ASBL EUKR Data Protection System Policy
Disclaimer
The EUKR ASBL (Belgium, BCE 1016370651) maintains this website to enhance public access to information about project and concept Quantum of Quanta (QoQ). Our goal is to keep this information timely and accurate. If errors are brought to our attention, we will try to correct them. However, the EUKR accepts no responsibility or liability whatsoever with regard to the information on this site.
Introduction
EUKR ASBL (hereafter “EUKR”) is committed to protecting your personal data and respecting your privacy. EUKR processes personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and applicable Belgian data-protection law, including the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
This privacy statement explains the reason for the processing of your personal data, the way we collect, handle and ensure protection of all personal data provided, how that information is used and what rights you have in relation to your personal data. It also specifies the contact details of the responsible Data Controller with whom you may exercise your rights.
Why and how do we process your personal data?
EUKR ASBL processes personal data where necessary to operate and administer the association and its projects, respond to enquiries and communications, manage relationships with supporters, volunteers, partners and other persons interacting with EUKR, and comply with applicable legal and administrative obligations.
Personal data may be received when you contact EUKR ASBL by email, telephone, messaging service or another communication channel, or when you otherwise interact with EUKR ASBL or one of its projects.
Personal data is not used for automated decision-making, including profiling.
On what legal ground(s) do we process your personal data?
EUKR ASBL processes personal data only where a lawful basis under Article 6 GDPR applies. Depending on the purpose of the processing, this may include:
(a) Article 6(1)(f) GDPR — processing necessary for the legitimate interests of EUKR ASBL in administering the association and its projects, responding to enquiries and communications, maintaining relationships with supporters, volunteers, partners and other persons interacting with EUKR, ensuring the security and proper functioning of its activities and preventing fraud or misuse;
(b) Article 6(1)(c) GDPR — processing necessary to comply with legal, accounting, administrative or other obligations applicable to EUKR ASBL;
(c) Article 6(1)(b) GDPR — processing necessary for the performance of a contract or in order to take steps at the request of a person before entering into a contract, where applicable;
(d) Article 6(1)(a) GDPR — processing based on consent where consent is specifically required or chosen as the appropriate legal basis. Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.
Which personal data do we collect and further process?
The personal data processed by EUKR ASBL depends on the nature of the interaction and may include:
- identification data, such as name and surname, where necessary;
- contact details, such as email address, telephone number or messaging-service account information;
- the content of enquiries, correspondence and other communications;
- information necessary to manage relationships with volunteers, supporters, partners or other persons interacting with EUKR ASBL or its projects;
- information relating to donations or other forms of support where such information is received by EUKR ASBL from a payment or support provider;
- other personal data voluntarily provided by the person concerned or necessary for the specific purpose of the interaction.
EUKR ASBL processes only personal data that is relevant and necessary for the purpose for which it is collected.
How long do we keep your personal data?
EUKR ASBL retains personal data only for as long as necessary for the purposes for which it is processed.
The applicable retention period depends on the nature and purpose of the processing. Correspondence and enquiry-related data is retained only for as long as necessary to manage the communication and any related follow-up. Data relating to volunteers, partners and other organisational relationships is retained for as long as necessary to manage the relevant relationship and any subsequent administrative or legal obligations.
Personal data contained in accounting, donation or financial records is retained for the period required by applicable Belgian accounting and tax law, currently generally ten years.
Where a longer retention period is required by law, or where data is necessary for the establishment, exercise or defence of legal claims, the relevant data may be retained for that longer period.
How do we protect and safeguard your personal data?
EUKR ASBL implements appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, taking into account the nature of the processing and the risks involved.
Access to personal data is limited to authorised persons who need such access for the relevant purpose.
Where external service providers process personal data on behalf of EUKR ASBL, they are required to process the data in accordance with EUKR ASBL’s documented instructions and applicable data-protection law, under appropriate contractual arrangements.
Where personal data is transferred outside the European Economic Area, EUKR ASBL ensures that the transfer is carried out in accordance with Chapter V of the GDPR, including, where applicable, on the basis of an adequacy decision or appropriate safeguards.
Who has access to your personal data and to whom is it disclosed?
Access to personal data is limited to authorised persons within EUKR ASBL who need the information for the relevant purpose.
Where necessary, personal data may also be disclosed to service providers and processors acting on behalf of EUKR ASBL, including providers of hosting, IT, communication, payment, support, accounting or other administrative services.
Personal data may also be disclosed to professional advisers, competent public authorities or other recipients where such disclosure is required by law or necessary for the establishment, exercise or defence of legal claims.
External service providers that process personal data for their own purposes act under their own applicable privacy terms.
What are your rights and how can you exercise them?
Under the GDPR, you may have the following rights in relation to your personal data:
- the right of access to your personal data (Article 15 GDPR);
- the right to rectification of inaccurate or incomplete personal data (Article 16 GDPR);
- the right to erasure of your personal data, where the applicable legal conditions are met (Article 17 GDPR);
- the right to restriction of processing, where applicable (Article 18 GDPR);
- the right to data portability, where the processing is based on consent or contract and is carried out by automated means (Article 20 GDPR);
- the right to object to processing based on legitimate interests, in accordance with Article 21 GDPR.
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
You may exercise your rights by contacting EUKR ASBL using the contact details provided below.
You also have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit) if you consider that the processing of your personal data infringes applicable data-protection law.
Contact information
Data Controller
EUKR ASBL
Enterprise number: 1016 370 651
Rue Emile Feron 262/153
1060 Saint-Gilles, Brussels, Belgium
Email: datacontrol@eukr.be
For questions concerning the processing of personal data or to exercise your data-protection rights, please contact EUKR ASBL at the address above or by email at datacontrol@eukr.be.
Belgian Data Protection Authority
You have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit):
Rue de la Presse 35
1000 Brussels, Belgium
Email: contact@apd-gba.be
Telephone: +32 (0)2 274 48 00