Privacy policy
For what purposes are your personal data processed?
Diasbytes processes your personal data for one or more of the following purposes:
- Client management
- Invoicing and accountancy
- Direct marketing
- Responding to contact requests
- Website management
- Social media
- Litigation management
Below you will find information concerning which personal data Diasbytes processes for each purpose, why they are being processed, how Diasbytes obtains them, how long they are kept and with whom Diasbytes shares them.
Client management
Diasbytes BV processes your personal data if you make use of its services or in case you purchase one of its products. Diasbytes only processes the personal data it considers necessary to be able to establish and execute an agreement with you, as well as personal data you spontaneously provide to Diasbytes yourself. This includes keeping your contact details (e-mail address, telephone number) so that Diasbytes BV can keep you informed of the progress of its work and contact you for information or consultation.
Categories of personal data: Diasbytes BV processes, where appropriate, your personal identification data and (if applicable) those of the contact persons (name, company number, customer number), address, contact details (e-mail address, phone number), personal characteristics (gender, language), function or professional title, contractual agreements, financial identification data (bank account number, method of payment) and transactions, other personal data that you would spontaneously communicate yourself and any other data relevant to the performance of a specific agreement.
Personal data are obtained either directly from you or through third parties involved in the performance of the agreement or through consultation of public databases.
Legal basis: The legal basis for this data processing is the performance of the agreement between you and Diasbytes BV (art. 6.1. b) GDPR). The processing of personal data of contact persons is based on the legitimate interests pursued by Diasbytes BV (art. 6.1. f) GDPR), namely the facilitation of the conclusion and proper performance of the agreement.
Retention period: For this purpose, Diasbytes BV retains your data up to 10 years after the end of the customer relationship plus a verification period of 1 year. However, certain data may be kept longer if necessary because of a legitimate interest (e.g. dispute resolution; interruption or suspension of the prescription period for civil liability), for procedural or enforcement reasons or because mandatory legislation would require Diasbytes BV to do so.
Categories of recipients: For this purpose and where appropriate, Diasbytes shares personal data with its accounting firm, auditor, (legal) advisors, a subcontractor or supplier, government authorities, and/or banking or insurance companies. In addition, third parties with whom Diasbytes cooperates for the storage and management of data also have access to personal data (IT and software providers). A list of these third parties with whom Diasbytes cooperates, is available upon written request.
Invoicing and accountancy
Diasbytes BV is in some situations obliged to process personal data in order to comply with mandatory legislation applicable to its business. This includes tax and accounting obligations.
Categories of personal data: For the purpose of complying with accounting obligations, Diasbytes may process your personal identification data (name, company number), (business) address, contact details (e-mail address, telephone number), financial data (bank account number, method of payment) and products/services provided. These data allow Diasbytes to issue its invoices, maintain its accounting records and comply with accounting obligations, including the creation of financial statements.
Diasbytes BV is entitled to request the necessary data from you or from third parties or to collect such data from public databases.
Legal basis: The legal basis for this processing is complying with legal obligations (art. 6.1. c) GDPR). This concerns various legal obligations, such as those contained in the (Belgian) Code of Economic Law (in particular: art. I.1, art. III.82, art. III.89 and art. III.90), the (Belgian) Code of Companies and Associations (art. 3:1) and the (Belgian) Royal decree of April 29, 2019 implementing the Code of Companies and Associations (a.o. the principle of double-entry accounting).
Retention period: For invoicing and accounting purposes, Diasbytes retains your personal data up to 7 years after the respective financial year plus a verification period of 1 year.
Categories of recipients: For this purpose and where appropriate, Diasbytes shares personal data with its accounting firm, auditor, (legal) advisors, government authorities, and/or banking or insurance companies. In addition, third parties with whom Diasbytes cooperates for the storage and management of data also have access to personal data (IT and software providers). A list of these third parties with whom Diasbytes cooperates, is available upon written request.
Direct marketing
If you are a customer of Diasbytes BV, Diasbytes may process your personal data to communicate with you about future promotions or actions that may be of interest to you or to offer similar products or services. If you have subscribed to the newsletter of Diasbytes without already being a customer, you will receive the commercial communications of Diasbytes because you have given your consent.
Categories of personal data: For the purpose of sending newsletters and other commercial communications, Diasbytes may process your personal identification data (name), (business) address, contact details (e-mail address, phone number) and preferences.
Diasbytes obtains the personal data directly from you, through a third party or by consulting a public database.
Legal basis: If you are a customer of Diasbytes BV, Diasbytes may invoke its legitimate interests (art. 6.1. f) GDPR) to promote similar products and services. However, if you do not (or no longer) wish to receive such communications, you always have the right to object.
If you have subscribed to the newsletter of Diasbytes without already being a customer, the legal basis for this data processing is your consent (Art. 6.1. a) GDPR). You can withdraw your consent at any time, but this does not affect the lawfulness of the processing based on your consent before its withdrawal.
Retention period: For sending its commercial communications, Diasbytes retains your personal data for as long as you are its client and up to 1 year after the finalisation of the last agreement. You can, of course, unsubscribe from receiving these communications at any time. In that case Diasbytes will stop processing your personal data for this purpose. Or you can subscribe to continue receiving such communications.
If you have subscribed to the newsletter of Diasbytes without already being a customer, Diasbytes will retain your personal data until you unsubscribe from the newsletter (withdrawal of consent).
Categories of recipients: For this purpose and where appropriate, Diasbytes BV shares personal data with providers of software that Diasbytes uses to send commercial communications. In addition, third parties with whom Diasbytes cooperates for the storage and management of data also have access to personal data (IT and software providers). A list of these third parties with whom Diasbytes cooperates is available upon written request.
Responding to contact requests
Diasbytes BV may process your personal data if you have contacted Diasbytes via the website or otherwise. The data concerned allow Diasbytes to provide you the advice and/or information you have requested via the website or otherwise, and/or to set up an introduction meeting.
Categories of personal data: For the purpose of responding to a contact request, Diasbytes may process your personal identification data and (if applicable) those of the contact persons (name, company number), (business) address, contact details (telephone number, e-mail address), personal characteristics (gender, language), professional activities (function, sector, etc.) and any other information you provide Diasbytes or which is necessary to make arrangements.
Diasbytes obtains the personal data directly from you.
Legal basis: The legal basis for this processing of personal data is your consent that you have given Diasbytes by transferring your personal data for the purposes mentioned above (art. 6.1 a) GDPR) or to take steps at your request prior to entering into a contract (art. 6.1 b) GDPR). The processing of personal data of contact persons is based on the legitimate interests of Diasbytes BV (art. 6.1. f) GDPR), namely the facilitation of smooth communication and/or the conclusion of an agreement.
Retention period: To respond to a contact request, Diasbytes retains your personal data for as long as necessary to answer your queries, up to a maximum of 1 year after last contact plus a verification period of 1 month, unless concrete arrangements for further contact or other legal basis (e.g. performance of an agreement).
Categories of recipients: If necessary to answer your questions, Diasbytes may consult her accounting firm, lawyers, (legal) advisors, a supplier or subcontractor. In addition, third parties with whom Diasbytes cooperates for the storage and management of data also have access to personal data (IT and software providers). A list of these third parties with whom Diasbytes cooperates, is available upon written request.
Website management
Diasbytes may process your personal data for the purpose of managing its website (www.Diasbytes.com). These data allow Diasbytes to set up a well-functioning and user-friendly website.
Categories of personal data: Diasbytes may process your electronic identification data (IP address and cookies).
Diasbytes obtains the personal data directly from you.
Legal basis: The legal basis for this processing of personal data is the legitimate interest of Diasbytes to provide a well-functioning and user-friendly website and to promote its products and services (article 6.1. f) GDPR). Analytical cookies, advertising cookies and/or social media cookies are only placed if you have given your consent via the website (Article 6.1. a) GDPR). (for more information, you can check the cookie policy of Diasbytes).
Retention period: For the above purposes, Diasbytes retains your personal data for the duration of the relevant cookie (for more information you can check the cookie policy of Diasbytes). You can change your cookie preferences at any time.
Categories of recipients: Where appropriate, Diasbytes shares personal data with third parties with whom Diasbytes cooperates for the management of the website (IT and software providers). A list of these third parties with whom Diasbytes cooperates, is available upon written request.
Social media
Diasbytes BV uses social media platforms for marketing purposes, namely promoting its products and services. Diasbytes BV uses the following social media platforms: LinkedIn, Facebook, Instagram and YouTube. On these social media platforms, Diasbytes may be able to view certain personal data. However, you decide what you share with Diasbytes BV (comments, sharing posts, etc.). You have no obligation to do so. If you would spontaneously share personal data, this falls under the legal basis consent (article 6.1. a) GDPR). You can of course remove your (re)action at any time (withdrawal of consent). Furthermore, be aware that other persons will potentially be able to view the data in question, depending on your privacy settings on the relevant social media platform.
In any case, it is highly recommended to also verify the privacy policy of the relevant social media platform before sharing personal data.
However, exception is to be made for following purposes:
· Contact: You request Diasbytes BV to contact you and you provide your contact details. For this data procession, reference is made to the provisions regarding "responding to contact requests" in this privacy policy.
· Website management: Data collected through cookies may cause you to see customised advertisements. More information can be found under the processing purpose 'website management' in this privacy policy and in the cookie policy of Diasbytes BV.
Ligitation management
Diasbytes BV may process your personal data for the purpose of settling (potential) disputes. These data allow Diasbytes to defend its legitimate interests in all forms of dispute resolution and to handle the administration thereof.
Categories of personal data: For the purpose of settling (potential) disputes, Diasbytes may process your personal identification data (name, company number), (business) address, contact details (e-mail address, telephone number), information on occupation and employment, financial data, judicial data and any other information relevant to the (potential) litigation or necessary for the establishment, exercise or defence of legal claims.
Diasbytes obtains these personal data directly from you or through a third party or by consulting public databases.
Legal basis: The legal basis for this processing of personal data is the legitimate interest of Diasbytes BV to safeguard its (contractual and extra-contractual, legal and other) rights (article 6.1. f) GDPR). The legal basis for the processing of criminal personal data is article 10, §1, 1° of the (Belgian) Law of July 30, 2018 on the protection of natural persons with regard to the processing of personal data.
Retention period: For the purpose of litigation management, Diasbytes retains your personal data up to 1 year after the expiry of the last deadline for appeal or up to 1 year after the expiry of the statutory prescription period (longer if necessary, e.g. to comply with legal obligations or for reasons of enforcement of a court or administrative decision) plus a verification period of 1 year.
Categories of recipients: For these purposes and where appropriate, Diasbytes shares personal data with government authorities, court and police forces, banking or insurance companies, accounting firm, lawyers, (legal) advisors, bailiffs and/or collection agencies. In addition, third parties with whom Diasbytes cooperates for the storage and management of data also have access to personal data (IT and software providers). A list of these third parties with whom Diasbytes cooperates, is available upon written request.
Are there any sensitive personal data being processed
No, Diasbytes BV does not process sensitive data of customers, unless this would be necessary for the settlement of a dispute (see above the section " FOR WHAT PURPOSES ARE YOUR PERSONAL DATA PROCESSED?" and subsection "LITIGATION MANAGEMENT").
Does Diasbytes BV apply automated decision making?
Diasbytes BV does not apply 'automated decision-making' to make decisions about matters that could have (significant) consequences for individuals. 'Automated decision-making' concerns decisions that are made by computer programmes or systems, without any human being (e.g. an employee of Diasbytes BV) being involved.
Are your personal data properly secured?
Diasbytes BV takes the protection of your data seriously and takes appropriate measures to prevent abuse, loss, unauthorised access, unwanted disclosure and unauthorised modification. If you have the impression that your data are not properly secured or if there are indications of misuse, please contact Diasbytes BV using the contact details above.
Within the company Diasbytes BV a lot of effort is devoted to protecting your data. Diasbytes BV implements and maintains an authorisation management system that controls access to systems containing personal data. Company, customer and personal data can only be accessed by authorised persons.
Are your personal data also being shared with third party?
Diasbytes BV does not sell your data to third parties and only provides them if this falls within the scope of the purposes set out above (see section "FOR WHAT PURPOSES ARE YOUR PERSONAL DATA PROCESSED?"). Where appropriate, this may be communication to an employee, a subcontractor or supplier, an accountant, an auditor, a (legal) advisor, an insurance or financial institution or a government authority. In case of a (potential) dispute, data may also be shared with other parties, e.g. a lawyer, collection agency, Bailiff, Court or police forces, to defend the legitimate interests of Diasbytes BV.
In addition, third parties with whom Diasbytes cooperates for the storage and management of data, the management of the website or for sending communications also have access to personal data (IT and software providers). A processing agreement is concluded with companies that process your data on behalf of Diasbytes BV to ensure the same level of security and confidentiality of your data. Diasbytes BV remains responsible for these processing operations.
For further specific information per processing purpose, see above the section "FOR WHAT PURPOSES ARE YOUR PERSONAL DATA PROCESSED?" and subsections.
What are your rights and how can you exercise them?
What are your rights?
Right of access:
You have the right to obtain from Diasbytes information concerning your personal data that are being processed and to receive a copy.
Right to rectification:
If you believe your personal data are incorrect or not up to date, you can ask Diasbytes to rectify them. You can also ask for incomplete personal data to be completed.
Right to object:
You have the right to object to processing of your personal data. However, if Diasbytes is legally obliged or entitled to continue processing certain personal data on a legitimate legal basis, Diasbytes will be unable to comply with your request.
Right to restriction of processing:
You can ask Diasbytes BV to restrict the processing of your personal data, for example when Diasbytes needs to verify the accuracy of your personal data.
Right to erasure (‘right to be forgotten’):
You have the right to ask Diasbytes BV to delete your personal data. However, if Diasbytes is obliged by law or entitled to retain certain personal data for a longer period pursuant to a legitimate legal basis, Diasbytes will be unable to comply with this request.
Right to withdraw your consent:
For processing of personal data based on your consent, you may withdraw that consent. The withdrawal of consent shall not affect the lawfulness of processing based on your consent before its withdrawal.
Right to data portability:
If the processing of your personal data is based on consent or the performance of an agreement with you, you can make a request to Diasbytes BV to receive the personal data you have provided to Diasbytes concerning your person in a structured, commonly used and machine-readable format, or to transmit those data - if technically possible - to another processing controller.
If you no longer wish to receive the electronic newsletters of Diasbytes and wish to stop the processing of your data for that purpose, you can always use the unsubscribe link provided at the bottom of each newsletter.
For those purposes for which the legal basis for the processing of personal data is a legitimate interest of Diasbytes, you can always ask Diasbytes for more information about the balancing of interests carried out in that context. For those purposes, you can also at any time exercise your right to object to the processing of your personal data, stating the reasons relating to your specific situation. Diasbytes will stop processing your personal data unless Diasbytes considers that there are compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
How can you exercise your rights?
You can exercise your rights described above by sending your request by e-mail to dpo@Diasbytes.com or by writing to the address 9700 Oudenaarde, Lindestraat 28. You can also contact Diasbytes BV by telephone at 055 27 09 99.
Diasbytes BV is dedicated to respond to your request as soon as possible, at the latest within one month of receivement. However, if for some reason this deadline should not be achievable, Diasbytes will let you know within the period of one month aforementioned and explain why. Nevertheless, Diasbytes BV is entitled to request additional information first in case of doubt about the identity of the applicant.
You should also bear in mind that Diasbytes BV may not be obliged to comply with your request because of its legal obligations, its legitimate interests or for the establishment, exercise or defence of legal claims.
Compliant to the data protection supervisory authority
If you believe that the processing of your personal data by Diasbytes BV would breach the provisions of this privacy policy or the applicable privacy legislation, you have the right to lodge a complaint with the Gegevensbeschermingsautoriteit (which is the Belgian supervisory authority). This can be done by using the following contact details:
Gegevensbeschermingsautoriteit
Drukpersstraat 35, 1000 Brussel
+32 (0)2 274 48 00
+32 (0)2 274 48 35
https://www.gegevensbeschermingsautoriteit.be/contact
Contact Us
If you have any questions or concerns or if you wish to receive the complete privacy policy, please contact us at info@diasbytes.com or dpo@diasbytes.com