Privacy Policy
September 2019
Privacy Policy Summary
This privacy policy explains what information we gather about you, what we use that information for and who we give that information to. It also sets out your rights in relation to your information and who you can contact for more information or queries.
- Some Practical definitions
- Who is the controller of your personal data?
- For which purposes are your personal data collected by GDB?
- Which personal data are processed by GDB?
- To whom are the collected personal data transmitted?
- How and for how long are your personal data stored?
- What is GDB’s policy on the collection and storage of personal data of minors?
- How to exercise your rights?
- How does GDB protect your personal data?
Some Practical definitions
What are personal data?
‘Personal data’ means all information concerning an identified natural person or a natural person who is directly or indirectly identifiable by reference to an identification number or one or several elements specific to him.
What does the processing of personal data entail?
‘Processing’ means any operation or set of operations which is/are performed on personal data, whether or not by automated processes, such as the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
What is a controller?
A ‘controller’ means the natural or legal person, public authority, agency or other body who/which, alone or jointly with others, collects and processes personal data.
What is a recipient?
A ‘recipient’ means the natural or legal person, public authority, agency or other body who/which receives personal data that are disclosed, regardless of whether or not it is a third party.
What is an authorised third party?
An ‘authorised third party’ means a natural or legal person, public authority, agency or body who/which is placed under the direct authority of the controller or of the processor, which is authorised to process the personal data.
Who is the controller of your personal data?
The party responsible for the processing of your personal data (i.e. the controller) is the company by the name of Global Diagnostics B, with registered office at Vlasmeer 5, 2400 Mol, Belgium.
For which purposes are your personal data collected by GDB?
The only data collected are those supplied by you through the contact form and for which we need your consent. Your data shall be processed in compliance with the collection purposes set out in the data collection forms. These purposes are detailed below:
In the context of the performance of a contract or to take steps prior to entering into a contract:
° The purchase of products and services;
° Payment of the products and services ordered;
° Building a customer database to follow up on and deliver services;
° Customer satisfaction surveys;
° Contacts by a customer account employee.
As part of the User’s or Client’s consent:
° Sending out newsletters, demands and personalised marketing messages geared to your preferences and your areas of interest.
° Management of quotes, surveys and polls among Users and Clients regarding our Services or the content of the website.
° Recommending products and the personalisation of the website interface
As part of the body’s legitimate interest to enable it to ensure the continuity of service delivery:
° To reply to enquiries.
Which personal data are processed by GDB?
Where data are collected, the Client shall be informed if certain data must be provided on an compulsory basis or whether they are optional. Failing the supply of the said data, access to and use of the services by the Client shall be impossible, with GDB unable to handle your requests or fill your orders.
In all cases, GDB undertakes to process all data collected in compliance with applicable regulations, with particular reference to the Act of 8 December 1992 on personal privacy protection in relation to the processing of personal data, as amended, and to Regulation no. 2016/679.
In addition, GDB may have cause to collect personal data for other purposes, for which it shall seek the prior consent of the Data Subjects.
GDB may collect the following data:
° Identity: surname, first name, address, telephone number (landline or mobile), fax number, e-mail address, date of birth.
° Contact details: the messages sent in across the website through the contact forms, any correspondence we might receive from the Client/user.
° Data concerning the commercial relationship: requests for documentation, trial applications, products or services purchased, quantities, amounts, frequency, delivery address, purchase history, products returned, origin of the sale (seller, agent) or of the order, correspondence exchanged with the Client and after-sales services;
° Data concerning the payment of bills: terms of payment, discounts granted, information concerning the credits taken out (amounts and duration, name of the financial institution), sums paid, receivables, reminders and balance amounts;
° Data concerning the payment methods: bank account or postal account number, transaction numbers, cheque number, bank card numbers;
To whom are the collected personal data transmitted?
GDB and its suppliers
The personal data collected are solely intended for GDB and its suppliers. Where GDB were to assign the data processing activities to suppliers, the latter shall be selected based on the fact that they provide adequate assurances regarding their implementation of appropriate technical and organisational measures, particularly in terms of reliability and security measures.
° Data transferred to the authorities and/or government agencies
In compliance with the applicable regulation, the data may be transmitted to the competent authorities in response to their request, and particularly to the government agencies, solely in order to comply with the statutory obligations, and requests from the officers of the law, public officers and the bodies tasked with recovering debts.
How and for how long are your personal data stored?
GDB keeps your personal data on record in a protected environment for the length of time necessary to accomplish the purposes for which they were collected or for the minimum retention period set out under applicable civil and commercial law.
Certain personal data may be stored by GDB for longer periods of time solely for archiving purposes, in the public interest, for the purposes of scientific or historical research or for statistical purposes.
The data are stored strictly for the length of time required for the management of the commercial relationship. The data processed with your consent as part of prospecting activities may not be stored for longer than 3 years after you last contacted us at your own impetus or in the context of you filing an objection.
What is GDB’s policy on the collection and storage of personal data of minors?
GDB neither collects nor stores personal data concerning minors without obtaining their permission and the verifiable consent of their parents, in the awareness that the holders of the parental authority over the minor are within their rights to request information concerning their child and to request for this information to be deleted.
How to exercise your rights?
In compliance with Regulation (EU) 2016/679 on the protection of personal data, the Client has the following rights in respect of his data: right of access, right to rectification, right to erasure (‘right to be forgotten’), the right to object, the right to restriction of processing, the right to data portability, and the right not to be subjected to decisions based solely on automated processing.
The Client may also have complementary rights under national law (e.g. defining instructions as to the retention, erasure and the communication of your personal data after your death).
For reasons to do with his specific situation, the Client also has the right to object to having his data processed.
To exercise these rights, the Client may contact GDB using the contact form on the website.
Except where the Client were to fail to comply with the provisions set out above, the Client is within his rights to file a complaint with the DPA (Data Protection Authority).
The Belgian Data Protection Authority is GDB’s supervisory authority and can be contacted via:
Belgian Data Protection Authority
Commissie voor de bescherming van de persoonlijke levenssfeer
Rue de la Presse 35 / Drukpersstraat 35
1000 Bruxelles / 1000 Brussel
Tel. +32 2 274 48 00
e-mail: contact@apd-gba.be
Website: www.dataprotectionauthority.be
How does GDB protect your personal data?
In light of the fast-paced developments in terms of technology, implementation costs, the nature of the data to be protected as well as the risks to the rights and freedoms of natural persons, GDB puts in place appropriate technical and organisational measures in order to ensure the confidentiality of the personal data collected and processed, and a level of security that is adapted to the risk.
What happens when changes are made to the privacy policy?
If GDB were to amend the present Policy, or if so required under applicable statute law or regulations, any such amended versions shall be published on our websites, taking effect from the time of their publication.
As such, we would ask you to please check this Policy whenever you visit the websites to read the latest version of the present Privacy Policy, which is permanently available on our websites.
For further information regarding the protection of his personal data, the Client may also consult the website of the DPA (Data Protection Authority).