Privacy Policy

1. Definitions

• Personal data:any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
• Company: any legal entity or natural person acting in a professional capacity that enters into a commercial relationship with INFOBEL SA.
• Private individual: any natural person who is not acting in a professional capacity.
• End user: any person who accesses or uses the services and/or products provided by INFOBEL SA, whether as a company or as a private individual.

2. Why do we process your data?

We process your personal data for various purposes, each of which is justified by a legal basis under the GDPR:

• Performance of a contract: processing necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract.
• Legitimate interest: processing necessary for the purposes of the legitimate interests pursued by INFOBEL SA or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.
• Legal obligation: processing necessary for compliance with a legal obligation to which INFOBEL SA is subject.
• Consent: you have given your consent to the processing of your personal data for one or more specific purposes.

3. What data is collected and processed?

We collect and process personal data that is relevant, adequate, and limited to what is necessary in relation to the purposes for which it is processed. The categories of data collected depend on the nature of your relationship with us and the services you use. This may include identification data (name, address, email, phone number), financial data (bank account, payment details), electronic identification data (IP address, cookies), and professional data (job title, company name).

4. Is your data disclosed or shared with third parties?

Your personal data may be shared with the following categories of recipients:

• Team members: employees and collaborators of INFOBEL SA who need access to your data in the course of their duties.
• Legal authorities: when required by law or in response to valid legal process.
• Subcontractors: third-party service providers who process data on our behalf, under strict contractual obligations to ensure the protection of your data.

5. Do we transfer your data outside the European Union?

In some cases, your personal data may be transferred to countries outside the European Economic Area (EEA). Such transfers only occur when the European Commission has issued an adequacy ruling for the country in question, or when appropriate safeguards have been put in place, such as standard contractual clauses approved by the European Commission.

6. How long is your data stored?

Your personal data is stored for as long as necessary to fulfil the purposes for which it was collected. The retention period varies depending on the purpose of the processing, the nature of the data, and any applicable legal or regulatory requirements. When the data is no longer needed, it is securely deleted or anonymised.

7. What are your rights and how do you exercise them?

Under the GDPR, you have the following rights with regard to your personal data:

• Right of access: the right to obtain confirmation as to whether or not personal data concerning you is being processed, and to access that data.
• Right to a copy: the right to obtain a copy of the personal data undergoing processing.
• Right to rectification: the right to obtain the rectification of inaccurate personal data concerning you.
• Right to object: the right to object to the processing of your personal data on grounds relating to your particular situation.
• Right to restriction: the right to obtain restriction of processing in certain circumstances.
• Right to deletion: the right to obtain the erasure of personal data concerning you in certain circumstances.
• Right to data portability: the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: if you believe your rights have been infringed, you may lodge a complaint with the Data Protection Authority:
  Data Protection Authority
  Rue de la Presse 35, 1000 Brussels
  Tel: +32 2 274 48 00
  Email: contact@apd-gba.be
  Website: www.autoriteprotectiondonnees.be

8. What is the applicable law and competent jurisdiction?

This Privacy Policy is governed by Belgian law. Any dispute arising from or in connection with this Privacy Policy shall be submitted to the exclusive jurisdiction of the courts of Brussels, Belgium.