- the Belgian Data Protection Act of 8th December 1992 on the protection of privacy in relation to the processing of personal data (as amended) (the “Privacy Act”); and
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”); and
- All other applicable legislation regarding the protection of privacy and the processing of personal data;
YOUR RIGHTS REGARDING YOUR PERSONAL DATA
The General Data Protection Regulation (GDPR), which is effective since May 2018 in Belgium, stipulates that when using your personal data, you have certain rights at any times:
- Right to erase your data
- Right to data portability
- Right to access your data
- Right to rectify your data
- Right to restrict processing
- Right of opposition
In accordance with Article 12 of the GDPR, to exercise your rights, you must contact the entity responsible for processing your personal data in writing, electronically or orally. A copy of your identity card is also required and will not be valid orally.
As from the date of receipt of your request, the controller of your personal data must inform you of the measures relating to your case within a maximum period of one month. It should be noted that in some cases where the request is more complex, the response time can be extented to three months. If the latter situation arises, you should be informed and the data controller should contact you to explain the reasons for the extension.
If the entity in charge of processing your personal data does not accept your request, it must inform you of the reasons for its refusal within a period of one month from the date of receipt of your request.
You then have the possibility to file a judicial appeal by filing a complaint with the Data Protection Authority (DPA).
HOW DO WE COLLECT YOUR DATA?
The data is collected when you enter on a contact form.
Should you send us questions via the contact form, we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions. We do not share this information without your permission.
We will, therefore, process any data you enter onto the contact form only with your consent. You may revoke your consent at any time. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.
THE STORAGE PERIOD AND DELETION OF YOUR PERSONAL DATA
The personal data collected will be kept for as long as necessary to achieve the different purposes. Once the objectives have been achieved, they will be deleted or anonymized.
TRANSFER OF PERSONAL DATA TO THIRD PARTIES
The European CO2 Foundation guarantees that it does not transfer your personal data to third parties, unless:
- There is a legal obligation to transfer the personal data
- You have given permission to do so
If you have any questions please contact our team using the details below: