PRIVACY POLICY

Presentation

UIRR (Rue Montoyer 31 box 11, 1000 Brussels) takes the protection of your personal data very seriously.
This Privacy Policy tells you how we collect, store, use and disclose your personal data when you interact with us, by email, on the web or in any other way.

What does this Privacy Policy cover?

This Privacy Policy covers the processing of your personal data that we collect when you access or use our website, or when you contact us in any way. We collect data that identifies you as an individual ("personal data"), as explained in more detail below.

Personal data you provide us when you use our website

We collect the personal data you choose to provide us with, for example, in registration forms (to receive our Newsletters for example). If you contact us via our website, we will keep a record of our correspondence.

Data that we automatically collect

When you visit our website, we collect data about your device, such as the IP address of your device, the reference website, the pages visited by your device and the time your device visited our website.

Purposes of the processing of your data

We will use the data collected through our website for the following purposes:
for the administration of our website, our activities, and for internal operations, such as troubleshooting, data analysis, statistics and surveys;
to improve our website to ensure that the content is presented in the most effective way for you;
as part of our efforts to ensure the security of our website.
We may also use your personal data to communicate with you by e-mail and, possibly, by other means, for example regarding events and services that we think may be of interest to you. However, you can always unsubscribe from these communications at any time (see the "Your Rights" section below).

Do we share and communicate your data with third parties?

We do not sell your personal data to anyone.

Protection of UIRR: we reserve the right to access, read, preserve and disclose all data necessary to comply with law or court order; to enforce or apply our agreements with you and other agreements; or to protect the rights, property or safety of UIRR, of our employees, our users or others (for example our members).

Disclosure to law enforcement:   in certain circumstances, we may be required to disclose your personal data in response to valid requests from public authorities, including to meet national security or law enforcement requirements.

Are your personal data secure?

We use appropriate technical, organizational and administrative security measures to protect any information we hold in our files against loss, misuse and unauthorized access, disclosure, alteration and destruction. However, no company can guarantee complete security; unauthorized introduction or use, hardware or software failure and other factors may compromise the security of the user's data at any time.

Linked sites

For your convenience, hypertext links may be displayed on the website, which refer to other websites (the "Linked Sites"). We are not responsible for the privacy practices of the Linked Sites or companies that we do not own or control, and this Privacy Policy does not apply to such Linked Sites or companies. The Linked Sites may collect data in addition to the data we collect on the website. We do not endorse any of these Linked Sites, the services or products described or offered on these Linked Sites or any content included on the Linked Sites. We encourage you to research and read the Privacy Policy of each Linked Site you visit in order to understand how the data collected about you is used and protected.

Children

We do not knowingly collect neither solicit personal data from persons under 13 years of age (in Belgium). If you are under 13 years of age, please do not send us any personal data about yourself.

Your rights regarding the protection of your personal data

You can at any time choose not to provide us with personal data, but then you may not be able to take advantage of some of the features of our website.

What are your rights?

The exercise of your rights is subject to certain exceptions designed to safeguard the public interest (e.g. the prevention or identification of crimes) and our interests (e.g. professional secrecy).
With respect to the personal data that we process as controller, here is a list of your rights:

1.  Withdrawal of your consent

You may withdraw your consent in cases where the processing is based on consent (Article 7).
To withdraw your consent, either you press the « unsubscribe » button present in all our communications or you send your request by e-mail (headoffice.brussels@uirr.com).

2.   Right of accessing your personal data (Article 15)

You can ask us if we process personal data concerning you and, when this is the case, you can ask us to deliver you a copy of the personal data being processed.
If you submit your request by e-mail, we will provide you with the information in a commonly used electronic form, unless you request otherwise, at the address you have mentioned to us,
provided that this address is valid, otherwise we will not be able to reply to you.
If you submit your request by post, we will provide you with the information by post, unless you request otherwise, to the address you have given us, provided that this address is valid,
otherwise we will not be able to reply to you.
The first copy is free of charge. For any additional copy requested, we may charge a reasonable fee based on our administrative costs.

3. Right of rectifying your personal data (Articles 16 and 19)

You may request us to rectify any personal data concerning you that is inaccurate or incomplete, including by providing a supplementary declaration.
Your request for rectification must be justified and accompanied by a valid proof.
If we are the data controller of your personal data, we will notify each recipient to whom the personal data have been communicated of this rectification of personal data, unless such
communication proves impossible or requires disproportionate efforts. If you request it, we will provide you with information about these recipients.

4. Right of erasing your personal data (Articles 17 and 19)

You may ask us to erase any personal data concerning you for which the legal conditions for processing no longer exist.
Your request for erasure must be justified and accompanied by valid proof.
If you ask us to erase your personal data, we will do our utmost to erase them promptly and stop using them, unless the retention of such personal data is necessary to comply with our legal
obligations, resolve disputes and enforce our agreements. In addition, we may use personal data in aggregate and anonymous form that does not identify any individual.
If we are the data controller of your personal data, we will notify each recipient to whom the personal data have been communicated of this erasure of personal data, unless such communication
proves impossible or requires disproportionate effort. If you request it, we will provide you with information about these recipients.

5. Right to restrict processing (Articles 18 and 19)

You may ask us to restrict the way we handle your personal data
Your request for processing restriction must be justified and accompanied by valid proof.
If we are the data controller of your personal data, we will notify each recipient to whom the personal data have been communicated of this restriction on the processing of personal data, unless
such communication proves impossible or requires disproportionate effort. If you request it, we will provide you with information about these recipients.

6. Right to data portability (Article 20)

You can ask us for a copy of the personal data you have provided to us, and you can ask us to transmit these data directly to another controller which you specify.
For information, this refers only to (1) the personal data you have provided to us, which we will produce in a structured, commonly used and machine-readable format, and (2) cases where (a) the
processing is based on your consent or on a contract, and (b) the processing is carried out using automated processes.
Your request will specify the recipient of this copy, namely either you (at the address we have provided, provided that this address is valid, otherwise we will not be able to reply to you), or
another controller that you specify precisely (address, e-mail address and, if applicable, website).

7. Right to object to the processing of your data (Article 21)

You may object to the processing of your personal data for reasons related to your particular situation.
Your request for objection must be justified and accompanied by valid proof

8. Objection of processing for prospection or direct marketing purposes (Article 21(2))

You may object to the processing of your personal data for prospection or direct marketing purposes, including profiling insofar as it is related to such prospection or direct marketing.
Your objection request must clearly specify the processing operations to which you object, otherwise we will not be able to apply your request.

9. Refusal to be the subject of a decision based exclusively on automated processing, including profiling (Article 22)

You may object to be the subject of a decision based exclusively on automated processing, including profiling.
Your opposition request must clearly specify the processing to which you object, otherwise we will not be able to apply your request.

10.  Complaint (Article 77)

If necessary, you can file a complaint with the data protection authority (for Belgium: https://www.autoriteprotectiondonnees.be/contact).

11.   Legal action (Articles 78 and 79)

You can decide to take legal action.

How to exercise your rights? - Admissibility of the request

To enable us to process your request and respond to you, you will write to us either by e-mail at headoffice.brussels@uirr.com or by post to our postal address.
To be admissible, this message or letter must:

1.   be written in a Belgian national language or in English,
2.   be accompanied by a valid proof of your identity and a valid address,
3.   describe precisely the purpose of your request, which will be accompanied, if applicable, by a valid proof of your request (e.g. in the case of a request for rectification)
4.   indicate a reply address (e-mail or postal mail) located in the European Union.
NOTE: Any request that does not meet all of these conditions cannot be processed and will be considered as not having been received.
            If you are under 13 years of age (in Belgium), the consent must be given or authorised by the holder of the parental responsibility for you.
NOTE: In the event that your request is not admissible, we will confirm it to you within one month of the request, provided we have a valid address, otherwise we will not be able to answer you back.

How to identify yourself?

If you are a Belgian citizen, we ask for a copy of your identity card (both sides).
If you are not a Belgian citizen, we ask for a full copy of your identity card or passport.
If you are under 13 years of age (in Belgium), the consent must be given or authorized by the person who is the holder of parental responsibility for you; in this case, we therefore request (1) a copy of the identity card (both sides) of the holder of parental responsibility, and (2) a valid proof that this person is indeed the holder of parental responsibility for you.
If necessary, we reserve the right to ask you for additional proof of identification.

Our answer to your request

In the event that your request is not admissible (see point 2 above), we will confirm it to you within one month of the request, provided we have a valid address, otherwise we will not be able to answer you back.
If your request concerns the processing of personal data for which we are not the data controller, we will reply that you must send your request to the data controller of your personal data and we will then close your request.
If your request is admissible, we will process it in accordance with the provisions of the GDPR Regulation and will reply to you within one month of the request at the address you have given us, provided that this address is valid, otherwise we will not be able to reply to you.