Privacy Policy

Purpose of the collection of personal data
 

FEFANA may process your personal data for the following purposes:

To provide you with various information or services (sending newsletters, white papers, personalised offers, competitions, promotional offers)

The recipients of your personal data

Your personal data is kept by FEFANA. However, it may also be communicated to employees of our company or to service providers only at our request, following our instructions and to the exclusion of any other use.

Transfer of personal data outside the European Union

Personal data may only be transferred outside the European Union to countries that apply a data protection policy corresponding to the one in force in the European Union.

Retention and deletion of your personal data

The personal data collected will be kept for the time necessary to achieve the purposes. Once the purposes have been achieved, it will be deleted or made anonymous.

Protection of your personal data

FEFANA is committed to protecting your personal data against unauthorised access and manipulation, thanks to organisational and technical measures. Your personal data is processed confidentially by those persons who are authorised to do so and only for the purpose for which it is required.

However, you should be aware that nowadays there are real risks of leaks and breaches of personal data.

In the event of an accidental or malicious leak, and in accordance with the General Data Protection Regulation (GDPR), (company name) undertakes to notify the Data Protection Authority directly.

Your rights regarding your personal data

The General Data Protection Regulation (GDPR), which came into force in May 2018 in Belgium, stipulates that when using your personal data, you have certain rights at all times:

• Right to erasure of your data
• Right to the portability of your data
• Right to access your data
• Right to rectification of your data
• Right to limit the processing of your data
• Right to object

In accordance with Article 12 of the GDPR, in order to exercise your rights, you must contact the entity responsible for processing your personal data in writing, electronically or orally. A copy of your identity card is also required and will not, however, be valid orally.

From the date of receipt of your request, the entity responsible for the processing of your personal data must inform you of the measures relating to your case within a maximum period of one month. Note that in some cases where the request is more complex, the response time may be up to three months. If this is the case, you should be informed and the controller of your personal data should also provide you with the reasons for the extension.

In the event that the entity responsible for processing your personal data does not comply with your request, it must inform you of this and give you the reasons for its refusal within one month of receiving your request.

You then have the right to seek legal redress by lodging a complaint with the Data Protection Authority (DPA).