Evaluate to Improve

Privacy Policy

Hereby, ICB (Instituut voor de autoCar en de autoBus – Institut pour l'autoCar et l'autoBus) wishes to inform you about its privacy policy to provide you with information about the processing of your personal data in accordance with the European General Data Protection Regulation (commonly known as the “GDPR” Regulation). 
 

Please read the following carefully. 

I. Notions 

In this Privacy Policy, the following terms are encountered: 

  • Personal data: any information on the basis of which a natural person can be identified or identifiable (e.g. first and last name, e-mail address, postal address, mobile phone number, ...). 
  • Processing: any operation performed on personal data (collection, recording, storage, destruction, modification, updating, ...). 
  • A controller: the natural or legal person determining the means and purposes of the processing of personal data. 
  • A processor: the natural or legal person who processes personal data on behalf of the controller. 

 

II. Our company

 

Our Institute is named as follows: Instituut voor de autoCar en de autoBus – Institut pour l’autoCar et l’autoBus. 

Our Institute is registered at the CBE under the number 0445.494.076. 

Its head office is located at Metrologielaan 8 – 1130 Brussels, Belgium. 

 

III. Our data controller

 

The controller of the personal data is our Institute (I.C.B. – Instituut voor de autoCar en de autoBus).
 
If you have any questions about data protection, please contact Mrs. Laure-Anne Gultens ([email protected]). 
 
As data controller, our Institute is obliged to comply with the legal requirements regarding data processing for purposes that it determines itself. It is responsible for the processing of personal data, in particular that of its partners and any other interested persons. 
 
When we act as a processor, we act under the instructions of the controller who entrusted us with the data. 

 

IV. Data we collect 

 

In order to identify you, contact you and serve you efficiently, we collect the following data: 

  • Name 
  • First name
  • E-mail address 
  • Job title 
  • Postal address 
  • Name of the organization 
  • Telephone number 
  •  … 

 

The user provides this information with full knowledge, in particular when she/he enters it herself/himself. We also use public data (e.g. data relating to the directors of a company) or data collected from third parties. You may also have publicly disclosed certain information (e.g. on social networks). 

 

All personal data collected is kept for a limited period of time, never longer than necessary for the purpose of the processing, except where applicable law requires a longer retention period. 

We collect your data through: 

  • Forms filled out online 
  • Subscription to our newsletter  
  • Contacts you make with our Institute 
  • Public data or data collected from third parties

 

V. Legal basis and purposes of the processing 

 

Our Institute must be able to function as a company and carry out its various missions. To this end, we use your data to improve the services we offer. The processing of your personal data is necessary to achieve this interest. At all times, our Institute ensures that a proportionate balance is struck between its legitimate interest and the privacy of the persons concerned. 

In this context, we collect your data for the following purposes: 

  • Communication and information 
  • Organization of our services 
  • Improvement of our services 
  • Statistics 
  • Management of our website 

 

VI. Our subcontractors and suppliers

 

For the execution of a certain number of operations we call upon : 

  • either to suppliers 
  • or to subcontractors. 

 

We ensure that we work only with reliable partners and suppliers who offer a sufficient degree of security to safeguard our data and those of our clients. 

 

Your data is stored: 

  • on our servers 


VII. Rights of the data subjects  

 

The GDPR provides for the following rights: 

 

1)     Right to access one’s own data 

 

You have the right to request access to your personal data that we process. If you exercise this right of access, we will try to provide you with an overview of your data, as complete as possible, free of charge. However, some data may have been deleted from our files. Similarly, some data stored on backup equipment may not be able to be restored over time. 

 

2)     Right to rectification 

 

If your data is incorrect or incomplete, you can ask us to correct or complete it (free of charge). 

 

3)     Right to restriction of processing 

 

In cases provided for in the Regulation (for example, if you contest the accuracy of your personal data), you may ask us to restrict the processing of your data. 

 

4)     Right to erasure of data 

 

In the cases provided for in the Regulation (for example, if you consider that your data has been unlawfully processed), you have the right to request that your data be deleted. 

 

5)     Right to object 

 

You have the right to object to the processing of your personal data on grounds relating to your particular situation. 

 

6)     Right to lodge a complaint 

 

You have the right to lodge a complaint with the Data Protection Authority: Rue de la Presse 35, 1000 Brussels, Tel +32 (0)2 274 48 00, Fax +32 (0)274 48 35, e-mail: [email protected]. 

 

To exercise these various rights, please be specific in the request you make and provide proof of your identity.  

 

Do you have any questions or remarks about the processing of your data? You can contact the contact person mentioned in point III. 

 

VIII. Security of your data 


We take care to protect and secure the data you have chosen to share with us. We strive to ensure that your data remains confidential and that it is not altered, damaged, destroyed or disclosed to unauthorised third parties. 

 

To this end, we have taken physical protection measures as well as technical and organisational measures to prevent any loss, misuse, unauthorised access or dissemination, alteration or possible destruction of data. 

 

All data is confidential. We have restricted access to it to our employees who need it in the course of their work. They are bound by an obligation of confidentiality and may be subject to disciplinary action in the event of non-compliance. 

IX. Modifications 

 

Our Institute reserves the right to make changes to this privacy policy. These changes will be communicated to users via our website.