Dermat Medical Supplies BVBA, with registered office at Ambachtenlaan 38, 3001 Heverlee, Belgium and registered with the Crossroads Bank of Enterprises under enterprise number BE 0696800191, attaches great importance to the safe, transparent and confidential collection and processing of your personal data. In particular, we want to protect these data of e.g. our customers, subcontractors and suppliers against loss, leaks, errors, unauthorised access or unlawful processing, among other things.
With this Data Protection Notice we want to inform you about the collection and processing of your personal data.
We request you to carefully read this Data Protection Notice, considering that it contains essential information about how your personal data are processed and for which purposes.
By providing your personal data you expressly declare to have taken cognisance of this Data Protection Notice and, also, you expressly agree with it and with the processing itself.
This Data Protection Notice concerns all services provided by us and in general all activities performed by us.
THE DATA CONTROLLER AND ITS OBLIGATIONS
Dermat Medical Supplies, with registered office at Ambachtenlaan 38, 3001 Heverlee, Belgium and with enterprise number BE 0696800191, is the data controller of your personal data.
Depending on your activities and your relationship with our company, you provide the following personal data to us: your identity and contact details (name, title, address, e-mail address, telephone and cell phone number). For certain specific legal obligations (electronic attendance registration, 30bis declaration of work), it is possible that you provide additional information to us in order to register your attendance (such e-ID data, Limosa number).
We kindly point out that you are responsible for all data you provide to us and we trust that they are correct. If your data are no longer up to date, we kindly request you to inform us.
You are not obliged to provide your personal data, but you will understand that it will be impossible to provide certain services or to collaborate when you do not agree with their collection and processing.
PROCESSING PURPOSES AND LEGAL GROUNDS
Within the scope of our services and activities, we collect and process the identity and contact details of our customers and principals, their employees, collaborators, appointees and other useful contacts. The purpose of this processing is to perform the agreements with our customers, customer management, accounting and direct marketing activities, such as the sending of promotional or commercial information. The legal grounds are the performance of the agreement, the fulfilment of legal and regulatory obligations (such as the obligatory 30bis declaration of work), and/or our legitimate interest. For direct marketing activities via e-mail (such as a newsletter or invitation to events), your permission will always be asked and your permission can also be revoked at any time.
5.2.Supplier and subcontractor data
We collect and process the identity and contact details of our suppliers and subcontractors, as well as their potential (sub)contractor(s), their employees, collaborators, appointees and other useful contacts. The purpose of this processing is to perform the present agreement, the management of suppliers/subcontractors, accounting and direct marketing activities, such as the sending of promotional or commercial information. The legal grounds are the performance of the agreement, the fulfilment of legal and regulatory obligations (such as the obligatory electronic attendance registration, the 30bis declaration of work, the attendance list or other obligations within the scope of public contracts, etc.) and/or our legitimate interest (e.g. for direct marketing). Where appropriate, the e-ID data or Limosa number are also processed for electronic attendance registration. For direct marketing activities via e-mail (such as a newsletter or invitation to events), your permission will always be asked and your permission can also be revoked at any time.
We collect our employees’ personal data within the scope of our personnel management and wage administration. Considering the specific nature thereof, this processing is dealt with more extensively in an Employee Data Protection Policy.
In addition to the data of customers, suppliers/subcontractors and personnel, we also process personal data of others, such as potential new customers/prospects, useful contacts within our industry, network contacts, expert contacts etc. These data are processed in the interest of our activities, direct marketing and public relations. The legal ground is our legitimate interest or in some cases the performance of an agreement.
We store and process the personal data for the necessary period depending on the processing purposes and our relationship with you (contractual or otherwise).
In any case, customer data and supplier or subcontractor data will be deleted from our systems 10 years after the agreement or project has ended, with the exception of personal data we must store for a longer period of time pursuant to specific legislation or in case of an on-going dispute for which the personal data are still necessary.
In accordance with and under the conditions of Belgian privacy law and the provisions of the General Data Protection Regulation, we inform you that you have the following rights:
- Right of access and right to be informed: you have the right take cognisance of the data we have about you and to check what they are used for, free of charge.
- Right to rectification: you have the right to have any incorrect personal data rectified (corrected) and to complete any incomplete personal data.
- Right to erasure: you have the right to request us to delete your personal data or to restrict their processing under the circumstances and conditions stipulated in the General Data Protection Regulation. We can refuse the restriction or deletion of any personal data we require to fulfil a legal obligation, to perform the agreement or our legitimate interest, as long as these data are necessary for the purposes they were collected for.
- Right to data portability: you have the right to obtain the personal data provided to us in a well-structured, commonly used and machine-readable format. You have the right to transmit these data to another data controller.
- Right to object: you have the right to object to the processing of your personal data on serious and legitimate grounds. However, please take into account that you cannot object to the processing of personal data we require to fulfil a legal obligation, to perform the agreement or our legitimate interest, as long as these data are necessary for the purposes they were collected for.
- Right to revoke your permission: if the processing of your personal data is based on your prior permission, you have the right to revoke said permission. The personal data will then be processed only if we have a different legal ground.
- Automated decision-making and profiling: we confirm that the processing of your personal data does not comprise profiling and that you are not subject to any fully automated decisions.
You can exercise the above-mentioned rights by contacting BVBA DERMAT MEDICAL SUPPLIES: email@example.com
We do our utmost to handle your personal data in a careful and legitimate manner, in accordance with the applicable legislation. Nonetheless, if it is your opinion that your rights have been violated and your concerns are not addressed within our company, you are free to file a complaint with:
Commission for the Protection of Privacy
Drukpersstraat 35, 1000 Brussels
Tel.: 02 274 48 00
Fax: 02 274 48 35
You can also take the matter to court when you think that you would incur damage as a result of the processing of your personal data.
TRANSMISSION TO THIRD PARTIES
Certain personal data collected by us will be transmitted to and may be processed by third-party service providers, such as our IT provider, accountant, auditor, external bodies as well as by the authorities (e.g. with the 30bis declaration of work, the electronic attendance registration or when competing for public contracts).
It is possible that one or more of the above-mentioned parties are based outside the European Economic Area (“EEA”). However, personal data will only be transmitted to third countries with an appropriate protection level.
The employees, managers and/or representatives of the above-mentioned service providers or institutions and the specialised service providers appointed by them must respect the confidential nature of your personal data and can only use these data for the purposes they were provided for.
If necessary, your personal data can be transmitted to other third parties. For instance, in case of our entire or partial reorganisation, if our operations are transferred or if we are declared bankrupt. It is also possible that personal data need to be transmitted in case of a court order or to fulfil a certain legal obligation. In that case, we will make every reasonable effort to inform you beforehand of this transmission to other third parties. However, you will acknowledge and understand that this is not always technically or commercially feasible under certain circumstances or that legal restrictions may apply.
Under no circumstances will we sell or commercially provide your personal data to direct marketing companies or similar service providers, except with your prior permission.
TECHNICAL AND ORGANISATIONAL MEASURES
We take the necessary technical and organisational measures to process your personal data in accordance with an adequate protection and to protect them against destruction, loss, forgery, change, unauthorised access or erroneous disclosure to third parties as well as the unauthorised processing of your data.
Under no circumstances can Dermat Medical Supplies be held liable for any direct or indirect damage resulting from the incorrect or unlawful use of your personal data by a third party.
With a view to the processing of your personal data, we give our employees, collaborators and appointees access to your personal data. We guarantee a similar level of protection by imposing contractual obligations on our employees, collaborators and appointees, similar to the present Data Protection Notice.
11.ANY FURTHER QUESTIONS?
If you have any further questions or remarks about the collection and processing of your personal data after having read the present Data Protection Notice, please contact Mr Maarten Decabooter, either by mail at BVBA DERMAT MEDICAL SUPPLIES, AMBACHTENLAAN 38, 3001 HEVERLEE, BELGIUM or by e-mail on firstname.lastname@example.org .