What are we doing with your data?
We take your photo and send it to your by email and / or mobile phone.We can also post your photo to a private photo gallery. We also send your photo, email address as well as responses you sent to our client in the event that you have explicitly agreed to share with.
We process the following categories of personal data about you:
The photo of you and the other people appearing; Your email address and / or your telephone number; The answers requested by our client to which you have replied (which may include your age, gender, postal address, etc.);
We process your data for the following purposes:
Sending the photo to your email address and / or your phone; Posting your photo in a private access photo gallery; Transferring your photo to our client as well as your answers to questions asked by our client in order to get to know you better. Our client is not authorized to use your personal data for marketing purposes and will not use your photo for internal or external corporate communications (e.g. posting your photo on their social media accounts or website ); Transferring your photo and email address to our client so that you receive promotions and specials from our client in the event that you have explicitly agreed to share at.
Can we use your data ?
We need to collect your email address in order to resend the picture to you, our partnership with our client allows us to offer the picture to you for free. We therefore have a legitimate interest in collecting your personal data and disclosing it to our client. We will always ask for your prior consent if our client wishes to use your personal data in order to provide you with special offers or promotions or he wishes to publish your photo online.We will seek your free, prior and informed consent in the event that our customers wish to use your personal data for direct marketing purposes or to publish your photo online (on their social media accounts or on their site) or use them for internal or external corporate communications. By your consent to the client, you irrevocably waive all claims for (economic) compensation for the use of your photo by our client.We do not subject you to decisions exclusively based on an automatic process resulting in legal effects concerning you.The transfer of your photo and email address is a necessary condition for the provision of our services. If we cannot process your photo or email address, you may not be able to use our services. We do not collect personal data about you for third parties.
Who has access to my personal data ?
The event organizer has access to your photo as well as your email address. If the photos are posted to a private photo gallery, the event organizer may decide to provide access to other people, our IT team as well as our customer service team may also have access to your personal data. only when needed.Our client has access to your photo, email address and answers to questions requested in the event. Our IT team as well as our customer service team may also have access to your personal data only when needed. Only the sales representatives organizing the campaign for our client will have access to your personal data.
Where applicable, the following recipients may have access to your personal data:
The IT team; The customer service team; The sales team; The directors of the Company; The service providers of third parties related to the maintenance of the IT systems responsible for processing your personal data (these service providers only have access to personal data necessary for the performance of their tasks); Courts and tribunals of the judicial order in the event of a dispute concerning you; The authorities responsible for the application of the law in the case of a finding or suspicion of a crime concerning you in accordance with or as provided for by applicable law.In the event of a merger or acquisition (including a reorganization), we may transfer your personal data to a third party involved in the transaction (e.g. a buyer) in accordance with applicable data protection law.We take appropriate steps to ensure that our data processors (including our third-party infrastructure e-cloud provider) process your personal data in accordance with applicable data protection law.In addition, we ensure that our processors, in particular, process your personal data only on our instructions, do not hire sub-processors without our consent, take the appropriate technical and organizational measures to ensure an adequate level of security for your personal data, ensure that anyone authorized to access your personal data are subject to confidentiality obligations, return and / or destroy your personal data at the end of their services, comply with audits and assist us in monitoring your requests relating to the exercise of your rights to protect your personal data.
What are my rights ?
You have the right to know how we use your personal data and how to exercise your rights. If the information we are providing to you is unclear, please let us know by sending an email to email@example.com You have the right to access your personal data stored by us; You have the right to request the deletion of your personal data if there is no compelling reason for us to continue to use it. Please note that the right to erasure is not an absolute right and exceptions apply. You can exercise any of your rights by sending a request to firstname.lastname@example.org. data, you have the right to access, rectify and erase your personal data, the right to oppose or limit the processing of your personal data as well as the right to data portability, which means that: You have the right to receive clear, transparent and easily understandable information on how we use your personal data and your rights; You have the right to obtain access to your personal data, so as to understand and be able to control that we are using your personal data in accordance with applicable data protection laws; You have the right to have your personal data corrected if these are inaccurate or incomplete; You have the 'right to be forgotten'. Simply put, this means that you can request the deletion or erasure of your personal data when there is no compelling reason for us to continue to use it. The right to erasure is not an absolute right and exceptions apply; You have the right to "block" or remove further use of your personal data. In the event of restricted processing, it is still possible for us to store your personal data, but no longer use it later; You have the right to obtain and reuse your personal data for your own purposes through different services; You have the right to object to certain types of processing under certain conditions; You have the right to lodge a complaint about the way we handle or process your personal data with your national data protection authority; After you have given us your consent for any of our data processing activities, you have the right, at any time, to withdraw your consent (where applicable, this does not mean that the processing of your personal data carried out up to that date under your consent is unlawful). Email us any inquiries relating to your rights as a data subject to email@example.com. We will try to process your request as quickly as reasonably possible and, in any case, within the time limits prescribed by applicable data protection law. In addition, please note that we may withhold some of your personal data for certain purposes required or permitted by law. If in doubt about your identity, we will ask you for proof of identity.
Where is my data kept ?
The processing of your personal data takes place from our facilities in Belgium.We do not transfer your personal data outside of Europe & UK, except as part of our hosting contract with Cloud Platform (GCP), the leading provider of cloud infrastructure. GCP is based in the United States and complies with Europe & UK data protection law for storing your personal data on our behalf. We transfer your personal data to Cloud Platform (GCP)), the leading provider of cloud infrastructure. GCP is a US registered company that stores your personal data on our behalf. GCP is registered in the EU-US-UK Privacy Shield for data protection. Therefore, any transfer of your personal data to the United States is done in accordance with the provisions established by the EU-US-UK Privacy Shield under article 45 of the GDPR, with the exception of the transfer of personal data to GCP , we do not transfer your personal data to countries outside the European Economic Union & UK.For more information about transfers of personal data outside the European Economic Union and Privacy Shield, please visit the European Commission website (https://ec.europa.eu/commission/index_en).
The European Commission adopted on June 28, 2021 two adequacy decisions vis-à-vis with the United Kingdom - one under the General Data Protection Regulation (GDPR) and the other under the Directive in data protection in law enforcement.
How long do we keep your personal data ?
We keep your personal data for as long as necessary in order to process your personal data.For example, we use the following criteria to determine the retention periods for personal data, depending on the context and the purposes of each processing operation. : The time elapsed since your photo was taken; The sensitivity of personal data; Security reasons (e.g. the security of our information security systems); Any ongoing or potential litigation or dispute; Any legal or regulatory obligation related to the retention or deletion of personal data.
Is my data safe ?
We adopt technical and organizational measures to ensure an adequate level of security for your personal data, for example, we take appropriate measures to ensure that we report any security incident that could lead to destruction, loss, unlawful or accidental modification, unauthorized disclosure or access to personal data.
If I have a question or problem, who can I contact ?
Please direct any questions or complaints about how we handle your personal data to firstname.lastname@example.org.
What else should I know?