Privacybeleid

1. Parties and Subject Matter

V&V Engineering BV, Bargiestraat 15/A, 8900 Ieper

VAT: BE 0477.071.635
Email: info@vvengineering.be
Phone: +32 (0) 57.30.19.03

V&V Engineering sets out this Privacy Policy to transparently inform Users about the website hosted at the following address: www.engineering.be (hereinafter referred to as the "Site"), and about how personal data is collected and processed by V&V Engineering.

The term "User" refers to any individual or legal entity that visits the Site or communicates with the Site in any way.

As the Data Controller, V&V Engineering determines all technical, legal, and organizational means and the purposes for the processing of Users' personal data. V&V Engineering commits to taking all necessary measures to ensure that the processing of personal data is carried out in accordance with the Act of 30 July 2018 on the Protection of Natural Persons with regard to the Processing of Personal Data (hereinafter referred to as the "Act") and the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of Natural Persons with regard to the Processing of Personal Data and on the Free Movement of such Data, and repealing Directive 95/46/EC (i.e., the General Data Protection Regulation (GDPR); hereinafter referred to as the "Regulation").

V&V Engineering is free to choose any individual or legal entity that processes Users' personal data on its behalf (hereinafter referred to as the "Processor" or "Subcontractor"). In such cases, V&V Engineering commits to selecting a Processor who provides sufficient guarantees regarding the technical and organizational security measures for the processing of personal data, in accordance with the Act and the Regulation.

2. Processing of Personal Data

The use of the Site by Users may lead to the collection of personal data. The processing of these data by V&V Engineering, in its capacity as Data Controller or by service providers acting on behalf of V&V Engineering, is carried out in accordance with the Act and the Regulation.

Personal data is processed by V&V Engineering, in line with the purposes listed below, through the following methods:

  • Newsletter subscription form
  • Contact forms
  • Product purchases
  • Creation of a login account
  • Cookies

3. Purpose of Personal Data Processing

In accordance with Article 13 of the Regulation, the purposes of the processing of personal data are communicated to the User. These purposes include:

  • Ensuring the performance of services offered on the website
  • Compliance with legal obligations regarding data retention

4. Personal Data That May Be Processed

The User agrees that during the visit and use of the Site, V&V Engineering may collect and process the following personal data:

Information provided by the users when filling out a contact or purchase form: Name, first name, address, company, position, phone number, email, interests

V&V Engineering collects and processes these personal data in accordance with the conditions and principles described in this Privacy Policy.

5. Consent

By accessing and using the Site, the User declares that they have read and given their free, specific, informed, and unambiguous consent for the processing of their personal data. This agreement relates to the content of this Privacy Policy.

Consent is given through the positive and active action by which the User has checked the box for the privacy policy in a 'hypertext link'. This consent is an essential condition for performing certain actions on the Site or for the User to enter into a contractual relationship with V&V Engineering. Any agreement that binds V&V Engineering and a User regarding the services and goods offered on the Site is subject to the acceptance of the Privacy Policy by the User.

The User agrees that the Data Controller, in accordance with the conditions and principles included in this Privacy Policy, collects and processes their personal data provided on the Site or in connection with the services offered by V&V Engineering for the aforementioned purposes.

The User has the right to withdraw their consent at any time. The withdrawal of consent does not affect the lawfulness of the processing based on the consent given prior to its withdrawal.

6. Retention Period of Users' Personal Data

In accordance with Article 13(2) of the Regulation, the Data Controller retains personal data only as long as is reasonably necessary to achieve the purposes for which they are processed.

In all cases, this period does not exceed two years.

7. Data Recipients and Disclosure to Third Parties

Personal data may be transmitted to employees, collaborators, subcontractors, processors, or suppliers of V&V Engineering to the extent that adequate guarantees are provided for the security of the data and to the extent that they cooperate with [client] for marketing products or providing services. They operate under the direct authority of V&V Engineering and are specifically responsible for collecting, processing, or outsourcing these data.

In all cases, the recipients of the data and those to whom the data are provided comply with the content of this Privacy Policy. V&V Engineering ensures that these data are only processed for the intended purposes and in a discreet and secure manner.

In the event that data is provided to third parties for direct marketing or prospecting purposes, the User will be informed in advance so that they can give their prior and express consent to the use of personal data for such purposes.

8. User Rights

The User can exercise their rights at any time by sending an email to the following address: info@vvengineering.be, or by sending a letter accompanied by a copy of their identity card to the following address: Bargiestraat 15/A - 8900 Ieper.

a. Right of Access

In accordance with Article 15 of the Regulation, V&V Engineering guarantees the User's right to access their personal data. The User has the right to access these personal data and the following information:

  • The categories of personal data concerned;
  • The recipients or categories of recipients to whom the personal data have been or will be disclosed;
  • If the recipients are based in third countries or are international organizations, the appropriate or suitable safeguards;
  • Where possible, the proposed retention period for personal data or, if not possible, the criteria used to determine this period;
  • The existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the Regulation, and, at least in such cases, meaningful information about the logic involved, as well as the significance and the expected consequences of such processing for the data subject.

The Data Controller may charge a reasonable fee based on administrative costs for any additional copies requested by the User.

When the User submits the request electronically (e.g., via email), the data will be provided in an electronic format in common use unless the User requests otherwise.

The copy of the data will be communicated to the User no later than one month after the request is received.

b. Right to Rectification

V&V Engineering guarantees the right to rectification and deletion of personal data to the User.

In accordance with Article 16 of the Regulation, incorrect, inaccurate, or irrelevant data may be corrected or deleted at any time. The User first makes the necessary changes themselves from their user account unless they cannot be independently carried out, in which case the request can be sent to V&V Engineering.

In accordance with Article 19 of the Regulation, the Data Controller informs each recipient to whom the personal data have been disclosed of any rectification of the personal data, unless such rectification proves impossible or involves disproportionate effort.
The Data Controller provides the data subject with information about these recipients upon request.

c. Right to Erasure

The User has the right to obtain the erasure of their personal data as soon as possible in the cases listed in Article 17 of the Regulation.

When the Data Controller has made the personal data public and is obliged to erase it pursuant to the preceding paragraph, the Data Controller, taking into account available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other data controllers processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

The preceding two paragraphs do not apply to the extent that processing is necessary:

  • For exercising the right of freedom of expression and information;
  • For compliance with a legal obligation requiring processing under Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • For the establishment, exercise, or defense of legal claims.

In accordance with Article 19 of the Regulation, the Data Controller informs each recipient to whom the personal data have been disclosed of any erasure of personal data or restriction of their processing, unless this proves impossible or involves disproportionate effort. The Data Controller provides the data subject with information about these recipients upon request.

d. Right to Restrict Processing

The User has the right to obtain a restriction of the processing of their personal data in the cases listed in Article 18 of the Regulation.

In accordance with Article 19 of the Regulation, the Data Controller informs each recipient to whom the personal data have been disclosed of any restriction of the processing carried out unless this proves impossible or involves disproportionate effort. The Data Controller provides the data subject with information about these recipients upon request.

e. Right to Data Portability

In accordance with Article 20 of the Regulation, Users have the right to receive their personal data from V&V Engineering in a structured, commonly used, and machine-readable format. Users have the right to transmit these data to another data controller without hindrance from V&V Engineering, in the cases provided for in the Regulation.

When the User exercises their right to data portability under the preceding paragraph, they have the right to have the personal data transmitted directly from one data controller to another, where technically feasible.

The exercise of the right to data portability is without prejudice to the right to erasure. This right does not apply to the processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller.

The right to data portability does not adversely affect the rights and freedoms of others.

f. Right to Object and Automated Individual Decision-Making

The User has the right to object to the processing of their personal data at any time due to their particular situation, including the automation of data carried out by V&V Engineering. In accordance with Article 21 of the Regulation, V&V Engineering will no longer process personal data unless there are compelling legitimate grounds for the processing that override the interests and rights and freedoms of the User, or for the establishment, exercise, or defense of legal claims.

When processing personal data for prospecting purposes, the User has the right to object to the processing of these data at any time. This may be done without any justification.

Where the User objects to the processing for direct marketing purposes, the personal data are no longer processed for these purposes.

g. Right to Lodge a Complaint

The User has the right to lodge a complaint regarding the processing of their personal data by V&V Engineering with the Data Protection Authority competent for Belgian territory. More information can be found on the website: https://www.autoriteprotectiondonnees.be.

The User can also lodge a complaint with the competent court.

9. Cookies

The Site uses cookies to differentiate Users and improve their browsing experience. Cookies are small files stored temporarily on the User's hard drive by their browser, which are necessary for the use of the Site. Cookies do not contain any personal information and cannot be used to identify anyone. A cookie often contains a unique identifier, generated randomly and stored on the device. Some cookies expire at the end of the User's visit, while others remain.

The information contained in the cookies is used to improve the Site, for example, by allowing the functionality of previously completed forms to be remembered or by analyzing the traffic on the Site.

The User can accept or refuse cookies by configuring their browser. Cookies can also be deleted by going to the options of the browser, but doing so may limit or prevent access to the Site.

For more information on cookies, the User can consult the following URL: http://www.allaboutcookies.org.

10. Security

V&V Engineering implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

In accordance with Article 32 of the Regulation, these measures take into account the state of the art, the implementation costs, and the nature, scope, context, and purposes of the processing, as well as the risks to the rights and freedoms of Users.

V&V Engineering always uses encryption technologies recognized as industry standards within the IT sector when transmitting or receiving data on the Site.

V&V Engineering has implemented the necessary security measures to protect and prevent the loss, misuse, or alteration of information received on the Site.

In the event that V&V Engineering becomes aware of any unlawful access to personal data stored on the Site or through third-party applications, or that the servers are accessed without authorization resulting in the realization of the identified risks, V&V Engineering undertakes:

  • To notify the affected User of the incident if it represents a high risk for their rights and freedoms;
  • To notify the competent authorities as soon as possible.

V&V Engineering will take all necessary measures to secure the personal data and limit any adverse effects associated with such a breach.

11. Communication to Third Parties

V&V Engineering may communicate Users' personal data to third parties to the extent that this is necessary for the provision of services and their optimization, including but not limited to processing payments, shipping, and marketing the products of V&V Engineering.

V&V Engineering will never share personal data with third parties without the User's consent unless it is required by law.

12. Amendments

V&V Engineering reserves the right to amend the provisions of this Privacy Policy at any time. Amendments will be published with a clear indication of the modification date at the top of the document. Users will be notified by email where possible.

13. Applicable Law and Jurisdiction

This Privacy Policy is governed exclusively by Belgian law. Any dispute will be submitted to the courts of the judicial district where V&V Engineering's registered office is located.

14. Contact

For any question or complaint related to this Privacy Policy, the User can contact the Data Controller at the following address: info@vvengineering.be.