Privacy Policy

1. Preliminary

BV Alluvion (trade name: Alluvion), with its registered office at 9000 Ghent, Dendermondsesteenweg 39A001 and with company number 0666.471.360 (hereinafter: “Alluvion”) attaches great value and importance to the secure, transparent and confidential collection and processing of personal data when using the website https://alluvion.be/. We want to optimally protect the data of visitors to our website (hereinafter "Visitors") from loss, data breaches, errors, unauthorised accesses and other unlawful processing.

We shall therefore only process your personal data in accordance with the European Regulation dated 27 April 2016 concerning the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter: “GDPR”) as well as the Act of 30 July 2018 concerning the protection of natural persons with regard to the processing of personal data.

With this Privacy Statement, Alluvion therefore wishes to inform and provide you, as a data subject, with a comprehensible understanding of the collection and processing of personal data. Within the meaning of the GDPR, Alluvion wants to adequately inform you about the processing of your personal data, including the types of personal data we collect, where we get the data from, how we use the data, the data we collect, how long we keep this data, to whom we may disclose this information, and your rights in relation to the processing of your personal data.

Alluvion wishes to point out to you that the provision of certain personal data that has been identified as compulsory is a necessary condition for providing our services. In the absence of the aforementioned personal data, it is not possible for Alluvion to offer all its services, or they can only be offered in a limited way.

Where necessary, we shall ask you as a data subject for informed, free, unambiguous and specific consent to carry out certain processing operations.

Our privacy policy may be subject to future updates and changes. These shall be made clear in our Privacy Statement. It is therefore up to you to consult this document on a regular basis. Any substantial change shall always be clearly communicated and must be the subject of new consent, if required.

The current statement was last updated on 04.03.2024. The most current version of this Privacy Statement can be accessed on Alluvion's website (https://alluvion.be/) and can be obtained upon written request by sending an email to privacy@alluvion.be.  

2. Who processes personal data?

2.1 Controller(s)

Within the framework of this privacy statement, which deals with the conclusion of an agreement with Alluvion and the use of https://alluvion.be/, Alluvion must be regarded as the data controller. Indeed, in this context, Alluvion alone, or in cooperation with others, determines the purpose and means of processing your personal data.

You can always reach us by using the contact details below:

Alluvion
Zeedijk-Duinbergen 301 bus 91
8301 Knokke-Heist
Company number: 0666.471.360
E-mail: privacy@alluvion.be
Website: https://alluvion.be/  

2.2 Processor(s)

As part of providing its services to you, Alluvion may need to provide personal data to third parties.

In order to allow you to make optimal use of the functionalities of the website, your personal data may be provided to providers of these functionalities. This provision of personal data is extremely limited to what is necessary to provide these functionalities. The identity of the recipients can always be communicated to you upon request.  

3. What is personal data?

Personal data is any information about identified or identifiable natural persons.

An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more elements characterising the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.  

4. What personal data is processed?

When processing personal data, Alluvion undertakes to comply with the general legal principles regarding the processing of personal data.

In particular, in application of the principle of minimum data processing, Alluvion shall only process such data that is strictly necessary for the purposes, as stipulated in this privacy statement.

A list of categories of personal data that may be processed as a result of your use can be found here:

  • Personal identification data, e.g. name, e-mail address, address, phone number, date of birth, usage data, etc.;
  • Professional and/or educational details, e.g. CV, cover letter, training, etc.;
  • Company data, e.g. registered office address, company number, etc.;
  • Payroll data, e.g. national register number, family composition, marital status, bank account number, etc.;
  • Electronic identification data, etc.;
  • Data in the context of the use of the Website (so-called Usage Data) such as, for example, number of Users, session statistics, answers to questions, clicks, keyboard events, motion sensor events, mouse movements, scroll position, touch events.

Furthermore, we also process publicly available data. This includes data that is subject to a publication requirement or data you would have made public yourself, such as information on LinkedIn, or data that is common knowledge.

Personal Data may be provided by the User or, in the case of Usage Data, collected automatically when using this Website. The latter refers to the cookies used by this Website. Our cookie policy can be read here.

In order to provide certain services for you, you may need to provide us with specific Personal Data. Failure to provide us with this necessary Personal Data may mean we are unable to provide certain services. Our Website shall always indicate which Personal Data must be communicated in order to use our Services, and which Personal Data can be communicated on an optional basis. Should there be any uncertainty regarding the mandatory or optional nature of the information to be communicated, you can always contact Alluvion.

5. For what purposes is your personal data processed

Alluvion processes your personal data in order to correctly provide the services you have requested or received, as well as to offer the functionalities of the website correctly and intuitively and, where necessary, to respond appropriately to your requests. Alluvion additionally processes your personal data to provide you, as a visitor to the website, with a safe, optimal and personalised user experience.

The processing of personal data linked to customers and visitors is mainly for the following specific purposes:

  • to allow us to contact you in response to your specific request via the contact form or via e-mail;
  • to adapt the website to your specific use of it;
  • to improve our services;
  • to answer your questions if you ask them by phone, via the contact form on the website or by e-mail;
  • to allow us to perform static analysis;
  • to prevent fraud and abuse;
  • to protect against SPAM and bots.

When using our Website, data is additionally collected for static purposes. Such data is necessary to optimise the use of the website.

Visitors can often provide personal data to Alluvion and can thus exercise a certain control over its accuracy and minimisation. Should certain data be incorrect or incomplete, Alluvion may decide to suspend certain functionalities pending completion or correction.

The processing of the Data takes place with the use of computers and/or IT tools, following organisational procedures and practices that are closely linked to the stated purposes. In addition to Alluvion, the data may in certain cases also be accessible to certain data controllers involved in the operation of this Website (management, sales, marketing, legal, system administration) or external parties appointed by Alluvion as data processors (such as external technical service providers, mail programs, hosting providers, IT companies, communication agencies). The updated list of these parties can be obtained from Alluvion at any time.

6. Who has access to your information?

Your information will be shared within Alluvion. In principle, your data will not be shared with third parties unless:

  • you have given explicit permission;
  • it is necessary for carrying out our activities;
  • it is necessary for the proper execution of the agreement with Alluvion;
  • we are legally obliged to do so by the government, authorities or a court order;
  • it is a requirement of third-party services providing commercial, technical or operational services (e.g. insurance broker, etc.) for the provision of our services;
  • it is a requirement for the provision of our services by third-party service providers in general (e.g. lawyers)

These third parties also respect the confidential nature of your personal data and can only use the personal data for the purposes for which they have been communicated to them.

Under no circumstances shall Alluvion sell, rent, distribute or otherwise make your personal data commercially available to third parties.

7. Transmission outside the european economic area?

The Data is processed at Alluvion's branch offices and other places where the parties involved in the processing are located.

Depending on your location, the transfer of personal data may involve transferring your data to a country other than your own. For more information on the processing location of such transmitted data, please refer to the article detailing the processing of Personal Data.

8. Your rights as a data subject

8.1. Guarantee of compliance with principles specific to the processing of personal data

Alluvion only processes your personal data:

  • in accordance with the purposes set out in this document or in a manner not incompatible with this original purpose;
  • in a decent, lawful and transparent manner where the processing, as appropriate, is supported by the following legal grspan>
    • Consent: personal data is processed following your consent;
    • Legitimate interest: the personal data can be processed if it is in the legitimate interest of Alluvion as a company, insofar as your personal interests are not outweighed;
    • Agreement: the processing of personal data is necessary for the execution of the agreement with Alluvion;
    • Legal obligation: the processing of personal data is a requirement so that Alluvion can comply with its legal obligations.
  • in a manner proportionate to the stated purpose;
  • properly;
  • in principle during a period equal to five (5) years after the last activities on the website or five (5) years after the execution of the agreement;
  • in cases stipulated by law, for a period equal to the statutory retention period;
  • in a manner that includes adequate safeguards against unauthorised access, unlawful processing and/or accidental loss or damage.

8.2. Right of access

Any Customer or Visitor who satisfactorily proves his or her identity has the right to obtain confirmation from Alluvion as to whether or not personal data concerning him or her have been processed and, if so, to obtain access to the personal data.

In doing so, you have the right to obtain information about the purposes of the processing, the categories of personal data being processed, the recipients of the personal data, the (criteria to determine the) period during which your personal data shall be stored, and the rights you can exercise in accordance with the GDPR.

If you wish to exercise your right of access/rectification/erasure, Alluvion shall act on this within one (1) month of receiving the request and only if this right exists. The application is to be submitted via registered mail or via an email to: privacy@alluvion.be.

Personal data that is incomplete or inaccurate can be corrected or erased at any time. You can exercise your right of rectification by providing an additional statement to Alluvion. Alluvion shall act on this within one (1) month of receiving the additional statement.

In addition, you have the right to have your personal data erased by Alluvion without unreasonable delay. You can only invoke this right in the following cases that Alluvion shall assess:

  • when your personal data is no longer necessary for the purposes for which it was collected or processed;
  • when you withdraw your consent, and no other legal basis exists for the processing;
  • when objecting to the processing, and there are no overriding compelling legitimate grounds for the processing;
  • when personal data has been unlawfully processed;
  • when your data must be deleted in accordance with a legal obligation.

8.3. Right to restriction of processing/right to object

You have the right to obtain a restriction on processing from Alluvion if any of the following applies:

  • you dispute the accuracy of the personal data;
  • Alluvion's processing turns out to be unlawful and you do not want the personal data to be erased, but you want the processing to be restricted;
  • Alluvion no longer needs your personal data for processing purposes, but you still need the data for the establishment, exercise or substantiation of a legal claim;
  • Alluvion must assess the presence of the grounds for erasure of personal data, and this during this period.

You also have the right to object to the processing of your personal data at any time due to reasons related to your specific situation. Alluvion will hereafter cease the processing of your personal data unless Alluvion can cite compelling legitimate grounds for processing your personal data and these outweigh your right to object.

In addition, you have the right not to be subjected to individualised and fully automated decision-making where this has legal consequences or such a decision could significantly affect you. However, you can always intervene in such decision-making yourself or demand human intervention.

Finally, you have the right to object to the processing of personal data for direct marketing at any time.

If you wish to exercise your right to object/restrict processing, Alluvion shall act on this within one (1) month of receiving the request. The application is to be submitted via registered mail or via an email to: privacy@alluvion.be.

8.4. Right to data portability

You have the right to obtain personal data provided to Alluvion in a structured, common and machine-readable form. In addition, you have the right to transfer this personal data to another controller when the processing of your personal data rests solely on your consent.

If you wish to exercise your right to data portability, Alluvion shall act on it within one (1) month of receiving the request. The application is to be submitted via registered mail or via an email to: privacy@alluvion.be.

8.5. Right to oblivion

Whenever you have rightly requested Alluvion to rectify, erase or further limit the processing of data, Alluvion shall notify any recipient of such personal data, unless this proves impossible or would require unreasonable effort. You can also receive information on these recipients any time.

8.6. Right to withdraw your consent/right to complain

You always have the right to withdraw your consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. In addition, you have the right to lodge a complaint with the competent supervisory authorities about the processing of your personal data by Alluvion.

If you wish to revoke your consent or exercise your right to complain, Alluvion shall act on this within one (1) month of receiving the request. The application is to be submitted via registered mail or via an email to: privacy@alluvion.be.

8.7. Right to information and transparency

When exercising your rights, Alluvion shall always act in accordance with the GDPR and thus provide all information required by the GDPR in a concise, transparent, understandable and easily accessible form that you shall receive in a simple language.

Deadlines for responding to your requests may be extended in exceptional circumstances, which may include but are not limited to the complexity/multitude of your requests. To this end, Alluvion shall notify you of this extension and the reason for this extension within one (1) month of receiving your request.

8.8. Right to file a complaint

Alluvion is committed to processing your data securely and lawfully. If you do feel that something is wrong or believe your personal data is being processed unlawfully or incorrectly, please do not hesitate to contact us at privacy@alluvion.be.

Moreover, you also have the right to lodge a complaint with the supervisory authority, this being the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit):

Gegevensbeschermingsautoriteit
Drukpersstraat 35, 1000 Brussels
Tel.: +32 (0)2 274 48 00
Fax.: +32 (0)2 274 48 35
contact@apd-gba.be
www.gegevensbeschermingsautoriteit.be

9. Duration of processing

Alluvion shall retain the personal data of data subjects for as long as it is necessary for the purposes of the processing.

In principle, Alluvion only processes your personal data during a period equal to five (5) years after the last activities on the website or five (5) years after the execution of the agreement.

Customer data shall be deleted after a period of ten (10) years after the termination of the cooperation, unless Alluvion must keep it longer under specific laws or regulations or in case of an ongoing (legal) dispute.

The personal data of temporary workers shall be kept for a period of ten (10) years after the termination of the last employment contract, with the exception of payslips and curricula vitae which shall be deleted after a period of five (5) years.

Alluvion shall retain candidates’ personal data for a period of five (5) years.

Reported personal data is in any case kept in accordance with the specific legal requirements, as well as the statutes of limitation that require Alluvion to keep your personal data for longer, e.g. to defend against a claim in court.

10. Safe processing

Alluvion recognises that the security of personal data is an essential part of data protection.

Therefore, Alluvion takes appropriate technical and organisational measures to protect your personal data against destruction, loss, alteration, unauthorised processing or unauthorised access in order to prevent misuse.

Under no circumstances can Alluvion be liable for direct and/or indirect damages resulting from the unlawful use of your personal data by a third party.

11. Security incidents

Depending on the context, Alluvion has an obligation to report incidents relating to the security of your personal data to the competent supervisory authority within 72 hours.

Alluvion guarantees that it shall notify you as soon as it becomes aware of a breach relating to your personal data if there would be reasonable grounds to suspect that you would be harmed by this breach.

12. Cookies

While making use of the website, so-called "cookies" may be placed on storage media in order to remember certain choices made by returning Visitors or to offer certain functionalities.

For more information, please refer to our cookies statement, which is available on the website.

13. Additional information on data collection and processing

13.1. Legal proceedings

Alluvion may use the User's Personal Data for legal purposes, in court or during pre-litigation stages in the event of unlawful use of this Website or the related Services.

The User declares to be aware that Alluvion may be required to disclose Personal Data at the request of government agencies.

13.2. Additional information on the User's Personal Data

In addition to the information contained in this Privacy Policy, this Website may, upon request, provide the User with additional and contextual information about certain Services or the collection and processing of Personal Data.

13.3. System logs and maintenance

For the purposes of operation and maintenance, this Website and third-party services may collect files that record interaction with this Website (system logs) or use other Personal Data (such as IP address) for this purpose.

13.4. Information not included in this policy

More information on the collection or processing of Personal Data may be requested from Alluvion at any time via Alluvion's communication details listed in this document.

14. Additional information on data collection and processing

For the purposes of this document, the following terms must be interpreted and construed as follows:

Data Subject The natural person to whom the Personal Data relates.
Cookies Cookies are Trackers consisting of small data sets stored in the User's browser.
this Website (or this Application) The means by which the User's Personal Data are collected or processed.
Service The Service offered by this Website as described in the relevant terms and conditions (if available) and on this site/application.
European Union (or EU) Unless otherwise indicated, all references in this document to the European Union include all current member states of the European Union and the European Economic Area.
User The person using this Website who, unless otherwise specified, coincides with the Data Subject.
Usage data Information that is automatically collected from this Website (or external services deployed in this Website), including: the IP addresses or domain names of the computers used by the Users of this Website, the Uniform Resource Identifier (URI) addresses, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numeric code indicating the status of the server's response (successful, error, etc.), the country of origin, the functions of the User's browser and operating system, the various time data per visit (such as the time spent on each page of the application) and the data on the pass followed within the application), the country of origin, the functions of the User's browser and operating system, the various time data per visit (such as the time spent on each page of the application) and the data on the path followed within the application, focusing in particular on the order of the pages visited and other parameters about the operating system of the device and/or the IT environment of the User.
Data processor (or Processor) The natural or legal person, public authority, agency or other body that processes Personal Data on behalf of the Processor, as described in this privacy policy.
Legal information This privacy policy relates only to this Website, unless otherwise stated in this document.
Personal data (or Data) Any data that directly, indirectly or in connection with other data - including a personal identification number - enables the identification or identifiability of a natural person.
Tracker Tracker means all technologies - e.g. Cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting - which allow Users to be tracked, e.g. by accessing or storing information on the User's device.
Controller (or Owner) The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of processing Personal Data, including the security measures relating to the operation and use of this Website. The Controller is the Owner of this Website, unless otherwise indicated.