Protection of personal data

ICHEC is the data controller in the sense of the legislation on the protection of personal data in the context of the present document. ICHEC’s Data Protection Officer (DPO) is Jacques Folon who can be contacted at dpo@ichec.be
ICHEC is committed to respecting the privacy of its employees.

This Privacy Policy (hereinafter the Policy) describes how ICHEC handles Personal Data. We process personal data in accordance with all applicable data protection regulations.

By accepting this Policy, you acknowledge and agree to the terms of the Policy and to the processing and transfers of Personal Data that will be carried out in accordance with the Policy.

The Personal Data we collect in the course of taking images or videos are Name, First name, Home address, Image, Video

We use this personal data to:

  • Use the photos and video for the purposes set out above
  • Comply with applicable laws and regulatory requirements, comply with legal process and respond to requests from public government authorities (including those outside your country of residence)
  • Respond to your requests for rights of access, rectification, etc. under the GDPR.

The legal basis for the processing is the consent of the data subject who has the right to withdraw consent at any time (without prejudice to the lawfulness of the processing based on the consent given prior to such withdrawal).

Should we collect further data or process Personal Data for purposes other than those mentioned above, we will provide you with information about the new purpose and any other necessary information before we start the new processing.

ICHEC may make Personal Data available to the following persons and entities:

  • External third-party service providers such as surveyors, computer systems service providers, photographers, videographers, support providers, hosting, printing services and similar third-party vendors and subcontracted service providers who assist us in carrying out our activities.
  • Government authorities and third parties involved in legal proceedings or under legal obligation, including in connection with subsidies and audits
  • Universities and colleges of higher education partners
  • Other third parties with whom we may share Personal Data as part of an actual or proposed reorganisation, merger, sale, joint venture, assignment, portfolio transfer or other transaction relating to all or part of our business.

ICHEC does not transfer data outside the European Union.

ICHEC takes appropriate technical and organisational measures that comply with applicable privacy and data protection laws. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any Personal Data you may have with us may have been compromised), please notify us immediately.

When ICHEC provides Personal Data to a service provider, the service provider will be carefully selected and shall use appropriate measures to ensure the confidentiality and security of the Personal Data.

ICHEC takes reasonable steps to ensure that the Personal Data processed is reliable for its intended use, and as accurate and complete as necessary to carry out the purposes described in this Policy.

Images of data subjects are retained for 10 years after capture.

You have the right to access, rectify, object to the use of, or request the erasure, restriction, or portability of your Personal Data on certain bases. Please contact us at RGPD@ichec.be with a copy of the front of your ID card as proof of your identity, with any requests or if you have any questions or concerns regarding the way we handle your Personal Data. Please note that certain Personal Data may be exempt from the rights of access, rectification, erasure, restriction, objection, or portability under the GDPR or Belgian Privacy Laws.

We review the rules contained in this Policy regularly and reserve the right to make changes at any time to consider changes in our business and in legal requirements. We will notify you of any such changes.

If you are dissatisfied with the way we process your Personal Data and feel that contacting us will not resolve the problem, the applicable Privacy Laws give you the right to complain to the relevant supervisory authority: https://www.autoriteprotectiondonnees.be.