GDPR

Data Protection Policy 

Data controller and update of this policy. 

The ASBL “DoucheFLUX”, company number 0841.390.074 whose registered office is located at rue des Vétérinaires 84 in 1070 Anderlecht, is considered a “Data Controller” within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and the Law of 30 July 2018 on the protection of individuals with regard to the processing of personal data (hereinafter “the RGPD”).

This data protection policy may be subject to changes and additions, due to legislative or other developments (in particular relating to the technological means used for data processing).

We invite you to visit this page of the website regularly, where you will always find the most up-to-date version of the data protection policy, which is applicable as soon as it is put online.

Scope of the declaration

As a person who benefits from the services of DoucheFLUX, or comes into contact with it in one way or another and whose personal data is processed by DoucheFLUX, for various purposes, as a beneficiary, member, worker, institutional partner, stakeholder of a social body or association, trainee, volunteer, supplier, or in any other capacity, you are concerned by this declaration which describes the measures taken in relation to the processing of your personal data and in relation to your rights.

General Principles 

DoucheFLUX guarantees that any processing of personal data it carries out complies with the RGPD.

Accordingly, DoucheFLUX:

  • Implements appropriate technical and organizational measures to ensure that processing is carried out in accordance with the principles of the RGPD.
  • Ensures compliance with the legal provisions relating to the protection of personal data. As such, DoucheFLUX adopts the appropriate measures to take into account data protection in the context of its activities, right from their origin (principle of data protection by design).
  • Guarantees to collect, process or use only data that is necessary for the specific purpose for which it is being processed. This applies to the amount of personal data collected, the scope of processing, the retention period and accessibility (principle of data protection by default).

Purposes of processing 

The personal data collected and used by DoucheFLUX is used to carry out its mission of improving the living conditions of people living in precarious conditions, and to improve the services it offers.

Generally speaking, the purposes for which your data is processed are :

  • To meet legal obligations;
  • To meet contractual obligations, such as monitoring beneficiaries, managing DoucheFLUX’s human resources (employees, volunteers, trainees), and ensuring the proper execution of agreements with various categories of people (partners, suppliers, technical service providers, etc.).
  • If you have given your consent, to keep you informed of DoucheFLUX activities via its newsletter.

 

Data likely to be collected, retention periods and communication of such data to third parties. 

Most of the time, the data collected relates to your identity (surname, first name) and your contact details (e-mail, telephone, postal address, etc.).

DoucheFLUX is the main recipient of this data and under no circumstances is it communicated to third parties, with the exception of subcontractors or partners with whom DoucheFLUX collaborates in order to comply with legal and contractual obligations or to provide you with an adequate service.

Neither DoucheFLUX, nor its subcontractors, nor any of its partners market your data.

In the context of DoucheFLUX’s missions, other data may be collected, such as family situation, sex, gender, nationality, administrative status, IBAN, VAT number associated with natural persons, professional status, date of birth, …

Your data will be kept for the duration of the processing operation and, subject to legal obligations extending the period to 10 or 20 years in exceptional cases, will not be kept for more than 5 years.

 

Data likely to be collected, retention periods and communication of such data to third parties. 

When you visit our website, DoucheFLUX may collect your personal data in various ways:

  1.  Data you provide directly when registering for the newsletter via our website, i.e. :Data: Name, e-mail,
    Purpose: Sending the newsletter, appeal for donations, information about DoucheFLUX activities.
    Recipient: Persons in charge of DoucheFLUX communications.
    Transfer to third parties: No
  2. Data collected passively, in the form of cookies, in order to facilitate your browsing of the DoucheFLUX website and to optimize its technical management. Cookies are small data files downloaded onto the device used to visit the DoucheFLUX site (computer, tablet, smartphone, etc.). By way of information, cookies can be of three types as presented below: essential, functional or analytical cookies. To date, there are no cookies on the DoucheFLUX site.a. Essential cookies are necessary for purely technical reasons linked to the use of the site.  No application
    Type of cookie: /
    Type of data collected: /
    Retention period: /
    Communication of data to third parties: /b. Les cookies fonctionnels, cookies qui permettent au site de se rappeler des choix qui sont faits par les visiteurs du site et de fournir des fonctionnalités améliorées ou personnalisées. Pas d’application.
    Type of cookie: /
    Type of data collected:/
    Retention period:/
    Communication of data to third parties:/c. Analytical cookies, which are cookies used to compile statistics about visits to the DoucheFLUX website. No application.Type de cookie : /
    Type of cookie: /
    Type of data collected: /
    Retention period:/
    Communication of data to third parties: /Depending on the browser you are using, you may be able to restrict the use of cookies, or delete them after your visit to the site. The settings may vary from one browser to another. Further information is available at the following addresses:
    Browser Microsoft
    Google Chrome
    Mozilla Firefox
    Safari  Adobe Flash Player

 

Data likely to be collected during your visit to social networks where DoucheFLUX is present, retention period and communication of this data to third parties. 

Data you provide to the network when you register or subsequently, depending on the platform used: this data varies depending on the platform used, and may include, for example: surname, first name, e-mail address, date of birth, etc.

Passively collected data: this data varies according to the platform used, and is included in the platform’s privacy policy, for the part relating to cookies, which we invite you to consult if necessary.

Purpose: information and promotion of DoucheFLUX actions and activities.

Recipient: manager of DoucheFLUX pages on each social network, and manager of the social network.

Transfer to third parties and transfer outside the EU: data is communicated to third parties and transferred outside the EU, by the social network manager, and without prior agreement from DoucheFLUX. Please consult the platform’s privacy policy for further details.

Your rights : 

Under the GDPR, you have the rights set out below.

  1. Right of access and information
    You have the right of access to your data, i.e. the right to access, without having to give reasons for your request, your personal data that is processed by DoucheFLUX. You may also request a copy of the data processed.
  2. In the event of an excessive request, DoucheFLUX may require payment of a reasonable fee based on the administrative costs relating to the request. In the event of a manifestly abusive request, DoucheFLUX may also oppose the request.
  3. Right of rectification
    You have the right to obtain from DoucheFLUX, as soon as possible, the rectification of any personal data concerning you that is inaccurate, incomplete or obsolete.
    In the event that data is rectified, DoucheFLUX will notify any subcontractor or partner to whom your personal data may have been communicated, unless such communication proves impossible or would require disproportionate effort.
  4. Right to erasure (« right to be forgotten »)
    You may request DoucheFLUX to delete your personal data as soon as possible in the following cases:
    the personal data is no longer necessary for the purposes for which it was collected;
    data processing was based exclusively on your consent, which you have withdrawn;
    you object, on well-founded grounds, to the processing.
    In any case, this right will not be granted if the processing is necessary to comply with a legal obligation that requires such processing or if it is necessary for the establishment, exercise or defense of legal claims.
    In the event that your data is deleted, DoucheFLUX will notify each subcontractor or partner to whom personal data may have been communicated, unless such communication proves impossible or requires disproportionate effort.
  5. Right to restriction
    You have the right to obtain from DoucheFLUX the limitation of the processing relating to your personal data when one of the following hypotheses applies:
    – You dispute the accuracy of the personal data. In this case, the limitation applies only for a period of time that allows DoucheFLUX to verify the accuracy of the personal data;
    – The processing is unlawful, and instead of erasure, you request that their use be restricted;
    – DoucheFLUX no longer processes your data for the purposes for which it was collected, but it is still necessary for the establishment, exercise or defense of legal claims.
    – You are able to prove that you have objected to the processing.
    If DoucheFLUX restricts the processing of your personal data, it is obliged to notify this to any subcontractor or partner to whom the personal data may have been communicated, unless such communication proves impossible or requires disproportionate effort.
  6. Right to data portability
    You have the right to request that the data you have provided to DoucheFLUX be transmitted to you in a structured, commonly used and machine-readable format. Furthermore, you have the right to transfer your data to another data controller without DoucheFLUX being able to prevent this.
    You may even request that your data be transferred directly from DoucheFLUX to another data controller where this is technically possible.
  7. Right to object
    You have the right to object at any time, for reasons relating to your particular situation, to the processing of your personal data :
    – In this event, DoucheFLUX shall immediately cease processing the data in question, unless :
    – DoucheFLUX demonstrates that there are compelling legitimate grounds for the processing which override your interests, rights and freedoms,
    – DoucheFLUX demonstrates that there are grounds for establishing, exercising or defending legal claims.

 

Data Protection Officer and Data Protection Authority. 

If you wish to assert any of the rights set out above, you may contact DoucheFLUX’s Data Protection Officer (hereinafter “DPO”) who can be contacted via :

Benjamin BROOKE – Director – benjamin.brooke@doucheflux.be – 0471 22 96 43 

As this data is of a personal nature, and therefore confidential, your request must be accompanied by proof of your identity, in particular by producing your identity card.

DoucheFLUX undertakes to respond to all requests within a reasonable timeframe, and in any event within a maximum of 1 month from receipt of your request.

Depending on the complexity of the request, and in accordance with the RGPD, the response time may be extended to 3 months from receipt of your request.

In the event of disagreement or lack of response, you may lodge a complaint with the Data Protection Authority (DPA), whose full contact details are available at: www.autoriteprotectiondonnees.be/