Privacy Policy
1. Parties and Purpose
Elexys NV (hereinafter “Elexys” or the “Controller”)
Kleine Tapuitstraat 18, 8540 Deerlijk
CBE/VAT: BE 0824.304.218
E-Mail: info@elexys.be
Telephone: +32 56 36 44 80
Elexys establishes this Privacy Policy, which aims to inform Users transparently about the website hosted at the following address: www.elexys.be
, and about how personal data is collected and processed by Elexys NV.
The term “User” refers to any user, whether a natural or legal person, who visits the Site or communicates with the Site in any way.
In its capacity as Controller, Elexys determines all technical, legal and organisational means and the purposes for processing Users’ personal data. Elexys undertakes to take all necessary measures to ensure that the processing of personal data is carried out in accordance with the Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data (hereinafter the “Act”), and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (i.e. the General Data Protection Regulation (GDPR); hereinafter the “Regulation”).
Elexys is free to choose any natural or legal person who processes users’ personal data at its request and in its name (hereinafter the “Processor” or “Subcontractor”). Where applicable, Elexys undertakes to select a Processor that provides sufficient guarantees regarding the technical and organisational measures for the processing of personal data, in accordance with the Act and the Regulation.
2. Processing of Personal Data
Use of the Site by Users may lead to the collection of personal data. The processing of this data by Elexys, in its capacity as Controller or by service providers acting in its name, is carried out in accordance with the Act and the Regulation.
Personal data is processed by Elexys, in accordance with the purposes listed below, via the following methods:
Newsletter subscription form
Contact forms
Purchase of a product
Creation of a login
Cookies
3. Purpose of Personal Data Processing
In accordance with Article 13 of the Regulation, the purposes of processing personal data are communicated to the User. These purposes are as follows:
To ensure the performance of the services offered on the website
Legal obligation to retain the data
4. Personal Data That May Be Processed
The User agrees that, during the visit and use of the Site, Elexys collects and processes the following personal data:
Information provided by users when completing a contact or purchase form: name, first name, address, company, job title, telephone number, email, interests.
Elexys collects and processes this personal data in accordance with the terms and principles described in this Privacy Policy.
5. Consent
By accessing and using the Site, the User declares that he/she has read and freely, specifically, informedly and unambiguously given consent for the processing of his/her personal data. This consent relates to the content of this Privacy Policy.
Consent is given by the positive and active action through which the User has checked the box for the privacy policy via ‘hypertext link’. This consent is an essential condition for performing certain actions on the Site or enabling the User to enter into a contractual relationship with Elexys. Any agreement between Elexys and a User relating to services and goods offered on the Site is subject to acceptance of the Privacy Policy by the User.
The User agrees that the Controller, in accordance with the conditions and principles set out in this Privacy Policy, collects and processes the personal data that he/she provides on the Site or in connection with the services offered by Elexys for the purposes mentioned above.
The User has the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
6. Retention Period of User Personal Data
In accordance with Article 13(2) of the Regulation, the Controller retains personal data only for as long as is reasonably necessary to achieve the purposes for which they are processed.
7. Data Recipients and Disclosure to Third Parties
Personal data may be transferred to employees, collaborators, subcontractors, processors or suppliers of Elexys insofar as adequate guarantees are provided for data security and as long as they cooperate with Elexys in marketing products or providing services. They act under the direct authority of Elexys and are responsible for collecting, processing or outsourcing this data.
In all cases, data recipients must comply with this Privacy Policy. Elexys ensures that they process the data only for the intended purposes and in a secure and discreet manner.
If data is provided to third parties for direct marketing or prospecting purposes, the User will be informed beforehand so that he or she can give prior and explicit consent for such use.
8. Rights of Users
The User can exercise his/her rights at any time by sending an email to: info@elexys.be
, or a letter by post, accompanied by a copy of his/her identity card, to the following address: Kleine Tapuitstraat 18, 8540 Deerlijk.
a. Right of Access
In accordance with Article 15 of the Regulation, Elexys guarantees the User’s right to access his/her personal data. The User has the right to access this data and the following information:
The categories of personal data concerned
The recipients or categories of recipients to whom the personal data have been or will be disclosed
Where applicable, transfers to third countries or international organisations and applicable safeguards
If possible, the envisaged retention period or the criteria used to determine it
The existence of automated decision-making, including profiling, as referred to in Article 22(1) and (4) of the Regulation, and at least meaningful information about the logic involved and the envisaged consequences for the data subject.
The Controller may charge a reasonable fee for additional copies requested by the User.
If the request is made electronically, the information will be provided electronically unless requested otherwise.
The copy of the data will be provided to the User no later than one month after receipt of the request.
b. Right to Rectification
Elexys guarantees the User’s right to rectify and erase personal data.
In accordance with Article 16 of the Regulation, incorrect, inaccurate or irrelevant data may be corrected or erased at any time. The User must first make the necessary changes within his/her account unless these cannot be made independently, in which case a request can be sent to Elexys.
In accordance with Article 19 of the Regulation, the Controller informs each recipient to whom personal data has been disclosed of any rectification, unless this proves impossible or involves disproportionate effort. The Controller provides the User with information about these recipients if requested.
c. Right to Erasure
The User has the right to obtain erasure of his/her personal data as soon as possible in the cases listed in Article 17 of the Regulation.
If the Controller has made the data public and is obliged to erase it, the Controller shall take reasonable measures, considering available technology and costs, to inform other controllers processing the data that the User requests erasure of any links, copies or reproductions.
The above does not apply where processing is necessary for:
Exercising the right to freedom of expression and information
Compliance with a legal obligation
Establishment, exercise or defence of legal claims
d. Right to Restrict Processing
The User has the right to restrict processing in the cases listed in Article 18 of the Regulation.
As per Article 19, the Controller informs each recipient of any restriction unless this proves impossible or involves disproportionate effort. Recipients are communicated upon request.
e. Right to Data Portability
In accordance with Article 20 of the Regulation, Users have the right to receive their personal data from Elexys in a structured, commonly used and machine-readable format. They have the right to transmit this data to another controller without hindrance in the cases provided for in the Regulation.
Where technically feasible, the User has the right to have personal data transmitted directly from one controller to another.
This right does not affect the right to erasure and is not applicable to processing necessary for tasks in the public interest or for exercising official authority.
f. Right to Object and Automated Decision-Making
The User may object at any time to the processing of personal data for reasons related to his/her specific situation, including automated processing. In accordance with Article 21, Elexys will stop processing unless compelling legitimate grounds override the User’s interests or for legal claims.
Users may object at any time to processing for prospecting purposes, including profiling. If they do so, data will no longer be processed for that purpose.
g. Right to Lodge a Complaint
Users may lodge a complaint with the Belgian Data Protection Authority. More information: https://www.gegevensbeschermingsautoriteit.be/
Complaints can be submitted to:
Data Protection Authority
Drukpersstraat 35, 1000 Brussels
Tel. +32 2 274 48 00
Fax +32 2 274 48 35
E-mail: contact@apd-gba.be
Users may also bring legal action before the court of first instance in their residence.
9. Cookies
For more information about how we use cookies and your choices regarding these technologies, we refer you to our Cookie Policy.
10. Limitation of the Controller’s Liability
The content of third-party websites and their compliance with the Regulation and the Act do not fall under the responsibility of Elexys.
Parental authority holders must give explicit consent for minors under 16 years old to disclose personal information via the Site. Elexys strongly advises parents/guardians to promote responsible and safe internet use. The Controller cannot be held liable for processing personal data of minors under 16 whose consent is not effectively covered by parental consent, nor for incorrect data (e.g. age) entered by minors. Personal data will not be processed if the user states that he/she is under 16.
Elexys is not responsible for loss, damage or theft of personal data, particularly resulting from viruses or cyberattacks.
11. Security and Protection
The Controller implements technical and organisational measures to ensure an appropriate level of security for data processing and collection. These measures depend on implementation costs and the nature, context and purposes of processing.
The Controller uses standard IT industry encryption technologies for data transfer or collection on the Site.
12. Changes to the Privacy Policy
Elexys reserves the right to amend this Privacy Policy to comply with legal obligations. Users are therefore encouraged to consult the Privacy Policy regularly. Changes will be posted on the Site or sent by email.
13. Applicable Law and Competent Courts
This Privacy Policy is governed exclusively by Belgian law. Any dispute will be submitted to the courts of the judicial district of Elexys’s registered office.
14. Contact
For any questions or complaints regarding this Privacy Policy, Users may contact the Controller at: info@elexys.be.