Version 1.1 - 01.08.2024
This is the privacy statement (hereinafter the “Privacy Statement”) of METALAB CONSULTANTS BV, and any employee associated with METALAB CONSULTANTS BV.
Through this Privacy Statement, we wish to inform you as fully as possible about how we collect and process your personal data. Our Privacy Statement applies to all relationships between us on the one hand and our customers, suppliers, partners and prospects on the other.
1.1 Why are your data processed? Processing grounds.
A. Legal obligation:
To comply with the obligations imposed on the Controller under legal and administrative obligations, including tax and accounting obligations.
This list is not exhaustive and may be subject to change.
B. Necessary for the performance of its agreement:
Pre-contractual phase:
- Contacting, responding to a request, negotiating;
- Providing and/or requesting information in the context of concluding a contract;
- Preparation of agreements;
Contractual phase:
- Client management
- Supplier management
- Performance of our services and the order data by the customer
C. Legitimate interest:
Defend the interests of our customers, but also for other legitimate interests that we or our customers, suppliers or other third parties may have in processing the personal data.
Sending a newsletter to existing customers.
Ensuring the security of both the personal data we process and our business.
D. Consent:
- Sending a newsletter to non-customers.
- Posting testimonials on the website.
- Using photos on our website and social media pages.
- The use of cookies (see cookie policy for more details).
1.2 What data is involved?
Personal data will be collected.
Personal data is any data that allows a natural person to be identified or identifiable. This includes contact data such as your name and e-mail address, but also social media account usage data, your IP address, your preferences, financial data, sensitive data...
As a consultancy agency, we collect and process various categories of personal data, including, inter alia, identification and contact details, financial data, etc.... These personal data may relate to you in your capacity as a client or supplier of our firm, but also to you as a business relation of one of our clients. It is not possible to give a concrete list of all personal data processed. Depending on each file, different data will always be processed.
The following list is therefore purely illustrative and not exhaustive:
General personal data:
- First name and surname
- Address details
- Company number
- Phone number
- Email address
- Other personal data that you provide to us or that are provided to us by third parties within the performance of our mission.
We may process the following sensitive personal data as part of our offered services:
- Financial information such as bank account number
We may process special personal data as part of the services we offer:
- personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, and processing of genetic data, biometric data for the purpose of uniquely identifying a person, or data concerning health, or data relating to a person's sexual behaviour or sexual orientation.
We collect and process both personal data provided to us directly by you and data obtained by other means, for example from a public source. We do not use automated data processing or so-called “profiling”.
Your personal data is processed by us for the purpose of achieving various purposes, including keeping our general and financial records, managing our customer and supplier database, providing a proper service and the proper performance of our agreements.
METALAB CONSULTANTS BV highly values data minimisation and will ensure that no more data than necessary is processed.
1.3 Who is the data controller of your data?
The controller of your personal data is METALAB CONSULTANTS BV.
Contact details:
- Koolkerkse Steenweg 44, 8000 BRUGGE
- Phone: 0470 30 96 58
- email: info@mtlb.io
We consider the right to privacy as one of the most fundamental rights and therefore make every effort to protect your privacy in the best possible way. We act in accordance with the Regulation of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter also the “GDPR”) and with this Privacy Statement.
1.4. How will your data be processed?
The confidentiality of your data is important to us. Your data is always kept confidential, not traded, sold, rented or passed on to third parties outside the contractual relationship or a specific assignment.
Data will always be stored within the EU or within the borders of a country that provides appropriate safeguards pursuant to an adequacy decision under Article 45 GDPR. To offer its services, the Controller may be assisted by a selective number of processors. If they have access to your personal data, appropriate safeguards will be obtained with them in accordance with the GDPR.
Data may also be shared with government agencies, data protection authority,.... in the context of the performance of the contractual assignment.
If your data needs to be shared for the processing/follow-up of the order, this will be done through a secure electronic information exchange system or any other application.
We process personal data provided to us directly by you, as well as data we obtain through other means, such as a public source or another party on file.
On rare occasions, the Controller may have to disclose your Personal Data pursuant to a court order or to comply with other mandatory laws or regulations. The Controller will make reasonable efforts to inform you in advance in this regard, unless subject to legal restrictions.
1.5. How long do we keep your personal data?
We keep your personal data for as long as required to fulfil our obligations, to provide our services properly or because we have a legitimate interest in keeping your personal data (longer).
Thus, we have an interest in keeping your personal data for as long as we can be held civilly liable.
Once your file was closed, your data will be kept for 10 years including accounting documents.
1.6 Who has access to your data?
METALAB CONSULTANTS BV employees have access to this data in order to carry out the assignment.
1.7 Safety measures
METALAB CONSULTANTS BV has taken security measures adapted on a technical and organisational level to avoid the destruction, loss, falsification, modification, unauthorised access or notification by mistake to third parties of personal data collected as well as any other unauthorised processing of these data. The firm applies a tailor-made security policy in which the security of your data is central.
Here, special attention was paid to the security of the computer systems using, among other things, end-to-end encryption, two-factor authentication and strict password management. We focus on awareness among our employees, including through specific education and training against phishing attacks.
Under no circumstances can METALAB CONSULTANTS BV be held liable for any direct or indirect damages resulting from an erroneous or unlawful use by a third party of your personal data.
1.8 What are your rights as a client?
You have the right to learn about your personal data at any time, free of charge, as well as METALAB CONSULTANTS BV's use of your personal data.
1.8.1 Right of rectification, deletion and restriction
You are free to communicate or not communicate your personal data to METALAB CONSULTANTS BV. In addition, you always have the right to request METALAB CONSULTANTS BV to correct, supplement or delete your personal data. You acknowledge that if you refuse to communicate or request deletion of personal data, certain services may not be available.
You may also ask to restrict the processing of your personal data.
1.8.2. Right of opposition
You have a right to object to the processing of your personal data for serious and legitimate reasons.
In addition, you always have the right to oppose the use of personal data for direct marketing purposes; in this case, you do not even have to provide a reason.
1.8.3. Right of free data transfer
You have the right to obtain personal data provided by you to METALAB CONSULTANTS BV in a structured, common and machine-readable form and/or to have it transferred to other responsible parties.
1.8.4. Right to withdraw consent
To the extent that the processing is based on your prior consent, you have the right to withdraw that consent.
1.8.5. Exercising your rights
You may exercise your rights by contacting METALAB CONSULTANTS BV, either by e-mail to pascal@mtlb.io, by post to METALAB CONSULTANTS BV, Koolkerkse Steenweg 44, 8000 BRUGGE or by using “Contact” on the Website, provided that you enclose a copy of the front of your identity card or a similar document by means of which you can be identified. The data transmitted will obviously only be used to identify you and will then be deleted.
1.8.6 Automatic decisions and profiling
The processing of your personal data does not involve profiling, nor will METALAB CONSULTANTS BV subject you to automated decisions.
1.8.7 Right to lodge complaint
You have the right to lodge a complaint with the Belgian Data Protection Authority, Rue du Printing Press 35, 1000 Brussels, Tel +32 (0)2 274 48 00, Fax +32 (0)2 274 48 35, e-mail: contact@apd-gba.be.
1.8.8 What exceptions exist to my rights as a client?
Your right to be informed does not apply if you already have this information (or could reasonably have had it), if this information must remain confidential or if providing it proves impossible or would require disproportionate effort on the part of the office.
Your right to amend and/or delete your data does not apply if a legal obligation compels METALAB CONSULTANTS BV to retain such data or if the data are necessary for the exercise of the right to freedom of expression and information for the establishment, exercise or substantiation of legal claims.
1.9 Changes
The Controller reserves the right to change this privacy policy at any time by notifying users on this page. We encourage you to check this page often for any changes. The date of the last change will be indicated.
If a user objects to any change in the policy, the user should not continue to use this website. He may request the Controller to delete the personal data. Unless otherwise indicated, the privacy policy in force at that time will apply to all personal data that the Controller has stored about users.