This Data Protection Notice has been prepared in cooperation with
the law firm Schoups, www.schoups.be

DATA PROTECTION Notice

THIERS-HORIZON N.V.

1. Introduction
THIERS-HORIZON N.V. with its registered office at Brechtsebaan 116 – 2900 Schoten and registered with the Crossroads Bank for Enterprises with enterprise number BE0404667766 attaches great importance to the safe, transparent and confidential collection and processing of your personal data. In particular, we wish to protect the data of our customers, subcontractors and suppliers, among others, against loss, leaks, errors, unauthorised access or unlawful processing.
We would like to inform you by means of this Data Protection Notice about the collection and processing of your personal data.
We ask that you read this Data Protection Notice carefully, as it contains essential information on how your personal data are processed and for what purpose. By communicating your personal data, you explicitly declare to have taken note of this Data Protection Notice and you also explicitly agree to it, as well as to the processing itself.

2. Scope
This Data Protection Notice relates to all services provided by us and in general to all activities we carry out.

3. Controller and its commitments
THIERS-HORIZON N.V., with registered office at Brechtsebaan 116 – 2900 Schoten and with company number BE0404667766, is the controller of your personal data.
When collecting and processing your personal data, we respect the Belgian regulations on the protection of personal data, as well as the General Data Protection Regulation (‘GDPR’) as of its entry into force on 25 May 2018.

4. Personal data
Depending on your activities and your relationship with our company, you will provide us with the following personal data: your identity and contact details (name, title, address, e-mail address, telephone and mobile phone number). For certain specific legal obligations (electronic attendance registration, 30bis declaration of works), you may provide us with additional data to register your attendance (such as E-ID data, Limo number). We also collect : financial (identification) data, image or sound recordings.

We kindly remind you that you are responsible for all the data you provide us with and that we trust its accuracy. Should your data no longer be up-to-date, please inform us by return.

You are not obliged to communicate your personal data, but you understand that the provision of certain services or cooperation becomes impossible if you do not consent to its collection and processing.

5. Processing purposes and legal basis
5.1 Customer data
As part of our services and activities, we collect and process the identity and contact data, personal identification data, image and sound recordings, financial data of our customers and clients, their staff, employees, appointees and other useful contacts. The purposes for this processing are the performance of agreements with our clients, customer management, accounting and direct marketing activities such as sending promotional or commercial information customer management, work planning, dispute management. The legal grounds are the performance of the agreement, the fulfilment of legal and regulatory obligations (e.g. 30bis declaration of works) and/or our legitimate interest.

5.2 Data of suppliers and subcontractors
We collect and process the identity and contact data, personal identification data, image and sound recordings, financial data of our suppliers and subcontractors, as well as their subcontractor(s) (if any), their staff, employees, appointees and other useful contacts. The purposes of this processing are the performance of this agreement, supplier/subcontractor management, accounting and direct marketing activities such as sending promotional or commercial information supplier management. The legal grounds are the performance of the agreement, the fulfilment of legal and regulatory obligations (such as, for example, the mandatory electronic attendance registration, the 30bis declaration of works, the attendance list or other obligations in public procurement, etc.) and/or our legitimate interest (such as for direct marketing). For electronic attendance registration, E-ID data or the Limosan number are also processed where applicable. For direct marketing activities by e-mail (such as a newsletter or invitation to events), consent will always be requested and can also be withdrawn at any time.

5.3 Staff data
We process our employees’ personal data as part of our personnel management and payroll processes. Given its specific nature, this processing is regulated more comprehensively in an Employee Data Protection Policy.

5.4 Other data
Besides the data of customers, suppliers/subcontractors and staff, we also process personal data of others, such as potential new customers/prospects, useful contacts within our industry, network contacts, expert contacts, etc. The purposes of this processing are in the interest of our operations, direct marketing and public relations. The legal basis is our legitimate interest or in some cases the performance of a contract.

6. Duration of processing
Personal data will be kept and processed by us for a period necessary in function of the purposes of the processing and in function of the relationship (contractual or otherwise) we have with you.
Customer data and data of suppliers or subcontractors will be deleted from our systems in any case after a period of 12 years after the termination of the agreement or project, except with regard to such personal data that we are required to keep for a longer period on the basis of specific legislation or in case of an ongoing dispute for which the personal data are still necessary.

7. Rights
In accordance and under the terms of Belgian privacy legislation and the provisions of the General Data Protection Regulation, we inform you that you have the following rights:

– Right of access and inspection: you have the right to access the data we hold about you free of charge and to find out what it is used for.
– Right to rectification: you have the right to obtain rectification (correction) of your incorrect personal data, as well as to complete incomplete personal data.
– Right to data erasure or restriction: you have the right to request us to erase or restrict the processing of your personal data in the circumstances and under the conditions stipulated by the General Data Protection Regulation. We may refuse the data erasure or restriction of any personal data necessary for us to fulfil a legal obligation, the performance of the contract or our legitimate interest, and for as long as this data is necessary for the purposes for which it was collected.
– Right to data portability: you have the right to obtain the personal data you have provided to us in a structured, common and machine-readable form. You have the right to transfer this data to another data controller.
– Right to object: you have the right to object to the processing of your personal data for serious and legitimate reasons. However, please note that you cannot object to the processing of personal data necessary for us to fulfil a legal obligation, the performance of the contract or our legitimate interest, and for as long as this data is necessary for the purposes for which it was collected.
– Right to withdraw consent

: If the processing of personal data is based on prior consent, you have the right to withdraw this consent. These personal data will then only be processed if we have another legal basis for doing so.
– Automated decisions and profiling: we confirm that the processing of personal data does not involve profiling and that you will not be subject to fully automated decisions.

You may exercise the aforementioned rights by turning to THIERS-HORIZON N.V.. The contact person for this is: Mr KRIS VERMEIREN with contact details: info@thiers-horizon.be.
We make every effort to handle your personal data in a careful and legitimate manner in accordance with the applicable regulations. If, nevertheless, you consider that your rights would have been violated and you would not find a hearing for your concerns within our company, you are free to lodge a complaint with:

Commission for the Protection of Privacy
Drukpersstraat 35 35, 1000 Brussels
Tel. 02 274 48 00
Fax. 02 274 48 35
E-mail: commission@privacycommission.be

You can additionally apply to a court if you believe that you would suffer damages as a result of the processing of your personal data.

8. Forwarding to third parties
Certain personal data collected by us will be forwarded to and possibly processed by third party service providers, such as our IT supplier, accountant, auditor, internal services of the company itself; judicial and police services, banks and insurance companies, research centres (WTCB / OCW, …), guarantee funds, as well as by the government (e.g. in the case of the 30bis declaration of works, the electronic registration of attendance or the tendering for public contracts). It is possible that one or more of the above-mentioned third parties may be located outside the European Economic Area (‘EEA’). However, personal data will only be transferred to third countries with an adequate level of protection.

The employees, managers and/or representatives of the above-mentioned service providers or institutions and the specialised service providers appointed by them must respect the confidential nature of your personal data and may only use these data for the purposes in the context of which they were provided.

If necessary, your personal data may be passed on to other third parties. This may be the case, for example, if we were to be reorganised in whole or in part, if our activities were to be transferred or if we were to be declared bankrupt. Personal data may also have to be passed on pursuant to a court order or to comply with a particular legal obligation.

We will in that case make reasonable efforts to inform you in advance of such communication to other third parties. However, you will recognise and understand that in certain circumstances this may not always be technically or commercially feasible or legal restrictions may apply. Under no circumstances will we sell or make your personal data commercially available to direct marketing agencies or similar service providers, except with your prior consent.

9. Technical and organisational measures
We take the necessary technical and organisational measures to process your personal data according to an adequate security level and to protect them against destruction, loss, falsification, modification, unauthorised access or notification by mistake to third parties, as well as any other unauthorised processing of these data.
Under no circumstances can THIERS-HORIZON S.A. be held liable for any direct or indirect damage resulting from an erroneous or unlawful use by a third party of the personal data.

10. Third party access
For the purpose of processing your personal data, we grant access to your personal data to our employees, associates and appointees. We guarantee a similar level of protection by making contractual obligations opposable to these employees, staff and appointees, which are similar to this Data Protection Notice.

11. Any questions?
If, after reading this Data Protection Notice, you have further questions or comments regarding the collection and processing of your personal data, you may contact THIERS-HORIZON N.V. at, either by post to Brechtsebaan 116 – 2900 Schoten or by e-mail to info@thiers-horizon.be .