25-8 complies with the legislation related to data protection, including the European Regulation 2016/679 dated 27 April 2016 concerning the protection of private data (hereafter abbreviated to "GDPR" meaning General Data Protection Regulation) and all other appropriate national laws or regulations concerning the processing of personal data or the protection of privacy.
1. 25-8 as a processing manager
As a processing manager we are alone and autonomous in determining the purpose and methods of processing your personal data.
You are free to contact us at any time in any the following ways: 25-8 | Sint-Jorisstraat 96, 8730 Beernem, via https://www.25-8.eu, our e-mail address firstname.lastname@example.org or by telephone on +32 (0)50 28 98 10.
2. Personal data processed by us
Below you can find a summary of the different types of personal data that we process per relevant category:
2.1 Website visitors
2.4 People who contact us
We do not process sensitive information, such as details of your racial or ethnic origins, political beliefs, sexual preferences and health. Nor do we collect, process or retain personal details of minors unless permitted to do so by a parent or legal guardian.
3. For what purpose and for what reason do we process personal data?
25-8 processes your personal data in a lawful, honest and transparent manner. We aim to limit the processing of your personal data to what is strictly necessary to achieve and execute the purposes as described below.
3.1 Execution of the agreement
Within the context of executing an agreement made with 25-8 we can process data for the following purposes:
3.2 Legal duty
25-8 may process your personal data to respond to questions from regulatory or legislative bodies where required.
3.3 Legitimate interest
When it is not strictly essential to achieve the above goals, 25-8 may also process your personal details for other reasons, including the achievement of its legitimate interests. In such cases 25-8 will always aim to achieve a good balance between the need to process your details and protection of your privacy. In particular we may process your personal data for the following reasons:
4. For how long do we store personal data?
We do not store your personal details for any longer than is strictly necessary to carry out the task for which your details were collected. The length of storage may therefore differ and can be very short.
In addition, the length of storage is also determined by law. For example, in order to meet our accounting and fiscal obligations we are required to keep your invoicing details for a minimum of 7 years. Furthermore, certain details are kept for judicial reasons as evidence in possible disputes, up to a maximum of 10 years after termination of your contract. Access to such archived information is naturally restricted.
5. Sharing personal data with third parties
25-8 only shares personal data with third parties if this is necessary to carry out our agreement or to satisfy a legal obligation (as described above).
For any companies who process your data on our behalf, we agree a processing agreement in compliance with article 28 GDPR in order to ensure the same level of security and confidentiality of your details. 25-8 remains responsible for such processing.
6. Cookies or similar techniques used by us
25-8 only uses technical and functional cookies, as well as analytical cookies that do not affect your privacy. A cookie is a small text file that is stored on your computer, tablet or smartphone the first time you visit this website. The cookies that we use are essential for the technical operation of the website and your convenience as a user. They ensure that the website works properly and remembers information such as your preferences. This also helps us to optimise our website. You can stop cookies by setting your internet browser in such a way that it no longer stores these cookies. Furthermore, you can remove all information that has been previously stored via the settings of your browser.
7. Your rights as the person concerned
You have the right to view, update or correct your personal data and the right to remove your personal data as long as this respects data protection laws. You also have the right to withdraw any permission for the processing of data or to object to the processing of your personal data by 25-8 and you have the right to data transfer. This means that you may send us a request to send you the personal details that we have about you in a computer file to you or another organisation specified by you.
You may send a request at any time to email@example.com in order to exercise the above written rights in accordance with data protection laws.
In order to be sure that the request for inspection is made by you we do ask you to send a copy of your identity card along with your request. In this copy you are free to conceal your passport photo, MRZ (machine readable zone, the zone with numbers on the back of your passport), card number and national security number. This is to protect your privacy. We will respond to your request as quickly as possible, and within a maximum of 30 days.
You are free to send a complaint to the Data Protection Authority by post to Data Protection Authority, Rue de la Presse 35, 1000 Brussels, or by e-mail to firstname.lastname@example.org or by telephone on +32 2 274 48 00 and ask for first line support on +32 2 274 48 78.
8. How we keep your personal data safe
25-8 takes the protection of your data seriously and takes appropriate organisational and technical measures to secure the processing of personal data, in order to prevent abuse, loss, unauthorised access, unwanted publication and unauthorised changes.