Privacy policy

your privacy at Allimex

Version December  2023

​Thank you for your interest in our company and your visit to our website.

This website is the property of Allimex BV. The protection of your personal data is extremely important to us. We make every effort to protect your privacy and ensure that you can safely entrust us with your personal data. We handle personal data in a secure and discrete manner at all times and appropriate protective measures have been taken to avoid loss, changes, unauthorised access and/or any other unlawful processing of your personal data.

We want to be transparent about how we process your personal data and what we do with your personal data. You can read more about this in this privacy statement.

This privacy statement applies to all contacts outside the organisation of Allimex. Specifically, this includes contacts of suppliers, third parties, customers and the like more. If you fall under one of these categories or if you merely visit the Allimex website, this privacy statement is relevant to you.

1. Who are we?

Allimex BV, with registered office at Transportstraat 1B, 3980 Tessenderlo, and registered with the Kruispuntbank van Ondernemingen under number 0898.075.191, RPR Antwerp, Hasselt division (hereinafter: "Allimex", or "we").

You can contact us using the following contact details:

Tel.: +32 11 72 96 50

E-mail.: privacy@allimex.eu

We always process your personal data in accordance with the applicable legal provisions for the protection of personal data, including the Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter, the "AVG"), and applicable national implementing legislation.

2. Some terms clarified

For the purposes of this privacy statement, 'personal data' means any information relating to an identified or identifiable natural person (the 'data subject'). An identifiable person is a natural person who can be directly or indirectly identified, in particular by means of an identifier such as a name, identification number, location data, an online identifier or of one or more elements characterising the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person. In other words, it is any information on the basis of which a person can be identified. This includes, for example, your name, first name, date of birth, telephone number and e-mail address, as well as your IP address.

The term 'processing' is very broad and covers, among other things, the collection, recording, organisation, retention, updating, modification, retrieval, consultation, use, dissemination, combination, archiving and erasure of data.

3. Controller of your personal data ('controller')

Allimex BV is responsible for processing your personal data.

We are, as the AVG calls it, the 'controller' of your personal data. Specifically, this means that Allimex BV, possibly together with others, determines the purpose and means of processing your personal data.

We do not aim to collect personal data from persons under 16 years of age. These young people may not transmit personal data to us or provide a consent form without the consent of the person with parental responsibility.

4. What personal data do we process, why and on what basis?

The table below reads:

- Column 1: which categories of personal data we process;

- column 2: why we are doing this (the 'purposes'); and

- Column 3: on which legal basis the processing is based; and

- column 4: how long we process your personal data.

Each processing activity of your personal data is done for one or more specific purposes.

In addition, there is always a demonstrable legal basis for any processing. The applicable legal basis, which you can find in the third column 'legal basis', has the following meaning:

- 'Consent': you have consented to the processing of personal data for one or more specific purposes;

- 'Agreement': the processing is necessary for the performance of an agreement to which you are a party;

- 'Legal obligation': the processing is necessary to comply with a legal obligation incumbent on us as the processing controller;

- 'Legitimate interest': the processing is necessary to pursue our legitimate interests or those of a third party, except where your interests or fundamental rights and freedoms requiring protection of personal data outweigh those interests.

Categories of personal data

Purposes

Legal basis

Retention period

Identification data (language selection, phone number, IP address and IMEI code, session data)

To provide you with access to our website

Permission

Until the end of your visit to our website

Identification, contact and login data (name, first name, middle name (optional), e-mail address, choice of language, IP address and IMEI code, username/login name and password)

To register as a user on our website and access the webshop of www.allimexgreenpower.com

Permission

As long as your account is registered on our website

Identification and contact details (name, first name, e-mail address) and details of the location where you intend to use Allimex products

To allow you to use the AlliDraw module and to ensure that it provides you with the most accurate information possible

Agreement

Until the end of your use of this functionality on our website

Identification and contact details (surname, first name, e-mail address, mobile phone or telephone number), professional information (curriculum vitae which may include your professional experience, as well as your photograph and diplomas)

To review your application as part of an application process (see also our job seeker confidentiality statement).

Agreement

Up to four weeks after the end of the application process

Identification and contact details (name, first name, address, e-mail address, language choice, phone number, payment details, IP address and IMEI code) and your complaint

Service before, during or after delivery of the service and handling of complaints

​Agreement

For as long as necessary to deal with your complaint (in the case of legal proceedings: until they are concluded).

Identification - and contact person data (company, position, surname, first name, gender, address, mobile or telephone number, fax, e-mail address, choice of language), IP address and IMEI code.

To keep you, our client, informed of new developments in your field and/or area of interest and of our services through targeted e-mails.

Permission

Up to two years after you became our customer.

Identification and contact details (company, first name, last name, e-mail address, mobile phone or phone number) and your question/message

To answer your general question or message via the contact form on the website https://www.allimex.eu/ or www.allimexgreenpower.com or via the e-mail addresses given there.

Legitimate interest

As long as necessary to process your query or message.

Identification and contact details (name, first name, address) and payment details

Compliance with legal, regulatory and administrative obligations (e.g. anti-fraud, anti-money laundering)

Legal obligation

Applicable limitation period (or in the case of court proceedings: until their conclusion)

Identification and contact details (name, first name, address), payment details and invoices

Defending and protecting our rights

Legitimate interest

Applicable limitation period

Identification - and contact details (company or agency, position, name, first name, mobile or telephone number, fax, e-mail address, choice of language)

Communicating with you in the context of proceedings, mediation, negotiation, etc.

Legitimate interest

As long as proceedings or negotiations are ongoing and as long as necessary for evidentiary purposes

Identification and contact details (surname, first name, e-mail address, mobile phone or telephone number) and your availability for the desired training course

To register for training courses.

​Agreement

Up to four weeks after completion of training

 

*When using electronic meetings, we strive to maintain the highest standards of security, technology and data protection. However, we cannot guarantee a level of confidentiality comparable to that of a face-to-face meeting. We emphasise that no participant has the right to record electronic meetings without the prior written consent of all participants. If you prefer to apply specific standards yourself, you can organise a meeting through an online platform of your choice and invite us to do so.

​5. Cookies and cookie policy

We also use cookies, mainly to continuously optimise and monitor our website and service offerings for the benefit of visitors and users. For more specific information on the cookies we use, please see our cookie statement.

​6. Your privacy rights

To give you more control over the processing of your personal data, you have a number of rights. These rights are described, among others, in Articles 15 to 22 of the Personal Data Protection Act.
U hebt de volgende rechten:

I. The right to access the personal data we process about you (Art. 15 DPA)

You have the right to know at any time whether or not we process personal data about you. If we are processing them, you have the right to access this personal data and obtain additional information about:

(a) the purposes of the processing

(b) the categories of personal data concerned

(c) the recipients or categories of recipients (in particular, recipients in third countries)

(d) the storage period or, if this is not possible, the criteria for determining this period;

(e) the existence of your privacy rights;

(f) the right to lodge a complaint with the supervisory authority;

(g) the source of the personal data if we obtain personal data through a third party;

(h) the existence of automated decision-making.

If we cannot give you access to your personal data (e.g. due to legal obligations), we will let you know why this is not possible.

You can also obtain a copy of processed personal data in intelligible form free of charge. Please note that we may charge a reasonable fee to cover our administrative costs for each additional copy you request.

II. The right to erase data ("right to forget")

Right to erase data ("right to be forgotten") (Article 17 of the Personal Data Protection Act)

In certain cases, you can ask us to erase your personal data. Please note that your right to be forgotten is not absolute. We have the right to keep your personal data if, among other things, this is necessary for the performance of the contract, the fulfilment of a legal obligation or the preparation, exercise or substantiation of legal claims. We will inform you of this in more detail in our response to your request.


III. Right to rectification and supplementation (Article 16 of the Personal Data Protection Act)

If your personal data are incorrect, outdated or incomplete, you may ask us to correct these inaccuracies or incompleteness.

IV. Right to transferability of personal data (Article 20 of the Personal Data Protection Act)

You also have the right, under certain conditions, to obtain that we transfer the personal data you have provided to us for the performance of the contract or for which you have given your consent to another data controller. If technically possible, we will transfer your personal data directly to the new data controller.

V. Right to restriction of processing (Article 18 of the Personal Data Protection Act)

If one of the following situations applies, you may ask us to restrict the processing of your personal data:

(a) you dispute the accuracy of the personal data (in this case, its use will be restricted for a period that allows us to verify the accuracy of the personal data) ;

(b) the processing of your personal data is unlawful;

(c) we no longer need your personal data for the purposes of the original processing, but you need them for the establishment, exercise or defence of legal claims;

(d) until a decision has been made on the exercise of your right to object to the processing, you may ask us to restrict the use of your personal data.
 
VI. Right to object (Article 21 of the Personal Data Protection Act)

Depending on your specific situation, you may object to the processing of your personal data if such processing serves our legitimate interests or the performance of a task of public interest. In this case, we will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, or if the processing of personal data is related to the establishment, exercise or vindication of a legal claim.

VII. Right not to be subject to automated decision-making (Article 22 of the Personal Data Protection Act)

You have the right not to be subjected to a decision made solely on the basis of automated data processing that significantly affects you or has legal effects and is made without substantial human intervention.

You cannot invoke this right in three situations:

(a) if a law allows it (e.g. to prevent tax fraud) ;

(b) if the decision is based on the explicit consent of the data subject ; or

(c) if it is necessary for the conclusion or performance of a contract (note that in this case we always consider on a case-by-case basis whether there are less privacy-infringing methods to conclude or perform the contract).

VIII. Right to withdraw consent (Article 7 of the Personal Data Protection Act)

Where your personal data are processed on the basis of your consent, you may withdraw this consent at any time by means of a simple request.

7. Exercising your rights

To exercise these rights, please contact us by e-mail at the following address: [privacy@allimex.eu.

To verify your identity, please send us a copy of the front of your identity card.

You can exercise all these rights free of charge, unless your request is clearly unfounded or excessive (e.g. due to its repetitive nature). In this case, we are entitled to charge you a reasonable fee or refuse to comply with your request.

We will retain your personal data for as long as necessary to fulfil the purpose for which it was collected. You should be aware that many (legal) retention periods require the retention of personal data. Where there is no retention obligation, data is systematically deleted as soon as the purpose for which it was collected has been achieved.

In addition, we may retain personal data if you have given us permission to do so (e.g. as part of a job application procedure) or if we need the data for legal proceedings. In the latter case, we need to use certain personal data as evidence. For this purpose, we retain certain personal data in accordance with the statutory limitation period, which may be up to 30 years; the usual limitation period for personal legal actions is 10 years.

8. Sources of personal data

We process the personal data that you voluntarily provide to us. If additional personal data is required, we will inform you whether or not we are obliged to provide it and the consequences of not doing so. Failure to provide personal data may result in our inability to provide you with our products and services.

We may also receive personal data about you from the following categories of sources:

9. Categories of recipients

We will only transfer your personal data to third parties in accordance with the applicable legal framework, if you have given your consent, if such transfer is necessary for the performance of our services, e.g. the transfer of your personal data to suppliers who assist us in processing your personal data (based on our legitimate interest) or if we are required to do so by law (e.g. transfer to governmental authorities, such as supervisory or law enforcement authorities).

In some cases, our employees and staff may be assisted in their work by external service providers. With regard to data protection, an agreement has been concluded with all these service providers to ensure that they manage your personal data in a secure, respectful and careful manner. 

In particular, we may share your personal data with the following categories of recipients:

- We may use carefully selected third parties to provide services on our behalf or to help us provide services to you. For example, we may use cloud service providers, IT service providers and other third parties to provide legal, accounting, insurance, auditing and other professional services;

- We may share your personal data with governmental or regulatory authorities at their request to comply with a court order, law, regulation, standard or legal process.

10. Transfer to third countries

We will only transfer your personal data to processors or data controllers in third countries if we are legally authorised to do so. To the extent that such transfers are necessary, we will take the necessary steps to ensure that your personal data is highly protected and that all transfers of personal data outside the EEA are lawful. If a transfer takes place to a country outside the EEA that has not been determined by the European Commission to provide an adequate level of protection, such transfer will always be subject to an agreement that meets all the requirements for transfers to third countries, such as the relevant safeguards and the model data protection contractual clauses approved by the European Commission.

11. Security of personal data

The security of your personal data is an important concern for us. We have taken all reasonable and appropriate technical and organisational security measures to protect your personal data as far as possible against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. 

The security of your personal data also depends on you. Where we have given you (or where you have chosen) a password to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information over the internet is not completely secure. Although we do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to our website. Any transmission of personal data is at your own risk. We are not responsible for the circumvention of privacy settings or security measures on the website.

12. Complaints

We do our utmost to protect your personal data. If you have a complaint about how we process your personal data, please let us know using the contact details at the beginning of this privacy notice so that we can respond as quickly as possible.

You can also complain to the data protection supervisory authority. The authority overseeing our organisation is the Personal Data Authority, whose contact details are as follows:

Website :

Burger homepage | Autoriteit Persoonsgegevens

Contact details :

Personal Data Authority

Pressestraat 35, 1000 Brussel

Tel : +32 (0)2 274 48 00

e-mail : contact@apd-gba.be


14. If you have other questions

You can always contact us by phone, e-mail or post using the details at the beginning of this privacy notice. We will be happy to answer your questions.


15. Changes

We may amend this privacy statement from time to time in response to comments or changes in our processing activities. We therefore request that you always consult the most recent version of this statement.