1. Your privacy is important to us
This privacy statement applies to the processing of personal data by BV Sustainable impact (hereinafter referred to as Impact us today) with registered office at 8500 Kortrijk, Spinnerijstraat 107, registered with the Crossroads Bank for Enterprises under company number 0683.710.636.
Today, Impact us today is committed to respecting and protecting your privacy. In this privacy statement, Impact us today informs you about the use of your personal data by Impact us today. Please read this information carefully to find out what Impact us today may use your data for. You will also find information about your rights and how you can exercise them in this privacy statement.
Impact us today may change this privacy statement at any time. The most recent version can be viewed https://impactus.today/privacy-statement. For any material material changes, Impact us today will notify you via the Website.
With respect to your privacy, we comply with applicable regulations, including:
- The General Data Protection Regulation (“GDPR”) of 27 April 2016, which aims to ensure better protection of natural persons when processing their personal data.
- Any other legislation with which we must comply in connection with the protection of personal data.
We also recommend that you read the Impact us today cookie statement. In our cookie statement, you can read what cookies are used, which cookies Impact us uses today, how you change your choice and how Impact us today protects your privacy. The cookie statement can be found on our website.
2. Impact us today processes your personal data for various purposes
2.1. Processing of personal data
Personal data means all personal data concerning you. This is all information that directly or indirectly identifies you as a natural person. Impact us today will never collect more data than necessary for the purposes described in this privacy statement.
Impact us today may collect your personal data directly from you as well as obtain it from certain third parties
Below you will find a non-exhaustive overview of the personal data we may process:
- First and last name;
- Contact information: contact details, telephone number and email address;
- Possibly a bank account number as part of invoicing;
- Other personal data that you actively provide, for example by filling in a contact form via our website, by correspondence or by telephone;
- Information on the work requested (solar panels, battery, insulation, new windows, etc.);
- Additional information on the desired work may be requested, e.g. for
- Photos of the roof/façade/windows/rooms in which the work is to be carried out
- Photos of specific technical installations (e.g. meter cabinet)
- Scans of energy bills in the context of consumption;
- Contractor’s bids;
- Client surveys;
- IP address; Internet browser and device type;
- Data about your activities on our website;
- Data about your surfing behavior on different websites;
- Whether or not you are a member of an organization;
- …
2.2. The different purposes
Today, the processing of personal data by Impact us is still based on one of the legal bases of the General Data Protection Regulation (GDPR). We provide below the purposes for which Impact us uses your personal data today for each of these legal bases.
2.2.1. Contractual obligations and provision of services
To accelerate the pace of home renovation, Impact us is now providing businesses, cities and cooperatives (Impact us Partners today) with a website and online platforms so that citizens, members, employees or customers can connect with qualified contractors.
In order to provide these services, we need to collect data from you.
We may then, for example, pass this information on to contractors so that they can contact you and prepare a quote. Before Impact us forwards your application to a contractor today, it may be necessary to process certain data and properly assess whether you are eligible to be matched with a contractor based on the information received.
Impact us currently processes the personal data of representatives of legal entities for authentication and communication (e.g. name, email address and telephone number) with the legal entity.
2.2.2. Consent
In some cases, Impact us will today ask for your consent to the processing of your personal data. You can always withdraw your consent. When you withdraw your consent, we stop any processing based on that consent. However, this does not affect the legality of operations carried out on the basis of the validly given consent to the withdrawal.
For example, we may ask your permission to send you certain marketing messages (for example, a newsletter).
2.2.3. Legitimate interest
Impact us today may process personal data if this is necessary for the representation of its legitimate interests. They are motivated by the need to operate as a business and enable the development of new initiatives and their offer to customers. In doing so, Impact us today ensures that the impact us today on your privacy is as limited as possible and that in any case the balance between the legitimate interests of Impact us today and the impact us today on your privacy is not disturbed. If you still have objections to these treatments, you can exercise your right to object. Impact us today will always respect this resistance, unless there are compelling reasons not to do so.
Impact us today may use your personal data to optimize its organization. In this context, personal data may be processed, for example, for internal reports. The use of your personal data to carry out studies, models and statistics for non-commercial purposes is also an example.
Impact us today may also use the data you provide on the website for quality research in the broadest sense and to better understand the market. We also use your personal data for statistical purposes. We also use this data to improve our website and develop new features and services.
Impact us today also wants to make sure that your personal data is always secure. For example, IP addresses are used to detect and combat illegal use of the website.
Some of our commercial messages may also be based on legitimate interest.
2.2.4. Legal obligation
The processing of personal data may be necessary as part of a legal obligation that Impact us must comply with today.
3. Retention periods
Personal data retention periods are an important part of privacy legislation (GDPR). The starting point is that personal data cannot be kept longer than necessary for the purposes of processing. The retention period of your personal data depends, among other things, on the type of personal data. In any case, they are never kept longer than the time necessary to achieve the purpose of the processing. After the expiration of the period for which the data is stored, Impact us today will delete your data.
The starting point for the retention of your personal data is the legal retention period. This is usually up to ten years after the end of a contract, as a contractor has a 10-year liability. If the law does not prescribe a retention period, it may be shorter.
4. You have the right to your privacy
4.1. Right of access
If you would like to see the data that Impact us today processes about you, please let us know. You have the right to request access to all your personal data that we process. In order to respond to this request, you must declare the personal data you wish to receive. If you exercise your right of access, Impact us will today give you as complete an overview of your data as possible.
4.2. Right to rectification
It may happen that some data that Impact us has stored today about you is not (or no longer) correct. You can always request that this data be corrected or supplemented.
4.3. Right to erasure
You can ask Impact us today to delete your personal data. If Impact us today no longer has a compelling reason for processing your personal data, we will delete it. A legal obligation (e.g. the contractor’s 10-year liability) may possibly prevent deletion.
4.4. Right to object
If you do not agree with the way in which Impact us currently processes certain data on the basis of a legitimate interest, you can object. Objection that we will grant, unless there are compelling reasons not to do so. Of course, you can always object to specific processing of personal data.
In addition, you can also object to all forms of direct marketing.
4.5. Exercising your rights
If you wish to submit a request to exercise one or more of the aforementioned rights, you can simply send an email to privacy@impactus.today. Always be as specific as possible in what you desire. In this way, Impact us today can deal with your question concretely and correctly. Impact us today must be able to verify your identity, to prevent someone else from exercising your rights. Impact us today can therefore request a copy of your identity card.
Do you want more information or do you disagree with Impact us’ position today? Then, surf to the website of the Belgian Data Protection Authority (www.gegevensbeschermingsautoriteit.be.) You can also file a complaint there.
5. Security
Impact us is currently taking appropriate measures to protect your personal data in order to avoid the following risks as much as possible:
- Unauthorized access to or modification of your data;
- Improper use or disclosure of your data;
- Accidental loss of your data.
6. Sharing personal data with third parties
In the context of the pursuit of all or part of the purposes mentioned in point 2, it may happen that Impact us transfers your personal data to third parties today. These third parties may be companies or natural persons. An entrepreneur is a good example. We only provide the contractor with the personal data that is strictly necessary. The contractor uses this information to establish the estimate, indicate the status of the project, display scheduled appointments, … In some cases, it may also involve several entrepreneurs.
Another example of third parties with whom personal data may be shared is that of partners for whom we provide services.
Also as part of the maintenance and security of our website, it is possible that third parties (e.g. IT specialists) have access to your data.
In addition, Impact us today may engage certain subcontractors. These are companies that process data on behalf of Impact us today (e.g. contractors, a consulting firm, a call center,…).
Impact us today does not provide personal data to third parties, unless it is obliged to do so on the basis of a legal provision or a decision of the court or supervisory authority, or if this is necessary in the interest of the prevention, detection or prosecution of criminal offences (such as fraud, deception or scams) or if you have given your permission to do so.
7. Do you have a question or would you like to file a complaint?
If you would like to answer any questions in this privacy statement, you can contact Impact us today. The address and other contact details are given in point 8.
You can also always lodge a complaint with the Data Protection Authority at the following address:
Data Protection Authority
Rue de la Press 35
1000 Brussels
Tel. +32 2 274 48 00
contact@apd-gba.be
If you would like more information about complaints and possible remedies, we advise you to consult the following address of the Data Protection Authority: https://www.gegevensbeschermingsautoriteit.be.
8. Finally
Impact us today can always adjust its privacy statement. Therefore, please review this privacy statement regularly. The most recent version can be found on our website. If you have any questions, please feel free to send us a letter or contact us at the address below
BV Sustainable Impact
Spinnerijstraat 107
8500 Kortrijk
Belgium
