Data Protection Notice
Introduction
ThriveTogether Consulting BV, with its registered office at Meidoornstraat 10, 8550 Zwevegem, and registered with the Crossroads Bank for Enterprises under company registration number BE 0801956705, places great importance on the secure, transparent, and confidential collection and processing of your personal data. In particular, we aim to protect our customers’ and suppliers’ data from risks such as loss, leaks, errors, unauthorized access, or unlawful processing.
Through this Data Protection Notice, we intend to inform you about the collection and processing of your personal data.
We kindly ask you to read this Data Protection Notice carefully, as it contains essential information about how your personal data is processed and for what purposes.
By providing your personal data, you explicitly acknowledge having read and agree to this Data Protection Notice and the processing itself.
SCOPE
This Data Protection Notice applies to all services provided by us and, in general, to all activities we undertake.
DATA CONTROLLER AND ITS COMMITMENTS
ThriveTogether Consulting BV, with its registered office at Meidoornstraat 10, 8550 Zwevegem, and registered with the Crossroads Bank for Enterprises under company registration number BE 0801956705, is the data controller of your personal data.
In collecting and processing your personal data, we adhere to Belgian regulations concerning the protection of personal data, as well as the General Data Protection Regulation (“GDPR”).
PERSONAL DATA
Depending on your activities and your relationship with our company, you may provide us with the following personal data: your identity and contact information (company name, name, title, address, email address, phone, and mobile number).
We would like to remind you that you are responsible for the accuracy of the data you provide to us. If your data is no longer up to date, we request that you promptly inform us.
You are not obliged to provide your personal data, but please understand that certain services or collaboration may become impossible if you do not agree to their collection and processing.
PROCESSING PURPOSES AND LEGAL BASIS
Customer Data
In the context of our services and activities, we collect and process the identity and contact information of our customers and other relevant contacts. The purposes of these processes are to execute agreements with our customers, manage customer relationships, perform accounting, and engage in direct marketing activities, such as sending promotional or commercial information. The legal bases are the execution of the agreement, compliance with legal and regulatory obligations, and/or our legitimate interest.
Supplier Data
We collect and process the identity and contact information of our suppliers, as well as their possible (sub)contractors, staff, employees, appointees, and other relevant contacts. The purposes of these processes are to execute these agreements, manage suppliers, perform accounting, and engage in direct marketing activities, such as sending promotional or commercial information. The legal bases are the execution of the agreement, compliance with legal and regulatory obligations, and/or our legitimate interest (e.g., for direct marketing). For direct marketing activities via email (such as a newsletter or event invitations), consent will always be requested, and it can be withdrawn at any time.
Other Data
In addition to customer and supplier data, we also process the personal data of others, such as potential new customers/prospects, useful contacts within our sector, network contacts, expert contacts, and more. The purposes of these processes are in the interest of our activities, direct marketing, and public relations. The legal basis is our legitimate interest or, in some cases, the execution of an agreement.
DATA RETENTION
We retain and process personal data for a period necessary for the purposes of processing and in light of the (contractual or non-contractual) relationship we have with you.
Customer and supplier data will, in any case, be deleted from our systems after a period of ten years following the termination of the agreement or project, except for personal data that we must retain for a longer period according to specific legislation or in the case of an ongoing dispute for which the personal data are still necessary.
RIGHTS
In accordance with Belgian privacy legislation and the provisions of the General Data Protection Regulation, we inform you that you have the following rights:
- Right of access and inspection: You have the right to obtain free access to the data we hold about you and to know how it is being used.
- Right to rectification: You have the right to request the correction of your incorrect personal data and the completion of incomplete personal data.
- Right to deletion or restriction: You have the right to request the deletion or restriction of the processing of your personal data in accordance with the conditions set out in the General Data Protection Regulation. We may refuse to delete or restrict the processing of any personal data that is necessary for us to fulfill a legal obligation, execute an agreement, or protect our legitimate interests, as long as these data are necessary for the purposes for which they were collected.
- Right to data portability: You have the right to obtain the personal data you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transfer this data to another data controller.
- Right to object: You have the right to object to the processing of your personal data for compelling and legitimate reasons. However, please be aware that you cannot object to the processing of personal data that is necessary for us to fulfill a legal obligation, execute an agreement, or protect our legitimate interests, as long as these data are necessary for the purposes for which they were collected.
- Right to withdraw consent: If the processing of personal data is based on your prior consent, you have the right to withdraw this consent. These personal data will only be processed if we have another legal basis.
- Automated Decisions and Profiling: We confirm that the processing of personal data does not involve profiling, and you will not be subject to fully automated decisions.
You can exercise the above rights by contacting ThriveTogether Consulting BV. The contact person for this is Mrs. Ann Polley with the following contact information: ann.polley@thrivetogether-consulting.com or ann.polley@hotmail.be
DISCLOSURE TO THIRD PARTIES
Certain personal data collected by us may be disclosed to and potentially processed by third-party service providers, such as our IT provider, accountant, and government authorities.
It is possible that one or more of the above-mentioned third parties are located outside the European Economic Area (“EEA”). However, personal data will only be transferred to third countries with an appropriate level of protection.
Employees, managers, and/or representatives of the aforementioned service providers or institutions, and the specialized service providers appointed by them, must respect the confidential nature of your personal data and can only use these data for the purposes for which they were provided.
If necessary, your personal data may be disclosed to other third parties. This may be the case, for example, if we undergo a complete or partial reorganization, transfer our activities, or declare bankruptcy. It is also possible that personal data must be disclosed due to a court order or to comply with a specific legal obligation. In such cases, we will make reasonable efforts to inform you in advance of this disclosure to other third parties. However, you will acknowledge and understand that in certain circumstances, it may not always be technically or commercially feasible, or there may be legal restrictions.
Under no circumstances will we sell or provide your personal data to direct marketing agencies or similar service providers without your prior consent.
TECHNICAL AND ORGANIZATIONAL MEASURES
We take the necessary technical and organizational measures to process your personal data at an appropriate level of security and protect them against destruction, loss, falsification, alteration, unauthorized access, or inadvertent disclosure to third parties, as well as any other unauthorized processing of this data.
Under no circumstances can ThriveTogether Consulting BV be held liable for any direct or indirect damage resulting from the incorrect or unlawful use of personal data by a third party.
ACCESS BY THIRD PARTIES
In the light of processing your personal data, we may grant access to your personal data to our employees and appointees. We ensure a similar level of protection by making contractual obligations binding on these employees, workers, and appointees, which are in line with this Data Protection Notice.
STILL HAVE QUESTIONS?
If, after reading this Data Protection Notice, you have further questions or comments regarding the collection and processing of your personal data, you can contact ThriveTogether Consulting BV via email at ann.polley@thrivetogether-consulting.com or ann.polley@hotmail.be