Hertel industrial services nv
We are Hertel Industrial Services NV, based in Bijkhoevelaan 16 in 2110 Wijnegem (Belgium) and registered in the Crossroads Bank of Enterprises under number BE 0405.742.387 (hereafter called “Hertel”).
Within the scope of our activities (supporting our B2B customers in the field of scaffolding, sheeting, rope access, insulation, electrical and steam tracing in various industries such as oil & gas, process, energy, food and pharma) we collect, store, transmit or otherwise process data. Pursuant to the applicable privacy laws, we are the controller regarding the personal data we process.
We attach a great deal of importance to your privacy right and always endeavour to protect your personal data in accordance with the applicable data protection laws and specifically the European General Data Protection Regulation (GDPR).
Note: This means that we do not need your ‘permission’ to process your personal data. We do not process your personal data on the basis of your permission, unless expressly indicated (e.g. to send our electronic newsletter).
Within the scope of our activities (as described above), we may collect personal data of our customers, visitors of our web site, persons completing a contact form on our web site, persons who subscribed to our electronic newsletter and persons who contact us otherwise (e.g. because we are provided with their name and contact details as an employee or appointee of our customers, suppliers or commercial partners).
We can collect information about you in a variety of manners:
We may collect the following data about you:
Personal identification details: name, address, telephone number, cell phone number, e-mail address;
Whenever it is compulsory to fill in certain information, and only optional for other information, this will be clearly indicated.
We use these data for the following purposes:
For your complete information, below are the relevant legal grounds for these types of processing:
Please note that you can revoke your permission at any given time, without us charging any costs and without this having any negative consequences. You can do so by using the opt-out option that will be offered by Hertel in each mailing, by unsubscribing on our web site or by sending an e-mail to GDPRBE@Hertel.com, requesting that your data be deleted.
Within the scope of our activities, as listed above, we sometimes share your personal data with third parties, in particular service providers (e.g. IT/cloud service providers or PR/marketing service providers who organise mailing campaigns for us]) who act as ‘processors’ on our behalf.
We may also share your personal data with our commercial partners (allowing them to contact you).
We may also share your personal data within our group of companies for operational, commercial or marketing purposes:
We may also share your personal data with the authorities, police services or judicial authorities in the event of a legal obligation.
We always ensure that appropriate protective measures are taken when transmitting your personal data to third parties. For instance, where necessary, we will sign a processor agreement, stipulating restrictions on the use of your personal data and obligations regarding the protection of your personal data.
Your personal data and your profile will not be lent or sold to third parties for marketing purposes, without your prior written permission.
Your personal data will not be sent to countries outside the European Economic Area (EEA).
Your personal data will not be stored for a longer period of time than necessary for the purposes for which they are collected and processed (as described above). Afterwards, it is possible that they can be found in our back-ups or archives, but they will no longer be actively processed in a file.
Specifically, the following retention periods apply:
Retention period for customer data: all data within the scope of the contractual relationship with customers or suppliers will be stored for a period of up to 10 years after the end of the contractual relationship. This period corresponds with the limitation period for contractual claims.
Retention period for direct marketing: the data will be used until:
The person involved unsubscribes,
Hertel is informed that the e-mail address is no longer in use,
Hertel decides not to send any further mailings.
Only if we are legally obligated to do so, or if it is necessary to defend our interests in a court of law (e.g. in the event of a dispute), we will store your personal data for a longer period of time.
We take the necessary administrative, technical and organisational measures to ensure a safety level that matches the specific risks identified by us.
This allows us to protect your personal data as much as possible against destruction, loss, change, unauthorised disclosure of or access to personal data that are sent, stored or otherwise processed.
Furthermore, we always try to ensure that we keep your personal data accurate and up to date. Consequently, we kindly request that you keep us informed of any changes to your personal data (such as a change to your contact details).
More information about our protective measures is available on request.
You have the right (under certain circumstances):
to access and be informed of your data;
to correct your personal data;
to delete your personal data (the ‘right to be forgotten’);
to restrict the processing;
to object to the processing of your personal data;
to obtain your personal data in a structured, commonly used and machine-readable format, and to transmit these personal data (or have them transmitted) to another controller.
For more information about these rights and the circumstances in which you can exercise these rights, in particular your right to object (i.e. your ‘opt-out’ right concerning our electronic newsletter), see the Addendum to the present policy. In principle, you can exercise these rights for free. Only in the event of unreasonable or repeated requests we may charge a reasonable administrative fee.
We always endeavour to reply to your requests or questions as quickly as possible. We may also ask you to provide proof of your identity in order to check your request.
Finally, you also have the right to file a complaint with the Belgian Data Protection Authority regarding the processing of your personal data.
Addendum – More information about your legal rights
Right to access and be informed of your data
You can request us to provide more information about our processing activities and about the data we keep about you.
Right to correct incomplete or incorrect data
You can request us to correct or complete incorrect or incomplete personal data.
Right to delete your personal data (‘right to be forgotten)
Upon your written request, we will delete your personal data:
- if they are no longer necessary for the purposes they were collected or processed for; or
- if the processing was exclusively based on your permission, which you revoke now; or
- if you have reasonable grounds to object to the processing of your personal data; or
- if the personal data were processed unlawfully; or
- if the personal data need to be deleted in order to fulfil a legal obligation.
By way of exception, we may refuse to delete your data (i) in order to exercise the right of freedom of speech and information; (ii) in order to fulfil a legal obligation; or (iii) in order to file, exercise or substantiate a legal claim.
Right to restrict the processing
You have the right to obtain a restriction of the processing in one of the following situations:
- for a period that allows us to check the accuracy of the personal data, if they are disputed; or
- if you request us to do so, instead of deleting the data; or
- if we no longer need the personal data, but you need them to file, exercise or substantiate a legal claim; or
- when you objected to a processing based on our legitimate interests.
Right to object to the processing of your personal data
At any given time, given your specific situation, you have the right to object to the processing of your personal data based on our “consideration of legitimate interests”. In that case, we will stop processing these data unless imperative legitimate grounds exist that outweigh your interests, or that relate to the filing, exercise or substantiation of a legal claim.
When personal data are processed for direct marketing purposes (in particular, to send our electronic newsletter or personal advertising via regular mail), you always have the right to object to this or to revoke your permission. You also have the right not to be subjected to profiling for marketing purposes.
Right to data portability
In some cases you have the right to obtain your personal data in a structured, commonly used and machine-readable format, and you have the right to transmit these data to another controller. This right applies:
- if the processing is based on the legal ground of the permission or on its necessity to implement a contract; and
- if the data are processed by means of automated methods.