Privacy Policy

Who are we?

Akkade NV (“Akkade”, “we”, “us”, “our”) assists organizations in ensuring compliance with European and international
privacy and data protection legislation. Akkade is based in Belgium.

Why do we have a privacy policy?

Because of the nature of our business we have to process a lot of personal data. To make sure your data is protected
and only used where needed we are committing ourselves to keep the highest standards on privacy. Under the GDPR (that
is the new privacy law applicable within the EU) we are obliged to inform you what we do with personal data collected
via electronic means. This privacy policy is therefore applicable to all information transferred to us through
electronic means (website, e-mail).
Please do note when you contact us through another electronic medium like Facebook or Twitter, the privacy policy of
that website precludes this privacy policy in case of collision.

How can you reach us?

For any questions, enquiries or other actions on privacy matters you can contact us through the following channels:
Phone: +32 3 451 23 91
E-mail: info@akkade.be
Address: Veldkant 33A, B-2550 Kontich, Belgium
Website: akkade.be

What information do we collect and wherefore do we use it?

For the processing of the following data, we ask your permission. We will also process your personal data when it is
necessary for the execution of the contract between you and Akkade.

Category of personal data Purposes Legal grounds
Webforms & inquiries & marketing
Contact details We need your contact details, like name, phone number or email address, to respond to your
inquiries through our websiteWhen responding to your request we need your name so that we could contact you in a correct way.
We also need your name to prepare agreements/meetings
Consent
Company & Function Your company name (or sector) will help us to provide you with a more detailed answer to your
request
Consent
Payment information (VAT no, billing address) We need your financial details like your VAT no, for invoicing Necessity to perform a contract
Contracts
Contact details (name, email address, phone number) We collect this information for the purposes of execution of the contract between you and Akkade,
and communication purposes in the context of the aforementioned contract
Necessity to perform a contract
Company & Function We collect this information for the purposes of the performance of the contract between you and
Akkade
Necessity to perform a contract
CV
Contact details
Professional Experience
Education
Qualifications
We collect this information for the purpose of recruiting. We leave it up to you, which
information you want to share with us, but we can process all the data you give us.
Consent

Who has access to your data?

We, as well as our employees, have access to your data, strictly when necessary to perform a processing described
above.
We’ll store your data in a Microsoft Office environment, hosted and controlled by Cronos.
Akkade is part of the Cronos Group and Crosspoint Solutions. Your data might be transferred for internal administration
or recruitment purposes within this group of undertakings.
We will not transfer your data to anyone outside the EEA (European Economic Area) without your specific consent.

How long is my data kept?

In order to keep our database as up-to-date as possible, we will initially keep your data for 2 years. If there has
been no contact within that period, we’ll delete your data. We’ll send you an e-mail a month before the end of this
period. If you wish we’ll keep your data, you can give your consent via that e-mail for another year. If legislation
requires us to keep your personal data longer (for example billing information) we will keep your data for the period
described in the law.

What are my rights?

Right of access

Every person has the right to access his data. This means that we have to inform you what happens with your data and
further detail your rights. In this policy you will find the answers to those questions.
We also have to provide you with a copy of your personal data. You will receive a copy on simple request through one of
the above stipulated channels. Please do note that only the first copy is free of charge. We will send you the
information through e-mail unless you specifically request to receive the information by post, or when an e-mail is not
possible due to technical circumstances.
It is possible that certain documents may contain personal data from other persons who enjoy the same protection as
you. We therefore might have to anonymise certain documents, which could take some time. We will always inform you if
we are unable to fulfil the request within one month.

Right to rectification (Right to correction)

If we are in possession of incorrect or no longer up-to-date data, we will adapt this again on simple request through
one of the above-mentioned channels. If we assume that the data we have of you is no longer up-to-date, we might
contact you to verify this.

Right to erasure (Right to be forgotten)

Under a limited number of circumstances, you can ask us to delete your data. When you meet one of the criteria below,
we will delete your data without delay. We will however keep your e-mail address and/or phone number and/or address
and/or name on a black list, so our system will notice that you no longer wish to be contacted.

Criteria for erasure:

  • We no longer process or need your data
  • You withdraw your consent to processing which was based solely on consent
  • You invoked your right to object (see below)
  • Your data was unlawfully processed
  • There is a legal obligation to delete the data
  • Your data was collected in relation to the offer of information society services.

To the right to be forgotten there are also some exceptions in which case we cannot delete your data. If this would be
the case, we will inform you about this. The reasons not to abide your request would be one of the following:

  • The right of freedom of expression and information prevails
  • For compliance with a legal obligation
  • For reasons of public health
  • For archiving, research or statistical purposes in accordance with article 89 of the GDPR
  • For the establishment, exercise or defence of legal claims.

Right to restriction of processing

You can request restriction of processing of your data where you assume that we are in possession of inaccurate data,
or that our processing is unlawful, but you do not want us to erase your data, or if the data is needed for your legal
claims or if you invoke the right to object to processing. We will cease processing (with the exception of storage)
until the matter has been clarified. When the reason for restriction is no longer valid, we’ll notify you on lifting of
the restriction.

Right to notification

When you invoke the above-mentioned rights, with the exception of the right to access, we’ll communicate your request
to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves
disproportionate effort. We shall inform you about those recipients at your request.

Right to data portability

Any data you handed us, that we process based on consent, and which we process via automated means, will be transferred
to you or another controller (if technically feasible) upon request in a machine-readable format.

Right to object

When we process data based on legitimate interest or on the basis of public interest, you have the right to object to
it. We’ll investigate your objection and will only continue processing after the investigation if we can prove that we
have a legal reason to continue the processing. The conclusion of the investigation will be communicated to you.
When you object to direct marketing, we will no longer send you any direct marketing starting immediately from the
moment we receive your request.

Can I withdraw consent?

Yes, at any point in time you can withdraw your consent to the processing of data. There are however two exceptions.
First, if there is another legal ground for processing your data, we still will process your data on that legal ground.
Secondly, withdrawing consent may not be used to circumvent contractual obligations. In short, if you withdraw consent
it will only work towards the future, all previous processing will be deemed legal. If the necessity to perform a
contract is present the data will be processed further on that basis.

I want to file an official complaint, where can I go?

If we were not able to satisfy your request, you always have the right to lodge a complaint. You can do so by
contacting the Belgian supervisory authority via https://www.privacycommission.be/en/contact-us
in an official language of Belgium.

I see some fields on your website are mandatory to fill. Why is that?

In order to comply with legal obligations or for contractual reasons, we sometimes need a minimum of information. To be
able to reach out to you and identify you we only ask your name and an e-mail address. Everything else you provide to
us is on a voluntary basis.

What about profiling/automated decision making?

We don’t process your data via automated decision making.