Our Privacy Statement

Legitimate Interest - For purposes of technical maintenance, optimization and security of our website, we may process your personal data. This allows us to diagnose and resolve technical problems, ensure the compatibility of our website with different devices and browsers, enhance your user experience and protect against cybersecurity threats.

Consent - When we receive your consent, we may process your personal data for analysis purposes about the use of and interaction with our website. Additional information is available in our cookie statement.

Legitimate Interest - You can contact us through our contact forms, mail, phone or other communication channels. We process your personal data in order to manage your contact request and provide you with the necessary information and assistance.

Consent - On our website you can subscribe to our newsletter. We process your personal data in order to contact you about valuable information, updates, and insights from Cegeka.

Legitimate Interest - We process personal data when we organize events and webinars for purposes of informing and connecting you with us as an organization.

Legitimate Interest - We may process personal data about you when you request informational materials (ebooks, …) from us that we make publicly available. We do this for the purpose of providing relevant and informative content.

Legitimate Interest - When you apply for a position at our company, we process personal data to assess your suitability for the position and to communicate with you during the recruitment process.

We may share your personal data with other third parties. We only do so if this is necessary to provide our services, to comply with our legal obligations or if it is at your request. We will conclude the necessary agreements (such as data processing agreements) with these third parties to ensure that your personal data is processed in accordance with the relevant data protection laws (including the GDPR) and Cegeka's standards.

In any case, we will not simply transfer your personal data to third parties outside the European Economic Area ("EEA"). In certain cases, however, international transfers may occur. We will ensure that such transfers are in accordance with the GDPR (by, among other things, the presence of an adequacy decision in the destination country or the conclusion of SCCs and supplementary measures where appropriate, etc.).

For specific details regarding our data sharing practices applicable to a certain purpose, see above under "Why do we process your personal data? ".

We do not retain your personal data longer than strictly necessary to fulfill the purposes for which the personal data were collected or according to the legal obligation imposed on us. The specific retention periods for your personal data may vary depending on the nature of the data and the purposes for which they are processed. We regularly review our data retention policies and procedures to ensure they are in accordance with legal requirements and best practices.

For specific details regarding the retention period applicable to a certain purpose, see above under "Why do we process your personal data? ".

We have implemented a range of technical and organizational measures designed to protect against misuse, loss, unauthorized access and other unwanted practices with your personal data. We continuously monitor and update these security measures to ensure we are adapted to evolving threats and technological advancements. In the unlikely event of an incident or data breach involving your personal data, we will notify you in line with our legal obligations.

Cegeka wants you to maintain control over the processing of your personal data. In this section you will find more information about the different rights you have regarding the processing of your personal data:

• Right of access: You have the right to access any personal data we process in relation to you. If you would like a copy of this data, please let us know and we will send it to you digitally or on paper.

• Right to rectification: If you believe that the personal data we retain about you are inaccurate or incomplete, you have the right to have this information corrected or, considering the purposes of the processing, supplemented.

• Right to Erasure (“Right to be forgotten”): Where your personal data are no longer necessary for the purposes of this privacy statement, you have the right to request the erasure of that data. In certain circumstances, we are required by law to retain certain personal data in which case we cannot fulfill this request.

• Right to Restriction of Processing: In some cases, you have the right to restrict the processing of your personal data. This means that the personal data may only be stored by us and processed by us only for limited purposes.

• Right to Data Portability: For certain processing activities, you have the right to receive a copy of your personal data in a structured, commonly used and machine-readable format and/or to transmit it to another data controller.

• Right to Object: You have the right to ask us to stop processing your personal data, typically for purposes of direct marketing.

• Right to Withdraw Consent: Where we process your personal data based on a consent we have obtained from you, you have the right to withdraw this consent at any time.

To exercise one or more of these rights or if you would like more information, you can contact our Data Protection Office at privacy@cegeka.com. We will respond to your request and inquiries regarding your rights in a timely manner and in accordance with applicable data protection laws. Depending on the processing activity, there may be certain conditions or restrictions attached to the exercise of the above rights. In addition, we may require verification from you as a data subject before we can proceed to fulfill the request.

In the event that you are of the opinion that we are not in compliance with the relevant data protection laws and you do not reach a solution with us, you are always entitled to file a complaint with the Belgian Data Protection Authority.

Belgian Data Protection Authority
Drukpersstraat 35
1000 Brussels, Belgium
+32 (0)2 274 48 00 or +32 (0)2 274 48 35
contact@apd-gba.be

To ensure transparency about our processing activities, we will update this privacy statement when necessary to reflect changes in legislation, guidelines issued by data protection authorities, feedback we receive from data subjects or other stakeholders, changes in our services, or changes in our processing activities and data protection policies. The effective date of this privacy statement can be found at the top of this page under "last updated ". We encourage you to periodically review this privacy statement in order to understand how Cegeka is protecting your personal data.

Do you have any questions about this privacy statement or would you like additional information about how we process personal data? Do not hesitate to contact our Data Protection Office using the following contact information:

Data Protection Office
Corda 3 - Kempische Steenweg 307
3500 Hasselt, Belgium
privacy@cegeka.com