WHEN THIS PRIVACY STATEMENT REFERS TO DIONYSOS, IT REFERS TO DIONYSOS INVEST NV, WITH ITS REGISTERED OFFICE AT 3000 LEUVEN, NAAMSESTRAAT 37, AND REGISTERED IN THE CROSSROADS BANK FOR ENTERPRISES WITH COMPANY NUMBER 0877.882.372, RPR LEUVEN, AS WELL AS ANY COMPANY ASSOCIATED WITH AND/OR RELATED TO DIONYSOS INVEST NV.
1. INTRODUCTION
Dionysos places great importance on the secure, transparent, and confidential collection and processing of your personal data. In particular, we want to protect the data of, among others, our customers, subcontractors, and suppliers from loss, leaks, errors, unauthorized access, or unlawful processing.
We want to inform you through this Data Protection Notice about the collection and processing of your personal data.
We ask that you read this privacy statement carefully, as it contains essential information about how your personal data is processed and for what purposes.
By providing your personal data, you expressly acknowledge that you have read this privacy statement and also explicitly agree to it, as well as to the processing itself.
2. SCOPE
This privacy statement applies to all services provided by us and, in general, to all activities we carry out.
3. DATA CONTROLLER AND ITS AFFILIATES
Dionysos is the data controller of your personal data. In the collection and processing of your personal data, we comply with Belgian data protection regulations as well as the General Data Protection Regulation (GDPR) from its entry into force on May 25, 2018.
4. PROCESSING OF PERSONAL DATA
Depending on your activities and your relationship with our company, you provide us with the following personal data: your identification and contact details (name, title, address, VAT number, email address, phone and mobile numbers), your billing and payment information, the type of browser, as well as, if applicable, the company you are involved with, your role within this company, etc. For certain specific legal obligations (electronic attendance registration, 30bis work declarations, etc.), you may need to provide us with additional data to record your attendance (such as E-ID details, Limosanumber).
We kindly remind you that you are responsible for all the data you provide to us and that we rely on its accuracy. If your data is no longer up-to-date, we request that you notify us of this promptly.
You are not obliged to provide your personal data, but you understand that providing certain services or collaborating may be impossible if you do not agree to the collection and processing of that data.
The concept of processing is broad and includes, among other things, collecting, storing, updating, modifying, consulting, using, disseminating, making available, archiving, deleting, or ultimately destroying that data.
5. PURPOSES OF PROCESSING AND LEGAL BASIS
5.1. Customer data
In the context of our services and activities, we collect and process the identification and contact details of our clients and contractors, their staff, employees, appointees, and other relevant contacts. The purposes of these processes are the execution of agreements with our clients, client management, accounting, the execution of notarial deeds, studies, statistics, and direct marketing activities such as sending promotional or commercial information. The legal grounds are the execution of the agreement, fulfilling legal and regulatory obligations (such as the 30bis work declarations), and/or our legitimate interests. For the execution of notarial deeds, E-ID details and bank account numbers may also be processed, if applicable.
5.2. Data from suppliers and subcontractors
We collect and process the identification and contact details of our suppliers and subcontractors, as well as their potential (sub)subcontractors, their staff, employees, appointees, and other relevant contacts. The purposes of these processes are the execution of the agreement, managing suppliers/subcontractors, accounting, and direct marketing activities such as sending promotional or commercial information. The legal grounds are the execution of the agreement, fulfilling legal and regulatory obligations (such as mandatory electronic attendance registration, 30bis work declarations, attendance lists, or other obligations related to public procurement, etc.), and/or our legitimate interests (such as for direct marketing). For electronic attendance registration, E-ID details or the Limosanumber may also be processed, if applicable. For direct marketing activities by email (such as newsletters or event invitations), consent will always be requested and can be withdrawn at any time.
5.3. Personnel data
We process the personal data of our employees in the context of personnel management and payroll administration. Given its specific nature, this processing is more extensively regulated in an Employee Data Protection Policy.
5.4. Other data
In addition to the data of clients, suppliers/subcontractors, and staff, we also process personal data of others, such as potential new clients/prospects, useful contacts within our sector, network contacts, and contacts of experts, etc. The purposes of these processes are in the interest of our activities, direct marketing, and public relations. The legal basis is our legitimate interest or, in some cases, the execution of an agreement.
6. DURATION OF PROCESSING
Personal data is retained and processed by us for a period necessary for the purposes of processing and based on the (contractual or non-contractual) relationship we have with you.
Customer data and data of suppliers or subcontractors will, in any case, be removed from our systems ten years after the termination of the agreement or project, except for personal data that we must retain longer based on specific legislation or in the event of an ongoing dispute for which the personal data is still necessary.
7. RIGHTS
In accordance with and under the conditions of Belgian privacy law and the provisions of the General Data Protection Regulation, we inform you that you have the following rights:
- Right to access and review: You have the right to access the data we hold about you free of charge and to check how it is used.
- Right to rectification: You have the right to obtain the correction (amendment) of your inaccurate personal data, as well as to complete any incomplete personal data.
- Right to erasure or restriction: You have the right to request the deletion or restriction of your personal data under the circumstances and conditions specified by the General Data Protection Regulation. We may refuse to delete or restrict any personal data that is necessary for us to fulfill a legal obligation, execute the agreement, or pursue our legitimate interests, as long as such data is necessary for the purposes for which it was collected.
- Right to data portability: You have the right to obtain the personal data you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transfer this data to another data controller.
- Right to object: You have the right to object to the processing of your personal data on grounds of serious and legitimate reasons. However, please note that you cannot object to the processing of personal data that is necessary for us to fulfill a legal obligation, execute the agreement, or pursue our legitimate interests, as long as such data is necessary for the purposes for which it was collected.
- Right to withdraw consent: If the processing of personal data is based on prior consent, you have the right to withdraw this consent. The personal data will then only be processed if we have another legal basis for doing so.
- Automated decisions and profiling: We confirm that the processing of personal data does not involve profiling and that you are not subject to fully automated decisions.
You can exercise the aforementioned rights by sending an email to info@studiome-housing.be or by mailing a letter to Dionysos, Naamsestraat 37, 3000 Leuven.
We make every effort to handle your personal data carefully and legitimately in accordance with applicable regulations. If you believe your rights have been violated and you do not find a satisfactory response within our organization, you are free to file a complaint with:
Commission for the Protection of Privacy
Drukpersstraat 35, 1000 Brussels
Tel. +32 2 274 48 00 – Fax. +32 2 274 48 35
Email: commission@privacycommission.be
8. TRANSFER TO THIRD PARTIES
Certain personal data collected by us will be shared with and possibly processed by third-party service providers, such as our IT supplier, accountant, auditor, notary, bank, successor, other service providers, and affiliated and/or related companies of Dionysos for the same purposes as mentioned in this privacy policy, as well as by government authorities (for example, in relation to 30bis work declarations, electronic attendance registration, or applying for government contracts).
It is possible that one or more of the aforementioned third parties are located outside the European Economic Area (EEA). However, personal data will only be transferred to third countries that provide an adequate level of protection.
The employees, managers, and/or representatives of the aforementioned service providers or institutions, as well as the specialized service providers they appoint, must respect the confidential nature of your personal data and may only use this data for the purposes for which it was provided.
If necessary, your personal data may be transferred to other third parties. This could occur, for example, if we are reorganized wholly or partially, if our activities are transferred, or if we are declared bankrupt. It is also possible that personal data must be disclosed pursuant to a court order or to comply with a specific legal obligation. In such cases, we will make reasonable efforts to inform you in advance about this disclosure to other third parties. However, you will acknowledge and understand that, in certain circumstances, this may not always be technically or commercially feasible, or there may be legal constraints.
We will not sell or commercially make available your personal data to direct marketing agencies or similar service providers, except with your prior consent.
9. TECHNICAL AND ORGANIZATIONAL MEASURES
We take the necessary technical and organizational measures to process your personal data at an adequate level of security and to protect it against destruction, loss, falsification, alteration, unauthorized access or accidental disclosure to third parties, as well as any other unauthorized processing of this data.
In no event can Dionysos be held liable for any direct or indirect damage resulting from incorrect or unlawful use of personal data by a third party.
10. ACCESS BY THIRD PARTIES
For the processing of your personal data, we grant access to your personal data to our employees, staff, and appointees. We ensure a similar level of protection by making contractual obligations enforceable against these employees, staff, and appointees, which are similar to those outlined in this Data Protection Notice.
11. QUESTIONS?
If you have any further questions or comments regarding the collection and processing of your personal data after reading this Data Protection Notice, you can contact Dionysos either by mail at Naamsestraat 37 – 3000 Leuven, or by sending an email to info@studiome-housing.be.
Last modification: May 12, 2021.
