Privacy Policy
1. Introduction
In particular we want to protect the data of our clients, subcontractors and suppliers against among others loss, leaks, wrong data, unjust access or unlawful processing.
By means of this Data Protection Notice we want to inform you on the collection and processing of your personal data.
We kindly ask you to carefully read this Data Protection Notice, since it contains essential information on how and why we process your personal data.
By communicating your personal data you explicitly declare to have taken note of this Data Protection Notice and you explicitly agree with it, as well as with the processing itself. In particular we want to protect the data of our clients, subcontractors and suppliers against among others loss, leaks, wrong data, unjust access or unlawful processing.
By means of this Data Protection Notice we want to inform you on the collection and processing of your personal data.
We kindly ask you to carefully read this Data Protection Notice, since it contains essential information on how and why we process your personal data.
By communicating your personal data you explicitly declare to have taken note of this Data Protection Notice and you explicitly agree with it, as well as with the processing itself.
2. Scoope
This Data Protection Notice refers to all services provided by us and in general on all activities that we perform.
3. The controller and its commitments
Van Maercke Prefab NV, with its registered office in Kluisbergen and company number BE 0405.100.407, is the controller of your personal data.
During the collection and processing of your personal data we respect the Belgian legislation on the protection of personal data, as well as the General Data Protection Regulation (“GPDR”) from its entry into force the 25th of May 2018.
4. Personal data
We inform you kindly that you are responsible for all the data you share with us and that we trust the correctness of it. If your data would not be up-to-date anymore, we kindly ask you to inform us on that matter.
You are not obligated to share your personal data with us, but you understand that providing certain services or cooperating becomes impossible if you do not agree with the collection and processing of your data.
5. Processing purposes and legal basis
In the context of our services and activities we collect and process the identity and contact data of our clients, their staff and employees, appointees and other useful contacts. The purposes of these processing operations are the execution of the contract with our clients, the customer management, accounting and direct marketing activities like commercial or promotional information. The legal grounds are the execution of the contract, fulfilling legal and regulatory obligations (for instance the 30bis declaration of works) and our legitimate interest.
5.2. Suppliers and subcontractors data
We collect and process the identity and contact data of our suppliers and subcontractors, as well as their possible subcontractors, their staff, employees, appointees and other useful contacts. The purposes of these processing operations are the execution of this contract, the supplier and subcontractor management, accounting and direct marketing activities as sending promotional or commercial information. The legal grounds are the execution of the contract, fulfilling legal and regulatory obligations (like for instance electronic attendance registration, 30bis declaration of works, the attendance list or other obligations in public procurement) and our legitimate interest (for direct marketing for instance). For the electronic attendance registration if appropriate the e-ID data or Limo number are processed. By agreeing with this policy notice you also agree with our direct marketing activities by email (a newsletter or event invitation for example). At any time you are able to withdraw this agreement.
5.3. Staff data
We process the personal data of our employees in the context of personnel management and payroll administration. Considering the specific nature, this processing operation is arranged in more detail in a policy data protection for employees.
5.4. Other data
Besides data of clients, suppliers, subcontractors and employees we also process personal data of others, like possible new clients/prospects, useful contacts within our sector, network contacts, contacts of experts and so on. The purposes of these processing operations are in the interest of our activities, direct marketing and public relations. The legal basis is our legitimate interest or in certain cases the execution of a contract.
6. Duration of processing
The personal data will be saved and processed by us for a period that is necessary in function of the purposes of the processing and in function of the (whether or not contractual) relationship we have with you.
Data of clients, suppliers or subcontractors will in any case be deleted out of our system after a term of ten years after termination of the agreement or project, except for personal data that we have to collect on grounds of specific legislation or in case of an ongoing dispute that requires personal data.
7. Rights
In accordance and under the conditions of the Belgian privacy legislation and the provisions of the General Data Protection Regulation we inform you that you have the following rights:
Right of access and inspection: you have the right to take note of the data that we collect about you, free of charge, and to see what they are used for.
Right to rectification: you have the right to obtain rectification of your incorrect personal data, as well as to complete incomplete personal data.
Right of erasure or restriction: you have the right to request us to delete your personal data or to restrict the processing of it under the circumstances and conditions as determined by the General Data Protection Regulation. We can refuse the erasure or restriction of data use of data that is necessary for us to execute a legal obligation, the execution of an agreement or our legitimate interest, for as long as necessary for the purposes that the data was collected.
Right of transferability of data: you have the right to obtain the personal data that you have provided us with in a structured, common form. You have the right to transfer this data to another processing controller.
Right to objection: you have the right to object the processing of your personal data due to serious legitimate reasons. Please note that you can not resist the processing of personal data that is necessary for us to execute legal obligations, the execution of an agreement or our legitimate interest, for as long as this data is necessary for the purposes that they were collected for.
Right of withdrawal of consent: If the processing of the personal data is based on the prior consent, you are entitled to withdraw this consent. These personal data will then only be processed if we possess another legal basis.
You can exercise the aforementioned rights by recourse to Stadsbader. You can contact us via: GDPR@stadsbader.com.
We make every effort to handle your personal data with care and in a legitimate way in accordance with applicable regulations. If, nevertheless, you are of the opinion that your rights would have been violated and you would not find a response within our company, you are free to file a complaint with:
Commission for the protection of privacy
Drukpersstraat 35, 1000 Brussel
Tel. 02 274 48 00
Fax. 02 274 48 35
E-mail: commission@privacycommission.be
You can also address a court if you believe that you would suffer damage as a result of the processing of your personal data.
8. Transfer to third parties
Certain personal data collected by us, will be transferred to and possibly processed by third service providers, as our IT-supplier, accountant, reviewer, as well as the government (for instance for the 30bis declaration of works, the electronic attendances register or competing for public contracts).
Possibly one or more of those third parties are located outside of the European Economic Area (“EEA”). However personal data will only be transferred to third countries with an appropriate level of protection.
The employees, managers and representatives of the above mentioned service providers and institutions and the specialized service providers appointed by them, must respect the confidential nature of your personal data and can only use this data for the purposes that they were provided for.
If necessary your personal data can be transferred to other third parties. This can be the case when we would be entirely or partially reorganized, when our activities would be transferred or if we would be declared bankrupt. It is also possible that personal data has to be transferred pursuant to a court order or to comply with a specific legal obligation. In that case we will make reasonable efforts to inform you in advance about this communication to other third parties. You will however acknowledge and understand that in certain circumstances this is not technically or commercially achievable or that legal restrictions may apply.
Under no circumstances will we sell your personal data to direct marketing agencies or similar service providers, unless with your prior consent.
9. Technical or organizational measures
We take the necessary technical and organizational measures to process your personal data according to an adequate safety level and to protect this data against destruction, loss, falsification, change, unauthorized access or notification by mistake to third parties as well as every other unauthorized processing of your personal data.
By no means Stadsbader NV can be considered liable for any direct or indirect damage that results from a false or unlawful use of the data by a third party.
10. Access by third parties
In view of the processing of your personal data, we grant access to your personal data to our employees, staff members and appointees. We guarantee a similar level of protection by opposing contractual obligations to our employees, staff members and appointees, that are similar to this Data Protection Notice.
11. Any other questions?
If after reading this Data Protection Notice you have further questions or comments considering the collection and processing of your personal data, you can contact us by mail to Kanaalstraat 1, 8530 Harelbeke or by e-mail to GDPR@stadsbader.com.