Privacy Policy

This page is an annex to the agreement concluded by the parties and explains which personal data are processed and for what reasons.

Need for data processing.
We collect and process the personal/company data (your name and address, telephone number, e-mail address and VAT number) we receive from you for the purpose of drawing up the agreement, implementing the agreement, customer management, accounting and direct marketing. Providing this information is a necessary condition, in the absence of which we are unable to conclude a agreement with you. These personal data also allow us to keep you informed of changes to the agreement, delays in execution of the assignment, promotional campaigns, etc.

Confidentiality..
We respect the privacy of all our customers and ensure that the personal information provided is treated confidentially. We will not transfer your personal data to third parties and will only make it available to third parties involved in the implementation of the agreement. The third parties involved are obliged to respect the confidentiality of your personal data. We keep your personal data for as long as the processing purposes exist and no longer than necessary for these processing purposes, unless this is necessary to comply with a legal obligation to retain.

Right to object.
You have the right to object to the processing of your personal data and/or to withdraw your consent at any time, without this, however, affecting the lawfulness of the processing based on the consent before the withdrawal.

You also have the right, for reasons related to your specific situation, to object to the processing of your personal data, including profiling, if this is done in response to the need for the performance of a task in the public interest or a task in the context of the exercise of public authority assigned to the controller or when the processing is necessary for the protection of the legitimate interests of the controller or of a third party, unless your interests or fundamental rights and fundamental freedoms outweigh those interests, in particular when the person concerned is a child. The controller will stop processing personal data unless he/she invokes compelling justified grounds for processing that outweigh the interests, rights and freedoms of the data subject or that are related to the institution, exercise or substantiation of a legal claim.

When the personal data is processed with a view to direct marketing, you always have the right to object to the processing of your personal data for such marketing, including profiling related to direct marketing. If you object to the processing of your personal data for direct marketing purposes, the personal data will no longer be processed for these purposes.

Access – rectification – transfer.
It is always possible to obtain access to the processed personal data by letter or by e-mail (3D Lift bvba, Drieslaan 84, box A, B-8560 WEVELGEM, 056/20.20.85, info@3dlift.be). After verifying your identity, we will inform you as quickly as possible, and at the latest within one month, of the data that we have at that time. 

If one or more pieces of data is incorrect or incomplete, you can ask us to rectify by contacting us by telephone, e-mail or letter. In accordance with the applicable regulations, we are obliged to inform you that we will point out to each recipient of your personal data the required adjustment unless this proves impossible or requires a disproportionate amount of effort, and that we will provide you with information about these recipients on first request. As stated above, we treat your personal data with the necessary confidentiality.

You have the right to transfer the personal data concerning you to another controller. If this is technically possible, you have the right to request that your personal data be transferred directly by us to another controller. The exercise of your right to transferability does not affect your rights regarding restricting processing. The right of transferability does not apply to the processing that is necessary for the fulfilment of a task in the public interest or a task in the context of the exercise of public authority granted to the controller. The right to transferability does not affect the rights and freedoms of others.

Right to restriction of the data processing.
You have the right to obtain a restriction on the processing of your personal data a) during the period that allows us to check the accuracy of your data if you dispute the accuracy of the personal data; b) if the processing is unlawful and you oppose the erasure of the personal data and instead opt for a restriction on its use; c) if we no longer need your personal data for the purposes of processing, but you need them for instituting, exercising or substantiating a legal claim; d) pending the answer to the question whether the justified grounds of the controller are more important than yours if you have objected to the processing of your personal data.

If the data processing has been limited in accordance with the preceding paragraph, the personal data, with the exception of storage, will only be processed with your permission or for the institution, exercise or substantiation of a legal claim or to protect the rights of another natural or legal person, or for important objectives of public interest for the Union or for a Member State.

The controller will inform you before the restriction on the processing of personal data is lifted.

Automated individual decision-making, including profiling.
You have the right not to be subjected to a decision based solely on automated processing, including profiling, for which there are legal consequences attached for you or that will otherwise significantly affect you. 

However, the foregoing does not apply if the decision a) is necessary for the establishment or implementation of an agreement between us; b) is permitted by a provision of EU or Member State law applicable to the controller and which also provides for appropriate measures to protect your rights, freedoms and legitimate interests; c) based on your explicit consent.

In the cases referred to in points a and c, the controller takes appropriate measures to protect your rights, freedoms and your legitimate interests, including at least the right to human intervention on the part of the controller, the right to express your position and the right to challenge the decision.

The decisions referred to in the second paragraph are not based on the special categories of personal data in accordance with Article 9, subsection 1 European Regulation 2016/679, unless you have explicitly granted consent for the processing of this personal data, or the processing is necessary for reasons of public interest in the field of public health and appropriate measures have been taken to protect your legitimate interests.

Notification of an infringement concerning your personal data.
If an infringement occurs with regard to your personal data that is likely to pose a high risk to the rights and freedoms of natural persons, the controller will immediately inform the data subject of the infringement, giving a clear and simple description of the nature of the infringement and indicating the name and contact details of the data protection officer or other contact point where more information can be obtained. The controller shall also communicate the likely consequences of the infringement with regard to the personal data and the measures proposed or taken to address the infringement, including, where appropriate, the measures to limit any adverse effects thereof.

The aforementioned communication is not required when (a) the controller has taken appropriate technical and organisational protection measures and these measures have been applied to the personal data affected by the infringement, in particular those that make the personal data incomprehensible to unauthorised persons, such as encryption; b) the controller has taken subsequent measures to ensure that the aforementioned high risk to your rights and freedoms becomes unlikely; c) the communication requires a disproportionate effort, in which case public communication or a similar measure where data subjects are informed just as effectively can be sufficient.

If the controller did not report the infringement to you, the supervisory authority may, after considering the likelihood that the infringement entails a high risk, oblige the controller to do so or decide that the conditions set out in the previous paragraph have been met.

Erasure of your data.
You can request that your personal data be erased without unreasonable delay. 

We are legally obliged to comply with this request a) if the personal data are no longer needed for the purposes for which they were collected or otherwise processed; b) if you have withdrawn your consent to processing and there is no other legal basis for the processing; c) if you object to the processing and there are no prevailing compelling justified grounds for the processing, or if you object to the processing for the purpose of direct marketing; d) if the personal data has been processed unlawfully; e) if the personal data must be erased in order to comply with a legal obligation imposed on us by EU or Member State law; f) if the personal data have been collected in connection with an offer of services that is usually provided against renumeration, by electronic means, remotely and at the individual request of a recipient of services.

The regulations provide that if the personal data have been made public – however not by us – and the personal data must be erased, the controller must take all reasonable measures to inform the controllers processing the personal data that any link to, copy or reproduction of those personal data must be erased.

However, the above does not apply to the extent that processing is necessary a) for exercising the right to freedom of expression and information; b) for the fulfilment of a legal obligation of processing laid down in EU or Member State law which is incumbent on the controller, or for performing a task in the public interest or exercising public authority conferred on the controller; c) for reasons of public interest in the area of public health in accordance with Article 9, subsection 2 (h) and (i) and Article 9, subsection 3 European Regulation 2016/679; (d) for the purpose of archiving in the public interest, scientific or historical research or statistical purposes in accordance with Article 89, subsection 1 European Regulation 2016/679, to the extent that the right referred to in subsection 1 threatens to prevent the achievement of the purposes of that processing or seriously threatens to compromise such: e) for the establishment, exercise or substantiation of a legal claim.

Complaints
If you have complaints about the processing of your personal data, you can contact the supervisory authority.