data.
- Right to data deletion or restriction: you have the right to request us to delete your personal data or restrict its processing in the circumstances and under the conditions determined by the General Data Protection Regulation. We can refuse the deletion or restriction of any personal data that is required for us to carry out a legal obligation, to carry out the agreement or to protect our legitimate interest, and this for as long as these data are required for the purposes for which they are collected.
- Right to transferability of data: you have the right to obtain the personal data that you have provided to us in a structured, usual and machine-readable form. You have the right to transfer these data to another data controller.
- Right of objection: you have the right to object to the processing of your personal data for serious and legitimate reasons. Please take account of the fact that you cannot object to the processing of personal data that is required for us to carry out a legal obligation, to carry out the agreement or to protect our legitimate interest, and this for as long as these data are required for the purposes for which they are collected.
- Right to withdraw permission: If processing personal data is based on prior permission, you have the right to withdraw this permission. These personal data will then only be processed if we have other legal grounds for this.
- Automatic decisions and profiling: we confirm that the processing of the personal data involves no profiling and that you are not subjected to fully automated decisions.
You can exercise the abovementioned rights by approaching our privacy supervisor. The contact person for this is: Ms Katrien Janssen with contact details: privacy [at] altez.be (privacy[at]altez[dot]be).
We make every effort to process your personal data in a careful and legitimate manner in compliance with the applicable regulations. Should you nevertheless be of the opinion that your rights are being violated and you have had no satisfactory response from our company, you are free to submit a complaint to:
Belgian Privacy Commission
Frankrijkstraat 35, 1000 Brussels
Tel. 02 274 48 00
Fax. 02 274 48 35
Email: commission [at] privacycommission.be (commission[at]privacycommission[dot]be)
You can also approach a law court should you believe that you have suffered damage as a result of the processing of your personal data.
08. Transfer to third parties
Certain personal data collected by us will be passed onto and possibly processed by third service providers such as our IT supplier, accountant or auditor as well as the authorities (for example with the 30bis work declaration, electronic attendance registration or when competing for public procurements).
It is possible that one or more of the above-mentioned third parties will be located outside the European Economic Area (EEA). Personal data will, however, only be sent to third countries with a suitable level of protection.
The employees, managers and/or representatives of the abovementioned service providers or bodies, and the specialised service providers appointed by them, must respect the confidential nature of your personal data and these data can only be used for the purposes for which they were provided.
If necessary your personal data can be passed onto other third parties. This can, for example, be the case when we would be wholly or partly reorganised, our activities would be transferred, or should we be declared bankrupt. It is also possible that personal data must be passed on as a result of a legal order or to suffice with regard to a certain legal obligation. In that case we will make reasonable efforts to inform you beforehand of this sharing with other third parties. You will however acknowledge and understand that this will not always be technically or commercially feasible in certain circumstances, or it is possible that legal restrictions may apply.
We will under no circumstances sell your personal data or make them commercially available to direct marketing organisations or similar service providers without your prior permission.
09. Technical and organisational measures
We take the necessary technical and organisational measures to process your personal data according to an adequate security level and to protect the data against destruction, loss, forgery, changes, unpermitted access or notification by error to third parties, as well as any other form of unpermitted processing of these data.
Under no circumstances can ALTEZ nv be held liable for any direct or indirect damage resulting from incorrect or wrongful use of the personal data by a third party.
10. Access by third parties
With a view to processing your personal data, we give access to your personal data to our employees, colleagues and appointed parties. We guarantee an equivalent level of protection by making contractual obligations applicable to these employees, colleagues and appointed parties that are equivalent to this Data Protection Notice.
11. Do you still have any questions?
Should after reading this Data Protection Notice you have any further questions or comments with respect to the collection and processing of your personal data, you can contact Ms Katrien Janssen, either by postal mail p/a Weg op Bree 125, 3670 Oudsbergen or by email at privacy [at] altez.be (privacy[at]altez[dot]be)