1. Which personal data do we gather and process?
As a user we can contact you by email in the context of your subscription. We only share your email address with third parties if you have given your consent to this.
2. Why do we process your personal data?
Your personal data can be used for the following purposes:
- To perform and improve the content of our job, event, news and deals postings and our website;
- To manage your account;
- For our customer administration;
- To carry out analyses of our user behavior on our website or application.
- To manage our website;
- To manage competitions or potential promotional actions.
- For direct marketing purposes
3. Legal grounds for processing
We process your personal data based on the following legal grounds:
- your consent;
- processing is necessary for the performance of a contract or in order to take steps at the request of the client prior to entering into a contract;
- processing is necessary for the purposes of the legitimate interests pursued by dibbs or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of clients which require protection of personal data.
4. With whom do we share your personal data?
The User’s personal data can be shared with dibbs commercial partners, always with the strict observance of the applicable law. These partners process the personal data in accordance with the European principles on the protection of personal data. The agreements between dibbs and the below-mentioned commercial partners contain the necessary guarantees regarding the confidentiality of personal data and compliance with privacy legislation.
Transfer of personal data outside the EEA may be subject to SCC’s (https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en). If required by the applicable legislation regarding data protection, we will contact you and ask you for your consent for a data transfer outside the EEA, disclosing with you all potential risks. You will be free to consent or refuse that such transfer takes place.
Dibbs may be obliged to provide full/partial access to the personal data if:
- A legal obligation and/or order of a legal or administrative institution has been issued for this purpose;
- This appears necessary for the performance of the agreement;
- Dibbs considers this necessary to safeguard its rights;
- A specific written consent has been given prior to such access.
5. Security measures
We take appropriate technical and security measures that are reasonably expected to ensure the protection of your personal data against unintentional or intentional loss, access, change or disclosure. Access to your personal data is limited to employees or persons who require access in the performance of their duties. They process the data only for specific purposes and according to our legal instructions. This commitment is qualified as a commitment to perform to the best ability on the part of dibbs.
We will inform you without delay if, despite these measures, an infringement in connection with your personal data that represents a high risk for the rights and freedoms of natural persons should still occur, unless :
- appropriate technical and organizational protection measures are taken by dibbs and applied to the personal data affected by the breach ;
- we take subsequent measures to ensure that the said high risk cannot reoccur;
- the information would involve a disproportionate effort on the part of dibbs. In such a case, public communication or a similar measure may suffice.
Dibbs will provide you within a reasonable period of time with information about an infringement of which dibbs would become aware, namely :
- the type of infringement perpetrated, in relation to personal data;
- the name and contact details of the data protection officer or an appropriate contact point;
- the likely consequences of the breach;
- the measures proposed or taken to address the breach and mitigate its possible adverse effects.
6. What are your rights?
You have the right to access and correct your personal data, following a written request. You also always have the right to object to the processing of your personal data and to sharing it with third-parties.
You have the right to withdraw consent at any time for the processing of your personal data , for one or all finalities as described in Article 2.
You further have the right to have the personal data removed, provided that:
- the personal data are no longer necessary for the purpose of processing;
- your consent is withdrawn and there is no other legal ground for processing;
- objections are made against processing, direct marketing practices or automated decision-making;
- the personal data must be deleted in order to comply with a legal obligation laid down in Union or Member State law that is imposed on dibbs;
- the personal data have been collected in connection with an offer of information society services.
The application for removal may be refused on the grounds of the exercise of the right to freedom of expression and information, legal obligations, reasons of public interest in the area of public health or public interest in the context of scientific or historical research, or for the establishment, exercise or defense of a legal claim.
You can obtain further information about the protection of your privacy on the website of the Commission for the Protection of Privacy on www.privacycommission.be. You are entitled to file a complaint with the Belgian Data Protection Authority if you feel your rights were infringed upon.
You have also the right to restrict the processing of your personal data by dibbs. In such event, dibbs may only process the personal data, with the exception of storage, with your consent or for the establishment, exercise or defense of a legal claim or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
You shall have the right to obtain the restriction of processing of personal data if:
- the accuracy of the personal data is disputed, during a period that allows dibbs to check said accuracy;
- the processing is unlawful and there is opposition to the erasure of the personal data and you request to restrict its use instead;
- dibbs no longer needs the personal data for processing purposes, but you need it for the establishment, exercise or defense of a legal claim.
If the processing restriction is lifted, dibbs will inform you in advance.
You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format. You can also request to transmit this data directly to another data controller if this is technically possible.
Moreover, you have the right to object to the processing of personal data concerning you for serious and justified reasons related to your special situation. This objection can be expressed against:
- processing based on the performance of a task for reasons of public interest or a task in the exercise of public authority assigned to dibbs;
- for processing in the legitimate interests of dibbs or a third party, unless the justified grounds of dibbs outweigh the interests, rights and freedoms of the user or are related to the establishment, exercise or defense of a legal claim;
any form of direct marketing, including profiling that relates to this.
If the request meets all relevant conditions, dibbs will be obliged to comply with this within thirty (30) days after receipt. Depending on the complexity of such request, this period can be extended by two (2) months.
If dibbs decides not to comply with the request, it will inform the person concerned within thirty (30) days, stating the reasons that led to the request being denied.
You can always file a complaint with a supervisory authority or appeal to the courts if you do not agree with the decision taken by dibbs.
7. Data retention period
Dibbs stores your personal data for a retention period that is necessary to process the respective data, or, if applicable, for a period determined by law but no longer than recommended by the privacy commission (Belgian Data Protection Authority). Information that is kept that relates to the necessary administrative follow-up of the registration will be kept for a minimum of three years from the set-up of the account.
You have the right to withdraw consent at any time for the processing based on this consent. However, this withdrawal is without prejudice to the lawfulness of the processing based on the consent prior to its withdrawal.