PRIVACY STATEMENT

CONTENTS

  1. Introduction
  2. General information applicable to all our processing of personal data
    1. Who is the data controller?
    2. How do we receive your personal data?
    3. Do we share your personal data outside the European Union?
    4. What rights do you have as a data subject?
    5. Would you like to exercise your rights, or do you have questions or a complaint?

1. INTRODUCTION

KPNIBelgium cares about your privacy and handles your personal data as confidentially as possible.

Protecting your privacy and personal data is a matter of utmost importance to us. We collect, store, and use your personal data solely in accordance with the content of this Privacy Statement (“Privacy Statement”) and the applicable data protection regulations, in particular the provisions of the European General Data Protection Regulation (“GDPR”) and the relevant national data protection legislation.

This Privacy Statement explains which personal data are collected and processed, for which purposes, how long we retain the personal data, what rights you have in this regard, and how you can contact us.

This Privacy Statement applies, among other things, to (i) our websites www.kpnihuis.com, www.wolv.life, www.watdedokternognietziet.be (hereinafter our “Websites”), our platform YourTimeline (hereinafter our “Platform”), and the services and activities related thereto, as well as (iii) all other interactions between you and us via any communication channel.

2. GENERAL INFORMATION APPLICABLE TO ALL OUR PROCESSING OF PERSONAL DATA

2.1 WHO IS THE DATA CONTROLLER?

KPNIBelgium BV, with its registered office at Brusselsesteenweg 155, 9090 Melle, Belgium, and registered with the Crossroads Bank for Enterprises under number 0656.685.644 (hereinafter "KPNIBelgium" or "we"), is responsible for processing your personal data as described in this Privacy Statement.

Please note that KPNIBelgium is the data controller for the processing of your personal data, which means we have a direct responsibility towards you regarding this processing. This Privacy Statement only concerns our relationship with you as data controller. For situations where KPNIBelgium acts as processor, we refer you to the Privacy Statement of the respective data controller.

2.2 HOW DO WE RECEIVE YOUR PERSONAL DATA?

Personal data are data that can be used to identify an individual, directly or indirectly. We can collect and process personal data in various ways, for example when:

  • you contact us or have contacted us (e.g., via the contact form on the Website, via email, etc.);
  • you use the services of KPNI Huis;
  • you use our webshop or register for one of our activities via our Websites;
  • we provide or have provided one of our services to you;
  • you use our Platform;
  • you apply for a position at KPNIBelgium;
  • you supply goods or services to KPNIBelgium;
  • etc.

Generally, you provide your personal data to us yourself. Sometimes we receive your contact details via third parties, for example:

  • you were referred to KPNIBelgium by a therapist or care provider.

2.3 DO WE SHARE YOUR PERSONAL DATA OUTSIDE THE EUROPEAN UNION?

In principle, we only use your personal data to deliver the services you have requested. If we engage external service providers to deliver these services, these providers have access to your data only within the scope of their services. We have taken the necessary technical and organizational measures to ensure compliance with data protection regulations and also require external service providers to comply. We have concluded data processing agreements with the involved third parties, containing appropriate safeguards regarding the confidentiality and privacy of your personal data.

However, notwithstanding the above, KPNIBelgium may disclose your personal data to competent authorities if (i) we are legally obliged to do so or in the context of legal proceedings, and (ii) to protect and defend our rights.

For certain services, we generally store your personal data only on IT systems within the European Economic Area (EEA), for example our YourTimeline Platform.

When, for other services, personal data are transferred to countries or organizations outside the EEA, appropriate safeguards are always in place. Any transfer of personal data outside the EEA to a recipient in a country that is not subject to an adequacy decision of the European Commission is subject to a data transfer agreement that includes (i) the standard contractual clauses issued by the European Commission or (ii) any other mechanism in accordance with the GDPR or other applicable data protection regulations.

2.4 WHAT RIGHTS DO YOU HAVE AS A DATA SUBJECT?

You have several rights:

  • You always have the right of access to your personal data. This allows you to check which data we process about you.

  • You always have the right to rectification of your personal data. This allows you to correct or supplement inaccurate or incomplete data.

  • You have the right to erasure of your personal data. This allows you to permanently delete data we process about you. We are not always obliged to delete your data upon request—this right applies only in the cases and to the extent provided by law.

  • You have the right to restriction of processing. This allows you to freeze the use of your data without deleting them. We are not always obliged to comply with such a request—this right also applies only in the cases and to the extent provided by law.

  • You have the right to object to processing. This allows you to oppose further processing. We are not always obliged to honor your objection—this right applies only when we process your data based on our legitimate interests.

  • You have the right to withdraw your consent at any time when processing is based on consent.

  • You have the right to object to the processing of your personal data for direct marketing purposes.

  • You have the right to data portability. This allows you to easily transfer, copy, or transmit your data from one controller to another. This right can only be exercised when the processing is based on your consent or on a contract with you.

If you wish to exercise any of the above rights, please contact us by email or post using the details below (see section 2.5).

When you submit a request to exercise your rights, we will first verify your identity using the appropriate and least privacy-intrusive method. We do this to prevent your data from falling into the wrong hands.

Exercising your rights is in principle free of charge. If your request is manifestly unfounded or excessive, we may charge you a reasonable fee in light of our administrative costs. In that same case, we may also choose not to comply with your request. You will always be informed of the reasons in such a case.

In any event, we will inform you within one month of the outcome of your request. In case of complex or multiple requests, this period may be extended by two months, but we will inform you within the month if such an extension is necessary.

2.5 WOULD YOU LIKE TO EXERCISE YOUR RIGHTS, OR DO YOU HAVE QUESTIONS OR A COMPLAINT?

To exercise your rights or if you have any questions or complaints about our processing of your personal data, you can always contact us:

  • by email: info@KPNIbelgium.com
  • by post:

    KPNIBelgium BV
    Attn: Data Protection Manager
    Brusselsesteenweg 155
    9090 Melle

You can also lodge a complaint with the supervisory authority of your place of residence. For Belgium, this is:

For more information on complaints and legal remedies, please consult the website of the Data Protection Authority: https://www.gegevensbeschermingsautoriteit.be/burger/acties/klacht-indienen.