Policies

“We” or “our” implies Aprojects, a public limited company under Belgian law, with registered office at Indiëstraat 2, 2000 Antwerpen, and with registration number 0480.252.839.

If you have any questions, comments or complaints regarding this privacy statement or the processing of your personal data, or if you wish to exercise any of your rights, please contact us by email to privacy@aprojects.com

This privacy statement applies to this website and the overall organisation of Aprojects.

If you visit our website and/or are in contact with us, certain personal data may be processed. You will find more information on the different processing activities that may apply to you below.

Use of our website

When you visit our website, we may process personal data using online techniques such as cookies, trackers, scripts, and similar technologies (hereinafter referred to as ‘cookies’). These may include (1) essential cookies that are strictly necessary to send a message via an electronic communications network, to ensure the security of our website or to store information about the provision of a service that you expressly requested; (2) functional cookies that further shape your use of our website; (3) analytical cookies to measure and analyse your use of our website; (4) marketing cookies to deliver (personalised) advertisements; and (5) other third-party cookies that we allow on our website.

For additional information we refer to our Cookie Statement below.

Customer relations management (prospective customers included)

Legitimate interest – Aprojects is continually looking for new customers, actively establishing new contacts for this purpose and building relationships with existing customers. In this respect, your personal data will be processed (e.g. to invite you to other forms of communication, an event…).

The data processing is based on the legitimate interest of Aprojects. You can always object to this according to the terms described under ‘right to object’ in the section ‘What are your rights and how to exercise them’.

• Which personal data do we process? Identification and contact data; other possible data shared during subsequent contacts (work related data, particular personal details, …)
• How do we acquire personal data? At first hand from your data via customer relations management
• How long do we store the data? Up to 7 years after termination of a final project or contact.
• With whom do we share the personal data (other than affiliated and associated companies)? Data processing partners (cfr. CRM platform) to whom we appeal for our website, contact or customer relations.
• Do these activities include automated individual decision-making? No
• Are data transferred outside the EEA? No

Recruitment and selection

Consent to (spontaneous) applications and to build a recruitment pool — legitimate interest for active recruitment.

When you (spontaneously) apply for a position at Aprojects, we process your personal data for recruitment and selection of employees for open or future vacancies. The data are processed (including building a recruitment pool) with your consent. You can revoke the given consent at any time without prejudice to the lawfulness of the data processing up to the time the revocation took place.

When Aprojects actively recruits, we process your personal data. This only includes data that are publicly available (e.g. LinkedIn and Google platforms) or data transferred through third parties. This processing is based on our legitimate interest, and you can always object to it as described under ‘Right to object’ below. We also refer to our legitimate interest in sharing your personal data with our affiliated and associated companies as part of our recruitment process, always with a view to finding a suitable assignment for you — you can object to this in the same way.

• Which personal data do we process? Identification and contact data, and other data possibly mentioned on your CV (personal characteristics, social contacts, psychological data, family composition, leisure activities and personal interests, academic curriculum, professional competence and experience, membership in professional organisations, current position, career, business records, current salary and fringe benefits, social security number, …)
• How do we acquire the data? Spontaneous applications: at first hand during the application process. Active recruitment: via third parties such as public platforms or intermediaries.
• How long do we store them? Non-retained applicants: up to maximum 1 year after your candidacy. Recruitment pool applicants: as long as consent is not revoked, up to 3 years after the candidacy.
• With whom do we share the personal data (other than affiliated and associated companies)? Data processing partners such as recruitment agencies.
• Do these activities include automated individual decision-making? No
• Are data transferred outside the EEA? No

Supplier relations management (prospective suppliers included)

Legitimate interest – Aprojects actively establishes contacts with potential suppliers and solidifies existing partnerships. In this context, personal data of employees of our suppliers (e.g. account managers) are processed. You can always object to this according to the terms described under ‘right to object’ below.

• Which personal data do we process? Identification and contact data; other data possibly shared during subsequent contacts (work related data)
• How do we acquire the data? At first hand via relation management.
• How long do we store them? Up to 7 years after termination of a final contract or contact.
• With whom do we share the personal data (other than affiliated and associated companies)? Data processing systems (cfr. our CRM platform) which we use for our relation management.
• Do these activities include automated individual decision-making? No
• Are data transferred outside the EEA? No

Visitor logs

Legitimate interest – Aprojects maintains visitor logs for the purpose of ensuring the safety and security of its premises, assets, and personnel, as well as to manage and monitor physical access to its buildings (e.g. to register your visit, issue a visitor badge, maintain a record of entry and exit). You can always object to this according to the terms described under ‘right to object’ below.

• Which personal data do we process? Identification and contact data, visit-related data (e.g. date, time of entry/exit), visual data (e.g. camera footage, if applicable)
• How do we acquire personal data? Directly from you at the time of your visit.
• How long do we store the data? Up to 1 year after the visit, unless longer required for security or legal obligations.
• With whom do we share the personal data (other than affiliated and associated companies)? Security service providers, IT support partners, and data processors managing access control or security systems.
• Do these activities include automated individual decision-making? No
• Are data transferred outside the EEA? No

Newsletter mailing

Consent – you can subscribe to our newsletter via our website. We process the collected personal data to contact you when a new newsletter is available. You can revoke your consent at any time; this does not affect the lawfulness of processing that took place before the revocation.

• Which personal data do we process? Identification and contact data
• How do we acquire personal data? At first hand upon subscription
• How long do we store the data? As long as the consent is not revoked
• With whom do we share the personal data (other than affiliated and associated companies)? Data processing partners (cfr. our e-mail platform) to whom we appeal for our website or newsletter editions.
• Do these activities include automated individual decision-making? No
• Are data transferred outside the EEA? No

When you visit our website or use our services as a customer, we may use third parties, such as partners, affiliated and associated companies and suppliers, to whom we transfer your personal data as part of this process. These third parties help us provide, support, develop and understand the use of our products and services, and provide services such as hosting, customer and technical support, marketing, analytics, content delivery and/or execution of online payment(s), among others.

We may also share data (including personal data) with third parties as part of a reorganisation, restructuring, merger, sale, or other transfer of business assets, and only to the extent necessary to enable third parties to provide their services or support. Furthermore, we may have to provide access to your data or transfer your data because of a legal obligation, involving authorities, government agencies or other third parties. Finally, we may share your data if this proves necessary to your vital interest.

Aprojects always tries to limit the transfer of personal data to third parties outside the European Economic Area (“EEA”). Should this nevertheless occur, we will ensure as soon as possible that this transfer is brought into line with the GDPR (by, among other things, the presence of an adequacy decision in the country concerned or the establishment of an appropriate alternative or additional measures, if necessary).

We will not retain your personal data for longer than strictly necessary to fulfil the purposes for which the personal data were collected, or according to the legal obligation imposed on us. See the section “Why and how do we process your personal data?” above for the specific retention periods.

European data protection legislation (GDPR) imposes certain conditions on organisations when they make decisions about individuals solely on the basis of processing operations that are fully automated, including profiling, and when these decisions have legal effects or other significant consequences. Aprojects does not engage in this type of decision-making.

Aprojects considers it important that you always retain control over the processing of your personal data. Depending on the processing and its legal ground, certain conditions or restrictions may be attached to the exercise of the rights below.

To exercise the rights below, or for information about them, please contact privacy@aprojects.com. We may request additional information to verify your identity, and we will endeavour to respond to your request without unreasonable delay and in any event within one month of receipt.

• Right to information and right of access: you have the right to access your personal data and certain additional information as described in this statement, and to receive a copy of the personal data we hold, free of charge for the first copy.
• Right to rectification: if the personal data we hold about you are inaccurate or incomplete, you have the right to have this corrected or completed.
• Right to restriction of processing: in certain situations (e.g. you dispute the accuracy of the data, or the processing is unlawful but you oppose deletion) you can have processing restricted to storage only.
• Right to data portability: where processing is based on consent and carried out through automated processes, you can receive your personal data in a structured, common, machine-readable form, or have it transmitted directly to a third party where technically possible.
• Right to object: you can object to processing based on our legitimate interest, or object at any time and free of charge to processing for direct marketing purposes.
• Right to data erasure (‘right to be forgotten’): you can request deletion of your personal data where, for example, it is no longer necessary for the purposes collected, or you withdraw your consent.
• Right to revoke your consent: where processing is based on consent, you can withdraw it at any time.
• Right to object to automated individual decision-making: where your data is used in this way and has legal or otherwise significant effects, you can ask us to stop.

If you have further questions or comments regarding the collection and processing of your personal data, you can contact us at privacy@aprojects.com. As we are committed to our mutual relationship, we ask you to always contact us first so that we can work out a solution to what lies at the root of your complaint.

You also have the right to submit comments, observations or complaints to the supervisory authority responsible for data protection, in the EU Member State where you reside, work, or where the alleged breach took place. In Belgium:

Gegevensbeschermingsautoriteit (Data Protection Authority)
Drukpersstraat 35, 1000 Brussel
+32 (0)2 274 48 00
www.dataprotectionauthority.be

Our organisation and our website are a dynamic and innovative environment, so this privacy statement may be modified if our services or applicable legislation so require. We will inform you when there are important changes to this privacy statement, and will ask your permission if necessary.