SECTION 1. GENERAL PROVISIONS
Your privacy and data protection are of utmost importance to Edville. Therefore we want to inform you as much as possible, respect and give you control over what happens to your personal data.
In this privacy statement, you will find this information: what data we collect, why we do it, how long we keep it, what your rights are, and also very important: how you can exercise these rights.
Edville makes every effort to keep your private data really private.
This privacy declaration applies to the personal data that we process as a controller or a processor.
This privacy declaration applies to the processing of personal data of our customers in relation to our products and services, as well as to the necessary personal data of third parties that we need to process for the execution of our agreement.
This privacy statement is applicable when you visit our offices, our website, subscribe to our newsletter, or in any other way when you make use of our products or services.
We also endeavor to process and secure the personal data of our former clients or prospects as well and as carefully as possible, in accordance with this privacy statement.
This statement is effective from 8 December 2020.
- Processing of personal data by the controller
By “processing of personal data” we mean any processing of data that can identify you as a natural person. You can read more about which data this involves in this privacy declaration.
The term ‘processing’ is very broad and covers, among other things, the collection, recording, organization, storage, updating, amendment, retrieval, consultation, use, dissemination or making available in any way, compilation, combination, archiving, erasure or (ultimately) destruction of such data.
Edville Home NV, later Edville, with its registered office at Brusselsesteenweg 167, 9090 Melle and registered with the Crossroads Bank for Enterprises under the number BTW BE 0442024644 is the party responsible for processing your data. This means that Edville determines the purpose and means of processing your data.
SECTION 2. COLLECTION OF PERSONAL DATA
- How do we collect your data?
We naturally process the personal data that you give us yourself.
You can choose to provide us with your personal data at various times and in different situations. You can provide us with your data when you want to communicate with us when you ask for information when you call us when a deed has to be drawn up.
Would you like to work for us? Then you might give us a description of your education and work experience, or when buying a house you might give us your credit card details.
In short: every time you come into contact with us.
Very often we will ask your permission to process these data, but not always. Sometimes we need to process personal data purely out of necessity for the execution of the agreement we have with each other, or sometimes we need to process personal data because of a legal obligation (e.g. anti-money laundering legislation). 2. What data do we collect from you?
We distinguish different types of personal data, which can be combined with each other:
– Personal identification data (surname, first name, postal address, e-mail address, telephone/fax number, website URL, etc.);
– Professional data (company name, head office, company / VAT number, business telephone number, professional e-mail address, website URL, position, status, name of representative);
– Financial data (bank account number, banking institution, …);
– All other data which you voluntarily communicate to us and which are necessary for the task you have entrusted to us.
SECTION 3. WHY DO WE PROCESS YOUR DATA?
- Proportionality and necessity of the processing
We process your personal data for various purposes, but in each case, we only process the data that is minimally necessary to fulfill the purpose.
For example, the processing of your personal data is necessary
– in the context of the preparation, execution, or termination of our agreement or cooperation;
– in order to comply with legal or regulatory provisions to which we are subject; and
– for the protection of our legitimate interests, in which case we will always strive to achieve a balance between that interest and respect for your privacy.
If the processing of your personal data is not necessary for one of these three reasons, we will always ask for your permission to process your data.
- For what purpose do we process your personal data?
Below we describe in as much detail as possible how Edville will use your personal data:
– For the execution of the agreement we have with each other, including newsletters, information about our services and products;
– Analysis of your surfing behavior so that we can adjust our offer of products and services to your needs.
SECTION 4. SECURITY OF YOUR PERSONAL DATA
We want to protect your personal data and maintain its accuracy. Therefore, Edville reasonably implements all physical, administrative, and technical security measures to protect your personal data from unauthorized access, unauthorized use, and unauthorized disclosure.
We also require our suppliers to protect such data from unauthorized access, unauthorized use, and unauthorized disclosure.
- Employee training
Our employees are trained to correctly handle confidential data. Every project involving the processing of personal data is first assessed in terms of security and the protection of personal data, with your interests being paramount.
Our employees are only granted access to your personal data to the extent that they need this information to properly perform their tasks.
- Technical measures
We use a variety of technical measures to protect your personal data from unauthorized access, unauthorized use, and loss or theft, including password protection, firewalls, and antivirus.
Should a data leak occur with adverse consequences for your personal data, you will be notified in the circumstances provided for by law.
SECTION 5. TRANSFER OF YOUR PERSONAL DATA
- General principles
We do not sell personal data to third parties without your consent, and we do not pass them on to third parties except
– this is necessary for our service provision. We make some of our databases accessible to third parties who work on our behalf and who assist us in providing our products and services. Examples are our commercial agents, the independent technicians who maintain our network, and the (external) customer service employees who assist our customers on a daily basis. The transfer of your data only happens for the purposes for which Edville processes your data itself and is limited to the data that they need for the execution of their task on our behalf. We ensure that they, as well as we, manage your data in a safe, respectful and prudent manner and we provide adequate contractual safeguards for this;
– there is a legal obligation;
– there is a legitimate interest for Edville or the third party involved. We will only pass on your personal data if your interest or your fundamental rights and freedoms are not overriding and you will always be informed about this transparently (except in the case of legal exceptions). For example, your personal data may be passed on to credit controllers, collection agencies, and legal service providers, as well as to partners with whom we cooperate in the context of a specific (commercial) action;
– You give us permission to do so. If Edville should pass on personal data to third parties in other situations, this is done with an explicit notification, in which an explanation is given about the third party, the purposes of the passing on, and the processing. Where legally required, we will obtain your explicit permission.
- Use of anonymous data
We use anonymous, aggregated data for commercial purposes and internal/external reporting. These data can never be traced back to a certain natural person.
Edville always ensures that all these parties can never trace the data received from us back to an identifiable natural person.
SECTION 6. WHAT RIGHTS DO YOU HAVE AS A DATA SUBJECT?
- Your right to access
You have the right to find out at any time from Edville whether or not we are processing your personal data, and if we are processing it, to inspect that data and receive additional information about:
– the purposes of the processing;
– the categories of personal data involved;
– the recipients or categories of recipients (in particular, recipients in third countries);
– if possible, the retention period or, if that is not possible, the criteria for determining that period;
– the existence of your privacy rights;
– the right to lodge a complaint with the supervisory authority;
– the information available to us about the source of the data if we obtain personal data from a third party; and
– the existence of automated decision-making.
You also have the right to obtain a free copy of the processed data, in an intelligible form. Edville may charge a reasonable fee to cover its administrative costs for each additional copy you request.
- Your right to rectification of personal data
You have the right to have incomplete, incorrect, inappropriate, or outdated personal data corrected.
In any event, to keep your data up to date, please inform us of any change, such as a move, a change of e-mail address, or a renewal of your identity card.
- Your right to the erasure of your personal data
You have the right to have your personal data deleted in the following cases, and without unreasonable delay:
– your personal data are no longer needed for the purposes for which they were collected or otherwise processed by Edville;
– You withdraw your previous permission for the processing and there is no other legal ground which Edville can rely on for the (further) processing;
– you object to the processing of your personal data and there are no more weighty, legitimate grounds for the (further) processing by Edville;
– your personal data are being processed unlawfully;
– your personal data must be deleted in order to comply with a legal obligation;
– your personal data were collected when you were still a minor.
Please note that we cannot always remove all requested personal data, for example when the processing thereof is necessary for the establishment, exercise, or substantiation of a legal claim. We will inform you of this in more detail in our response to your request.
- Your right to restriction of processing
You have the right to obtain the restriction of the processing of your personal data if one of the following applies:
– you dispute the accuracy of those personal data: their use is restricted for a period that allows Edville to verify the accuracy of the data;
– the processing of your personal data is unlawful: instead of deleting your data, you request the restriction of their use;
– Edville no longer needs your data for the original processing purposes, but you need them for the institution, exercise, or substantiation of legal claims: instead of the deletion of your data, you request the restriction of their use for the institution, exercise, or substantiation of legal claims;
– as long as no decision has been taken on the exercise of your right to object to the processing, you request that the use of your personal data be restricted;
- Your right to portability of personal data
You have the right to “recuperate” your personal data. This is only possible for the personal data that you have provided to Edville yourself, based on consent or agreement. In all other cases, you cannot enjoy this right (e.g. when the processing of your personal data is based on a legal obligation).
There are two aspects to this right:
– you can request Edville to recover the personal data concerned in a structured, common, and machine-readable form; and
– to request Edville to transfer the personal data concerned directly to another controller. In doing so, you are responsible for the accuracy and security of the (e-mail) address you provide for the transfer. Edville has the right to refuse this in case the transfer is technically not possible.
- Your right to object to the processing of your personal data
You have the right to object, on grounds relating to your particular situation, to the processing of your personal data if the processing is in the legitimate interests of Edville or in the public interest. Edville shall cease the processing of your personal data unless Edville can demonstrate compelling legitimate grounds for the processing which are more important than those of you or when the processing of the personal data is related to the establishment, exercise, or support of legal claims (e.g. submission of a request to a court).
SECTION 7. HOW SHOULD YOU EXERCISE YOUR RIGHTS AS A DATA SUBJECT?
- Who should you contact to exercise your rights?
If you want to exercise one of your rights, you can send a written request to Edville, firstname.lastname@example.org, +32 9 395 08 07.
- Are there any costs associated with exercising your rights?
In principle, no: you can exercise the aforementioned rights free of charge unless we establish that your request is manifestly unfounded or excessive. For example, you cannot exercise your right of access every month.
In that case, two possibilities arise:
– either we charge a reasonable fee for exercising your rights; or
– we refuse to act on your request.
- How will your request be answered?
We will do our best to give you an answer that is as concise, transparent, understandable, and easy to understand as possible.
We prefer to do this electronically unless you request to receive your answer in another form.
- Will you receive an immediate answer?
We will, of course, do our best to respond to your request as quickly as possible.
In any event, we will respond within one month of receiving your request, unless you submit several requests or if the requests are complex. Depending on this, the one-month deadline may be extended by two months if necessary.
SECTION 8. RETENTION OF YOUR PERSONAL DATA
- We do not keep your personal data longer than necessary to realize the purpose for which we have collected your personal data.
The retention period may therefore differ for each purpose, and may sometimes be short, and sometimes longer. For example, the period may be longer so that we can comply with our legal obligations (for example, we are obliged to keep invoice data for a maximum of seven years in order to comply with our accounting and tax obligations).
After the expiry of the applicable retention period(s), personal data collected will be deleted or anonymized.
We, therefore, invite you to always consult the latest version of this policy on our website. Naturally, we will inform you in advance, via our website, and via other channels, of any changes in content and we will ask your permission for our (new) processing activities when the law requires it.
SECTION 10. COOKIES, OR SIMILAR TECHNIQUES, THAT WE USE
When you first visited our website, we already informed you about these cookies and asked your permission to place them.
You can unsubscribe from cookies by configuring your internet browser in such a way that it does not store any more cookies. In addition, you can delete all information that has previously been stored using your browser settings.
For an explanation, see: https://www.dataprotectionauthority.be/citizen
SECTION 11. DISPUTE SETTLEMENT
- Our privacy declaration and policy are governed by Belgian law.
Any dispute relating to the interpretation or execution of this privacy statement will be subject to Belgian law and falls under the exclusive jurisdiction of the judicial district of Ghent.
For complaints regarding the processing of your personal data by Edville, please contact the Data Protection Authority, rue du Mail 35, 1000 Brussels / +32 (0)2 274 48 00 / email@example.com / www.privacycommission.be.