PRIVACY POLICY

This Privacy Statement provides you with detailed information regarding the protection of your personal data by NoBuCo, a private limited company under Belgian law and registered in the Crossroads Bank for Enterprises with the number 0795.445.134 (“we” or “us”) under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals concerning the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC (“GDPR”).

As a controller, we are responsible for processing your personal data in the context of our activities. The purpose of this Privacy Statement is to inform you about what personal data we process about you, the reasons for which we process and share this data, how long we keep it and how you can exercise your rights.

You can reach our representative of the GDPR at: privacy@NoBuCo.tech .

1. Which ones?

We collect and use your personal data to the extent necessary in the context of our activities and to achieve a high standard of products and services.

We process different categories of personal data, including:

identification data (e.g., name, first name, IP address);
contact details (e.g., postal and email address, telephone number);
‍employee details (e.g., account number, age, gender, seniority);

2. How, why and on what base?

• when you communicate with us by e-mail (we will collect your surname, first name, telephone number, fax number, postal, and e-mail address) or when you register to use our services (we ask for your surname, first name and e-mail address ) to transact business with you and provide requested services; the legal basis used for this is Article 6, 1, b) of the GDPR, in particular, the performance of a contract to which you are a party or taking steps at your request before entering into a contract; or

when you visit our website for marketing purposes; the legal basis used for this is Article 6, 1, a) of the GDPR, in particular, consent; or
when you apply for one of our vacancies for recruitment purposes; the legal basis used for this is Article 6, 1, a) of the GDPR, in particular, consent; or
when you work for us for purposes of managing the client/employer-contractor/employee relationship; the legal basis for this

3. With whom do we share your personal data?

To fulfill the purposes mentioned above, we only share your personal data with:

our employees;
service providers who provide services on our behalf;
financial and judicial authorities, governmental or public authorities, upon request and to the extent permitted by law;
certain regulated professions such as lawyers, notaries, or auditors.

4. Transfers of personal data outside the European Economic Area (“EEA”)

Your data will not be subject to an international transfer from the EEA to a country outside the EEA.

5. How long do we keep your personal data?

We do not store your personal data longer than necessary for the purpose for which it was provided or required by law, in particular:

for the execution of an agreement of which you are a party or to take measures at your request before an agreement is concluded: 10 years after the termination of the agreement; and
for marketing purposes: until you let us know that you no longer wish to receive our mailings or when your email address is no longer in use; and
for recruitment purposes: we will update our file every three years; and
for the management of the client/employer-contractor/employee relationship: as long as keeping the data is necessary for the implementation of legal requirements towards the client/employer-contractor/employee

6. Automatic decision making

Your personal data provided to us will not be used for automated decision making, including profiling

7. What are your rights and how can you exercise them?

Both, where appropriate, concerning the execution of the agreement to which you are a party and, where applicable, concerning the consent you have given for marketing purposes, you have the following rights with concerning personal data:

Right of access, i.e., you have the right to obtain confirmation as to whether or not your personal data is being processed and, if that is the case, to obtain access to that personal data. You can also get a copy of your data.
You can exercise this right as follows:
Concerning the execution of the agreement to which you are a party: sending an email to privacy@NoBuCo.tech;
Concerning the consent you have given for marketing purposes: sending an email to privacy@NoBuCo.tech ;
Right to rectification, i.e., you have the right to obtain the rectification of inaccurate personal data and the completion of incomplete personal data.
Right to erasure, i.e., you have the right to obtain the erasure of your personal data without undue delay in the following cases:
Right to restriction of processing, i.e., you have the right to obtain restriction of processing in the following cases:
Right to object to processing, i.e., you have the right to object to the processing of your personal data for reasons specific to your situation. We will then cease the processing unless there are compelling legitimate grounds that outweigh your interests, rights and, freedoms or that are related to the establishment, exercise, or defense of legal claims. Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, including profiling related to direct marketing. We will then no longer process your personal data for these purposes.
Right to portability, i.e., you have the right to obtain your personal data in a structured, commonly used and, machine-readable form and he has the right to transfer that data to another party, if: