1. INTRODUCTION

Polysto with registered office in Lokeren and registered in the Crossroads Bank for Enterprises with company number 0895050870 attaches great importance to the safe, transparent and confidential collection and processing of your personal data. In particular, we want to protect the information of, among other things, our customers, subcontractors and suppliers against, among other things, loss, leaks, errors, incorrect accesses or unlawful processing.

We want to inform you about the collection and processing of your personal data by means of this Data Protection Notice.

We ask that you carefully read this Data Protection Notice, as it contains essential information about how your personal data are processed and for what purpose.

By communicating your personal data you explicitly declare that you have taken note of this Data Protection Notice and expressly agree to it as well as to the processing itself.

2. SCOPE

This Data Protection Notice relates to all services provided by us and in general to all activities that we carry out.

3. PROCESSING RESPONSIBLE AND ITS COMMITMENTS

Polysto, with registered office in Lokeren and with company number 0895050870 is the controller of your personal data.

In the collection and processing of your personal data, we respect the Belgian regulations on the protection of personal data, as well as the General Data Protection Regulation (“GDPR”) from its entry into force on May 25, 2018..

4. PERSONAL DATA

Depending on your activities and your relationship with our company, you provide us with the following personal data: your identity and contact details (name, address, address, e-mail address, telephone and mobile phone number). For certain specific legal obligations (electronic attendance registration, 30bis declaration of work), it is possible that you provide us with additional information to register your presences (such as E-ID data, Limo number). The registration of your e-mail address is done via the website after leaving your email address to inform you of the latest news items.    We kindly inform you that you bear the responsibility for all information you provide us and that we rely on its accuracy. If your details are no longer up-to-date, please inform us by return.You are not obliged to communicate your personal data, but you understand that the provision of certain services or cooperation becomes impossible if you do not agree with the collection and processing.

5. PROCESSING PURPOSES AND LEGAL BASIS

5.1 Customer data

In the context of our services and our activities, we collect and process the identity and contact details of our customers and clients, their staff, employees, employees and other useful contacts. The purposes for these processing operations are the execution of agreements with our customers, customer management, accounting and direct marketing activities such as sending promotional or commercial information, sending mailings in connection with trade fairs and events. The legal grounds are the execution of the agreement, the fulfillment of legal and regulatory obligations (such as, for example, the 30bis declaration of works) and / or our legitimate interest.

5.2 Details of suppliers and subcontractors

We collect and process the identity and contact details of our suppliers and subcontractors, as well as their (sub) subcontractor (s), their personnel, employees, employees and other useful contacts. The purposes of these processing operations are the implementation of this agreement, the management of the suppliers / subcontractors, the accounting and direct marketing activities such as the sending of promotional or commercial information, the sending of mailings in connection with fairs and events. The legal grounds are the execution of the agreement, the fulfillment of legal and regulatory obligations (such as the mandatory electronic attendance registration, the 30bis declaration of work, the attendance list or other obligations in public procurement, etc.) and / or our legitimate interest (such as for direct marketing). For the electronic attendance registration, the E-ID data or the Limo number are also processed, if applicable. For direct marketing activities by e-mail (such as a newsletter or invitation for events), permission will always be requested and can also be withdrawn at any time

5.3 Data of personnel

We process the personal details of our employees in the context of our personnel management and payroll administration. In view of its specific nature, this processing is more extensively regulated in a Data Protection Policy for employees.

5.4 Other data

In addition to the data of customers, suppliers / subcontractors and staff, we also process personal data of others, such as possible new customers / prospects, useful contacts within our sector, network contacts, contacts of experts, etc. The purposes of these processing operations are in the interest of our activities, direct marketing and public relations. The legal basis is our legitimate interest or in some cases the execution of an agreement.

6. DURATION OF THE PROCESSING

The personal data is stored and processed by us for a period that is necessary in function of the purposes of the processing and in function of the (whether or not contractual) relationship that we have with you.Customer data and data from suppliers or subcontractors will in any case be removed from our systems after a period of seven years after the termination of the agreement or the project, except for these personal data that we have to keep for a longer period of time on the basis of specific legislation or case of an ongoing dispute for which the personal data are still necessary.

7. RIGHTS

In accordance with and under the terms of the Belgian privacy legislation and the provisions of the General Data Protection Regulation, we inform you that you have the following rights: – Right of access and inspection: you have the right to take cognizance of the data we have about you free of charge and to determine what it is used for.- Right to rectification: you have the right to obtain rectification (correction) of your incorrect personal data, as well as to complete incomplete personal data.- Right to data change or restriction: you have the right to request that we delete your personal data or limit its processing in the circumstances and under the conditions as determined by the General Data Protection Regulation. We may refuse the data change or limitation of any personal data that is necessary for us to perform a legal obligation, the execution of the agreement or our legitimate interest, and this as long as this information is necessary for the purposes for which it was collected.- The right to transfer data: you have the right to obtain the personal data you have provided to us in a structured, standard and machine-readable form. You have the right to transfer this data to another person responsible for the processing.- Right of objection: you have the right to object to the processing of your personal data for serious and legitimate reasons. Please note, however, that you can not oppose the processing of personal data that is necessary for us to perform a legal obligation, the execution of the agreement or our legitimate interest, and this as long as this information is necessary for the purposes for which they were collected.- Right of withdrawal of consent: If the processing of the personal data is based on the prior consent, you have the right to withdraw this permission. These personal data will then only be processed if we have a different legal basis for this.- Automatic decisions and profiling: we confirm that the processing of personal data does not include profiling and that you are not subject to fully automated decisions. You can exercise the afore mentioned rights by contacting Polysto. The contact person for this is: Mr Marc Noël with contact details marc@polysto.com, telephone +32 9 33 77 809We make every effort to handle your personal data in a careful and legitimate manner in accordance with the applicable regulations. If, nevertheless, you are of the opinion that your rights would be violated and you did not comply with your concerns within our company, you are free to file a complaint with:       Commission for the Protection of Privacy       Printing press 35, 1000 Brussels       Tel. 02 274 48 00       Fax machine. 02 274 48 35       E-mail: commission@privacycommission.be  You can also turn to a court if you believe that you would suffer damage as a result of the processing of your personal data.

8. TRANSFER TO THIRD PARTIES

Certain personal data collected by us will be transmitted to and possibly processed by third-party service providers, such as our IT supplier, accountant, auditor (Danny Coone, Plantinkaai 10/41 2000 Antwerp), as well as by the government (for example, the 30bis). – declaration of work, electronic attendance registration or competition for public contracts).It is possible that one or more of the above-mentioned third parties are located outside the European Economic Area (“EEA”). However, only personal data will be forwarded to third countries with an appropriate level of protection.The employees, managers and / or representatives of the above-mentioned service providers or institutions and the specialist service providers appointed by them must respect the confidential nature of your personal data and can only use this data for the purposes in which they were provided.If necessary, your personal data may be passed on to other third parties. This may be the case, for example, if we were reorganized in whole or in part, if our activities were transferred or if we were declared bankrupt. It is also possible that personal data must be passed on pursuant to a court order or to comply with a specific legal obligation. In that case, we will make reasonable efforts to inform you in advance about this communication to other third parties. However, you will recognize and understand that in certain circumstances this is not always technically or commercially feasible or that legal restrictions may apply.We will under no circumstances sell your personal data or make it commercially available to direct marketing agencies or similar service providers, unless with your prior consent.

9. TECHNICAL AND ORGANIZATIONAL MEASURES

We take the necessary technical and organizational measures to process your personal data according to an adequate level of security and to protect it against destruction, loss, forgery, modification, unauthorized access or notification by mistake to third parties, as well as any other unauthorized processing of this data. .In no case can Polysto be held liable for any direct or indirect damage resulting from incorrect or unlawful use by a third party of the personal data.

10. ACCESS BY THIRD PARTIES

With a view to the processing of your personal data, we grant access to your personal data to our employees, employees and appointees. We guarantee a similar level of protection by making contractual obligations enforceable against these employees, employees and appointees, which are similar to this Data Protection Notice.

11. STILL QUESTIONS?

If after reading this Data Protection Notice you have further questions or comments regarding the collection and processing of your personal data, you can contact Marc Noël by post to Polysto, Maesbossen 3B, 9160 Lokeren or by e -mail to marc@polysto.com.