Data protection information note – Entreprises générales Dherte SA
Data protection information note – Dherte – Namur SA
1. Introduction
ENTREPRISES GENERALES DHERTE SA, with its registered office at Rue Lieutenant Cotton 15, 7880 FLOBECQ, and registered with the Crossroads Bank for Enterprises under company number BE0401.818.144, attaches great importance to the secure, transparent, and confidential collection and processing of your personal data. In particular, we want to protect the data of our customers, subcontractors, and suppliers against loss, breaches, errors, unauthorized access, or unauthorized processing.
Through this data protection notice, we want to inform you about the collection and processing of your personal data.
We ask you to read this data protection notice carefully, as it contains important information about how we process your personal data and why we do so.
By providing your personal data, you explicitly declare that you have read this data protection notice and explicitly accept its content and the processing of this data.
ENTREPRISES GENERALES DHERTE SA has implemented technical and organizational measures in accordance with current industry practices to ensure an appropriate level of security for the Personal Data processed.
2. Scope
This data protection notice concerns all services provided by the Company and, more generally, all activities it carries out.
3. Data controller and its commitments
SA ENTREPRISES GENERALES DHERTE, whose registered office is located at rue Lieutenant Cotton 15, 7880 FLOBECQ, and whose company number is BE0401.818.144, is the data controller for your personal data.
When collecting and processing your personal data, we comply with Belgian legislation on the protection of personal data, as well as the General Data Protection Regulation (GDPR) since its entry into force on May 25, 2018.
4. Personnal data
Depending on your activities and your relationship with our company, you will provide us with the following personal data: your identity and contact details (name, title, address, email address, telephone number, mobile phone number). For certain specific legal obligations (electronic attendance recording, 30bis declaration of works), you may be required to provide us with additional data in order to record your attendance (such as E-ID data, construbadge or equivalent, Limosa number). Please note that you are responsible for all data you provide to us and we rely on its accuracy. If your data is no longer up to date, please inform us immediately.
You are not obliged to provide your personal data, but please understand that it will be impossible to offer certain services or collaborate if you do not consent to the collection and processing of certain data.
5. Purposes of processing and legal basis
5.1. Customer data
As part of our services and activities, we collect and process the identity and contact details of our customers and principals, their staff, employees, agents, and any other relevant contact persons. The purposes of this processing are to execute agreements with our customers, manage customers, perform accounting, and conduct direct marketing activities, such as sending promotional or commercial information (e.g., real estate promotions), where applicable. The legal bases are the performance of a contract, compliance with legal and regulatory obligations (such as the 30 bis declaration of works) and/or our legitimate interest.
5.2. Supplier and subcontractor data
We collect and process the identity and contact details of our suppliers and subcontractors, as well as any (sub)subcontractors, their staff, employees, agents, and any other relevant contact persons. The purposes of this processing are the performance of this agreement, the management of suppliers/subcontractors, accounting, and direct marketing activities, such as sending promotional or commercial information. The legal bases are the performance of the contract, compliance with legal and regulatory obligations (such as mandatory electronic attendance recording, the 30 bis work declaration, the attendance list or other obligations in public procurement, etc.) and/or our legitimate interest (such as for direct marketing). For electronic attendance recording, where applicable, E-ID data or the Limosa number will be processed. For direct marketing activities by email (such as newsletters or invitations to events), permission will always be requested and may be withdrawn at any time.
5.3. Employee data
We process the personal data of our employees as part of our personnel and payroll management. Given its specific nature, this processing is described in more detail in a Data Protection Policy for Employees.
5.4. Other data
In addition to customer, supplier/subcontractor, and employee data, we also process the personal data of other individuals, such as new customers/prospects, useful contacts within our industry, networking contacts, expert contacts, etc. The purposes of this processing are in the interest of our business, direct marketing, and public relations. The legal basis is our legitimate interest or, in certain cases, the performance of a contract.
6. Duration of processing
Personal data is stored and processed by us for a period necessary for the purposes of the processing and the relationship (contractual or otherwise) between us.
Customer and supplier or subcontractor data will, in all cases, be removed from our systems after a period of 7 years following the termination of the contract or after the end of the project, except for personal data that we are required to keep for a longer period on the basis of specific legislation or in the event of an ongoing dispute for which the personal data is necessary.
7. Rights
In accordance with and under the conditions of Belgian data protection legislation and the provisions of the General Data Protection Regulation, we inform you that you have the following rights:
Right of access: you have the right to view the data we hold about you free of charge and to check the purposes for which it is used.
Right of rectification: you have the right to obtain rectification (correction) of inaccurate personal data concerning you, as well as the right to complete incomplete personal data.
Right to be forgotten or to restrict data: you have the right to ask us to erase personal data concerning you and to restrict the processing of such data in the circumstances and under the conditions stipulated in the General Data Protection Regulation. We may refuse to erase or restrict data that is necessary for us to process salaries, fulfill a legal obligation, perform the employment contract, or pursue our legitimate interests, provided that such data is necessary for the purposes for which it was collected.
Right to data portability: you have the right to receive the personal data concerning you that you have provided to us, in a structured, commonly used, and machine-readable format. You have the right to transmit this data to another data controller.
Right to object: You have the right to object to the processing of your personal data for serious and legitimate reasons. However, you cannot object to the processing of data necessary for the fulfillment of a legal obligation, the performance of the employment contract, or our legitimate interest, provided that such data is necessary for the purposes for which it was collected.
Right to withdraw consent: If the processing of personal data is based on prior consent, you have the right to withdraw that consent. Such personal data will then only be processed if we have another legal basis.
Automatic decisions and profiling: We confirm that the processing of personal data does not include profiling and that you will not be subject to fully automated decisions.
You can exercise the above rights by contacting ENTREPRISES GENERALES DHERTE SA. The contact person is: Mr. Philippe DELHAYE, whose contact details are: 068/44.67.87 – email : delhaye@dherte.be.
We make every effort to ensure that your personal data is processed meticulously and legitimately, in accordance with the applicable regulations. However, if you feel that your rights have not been respected and that your concerns are not being listened to within our company, you are free to lodge a complaint with:
Privacy Commission
Rue de la Presse 35, 1000 Brussels
Tel. 02 274 48 00
Fax. 02 274 48 35
Email : commission@privacycommission.be
You may also seek legal redress if you believe that you have suffered harm as a result of the processing of your personal data.
8. Transfer of data to third parties
Certain personal data of Employees collected by the Employer will be transferred to and may be processed by third parties, such as our IT provider, accountant, auditor, and the government (e.g., in the case of the 30bis work declaration, electronic attendance recording, or the awarding of public contracts).
One or more of these third parties may be located outside the European Economic Area ("EEA"). However, personal data will only be transferred to third countries that offer an adequate level of protection.
The employees, managers, and/or representatives of the aforementioned service providers or institutions, as well as the specialized service providers designated by them, are required to respect the confidential nature of your personal data and may only use this data for the purposes for which it was provided.
If necessary, personal data may be transferred to other third parties. This may occur in the event of a partial or complete reorganization on our part, if our activities are transferred, or in the event of bankruptcy. It is also possible that personal data may have to be transferred due to a court order or in order to comply with a specific legal obligation. In this case, we will make every effort to inform you in advance of this communication to other third parties. However, you acknowledge and understand that under certain circumstances this is not always technically or commercially feasible, or that legal restrictions may apply.
We will not sell your personal data under any circumstances, nor will we make it available to direct marketing agencies or similar service providers without your prior consent.
9. Technical and organizational measures
We will take technical and organizational measures to process data at a sufficient level of security and to protect personal data against destruction, loss, falsification, unauthorized access, or accidental disclosure to third parties, as well as any unauthorized processing of such data.
Under no circumstances shall SA ENTREPRISES GENERALES DHERTE be held liable for any direct or indirect damage caused by the incorrect or unlawful use of personal data by a third party.
10. Access by third parties
For the purpose of processing your personal data, we authorize our employees, collaborators, and agents to access your personal data. We guarantee a similar level of protection by imposing contractual obligations on these employees, collaborators, and agents, similar to those described in the Data Protection Notice.
11. Do you have any questions ?
If you still have questions about the collection and processing of your personal data after reading this data protection notice, you can contact SA ENTREPRISES GENERALES DHERTE by mail: rue Lieutenant Cotton 15 – 7880 FLOBECQ or by email: info@dherte.be .
This information notice is dated 04/25/2018. It is subject to change in order to ensure that its content reflects as accurately as possible any changes in regulations or any changes within SA ENTREPRISES GENERALES DHERTE that may have an impact on the management of Personal Data. The most recent version in force will be available on our website or upon written request to the above address.
