Privacy Policy

1.     GENERAL

1.1.  CERM (CERM NV, registered with the Crossroads Bank of Enterprises under number 0440.985.556 and having its registered office at Siemenslaan 17, 8020 Oostkamp (Belgium)) respects your privacy and undertakes all efforts to keep secure any personal data it obtains from you. This Privacy Policy describes practices with respect to the personal data CERM collects from you when you visit and use the Website www.cerm.net (hereinafter, the “Website”).

1.2.  Under this Privacy Policy, personal data should be understood as any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name or an address. Company Information can therefore not be qualified as personal data under this Privacy Policy.

1.3.  Any personal data will be collected by CERM in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter, the “GDPR”) and the Belgian Law of 30 July 2018 on the protection of individuals with regard to the processing of personal data.

1.4.  This Privacy Policy, the Cookie Policy and Website Terms of Use, which are separate documents available on www.cerm.net outline the legal contract between you and CERM for using the Website.

2.     WHAT PERSONAL DATA IS COLLECTED BY CERM?

2.1.  CERM collects, processes and stores the following personal data when you: (i) request a demo, (ii) request a quote, (iii) ask for support, (iv) want to receive updates or news, (v) want to receive a report and (vi) have a general question.

2.2.  CERM collects, processes and stores the following personal data when you use the Website to respond to a vacancy or solicit spontaneously:

2.3.  CERM collects, processes and stores the following personal data when you use visit and browse the Website:

3.     WHAT IS CERM’S PURPOSE AND LEGAL BASIS FOR COLLECTING YOUR PERSONAL DATA?

3.1.  CERM collects, processes and stores your personal data necessary for the performance of the contract concluded with you, i.e., to comply with its obligations under such contract. Such legal basis is used for the following purposes and categories of personal data:

3.2.  CERM asks you to actively indicate your consent to CERM’s use of your personal data for the following purposes:

If the processing of personal data is based on your consent, you have the right to withdraw your consent at any time, without this affecting the legality of the processing on the basis of the permission before your withdrawal. You can inform CERM of such withdrawal by sending an email to marketing@cerm.net.

3.3.  CERM has a legitimate interest in processing your personal data when it uses your personal data in a certain way, which is necessary and justified considering any possible risks to you and other users of the Website:

3.4.  CERM must process your personal data to comply with legal obligations for the following purpose:

4.     TO WHOM DOES CERM SEND YOUR PERSONAL DATA?

4.1.  In order to fulfil the purposes mentioned in Article 3, CERM may communicate your personal data to the following recipients:

(a)   IT services providers (hosting, cloud, etc.);

(b)   Accountancy firms;

(c)   Recruiting companies;

(d)   Website/marketing agency;

(e)   Competent authorities;

(f)    Affiliated or contracting companies in the event CERM changes its corporate structure.

4.2.  CERM is not only active in the European Economic Area, but also in the United States and the Asia-Pacific region. In limited circumstances, it might be possible that CERM therefore transfers your personal data outside of the European Economic Area. In such cases, CERM will implement adequate safeguards (and, where necessary, supplementary measures) to ensure that your personal data is afforded a level of protection which is essentially equivalent to the level of protection guaranteed within the European Economic Area.

5.     HOW DOES CERM PROTECT YOUR PERSONAL DATA?

5.1.  CERM takes appropriate technical and organisational measures to prevent unnecessary retention and unauthorised access of your personal data. However, be aware that no system is ever completely secure.

5.2.  Among others, the following safeguards have been put in place by CERM: firewall, ongoing implementation certificates such as NIS2/ISO27001, etc.

6.     HOW DOES CERM STORE YOUR PERSONAL DATA AND FOR HOW LONG?

6.1.  The personal data that CERM collects from you is transferred to a data-server hosted in the European Union.

6.2.  CERM undertakes not to retain your personal data for longer than is necessary for the performance of the contract and undertakes to delete your personal data in accordance with the period mentioned in the following table:

7.     WHAT ARE YOUR DATA PROTECTION RIGHTS?

7.1.  Right of access. You have a right of access to your personal data. To exercise your right of access, you can send an email to marketing@cem.net. User Data that CERM has collected about you will be sent to you by email on the email address you will provide.

7.2.  Right of rectification. You may, at any time, ask CERM to complete or modify your personal data if you find them to be incomplete, incorrect or obsolete.

7.3.  Right to object. You have the right to object to CERM processing your personal data. The exercise of this right of objection is only possible in one of the following two situations:

(a)   when the exercise of this right is based on CERM’s legitimate interests; or

(b)  when the exercise of this right is intended to prevent the data collected by CERM from being used for commercial prospecting purposes.

7.4.  Right to erasure. You have the right to request CERM to erase your personal data as soon as possible, in particular when:

(a)   the personal data is no longer necessary for the purposes for which they were collected or otherwise processed;

(b)  you withdraw your consent on which the processing of your personal data is based;

(c)   your personal data has been unlawfully processed by CERM;

(d)  your personal data must be erased in order to comply with a legal obligation under EU or Belgian law.

Please note, however, that even if you exercise your right to erasure, CERM may retain certain information about you where it is required to do so by law (such as tax and accounting legislation) or where it has a legitimate interest to do it.

7.5.  Right to restriction. You may request CERM to restrict the processing of your personal data, if:

(a)   you contest the accuracy of your personal data, for a period enabling CERM to verify the accuracy of the personal data;

(b)  the processing is unlawful and you oppose the erasure of your personal data and request the restriction of their use instead;

(c)   CERM no longer needs your personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims;

(d)  you objected to processing pursuant to Article 7.3 pending the verification whether the legitimate grounds of CERM override yours.

7.6.  Right to portability. You also have the right to receive the personal data you have provided to CERM, in a structured, commonly used and machine-readable format, and have the right to transmit (or request the transmission of) that data to a controller other than CERM where the processing of your personal data is based on consent or on the performance of the contract or where the processing is carried out by automated means.

7.7.  To exercise the rights mentioned in Articles 7.1 to 7.6, you may contact CERM by sending an email to the following email address: marketing@cerm.net. CERM undertakes to reply within a reasonable period of time to any request relating to the exercise of the aforementioned rights. This period shall not exceed one (1) month from receipt of your request, unless CERM decides to exercise its right to extend this period, which shall be a maximum of two (2) months.

8.     AMENDMENTS TO CERM’S PRIVACY POLICY

8.1.  CERM may occasionally make amendments to this Privacy Policy. Therefore, CERM encourages you to periodically review this Privacy Policy for the latest information on its privacy practices.

8.2.  If CERM makes any material changes to this Privacy Policy, CERM will notify you in accordance with applicable law prior to the amendments becoming effective.

9.     CONTACT

9.1.  Any question about the present Privacy Policy or privacy practices can be sent to CERM by:

·      Email: marketing@cerm.net.

·      Post: Kapellestraat 140, 8020 Oostkamp (Belgium).

9.2.  You are also entitled to request further information or lodge a complaint with the Belgian Data Protection Authority:

·      Email: dpo@apd-gba.be

·      Post: Rue de la Presse, 35, 1000 Bruxelles (Belgium)