This privacy notice explains how We, PVC Information Council – Belgium vzw (PVC Information Council – Belgium or “We“, “us”, “our”), are committed to complying with EU Privacy Law. This privacy notice (the “Notice“) describes how We, as a controller of Personal Data, Process the personal information of certain categories of Data Subjects that are not associated to us.
In carrying out our activities, We process Personal Data relating to consultants, contractors, suppliers, individuals registering for our publications and/or attending events and conferences, officials of the European institutions and EU agencies, EU Member State officials, journalists and other stakeholders (“You“) in the policy areas that We are involved in.
We are a data controller. This means that We are responsible for deciding how We collect and use (process) Personal Data about You. We are required under GDPR to notify You of the information contained in this Notice.
- What Personal Data do We hold about You?
Depending on who You are, We collect different Personal Data from You, for specified purposes and based on a specific legal ground.
|Data Subjects||Personal Data Collected||Purposes||Sources||Legal Basis|
|EU and national government officials and policy stakeholders, including journalists, industry associations and NGOs involved in the policy areas that the association is active in||Name, job title, email address, name of the organisation, address, phone number, your political party. If you work in an EU institution or agency, your picture and date of birth||Conducting our advocacy activities in the policy fields We are involved in, including contacting You with regard to projects We are involved in and asking You information about the policy areas We are involved in||Public websites, business cards, public lists, stakeholders mapping||Legitimate interest – We believe that, as an EU association active in in the plastic industry, We have the legitimate interest to conduct our advocacy activities|
|Third party contractors and suppliers||Name, job title, email address, name of the organization, bank account details, phone number||Preparing, executing and terminating a contract We have with You||Contracts, invoices, quotes||Performance of a contract|
|Individuals attending conferences and events and webinars||Name, job title, email address, organisation you work in, your area of expertise, address, food preferences or allergies. In some cases, your credit card details, if We guarantee for your accommodation and your ID, if the information is necessary to provide you access to the venue. If you are a speaker, your picture and biography||To send You follow-up emails with regard to the events We both attended and surveys, to contact You with regard to your areas of interest, to invite You to events, to send You regulatory and policy updates, to populate the attendance list||Business cards, email you send us, oral exchanges, public databases, events databases||Legitimate interest – We believe that, as an EU association active in the plastic industry We have the legitimate interest to conduct our advocacy activities|
|Recipients of our newsletter||Email address||To inform You about our activities, send You our newsletter, send You our reports, send You regulatory and policy updates||Subscription page on our website, written forms, emails|
Public website, oral exchanges during events We both attended, business cards
|Consent / Legitimate interest|
- Change of purpose
We will only use your Personal Data for the purposes for which We collected it, unless We reasonably consider that We need to use it for another reason and that reason is compatible with the original purpose. If We need to use your Personal Data for an unrelated purpose, We will notify You and We will explain the legal basis which allows us to do so.
- Which third-parties process your Personal Data? Do We Share, Disclose or Transfer Personal Data?
In order to conduct our activities, We may have to share or disclose your Personal Data with third parties, including third-party service providers.
We share your Personal Data with:
- IT experts who provide services to PVC Information Council – Belgium (e.g., data storage or website administration);
- Event-management and marketing platforms, as well as meeting venues only for our event organising purposes;
- Survey platforms;
- Service providers and cooperation partners We work with, for the purpose of co-organising events; and
- Other external parties We may cooperate with to run specific projects; (e.g. other industry associations and consultants).
We do not use other third-parties to process your Personal Data or otherwise transfer Personal Data outside of the EEA and/or disclose your Personal Data to other recipients than those identified in this Notice. If We were to do so, We will comply with EU Privacy Law.
- Data security
Your Personal Data are treated as confidential.
We never pass on your contact details to third-parties for commercial purposes.
In order to safeguard your Personal Data from unauthorized access, collection use, disclosure copying, modification, disposal or similar risks, We have put in place appropriate administrative, physical and technical measures. We update and test our security technology on an ongoing basis. We restrict access to your Personal Data to those employees and staff who need to know that information to provide benefits or services to You. In addition, We train our staff about the importance of confidentiality and maintaining the privacy and security of your information. We commit to taking appropriate disciplinary measures to enforce our staff’ privacy responsibilities.
- How long will We retain your Personal Data?
We store your Personal Data as long as You don’t withdraw your consent or don’t object to the Processing.
We undertake, absent of any Processing activities within a period of 24 months, to delete the Personal Data We hold on You. However, We may retain your Personal Data under EU or national laws. We may retain electronic copies of files containing Personal Data created pursuant to automatic archiving or back-up procedures which cannot reasonably be deleted. In these cases, We shall ensure that the Personal Data are not further actively processed.
- Your rights in connection with Personal Data
Under certain circumstances, under EU Privacy Law, You have the right to:
- Request access to your Personal Data. This enables You to receive a copy of the Personal Data We hold about You and to check that We are lawfully Processing it.
- Request correction of the Personal Data that We hold about You. This enables You to have any incomplete or inaccurate information We hold about You corrected.
- Request erasure of your Personal Data. This enables You to ask us to delete or remove Personal Data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your Personal Data where You have exercised your right to object to Processing (see below).
- Request the restriction of Processing of your Personal Data. This enables You to ask us to suspend the Processing of Personal Data about You, for example if You want us to establish its accuracy or the reason for Processing it.
- Request the transfer of your Personal Data to another party (right to data portability).
To exercise your rights as Data Subject, make queries or complaints, please contact email@example.com.
When You provided your consent to the collection, Processing and transfer of your Personal Data for a specific purpose, You have the right to withdraw your consent for that specific Processing at any time.
When We process your Personal Data based on our legitimate interest (or those of a third party), You have the right to object to such Processing. To withdraw your consent or object to the Processing, please contact firstname.lastname@example.org.
If You are dissatisfied with any aspect of our handling of your Personal Data, You have the right to make a complaint at any time to the relevant Supervisory Authority.
- Changes to Notice
We may revise this privacy Notice from time to time and any revisions will be made available to You via our website.
- Our contact details
PVC Information Council – Belgium vzw, Heiveld 27A • 3980 Tessenderloo • Belgium
(T: +32 (0)2 329 51 03, E: email@example.com)
In this Notice:
“EU Privacy Law” means the General Data Protection Regulation 2016/679 (“GDPR“) and the Belgian national privacy laws, as amended from time to time.
“Data Subject” means an identified or identifiable individual.
“Personal Data” means any information relating to an identified or identifiable natural person.
“Processing” means any operation performed on Personal Data, manually or by automated means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
“Supervisory Authority” means the Belgian Data Protection Authority or the relevant data protection authority of the data subjects’ habitual residence or place of work.
Version No. 1