Your data is safe with us
Privacy Policy
This Privacy Policy is meant to help you understand what information we collect, why we collect it, and how you can update, manage, export and delete your information.
Privacy Policy
H23 is a mPoint Consulting BV brand. At mPoint Consulting BV, we value and respect the privacy of the people we deal with. We are committed to protecting your privacy and complying with the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, “General Data Protection Regulation” or “GDPR”) and other applicable privacy laws and regulations.
This Privacy Policy describes how we collect, hold, use and disclose your ‘personal data’ (as defined in art. 4 GDPR), and how we maintain the quality and security of your personal data.
This privacy policy applies to the processing of personal data of our prospects, customers or persons who ask us for information or contact us in relation to the products and/or services that we offer.
1. Controller:
mPoint Consulting BV
Company number 0780.999.755
Address: Britse Lei 88, 2000 Antwerpen
Tel: +32 (0) 470 67 53 46
Email: [email protected]
Hereafter “we” or “us” or “H23” or “mPoint”.
2. What personal data do we collect?
The personal data we collect about you depends on the nature of your dealings with us or what you choose to share with us. The personal data we collect about you may include:
Contact information and general information, such as:
– Name and Surname;
– Mailing or street address (private and/or professional);
– Email address (private and/or professional);
– Phone number (private and/or professional);
– Your company’s /organization’s name (the name of the company/organization you work for) and contact details of the concerned company/organization, e.g. street address, e-mail address, phone number, VAT, legal for and company number, bank account number;
– your title or function within the company or organisation you work for;
– Any additional personal data that you might provide voluntarily.
Business-related information, such as:
– Information about the commercial interactions that have taken place between us,
– The services in which you have expressed an interest or which we have provided for you;
– Information regarding your customer history and your payment history.
Consent information:
Information about the consents you have given and the management of those consents,
Including record keeping and processing of your consent withdrawals.
Information from third parties, such as:
Information about you obtained from public databases, social media platforms or marketing database owners, which will help us to update your Data, improve the quality of your Data or complete your Data, allowing us a better understanding of the type of products and services that may be of interest to you.
Where possible, we also keep track of the dates on which your personal data is provided to us or when changes are made to it. We do not collect any sensitive information (as defined in art.9 GDPR) about you.
3. How do we use your personal data and what is the legal base for such use?
We use personal data in connection with our services and activities for the purposes and on the legal basis described below
|
Purpose : |
Legal basis : |
|
Executing our agreement:
– To conclude, execute and follow up the contracts that exist between us, e.g. the purchase of consultancy services – To keep our accounting records and manage internal administration; – To combat possible fraud, crime and infringements and to ensure the management of potential legal disputes and proceedings;
– To process and transmit your data in the context of the assignment of invoices to a third party; Etc.
|
Performance of a Contract (art. 6.1.b) GDPR) |
|
Evaluating and improving the quality of our products and services and your customer experience:
– To evaluate the quality of our products and services; – To send you satisfaction surveys to know how you experience the customer relationship; – To carry out market analyses; – To carry our marketing analyses and marketing surveys amongst others in view of optimizing our offering and optimizing your customer experience.
|
Legitimate interest pursued by the Controller(s) or a third party (art.6.1.f) GDPR)
|
|
Sending out marketing communications and marketing surveys:
– To send you our marketing communications and newsletters to which you have subscribed, through all channels, in accordance with your specific consent to receive marketing communications via such channel and applicable marketing laws.
You can withdraw your consent(s) at any time (see process described below).
|
Your consent (art. 6.1.a) GDPR) |
|
Storing and sharing of your personal data to comply with a legal obligation:
To store and/or transmit your personal data to the competent administrations and authorities in the context of certain legal obligations to which we are subject (e.g. tax, accounting, etc.)
|
Compliance with a legal obligation (art.6.1.c) GDPR) |
4. How long do we keep your personal data ?
The applied retention period of your personal data depends on the relationship we have with you and, consequently, the purpose of the processing.
We will not store your personal data any longer than necessary for the purposes for which we use it.
Except in the event that the law would impose a longer period on us, the following retention periods apply:
– Personal data of prospects: three (3) years from registration date
– Personal data of customers and suppliers: ten (10) years from the termination date of our contract.
– Marketing communications and newsletter subscriptions: as long as you do not withdraw your consent.
These retention periods do not apply in the event of ongoing litigation or legal proceedings concerning the contract. In such case, we will keep your personal data until the dispute or legal proceedings are closed.
5. Disclosure of personal data to third parties and transfer of your personal data outside the European Economic Area:
We may disclose your personal data to third parties in accordance with this privacy policy in circumstances where you would reasonably expect us to disclose your information.
For example, we may disclose your personal information to
– Our third party service providers in the framework of the (technical) services they provide on our behalf (for example, our IT providers, marketing providers etc.);
– Our professional services advisors;
– Authorities, in case of any legal requirement or proceedings obliging us to disclose your information;
– New entities within our group or to third parties that would possibly guarantee the continuity of our services, exceptionally and if necessary due to internal reorganization or transfer of activities.
Transfer of your personal information outside the European Economic Area (EEA):
We may transfer your personal data to destinations outside the EEA, including the United States, if it is appropriate to do so (i) in order to fulfil any of the purposes set out in this Privacy Policy and/or (ii) to disclose your Data to a third party (referred to in the section headed above) in accordance with this Privacy Policy.
In the event that your personal is transferred outside the EEA, we will ensure that your personal data is protected by the following safeguards:
– The law of the country to which your personal data is transferred provides an adequate level of data protection (Article 45 GDPR); or
– The transfer is subject to appropriate safeguards (Article 46 GDPR) such as the signing of Standard Contractual Clauses approved by the EU Commission and, where needed, complemented by additional measures.
6. How do we protect your personal information?
We undertake reasonable steps to ensure that the personal data that we hold about you is kept confidential and secure, including
– Ensuring physical security of our premises and databases / records;
– Taking measures to restrict access to only personnel who need that personal information to effectively provide services to you;
– Having technical security measures in place (for example, anti-virus software, fire walls);
– Sensitizing our staff and external contractors regarding the use and the legal protection of personal data.
7. Links to third party websites
Our website may contain links to websites operated by third parties. If you access a third party website through our website, personal information may be collected by that third party website. We make no representations or warranties in relation to the privacy practices of any third party provider or website and we are not responsible for the privacy policies or the content of any third party provider or website. Third party providers / websites are responsible for informing you about their own privacy practices and we encourage you to read their privacy policies.
8. What are your data subject rights and how can you exercise these rights?
You have the right to learn about your personal information and the use we make of that personal information, at any time, free of charge.
If you find an error in your personal information or if you notice that it is incomplete or incorrect, you have the right to ask us to correct or complete it.
You have the right to oppose to the processing of your personal data if you have serious and legitimate reasons to do so that override our need to process your personal information. You also have the right to object at any time to the use of personal information for direct marketing purposes, without the need to provide a reason.
In addition, you can ask us to delete your personal information (except in certain case, for example to provide proof of a transaction or in case of a legal obligation that makes deletion impossible).
To the extent that your prior consent is the legal base of our processing, you have the right to withdraw that consent at any time.
You may also ask to restrict the processing of your personal information in a number of cases listed in art.18 GDPR.
You have the right to request your personal information in digital and readable form and/or to have it transferred to another service provider of your choice.
To exercise one of the above rights or for complaints about how we handle, process or manage your personal information, please contact us via email or by sending us a letter to the contact address set out below ( “How to contact us” ).
Note we may require proof of your identity and full details of your request before we can process your request or complaint. It might take us up to 30 days for us to respond to your request or complaint.
You also have the right at any time to lodge a complaint with the Data Protection Authority (by letter addressed to Rue de la Presse 35, 1000 Brussels, or by e-mail addressed to ‘[email protected]’.).
We may change this privacy policy, for example, in response to changes in our products and/or services or to applicable legislation. We therefore recommend you to read this privacy policy regularly.
9. How to contact us
If you have a question or concern in relation to our handling of your personal information or this privacy policy, or if you want to exercise your data subject rights you can contact us via:
Email : [email protected]
Post:mPoint Consulting BV, 2000 Antwerpen, Britselei 88
Phone: +32 (0) 470 67 53 46
Last update 1 sept. 2023