Please read the following carefully.
- Personal data: any information on the basis of which a natural person can be identified or identifiable (e.g. first and last name, e-mail address, postal address, mobile phone number, ...).
- Processing: any operation performed on personal data (collection, recording, storage, destruction, modification, updating, ...).
- A controller: the natural or legal person determining the means and purposes of the processing of personal data.
- A processor: the natural or legal person who processes personal data on behalf of the controller.
II. Our company
Our Institute is named as follows: Instituut voor de autoCar en de autoBus – Institut pour l’autoCar et l’autoBus.
Our Institute is registered at the CBE under the number 0445.494.076.
Its head office is located at Metrologielaan 8 – 1130 Brussels, Belgium.
III. Our data controller
The controller of the personal data is our Institute (I.C.B. – Instituut voor de autoCar en de autoBus).
If you have any questions about data protection, please contact Mrs. Laure-Anne Gultens (firstname.lastname@example.org).
As data controller, our Institute is obliged to comply with the legal requirements regarding data processing for purposes that it determines itself. It is responsible for the processing of personal data, in particular that of its partners and any other interested persons.
When we act as a processor, we act under the instructions of the controller who entrusted us with the data.
IV. Data we collect
In order to identify you, contact you and serve you efficiently, we collect the following data:
- First name
- E-mail address
- Job title
- Postal address
- Name of the organization
- Telephone number
The user provides this information with full knowledge, in particular when she/he enters it herself/himself. We also use public data (e.g. data relating to the directors of a company) or data collected from third parties. You may also have publicly disclosed certain information (e.g. on social networks).
All personal data collected is kept for a limited period of time, never longer than necessary for the purpose of the processing, except where applicable law requires a longer retention period.
We collect your data through:
- Forms filled out online
- Subscription to our newsletter
- Contacts you make with our Institute
- Public data or data collected from third parties
V. Legal basis and purposes of the processing
Our Institute must be able to function as a company and carry out its various missions. To this end, we use your data to improve the services we offer. The processing of your personal data is necessary to achieve this interest. At all times, our Institute ensures that a proportionate balance is struck between its legitimate interest and the privacy of the persons concerned.
In this context, we collect your data for the following purposes:
- Communication and information
- Organization of our services
- Improvement of our services
- Management of our website
VI. Our subcontractors and suppliers
For the execution of a certain number of operations we call upon :
- either to suppliers
- or to subcontractors.
We ensure that we work only with reliable partners and suppliers who offer a sufficient degree of security to safeguard our data and those of our clients.
Your data is stored:
- on our servers
VII. Rights of the data subjects
The GDPR provides for the following rights:
1) Right to access one’s own data
You have the right to request access to your personal data that we process. If you exercise this right of access, we will try to provide you with an overview of your data, as complete as possible, free of charge. However, some data may have been deleted from our files. Similarly, some data stored on backup equipment may not be able to be restored over time.
2) Right to rectification
If your data is incorrect or incomplete, you can ask us to correct or complete it (free of charge).
3) Right to restriction of processing
In cases provided for in the Regulation (for example, if you contest the accuracy of your personal data), you may ask us to restrict the processing of your data.
4) Right to erasure of data
In the cases provided for in the Regulation (for example, if you consider that your data has been unlawfully processed), you have the right to request that your data be deleted.
5) Right to object
You have the right to object to the processing of your personal data on grounds relating to your particular situation.
6) Right to lodge a complaint
You have the right to lodge a complaint with the Data Protection Authority: Rue de la Presse 35, 1000 Brussels, Tel +32 (0)2 274 48 00, Fax +32 (0)274 48 35, e-mail: email@example.com.
To exercise these various rights, please be specific in the request you make and provide proof of your identity.
Do you have any questions or remarks about the processing of your data? You can contact the contact person mentioned in point III.
VIII. Security of your data
We take care to protect and secure the data you have chosen to share with us. We strive to ensure that your data remains confidential and that it is not altered, damaged, destroyed or disclosed to unauthorised third parties.
To this end, we have taken physical protection measures as well as technical and organisational measures to prevent any loss, misuse, unauthorised access or dissemination, alteration or possible destruction of data.
All data is confidential. We have restricted access to it to our employees who need it in the course of their work. They are bound by an obligation of confidentiality and may be subject to disciplinary action in the event of non-compliance.