The protection of the privacy of an individual is a fundamental right. In order to be able to provide you, our customer, with our services and products, it is necessary that we have some personal data. VAB aims to process personal data in a legal, fair and transparent manner. This privacy statement is intended to give you an understanding of the manner in which VAB processes personal data.
Personal data is any form of information about an identified or identifiable natural person. Examples of personal data are the name of a person, a photo, a video recording, a telephone number, a code, a password, a bank account number, the report of a conversation, a link with a company or other persons, an e-mail address, an audio recording, a chat conversation, social media messages, written correspondence, Internet-related browsing information, etc. This data is collected in several ways:
The collected data can be combined.
By processing, VAB means the collection, recording, organisation, storage, updating, alteration, retrieval, consultation, use, distribution, provision, compilation, combination, archiving, deletion and destruction of personal data. VAB only processes personal data on the basis of:
VAB may decide to process data in-house, or to entirely or partially delegate the processing to an external organisation. In this case, personal data will be forwarded to these third parties for processing under the responsibility of VAB. The transfer only takes place for the same processing purposes as those used by VAB itself. VAB ensures that these parties manage and process the data in a confidential and secure manner, in the same way as VAB. VAB enforces this contractually, monitors it, and is entitled to audit these parties or have them audited.
VAB processes personal data for specific purposes. VAB only processes the data that is required to achieve these processing purposes. VAB will not process any data that does not contribute to a previously defined purpose. The only exceptions to this are legal obligations. The processing purposes are documented in the ‘VAB - Register of processing activities’. This register documents the processing activities that take place under the responsibility of VAB:
This register is always available to the supervisory data protection authority.
A data receiver is a third party to which VAB supplies data without delegating any further processing. Third parties are natural or legal persons, government bodies, services or other bodies that are not involved in the processing of the data in question. VAB does not sell or pass personal data on to third parties, unless the person in question gives permission for this. VAB only transmits personal data without permission of the data subject where VAB is required to do so by law. Any transmission of personal data is documented in the ‘VAB - Register of processing activities’.
VAB retains personal data no longer than is strictly necessary for the achievement of the purpose. Some data must be retained for a period imposed by law (e.g. accounting documents). The retention periods are documented in the ‘VAB - Register of processing activities’.
By law, every person whose data is processed by VAB (i.e., the data subject or data subject) has several rights:
These rights can be exercised in 2 ways:
In order to exercise one or more rights, either in writing or via e-mail, and to prevent any unauthorised disclosure of personal data, the requester must provide proof of identity, such as, preferably, the front of the identity card. VAB will respond to the request within a period of up to 7 days following receipt of the written request or e-mail. The regulations for the protection of privacy can be found in the General Data Protection Regulation. This legislation defines the obligations of VAB with regard to the processing of personal data. More information about these regulations can be obtained from the website of the Commission for the Protection of Privacy: www.privacycommission.be. Customers who are unhappy because VAB does not meet their privacy expectations always have the right to file a complaint with the data protection authority through an e-mail to firstname.lastname@example.org.
VAB sometimes makes reference to third parties (websites, social media, event organisers, etc.) whose terms and conditions do not fall within the scope of this privacy statement. In these cases, the customer should personally take the initiative to request information from these third parties about their policy regarding the protection of personal data.
Cookies are small text files that can be stored on your computer when you visit a website. Information is saved in this text file, such as, for example, your language preference for a website. If you then visit the website again later, this cookie is sent to the website again. In this way, the website recognises your browser and is able to remember, for example, your language preference.
Cookies usually also have an expiry period. For example, some cookies are automatically deleted when you close your browser (so-called session cookies), while others remain on your computer for a longer period of time, sometimes even until you delete them manually (so-called persistent cookies).
VAB is using four types of cookies:
If you want to know which cookies have been placed on your device, you can use a setting in your browser. You can obtain more information about how you can do this through the links below.
If you want to know which cookies you can remove from your device, you can use a setting in your browser. You can obtain more information about how you can do this through the links below.