1/ Data controller
2/ Who is our data protection policy aimed at?
This policy is intended for users of our websites, our customers, former customers and the people we prospect who are interested in our services and products.
3/ What categories of data can we process?
We only collect and use the personal data that we need in the course of our business, enabling us to offer you personalised and quality products and services. We may collect different categories of personal data from you, including:
- Identification information (for example; last name, first name);
- Contact information (for example postal address and email address, phone numbers);
- Tax information (e.g. VAT number, reference country);
- Banking, financial and transaction information (for example your bank details, your purchase history and payments);
- Data about your habits and preferences:
- Data related to the use of our products and services (e.g. language of use, personalised messages, interests).
4/ What do we use your data for and what is the legal basis of this processing?
We use your personal data:
- With your authorisation (legal basis: article 6a of regulation 2016/679 (GDPR))
- When you ask us questions via the contact and support procedures that have been implemented.
- For sending newsletters to which you have subscribed.
- In order to fulfil contracts (legal basis: article 6b of regulation 2016/679 (GDPR)):
- For the tracking and processing of your orders and registrations.
- For providing you with information about our products and services;
- For tracking and handling complaints and returns.
- For general customer management including accounting, litigation and litigation management, the recovery or transfer of receivables and the protection of our rights in general.
- When we have a legitimate interest, as part of our marketing activities. In such a case, we always ensure we maintain a certain balance in terms your private life (legal basis: article 6f of the regulation 2016/679 (GDPR)):
- To inform you of our products and services, potentially based on your marketing profile.
- To prevent and combat possible fraud and abuse.
- In order to fulfil the legal obligations to which we are subject (legal basis: article 6c of regulation 2016/679 (GDPR)):
5/ Can your personal data be transferred to third parties?
Your personal data may be shared with our subcontractors for services on our behalf (e.g. external call centres, advertising agencies, IT providers, IT, clouds, etc.) and only if we have given instructions for this.
6/ Data transfer outside the « EEA » European Economic Area
Your personal data is not shared outside the European Union.
V. How long do we keep your personal data for?
We keep your personal data for the longest period of time that is needed to comply with the applicable legal and regulatory provisions. Other timeframes may be applied:
- Either to due to operational constraints such as good account management, or effective customer relationship management;
- Or to respond to claims in court or from a regulator.
In terms of customers, most of the information is kept for the duration of the contractual relationship and for a maximum duration of 10 years after the contractual relationship ends. For inactive prospects, the information is kept for a maximum of 3 years.
8/ How do we protect your personal data?
Your personal data is treated confidentially. We make every effort to take the necessary technical and organisational measures to ensure the safety of this data.
9/ What are your rights? How can you exercise them?
In accordance with the applicable regulations, you have various different rights, namely:
- Right of access: you can obtain information concerning the processing of your personal data as well as a copy of this personal data.
- Right of rectification: if you believe that your personal data is inaccurate or incomplete, you can demand that your personal data be modified accordingly.
- Right to deletion: you can demand that your personal data be deleted.
- Right to the limitation of processing: you can request that the processing of your personal data be limited.
- Right of opposition: you can oppose the processing of your personal data, for reasons connected to your personal circumstances. You have the absolute right to oppose the processing of your personal data for the purposes of direct marketing, including profiling related to this direct marketing.
- Right to withdraw your consent: if you have consented to your data being processed, you have the right to withdraw your consent at any time.
- Right to the portability of your data, when this right is applicable, you have the right to insist that the personal data you have provided us with is returned to you or, where technically possible, transferred to a third party.
You may exercise the rights listed above by contacting us by email at the firstname.lastname@example.org or by sending us a letter to the address Institute of Neurocognitivism 81 avenue de Tervueren 1040 Brussels – Belgium In accordance with the applicable regulations, you are entitled to lodge a complaint with the competent supervisory authority.
11/ How to contact us
Institute of Neurocognitivism
81 avenue de Tervueren
1040 Brussels – Belgium
Or by email: email@example.com
Last updated: 14/06/2018