CHARTER RELATING TO THE PROTECTION OF PERSONAL DATA
Because you attach great importance to the protection of your privacy, COHEA is committed to processing your Personal Data in a respectful and proportionate manner.
This charter (Charter) informs you of the way we process your Personal Data and of your rights, it contains the following information:
1. Scope of application
This Policy sets out how we process information that can identify you directly or indirectly (Personal Data) and the rights you have, in particular when using the www.cohea.be website (Site).
This Charter is up to date as of the date mentioned above. It is likely to be adapted, so we invite you to check its content regularly. Any substantial change to the Charter will be notified to you or will be the subject of an express mention on the home page of the Site.
Concepts such as “processing”, “controller”, “processor”, “data subject”, “personal data”, etc. have the meaning given to them by the General Data Protection Regulation (GDPR) (Regulation 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data).
The GDPR can be found at this address: https://eur-lex.europa.eu/legal-content/FR/TXT/?uri=CELEX:32016R0679.
2. Person responsible for the processing
The controller of your Personal Data is COHEA (COHEA or we).
If you have any questions about the processing of your Personal Data, please contact us by email at info@cohea.be.
3. Purposes of the processing
Your Personal Data is processed for specific purposes which differ depending on the type of relationship COHEA has with you.
In order for us to provide our services, you are required to provide us with certain Personal Data necessary for the performance of our services:
- as a customer of COHEA, the Personal Data allowing you to register on the Site and to benefit from our services;
- if you are a supplier, we need to have certain Personal Information about you in order to manage our contractual relationship with you.
COHEA processes your data only for the following purposes:
- if you are a customer of COHEA :
- enable the processing of your registration for our services on the Site, including making an appointment;
- to keep you informed of the development of COHEA’s activities.
- If you are a supplier :
- Communicating with you
- Managing our supplier relationship
- Establishing, performing and terminating our contracts for the supply of products and/or services
4. Legal basis for the processing
The processing of your Personal Data by COHEA is based on the following legal grounds:
a. Our contract with you
In most cases, we process your personal data as necessary to perform our contract with you, i.e. to provide you with our services and in particular to enable you to make an appointment via the Site.
We only collect data that is necessary for the performance of the services, i.e. data that enables us to communicate with you and to provide the requested services.
b. Our legitimate interest
In some cases, we may process your Personal Data because we have a legitimate interest in doing so.
This is particularly the case where we process your Personal Data in order to communicate with you or to provide you with information about our services. In this context, our legitimate interest will be the continuation and development of our business activities. This also includes “direct marketing”, i.e. the use of your email address to send you communications about our activities, because you have been our customer. You always have the possibility to object to receiving such communications (see article 7).
c. Your consent
In some cases, you may expressly give us your consent to process your personal data, for example when you only subscribe to our newsletter without registering on the Site. Once you have given your consent, you may withdraw it at any time.
5. Categories of Personal Data processed by COHEA
The categories of Personal Data that COHEA processes about you differ depending on the type of relationship COHEA has with you.
| Customers | – Contact information (name, first name, address, telephone and email) – Information about the COHEA services you use – Information relating to your use of the site (language, IP address, browser, etc.) – Financial information (purchase history) |
| Suppliers | – Contact details (surname, first name, address, telephone, fax and email) – Professional information (company, title/function, department, website) – Financial and banking information (account number, credit history, and other financial information) – Information to enable us to receive your products or services |
The Personal Data concerning you is always provided by you, when you make a purchase on the Site, or when you subscribe to our Newsletter.
6. Recipients of the Personal Data and guarantee in case of transfer to third countries
For the purposes described in Article 3, we may transfer your data to third parties (“recipients”):
- External service providers and in particular IT and hosting service providers;
In principle, your Personal Data will be stored in Belgium or in another country of the European Economic Area.
We may, however, be required to transfer your Personal Data to recipients outside the European Economic Area, in which case we will ensure that the recipient provides appropriate safeguards to protect your data to standards equivalent to those imposed by European legislation.
Your Personal Data will not be passed on to commercial partners for the purpose of commercial solicitation, unless you have expressly consented to this.
7. Duration of retention of Personal Data
We will retain your Personal Data for no longer than is necessary for the purposes for which it was collected.
8. Your rights regarding your Personal Data
You have the following rights with respect to the Personal Data we process about you:
a. Right of access
You have the right to know whether or not COHEA is processing Personal Data about you and, if so, to access it and obtain information about its processing.
b. Right of rectification
You have the right to rectify Personal Data concerning you if it is inaccurate or to complete it if it is incomplete.
c. Right to erasure
You have the right to request the deletion of your Personal Data when there is no longer any reason to process it.
d. Right to restrict processing
You have the right to request the restriction of the processing of your Personal Data, in which case we may only retain such Personal Data to the exclusion of any other form of processing.
e. Right to object
You have the right to object to the processing of your Personal Data. Where your Personal Data is processed for direct marketing purposes, you have the right to object to its processing in all circumstances.
f. Right to withdraw your consent
Where you have given your consent to the processing of your Personal Data, you have the right to withdraw it at any time, without prejudice to the lawfulness of the processing based on the consent given before its withdrawal.
g. Right to lodge a complaint with the Data Protection Authority
You have the right to lodge a complaint with the Data Protection Authority, under the conditions and within the limits set by the GDPR and any other legislation applicable to the processing of Personal Data. It can be contacted at the following contact details:
Data Protection Authority
Rue de la Presse, 35, 1000 Brussels
Tel: +32 (0)2 274 48 00
Fax: +32 (0)2 274 48 35
E-mail: contact@apd-gba.be
