Skip to Content

Privacy Policy

Obycron places great importance on your privacy and careful handling of your personal data. Therefore, we do our utmost to explain to you in clear and straightforward language with this privacy statement which personal data we collect from you, what we use it for, and what your rights are in this regard.

This version of this privacy statement (version: 1.00) dates from (08/12/2022)

Who are we?

“We”, “Us”, “Our” or “Ours” means Obycron NV, with registered office at Veldkant 33A and with company number BE 0462.364.653

If you have questions, comments or complaints regarding this privacy statement or the processing of your personal data, or if you wish to exercise any of your rights, please contact us by email at contact@obycron.be .


Scope

This privacy statement applies to this website, our direct marketing activities, and the general organisation of Obycron.

Why and how do we process your personal data?

When you visit our website and/or are in contact with us, it is possible that certain personal data is processed. Below you will find more information about the different processing activities that may apply to you.

Use of our website

When you visit our website, we may process personal data using online techniques such as cookies, trackers, scripts, and similar technologies (hereinafter referred to as 'cookies'). This may include (1) essential cookies that are strictly necessary to send a message via an electronic communications network, to ensure the security of our website, or to store information about providing a service explicitly requested by you; (2) functional cookies that further shape your use of our website; (3) analytical cookies to measure and analyse your use of our website; (4) marketing cookies to deliver (personalised) advertisements to you; and (5) other cookies from third parties that we allow on our website.

More information on this can be found in our cookie policy.

Contact via website

Consent - Contact forms are available on our website to get in touch with us. You can also always reach us via email or phone. We process this personal data to handle your contact request but have no visibility or control over any other personal data you provide to us via the open input fields. We ask you not to share any confidential or sensitive information here.

This processing is based on your consent. Please be aware that you can withdraw it at any time. This withdrawal will not affect the lawfulness of the processing that occurred before the withdrawal of your consent.

What personal data do we process?


Identification and contact details
Other data that may be spontaneously provided in the contact form:
Profession-related data
Personal particulars
…
How do we obtain this personal data? Directly from you when filling in our contact form

How long do we keep it? Until 1 year after the contact request has been processed plus the archiving period of the related communication (such as emails) to be archived

With whom can we share this personal data (other than the affiliated and associated companies)? Processors (such as our hosting partner) that we rely on in the context of our website, contact or our relationship management

Is there automated individual decision-making involved in these activities?  No

Is there a transfer outside the EEA in these activities? No


Management of customer relationships (including prospecting new customers)

Legitimate interest – Obycron is always looking for new customers, actively establishing new contacts and building relationships with existing customers. In this context, your personal data is processed (e.g. to invite you to other forms of communication, an event…)

This processing is based on the legitimate interest of Obycron. You can always object to this according to the conditions described under ‘right to object’ in the chapter ‘What are your rights and how can you exercise them’.

What personal data do we process?

  • Identification and contact details
  • Other data that may have been discussed during further contacts:
  • Profession-related data
  • Leisure activities and interests
  • Personal particulars
…
How do we obtain this personal data? Directly from you via relationship management

How long do we keep it? Until 7 years after the last assignment or contact has been processed

Who can we share this personal data with (other than the affiliated and associated companies)? Processors (such as our CRM platform) that we rely on in the context of our website, contact, or relationship management

Is there automated individual decision-making involved in these activities?  No

Is there a transfer outside the EEA in these activities? No

Sending newsletters


Consent - On our website, you can subscribe to our newsletter. We process this personal data to contact you when a new newsletter is available for you.

This processing is based on your consent. You have the option to withdraw the given consent at any time without affecting the lawfulness of the data processing until the moment the withdrawal took place. Specifically, this means that your consent remains valid for all previous newsletters, but you will no longer receive newsletters.

What personal data do we process? Identification and contact details

How do we obtain this personal data? Directly from you when you register

How long do we keep them? As long as the consent is not withdrawn

Who can we share this personal data with (other than the affiliated and associated companies)? Processors (such as our email platform) that we rely on in the context of our website or the delivery of newsletters

Is automated individual decision-making carried out in these activities? No

Is there a transfer outside the EEA in these activities? No

Organising events


Consent – When you register for one of our events, personal data is processed for the handling of your registration and the organisation of the event.

This processing is carried out on the basis of your consent. You may withdraw your consent at any time without this affecting the lawfulness of the data processing carried out prior to the withdrawal. In practical terms, this means that your consent remains valid for all previous events in which you have already participated, but you will no longer be invited to future events.

What personal data do we process?

  • Identification and contact details
  • Other information, such as that which may have been provided voluntarily:
  • Profession-related data
  • Leisure activities and interests
  • Personal particulars
  • Allergies or dietary requirements
…
How do we obtain this personal data? Directly from you when you register

How long do we keep them? We retain the personal data relating to your participation for up to one year after the event has taken place.

With whom might we share this personal data (other than our affiliated and associated companies)? Data processors (such as event organisers, catering companies, etc.) whom we engage to help organise and run the event.

Is automated individual decision-making used in these activities? No

Do these activities involve the transfer of data outside the EEA? No

Recruitment and selection

Consent for (unsolicited) applications and maintaining a recruitment pool – Legitimate interest in active recruitment –

When you apply (spontaneously) for a position at Obycron, Obycron processes personal data about you. We do this for the purpose of recruiting and selecting staff for current or future vacancies. This processing (including the creation of a recruitment pool) is carried out on the basis of your consent. You have the right to withdraw your consent at any time without this affecting the lawfulness of the data processing up to the point at which the withdrawal took place.

When Obycron actively recruits, Obycron processes personal data about you. This only occurs based on data that is publicly available about you (e.g. on platforms such as LinkedIn and Google) or data that has been provided to us by third parties. This processing is based on the legitimate interest of Obycron. You can always object to this according to the conditions described under ‘Right to object’ in the chapter ‘What are your rights and how can you exercise them’.

Finally, we would like to point out that we rely on our legitimate interest to pass your personal data to the companies associated and connected with us in the context of our recruitment process. We do this, of course, with the aim of finding a suitable assignment for you. You can always object to this according to the conditions described under ‘right to object’ in the chapter ‘What are your rights and how can you exercise them’.

What personal data do we process?

  • Identification and contact details
  • Other data as possibly mentioned on your CV:
  • Personal characteristics
  • Social contacts
  • Psychological data (cf. a description of your personality or character)
  • Composition of the household
  • Leisure activities and interests
  • Academic curriculum
  • Professional competence
  • Professional experience
  • Membership of/participation in professional organisations
  • Current position
  • Career
  • Business administration data (cf. (partial) disability)
  • Current salary
  • Current extralegal benefits
  • Registration number
…

How do we obtain this personal data?

(Unsolicited) application: submitted directly by you

Active recruitment: via third parties such as public platforms or intermediaries

How long do we keep them?

For unsuccessful applicants: we keep the personal data regarding your application for a maximum of 1 year after application.

For applicants within our recruitment reserve: as long as consent is not withdrawn and for a maximum of 3 years after application.

With whom can we share this personal data (other than affiliated and associated companies)?

Processors (such as recruitment agencies) that we engage to recruit and select

Is automated individual decision-making used in these activities? No

Do these activities involve the transfer of data outside the EEA? No


Supplier relationship management (including sourcing new suppliers)


Legitimate interest – Obycron works with suppliers, actively establishes new contacts for this purpose and builds relationships with existing suppliers. In this context, personal data relating to our suppliers’ employees (e.g. account managers) is processed.

This processing is based on the legitimate interest of Obycron. You can always object to this according to the conditions described under ‘right to object’ in the chapter ‘What are your rights and how can you exercise them’.

What personal data do we process?

Identification and contact details
Other data that may have been discussed during further contacts:
Profession-related data
Leisure activities and interests
Personal particulars
…

How do we obtain this personal data? Directly from you via relationship management

How long do we keep it? Until 7 years after the last assignment or contact has been processed

With whom can we share this personal data (other than affiliated and associated companies)? Processors (such as our CRM platform) that we engage in the context of our relationship management

Is automated individual decision-making carried out in these activities?  No

Do these activities involve the transfer of data outside the EEA? No


Sharing personal data with third parties

When you visit our website or use our products and services as a customer, we may, in that context, engage third parties, such as partners, affiliated and associated companies, and suppliers, to whom we may pass on your personal data. These third parties help us to deliver, support and develop our products and services, and to gain insight into their use; they also provide services such as hosting, customer and technical support, marketing, analysis, content delivery and/or the processing of online payments.

We may also share data (including personal data) with third parties in connection with a reorganisation, restructuring, merger, sale or other transfer of business assets. We share the information you provide, automatically collected information and information from others with these third parties to the extent necessary to enable them to provide their services or support. For the activities described above, we specify for each activity the categories of third parties, other than affiliated and associated companies, with whom we share your personal data.

Furthermore, we may be required to provide access to your data or disclose your data in order to comply with a legal obligation. This may involve sharing your data with authorities, government bodies or other third parties.

Finally, we may share your personal data if this proves necessary to protect your vital interests.

Transfer of personal data outside the EEA
Obycron endeavours to limit the transfer of personal data to third parties outside the European Economic Area (hereinafter: “EEA”) at all times.
If this is the case, we will ensure that this transfer is brought into line with the GDPR (including, among other things, the presence of an adequacy decision in the relevant country or the establishment of an appropriate alternative, if necessary additional measures, etc.) as soon as possible in this situation.

We refer to the chapter "Why and how do we process your personal data?" for the specific transfers.)

How long do we keep your personal data?
We do not keep your personal data longer than strictly necessary to achieve the purposes for which the personal data was collected or according to the legal obligation imposed on us. We refer to the chapter "Why and how do we process your personal data?" for the specific retention period.)

Automated individual decision-making
European data protection legislation (GDPR) imposes certain conditions on organisations when they make decisions about individuals solely based on processes that are fully automated, including profiling, and when these decisions have legal effects or other significant consequences. Obycron does not engage in this type of decision-making.

What are your rights and how can you exercise them?
Obycron believes it is important that you always retain control over the processing of your personal data. Below you will find more information about the various rights you have and can invoke regarding the processing of your personal data:

Depending on the processing and the legal basis for that processing, it is possible that certain conditions or restrictions are attached to the exercise of the rights below.
To exercise the above rights, or for information regarding this, you can contact contact@obycron.be . We will also provide more information if there are certain modalities attached to your request. Furthermore, it is possible that we will ask for additional information to verify your identity so that your personal data is not incorrectly deleted or shared with someone who does not have the right to it. We aim to respond without unreasonable delay, but in any case within a period of one month after receiving your request. If we cannot respond within one month and wish to extend the period, or if we will not comply with the request, we will inform you of this.

Right of access

In the event that we process your personal data, you have the right to access your personal data, as well as certain additional information as described in this privacy statement. You have the right to receive a copy of the personal data we hold about you, provided that this does not adversely affect the rights and freedoms of others. The first copy will be provided to you free of charge, but for repeated requests we reserve the right to charge a reasonable fee.

Right to rectification

If the personal data we hold about you is inaccurate or incomplete, you have the right to have this information corrected or, considering the purposes of the processing – completed.

Right to restriction of processing


You have the right to have the processing of your personal data restricted. This means that we may only store your personal data and use it for limited purposes. This right applies if any of the following situations arise:

You dispute the accuracy of the personal data, for a period that allows us to verify the accuracy of the personal data;

The processing is unlawful, but you object to the erasure of the personal data and request, instead, that its use be restricted;

We no longer require your personal data for the processing purposes described above, but you require it for the establishment, exercise or defence of legal claims; or,

You have objected to the processing of your data and are asking us to restrict such processing pending a decision on whether our interests outweigh yours.

In addition to our right to store your personal data, we may still process it, but only:

  • With your permission;
  • For the purpose of bringing, pursuing or defending legal proceedings;
  • To protect the rights of another natural or legal person; or
  • For reasons of public interest.
Before we lift the restriction on the processing of your personal data, you will be informed of this.

Right to data portability

If the processing of your personal data is based on your consent, and the processing is carried out through automated processes, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format. You also have the right, where technically feasible, to have your personal data sent directly by us to a third party. This right does not apply when it would adversely affect the rights and freedoms of others.


Right to object


You have the right to object to the processing of your personal data in the activities described above. In the latter case, this can only occur if the activity is related to (1) the performance of a task carried out in the public interest or in the exercise of a task in the context of the exercise of public authority vested in us or (2) the protection of our legitimate interests or those of a third party. 

If you object to the processing of your personal data, we will no longer process the personal data unless we can demonstrate compelling legitimate interests for the processing that override your interests, fundamental rights, and freedoms. 

When your personal data is processed for the purpose of direct marketing, regardless of whether it concerns an initial or further processing, you have the right to object to this processing at any time and free of charge, including in the case of profiling insofar as it relates to direct marketing. If you make such an objection, we will stop processing your personal data for this purpose.

Right to erasure (right to be forgotten)


You have the right to request the deletion of your personal data from us. This means that the personal data must be deleted by us without unreasonable delay. This right applies if one of the following situations occurs: 

The personal data is no longer necessary for the purposes for which it was collected or otherwise processed;

You withdraw your consent on which the processing is based, and there is no other legal ground for the processing of your personal data;

Your personal data has been processed unlawfully;

Deletion of your personal data is necessary to comply with European or Belgian law;

If you request us to delete your personal data, we will delete the personal data unless one of the following situations (exceptions) occurs: 

The processing is necessary for the exercise of the right to freedom of expression and information;

Deletion is not applicable due to reasons of public interest in the area of public health;

Deletion is not applicable due to the need for archiving in the public interest, or for statistical purposes;

There is a legal obligation to retain the data; or,

Deletion is not applicable due to the establishment, exercise or substantiation of a legal claim. 

Right to withdraw your consent

When you have given consent for a specific processing of your personal data, you can withdraw it at any time. We aim to make withdrawing your consent as easy as possible and, to the extent possible, as simple as giving your consent.

Right to object to the processing of your personal data in automated individual decision-making

When your personal data is used in the context of automated individual decision-making and when these decisions have legal effects or other significant consequences, you can request us not to use your data anymore. If you object to this processing, we will cease or limit the processing unless there are compelling reasons to continue.

Who can I contact with further questions or any complaints regarding privacy?
If you have any further questions or comments regarding the collection and processing of your personal data after reading this privacy statement, you can always contact us at the following email address: contact@obycron.be .

You also have the right to submit any comments or complaints to the supervisory authority responsible for data protection. You can do this in the EU member state where you reside, the place where you work, or the place where the alleged infringement took place. In Belgium, you can file a complaint with the Data Protection Authority:

Data Protection Authority

Drukpersstraat 35, 1000 Brussels

+32 (0)2 274 48 00

www.gegevensbeschermingsautoriteit.be/burger/acties/klacht-indienen


www.gegevensbeschermingsautoriteit.be


Because we place great importance on our mutual relationship, we ask you to always contact us first so that we can work out a solution for what lies at the basis of your complaint.

Amendments to the privacy statement

Our organisation and thus our website are a dynamic and innovative environment. This privacy statement may be adjusted if our services or applicable legislation require it. This means that we are constantly looking for better services tailored to you. It is possible that new applications will arise where we will collect or process your personal data in a different way. Of course, we will inform you when there are significant changes to this privacy statement, and we will ask for your consent if necessary.