Privacy Policy
Introduction
Maassmedia BV places great importance on the secure, transparent and confidential collection and processing of your personal data. In particular, we want to protect the data of our clients, suppliers, employees and other contact persons against loss, leaks, errors, wrongful access or unlawful processing.
By means of this Data Protection Policy we wish to inform you about the collection and processing of your personal data. We ask that you read this Data Protection Policy carefully, since it contains essential information about how your personal data are processed and for which purposes.
By communicating your personal data, you expressly declare that you have taken knowledge of this Data Protection Policy and that you expressly accept it, as well as the processing itself.
2. Scope of application
This Data Protection Policy relates to all business and services that are provided by (or to) us and to all activities that we perform generally.
3. Controller
Maassmedia BV, with registered office established at Michel De Braeystraat 66, 2000 Antwerp, and company number 0731.948.538 (hereafter “Culture Kids”) is the controller of your personal data.
When collecting and processing your personal data, Culture Kids respects the Belgian regulations on the protection of personal data, as well as the General Data Protection Regulation (“GDPR”) as of its entry into force on 25 May 2018.
4. Processing your Personal data
Depending on your activities and your relationship to our company, we will be processing your personal data. For more detailed information, see point 5 below.
We wish to point out that you bear responsibility for all of the data that you provide to us and that we rely on the accuracy thereof. If your data should no longer be up-to-date, we ask you to report this to us as by return post or email.
You are not obliged to communicate your personal data, but you understand that the granting of certain services or the collaboration becomes impossible if you do not consent to the collection and processing.
5. PERSONAL DATA, Processing purposes and legal basis
5.1 Data of clients
Within the framework of our services and activities, we collect and process personal data of our clients and principals, their personnel, employees, agents and other useful contact persons. We process the following personal data: personal identification data; client number; financial identification data; financial transactions; company and VAT number; professional activities; agreements and settlements; information relating to complaints or damage claims.
The purposes for such processings are the execution of the agreements with our clients, our client management, the bookkeeping, dispute management and direct marketing activities. The legal bases are the execution of the agreement, compliance with statutory and regulatory obligations and/or our legitimate interest.
5.2 Data of suppliers and subcontractors
We collect and process personal data of our suppliers, subcontractors, agents and distributors, their personnel, employees, agents and other useful contact persons. We process the following personal data: personal identification data; financial identification data; financial transactions; professional activities; agreements and settlements; company and VAT number; supplier number; information relating to complaints or damage claims.
The reasons for such processings are the execution of the agreements with our suppliers and subcontractors, the management of the suppliers and subcontractors, dispute management, public relations and the bookkeeping. The legal bases are the execution of the agreement, compliance with statutory and regulatory obligations and/or our legitimate interest.
5.3 Data of managers and shareholders
We collect and process personal data of our managers and shareholders, their representatives and other useful contact persons. We process the following personal data: personal identification data; financial identification data; financial transactions; company and VAT number.
The reasons for such processings are the registration and management of our managers and shareholders and, if any, the execution of agreements with them. The legal bases are the execution of the agreement, compliance with statutory and regulatory obligations and/or our legitimate interest.
5.4 Data of personnel
We collect and process the following personal data of our employees: personal identification data; personal characteristics; national register number; identification data issued by the government (e.g. social security number); data about and/or necessary for insurances; data about and/or necessary for pensions; household structure; financial identification data; financial transactions; wages and benefits; data concerning payroll processing; data about recruitment, education and professional experience; data about the execution of the employment agreement; agreements and settlements; data about assets held by the employee and provided by Culture Kids; security codes; pictures taken at the office and during professional events; performance evaluations.
The reasons for such processings are personnel management, payroll administration, recruitment, evaluation, organisation of training, access to the office, management of insurances and social security, management of company equipment and safety. The legal bases are the execution of the agreement, compliance with statutory and regulatory obligations and/or our legitimate interest.
From time to time we also collect and process personal data that falls under the special categories of sensitive personal data, like medical data and data relating to trade union membership. We collect this data to safeguard the rights and obligations of the employee and our rights and obligations as employer under the Belgian employment and social security legislation. Further we also collect the explicit consent of our employees for the processing of this kind of personal data.
5.5 Details of applicants
If you apply for a job with us, we process the personal data provided by you as part of the application process (CV, cover letter, notes taken during the job interview, …).
This information is processed for the following purposes: i) to manage and evaluate your application, ii) to keep you informed of any future activities of Culture Kids provided that you give your prior consent, iii) inclusion in the recruitment reserve to later contact you for potentially relevant opportunities.
The applicant may at any time withdraw his/her consent and request that he/she be removed from the recruitment reserve.
5.6 Details of the website visitors
We process certain personal data when you visit our website. For more information on what data are processed for what purposes, please refer to our Cookies Policy.
5.7 Other data
Along with the above-mentioned data, we also process personal data of others, such as possible new clients/prospects, useful contacts within our sector, network contacts, former employees, etc. The reasons for such processings are in the interest of our activities, direct marketing and public relations. The legal basis is our legitimate interest or, in some cases, the execution of an agreement.
6. Duration of the processing
The personal data are kept and processed by us for a period that is necessary as a function of the purposes of the processing and as a function of the relationship (whether or not contractual) that we have with you.
The maximum duration of the processing depends on your relationship to our company. In any case, we will make an exception to this maximum duration with regard to those personal data that we, on the basis of specific legislation, must preserve for a longer period or in the event of an ongoing dispute for which the personal data are still necessary.
Clients and suppliers:
Your data will in any case be removed from our systems after a period of ten years after termination of the agreement, the file, the collaboration or the project.
Employees, managers and shareholders:
Your data will in any case be removed from our systems after a period of five years after termination of the agreement, end of the collaboration or transfer of the shares.
Prospects, applicants, (website) visitors, useful business contacts:
Your data will in any case be removed from our systems after a period of two years after your last interaction with us.
7. Rights
In accordance with and subject to the Belgian data protection legislation and the provisions of the GDPR, we hereby inform you that you have the following rights:
Right to access and inspection: You have the right to access, free of charge, the data we have about you, and to check for what purposes they are used.
Right to rectification: You have the right to rectify (correct) inaccurate personal data, as well as to complete incomplete personal data.
Right to data erasure or restriction: You have the right to ask that we erase your personal data or restrict the processing thereof in the circumstances and under conditions set by the GDPR.
Right to data portability: You have the right to obtain in a structured, common and machine-readable form the personal data you supplied to us. You have the right to transfer these data to another party responsible for the processing.
Right to object: You have the right to object to the processing of your personal data on serious and legitimate grounds.
Right to withdraw consent: You have the right to withdraw the consent given by you.
Automated decision-making and profiling: We confirm that the processing of your personal data does not include profiling and that you are not subject to fully automated decision-making.
You can exercise these rights by contacting privacy@culturekidsgroup.agency
We make every effort to deal with your personal data in a careful and legitimate manner, in accordance with the applicable legislation. If you nevertheless believe that your rights have been violated and your concerns are not addressed by our company, you are free to file a complaint with the competent supervisory authority. Additionally, you may turn to a court in case you feel you suffer any injury as a result of the processing of your personal data.
Supervisory authority for Belgium:
Gegevensbeschermingsautoriteit / Autorité de protection des données
Drukpersstraat 35, 1000 Brussel / Rue de la Presse 35, 1000 Bruxelles
+32 (0)2 274 48 00
+32 (0)2 274 48 35
contact@apd-gba.be
8. Transfer to third parties
Specific personal data that are collected by us will be transferred to and possibly processed by third-party service providers, such as our software providers, IT providers, bookkeepers, auditors, professional advisors, insurance companies, suppliers, banks, solicitors, notary public, bailiffs, government administrations, telecommunications providers, etc.
It is possible that one or more of the above-mentioned third parties are located outside of the European Economic Area (“EEA”). However, personal data will only be passed on to third countries where there is a suitable level of protection
The employees, managers and/or representatives of the above-mentioned service providers or institutions and the specialised service providers hired by them must respect the confidential nature of your personal data and can only use these data for the purposes within whose framework they were provided.
If necessary, your personal data can be transferred to other third parties. For example this can be the case if we should be reorganised in whole or part, our activities should be transferred or if we should be declared bankrupt. It is also possible that personal data must be transferred as a result of a court order or in order to comply with a certain statutory obligation. In that event we will make reasonable efforts to inform you in advance about this communication to other third parties. You will nevertheless acknowledge and understand that in certain circumstances this is not always technically or commercially feasible or that legal restrictions may possibly apply.
We will under no circumstances sell your personal data or make them commercially available to direct marketing agencies or similar service providers, except with your prior consent.
9. Technical and organisational measures
We take the necessary technical and organisational measures in order to process your personal data with an adequate degree of security, so as to protect them against destruction, loss, falsification, change, unauthorised access or erroneous disclosure to third parties, as well as any other unauthorised processing of these data.
Under no circumstances can our company be held liable for any direct or indirect damage deriving from an erroneous or wrongful use by a third party of the personal data.
10. Access by third parties
With a view to the processing of your personal data, we grant access to your personal data to our employees, collaborators and agents. We guarantee an equivalent level of protection by making contractual obligations opposable to these employees, collaborators and agents, which are identical to this Data Protection Policy.
11. Any questions?
If, after reading this Data Protection Policy, you have further questions or comments regarding the collection and processing of your personal data, you can contact Sam Maas, privacy@culturekidsgroup.agency