PRIVACY STATEMENT

Art. 1 Privacy rules

In order to protect privacy, the General Data Protection Regulation of 27 April 2016 (= GDPR, applicable from 25 May 2018) imposes strict rules and conditions on companies and traders when processing personal data.

By means of this privacy agreement, we want to provide you with clear and accurate information about the processing of your personal data.

Art. 2 The data controller

The "data controller" of your personal data is the controller of the website you have used, and through which you have provided personal data.

Art. 3 Legal basis for data processing

We can only process your personal data for legitimate and necessary purposes (Article 6 of the GDPR):
This means that we process your personal data, either electronically or otherwise, for legitimate contractual, business and security/protection purposes. These purposes include, but are not limited to, the following:

• Requests for information, offers and prospects;
• Communications in the context of the execution of the contract;

Art. 4 What is personal data

Personal data means all information relating to you, on the basis of which you can be identified. Anonymous data from which a person cannot be identified is therefore not considered as personal data. Among other things, your personal data can include:

• Data relating to your identity (name, first name, address, VAT number, company number, etc.);
• Personal status data (telephone number, personal email, etc.);
• Financial data (bank account number, invoicing data, etc.);
• Data relating to the implementation of a contract (object of the contract, billing address, professional data, etc.);
• Data relating to the use of electronic equipment, such as computers (password, login data, electronic identification data, billing data, etc.);

Sensitive data:

The processing of personal data that reveals racial or ethnic origin, political opinions or religious or philosophical beliefs, as well as the processing of genetic data or biometric data for the purpose of identifying a natural person as such, or data regarding the sexual orientation or sexual life of a natural person, is prohibited. We undertake to strictly comply with this prohibition.

• How do we use your data?
• With whom do we share your data?

Art. 5 Sources and origin of personal data

In all likelihood, the initial data came from you. If you do not intend to provide the required or necessary information, you may lose certain benefits and/or we may decide to discontinue our services.

Art. 6 Access to personal data

Your personal data is normally only intended for internal purposes. For certain legitimate reasons, your personal data may be provided to and by third parties, or even be processed. We will ensure that our subcontractors comply with GDPR regulations. The data processing by the latter is subject to a strict legal framework.

Art. 7 Retention period of the data

We use the necessary resources to ensure that the personal data is only retained for the purposes described above and that it does not exceed the legal periods.

Art. 8 What are your rights?

We undertake to take the appropriate technical and organisational measures to ensure the security of the processing of personal data of everyone (Art. 32 of the General Data Protection Regulation, GDPR).

• Right to access (Art. 15 of the GDPR)

We grant the right of access to your own personal data and the right to obtain or make a copy of it insofar as this is reasonable.

• Right to rectification (Art. 16 of the GDPR)

We grant the option to request the correction of any incorrect data and to request that it be completed as it should be. We will communicate the changes to the party concerned.

• Right to be forgotten (Art. 17 of the GDPR) and the right to restriction of processing (Art. 18 of the GDPR)

In particular, we undertake to allow the deletion of personal data in the following cases:

• Data that is no longer necessary for the purposes for which it was collected or processed
• If you make an objection to the processing
• If the personal data has been processed unlawfully
• Right to lodge a complaint (Art. 77 of the GDPR)

The customer has the right to file a complaint with the Privacy Commission at any time if he/she believes that the processing of his/her personal data constitutes a violation of the GDPR.

Art. 9. What is our commitment

Our aim is to implement security techniques to protect the stored data against unauthorised access, inappropriate use, modification, unlawful or accidental destruction and accidental loss.

Art. 10. Procedure in case of infringements

It is always possible that the personal data being processed could fall into the wrong hands due to human error, computer errors, etc.
If the infringement poses a high risk to the rights and freedoms of the person, we will immediately inform the affected persons of the facts and the measures taken. We will ensure that the necessary steps are taken to notify the Privacy Commission of the infringement in question within 72 hours of becoming aware of it, unless the infringement does not pose a high risk to the rights and freedoms of the person. (Art. 32-34 of the GDPR)

Art. 11. Consent

You must give your explicit, informed and unambiguous consent to the processing of personal data as described in this Privacy Statement. You have the right to withdraw your consent at any time upon simple written request. We reserve the right to change this Privacy Statement.