ONDRAF/NIRAS PRIVACY POLICY

This Privacy Policy applies to the processing of personal data (hereinafter the "Data") carried out by ONDRAF/NIRAS. 

We believe the protection of your personal data is extremely important, in accordance with the rulings of European Parliament and Council Regulation (EU) 2016/679, dated 27 April 2016, concerning the protection of individuals with regard to the processing of personal data, and concerning the free movement of such data, as well as the Act dated 30 July 2018 concerning the protection of individuals with regard to the processing of personal data. 

By using any of our sites or by providing your data in connection with notifications sent by ONDRAF/NIRAS, you are accepting the practices described in this Privacy Policy.  

ONDRAF/NIRAS, whose registered offices are located at Avenue des Arts 14, 1210 BRUSSELS (Belgium), registered with the Crossroads Bank for Enterprises under number (BE) 0222.116.241, is responsible for processing the personal data collected for the purposes described below. 

This is data that you provide to us directly through our websites, ondraf.be and niras.be, or through other channels when you interact with us.  

We will only use the data for these purposes and for as long as it takes to respond appropriately. 

We will retain your data for the period of time necessary for the purposes for which it was collected and in accordance with the applicable law. At the end of the retention period, the data controller will make every effort to ensure that your data has been made unavailable. 

3.1 Processing of personal data 

We collect your personally identifiable information and electronically identifiable information, based on our legitimate interest, for the following purposes: 

RETENTION PERIOD:

• To inform you about our news, by sending you our Newsletter. 
• To send our annual report and annual greeting cards. 
• To send invitations, by email or by post, for the events we organise. 
• To take pictures at the events we organise and publish them in our various different communication media. 
• To collect your data through our contact form on our websites and transmit your specific requests to the relevant departments, in order to provide you with the answers you need. 

RETENTION PERIOD:

• 3 years from your last contact with our organisation. 
• 3 years from your last contact with our organisation. 
• 3 years from your last contact with our organisation. 
• 3 years from your last contact with our organisation. 
• The time needed to respond to your request. 

3.2 Surveillance cameras 

ONDRAF/NIRAS has installed fixed surveillance cameras in and around its buildings in order to ensure your safety and that of its staff and property, and thereby prevent, detect and uncover offences of which you and ONDRAF/NIRAS could be victims. 

We process surveillance camera images on the basis of our legitimate interest.  

The use of these cameras complies with the law dated 21 March 2007 regulating the installation and use of surveillance cameras, with Collective Labour Agreement No. 68, dated 16 June 1998, concerning the protection of employee privacy with regard to surveillance by cameras in the workplace, and with the rulings in force on the protection of personal data.  

The presence of the cameras is shown by the affixing of regulatory pictograms. 

Each year, ONDRAF/NIRAS informs the police of these surveillance cameras and keeps a register of image processing activities therefrom.  

Access to the images from the surveillance cameras is limited to persons authorised by ONDRAF/NIRAS within the framework of their duties. These people are bound by a duty of confidentiality.  

The retention period is 30 days from the recording of the images, unless the images contribute to the proof of an offence, damage or discourtesy or may lead to the identification of a perpetrator, a public order offender, a witness or a victim. 

3.3 Cookie Management 

This website uses cookies. 

A cookie is a small file distributed with the pages of a website and stored by the browser on the hard drive of your computer, tablet or phone. The information it contains may be sent back to the site's servers on a subsequent visit and thus allow the author of the site to establish a trace of the internet user's activity. 

It should be noted that with the term "cookies" we also include any other technical tracking process such as "scripts" in general. A script is a piece of programming code used to make a website work interactively. Finally, "web beacons", "spy pixels" and "social media cookies" are also cookies. 

Cookies are used to personalise content and to provide features necessary for the proper functioning of a website, such as checking a shopping cart or remembering a language choice. Some cookies may be placed or monitored by third parties (partners or subcontractors) for marketing targeting purposes.  

3.2.1 Technical cookies ("Required" or "Preferred") 

We use certain cookies to remember your settings and preferences such as language choice. These cookies are essential to the proper functioning of the site and cannot be disabled without affecting the proper functioning of the site. These types of cookies and similar technologies do not allow us to collect any data that could identify you. 

3.2.2 Cookies for audience measurement 

We use these cookies to analyse and improve the performance of the site. We use tools that collect, for example, your IP address when you connect, the date and time you access the site, the pages you visit, the type of browser you use, and the platform and/or operating system you use.  

The legal basis for this processing is your consent. 

3.2.3 Marketing Cookies 

Marketing cookies are used to track visitors through the site. The goal is to display ads that are relevant and interesting to the individual user and therefore more valuable to third-party publishers and advertisers. 

The legal basis for this processing is your consent. 

3.2.4 Consent 

Your consent can be changed or withdrawn at any time by exercising your preferences HERE 

3.2.5 List of cookies used on this site: 

When you give your consent to all cookies, the following cookies may be set: 

We always ensure that access to your data within our organisation is limited to those employees who need it and for the purposes for which you provided the data.  

When providing our services, we may subcontract some or all of our work to technical subcontractors who are bound to us by contracts.  

ONDRAF/NIRAS requires its subcontractors to comply with the legislation on data protection and present sufficient guarantees as to the implementation of appropriate technical and organisational measures, so that the processing meets the requirements of applicable legislation on data protection and guarantees the protection of your rights. 

We do not sell or otherwise disclose the data we collect about you to third parties. 

In some circumstances, our websites and applications will provide you with plugins from various social networks. If you choose to interact with a social networking site such as LinkedIn or YouTube, your activity on our site or through our applications will also be accessible on that social network. Please read the privacy policies of these social networks for detailed information about the collection and transfer of personal information, your rights, and how you can obtain a satisfactory privacy setting. 

• Right of access: you have the right to have confirmation that your data is being processed, to have access at any time and free of charge to your data and to obtain a copy of your data. 

• Right of rectification: you have the right to demand that incorrect data be corrected, that incomplete data be completed and that inappropriate or data that is no longer needed be deleted. We would like to draw your attention to the fact that you are at all times required to verify the accuracy of the data you provide to us. 

• Right to deletion: If you no longer wish your data to be processed and you qualify for the right to deletion, we will delete your data from our database. 

• Right to portability: where appropriate, you will also have the right to the portability of your data in accordance with applicable data protection legislation. 

• Right to object: you have the right to object to any use of your data when the processing is based on the legitimate interests of ONDRAF/NIRAS. 

• Right to limit processing: Finally, you have the right to obtain from ONDRAF/NIRAS the limitation of the processing of your data, in accordance with the applicable legislation on data protection. 

By sending an email to info@nirond.be or a letter to 

ONDRAF/NIRAS 

Avenue des Arts 14 

1210 BRUSSELS 

Belgium 

You can also contact our Data Protection Officer (DPO) by email at dpo@nirondgroup.be or by post at 

GDPR Agency 

Chemin du Cyclotron, 6 

1348 Louvain-la-Neuve 

Belgium 

If you believe that we are in breach of any of our legal and/or contractual obligations, please get in touch with us at info@nirond.be.  We will do everything possible to ensure that you receive a follow-up as soon as possible. 

Any claim, complaint or grievance should be addressed to ONDRAF/NIRAS' head office. 

If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority. 

The Belgian supervisory authority is 

THE DATA PROTECTION AUTHORITY 

Rue de la Presse 35 

1000 Brussels 

Email: CONTACT@APD-GBA.BE 

As a general rule, we do not intentionally collect personal information from children under the age of 13.  

If, however, we do collect information from children under the age of 13, we will obtain the consent of the holder of parental responsibility for the child before using their personal information. 

Our sites may contain links to third-party sites, and some of our services provide you with access to third-party services (such as social networks). 

We have no control over how third-party sites and services handle your personal information. We do not review third-party sites and services, and we are not responsible for these third-party sites and services or their privacy practices. Please read the privacy statements of any third-party sites or services you access from our sites or services. 

We have developed appropriate technical and organisational security rules to prevent the destruction, loss, falsification, modification, unauthorised access, accidental disclosure to third parties, and other unauthorised processing of the data.  

The liability of ONDRAF/NIRAS shall be limited to direct damages, to the exclusion of any indirect damages. ONDRAF/NIRAS shall not be held responsible for damages deemed indirect, including but not limited to loss of data, financial or commercial loss, loss of profits, increase in general expenses, and disruption of planning.  

Furthermore, ONDRAF shall not be held responsible for any damage resulting from the illicit manipulation of the data by third parties (theft of data, viruses, phishing or other computer crimes). 

We would also like to point out that links to the website may contain hyperlinks and other references to other sites that we do not operate or control and to which these rulings do not apply. We are not responsible for the content of such websites or for the offers, products and services they provide. We therefore recommend you carefully read the privacy policy of each site you visit, which may differ from this one. 

These rulings shall be governed by, interpreted and enforced in accordance with Belgian law, which shall be the only applicable law in the event of a dispute. 

Any dispute may be brought by the aggrieved party before the Courts and Tribunals of the judicial district of Brussels, which shall enjoy sole jurisdiction. 

We reserve the right, at our sole discretion, to amend, modify, add or remove parts of this policy at any time. This policy was last updated on 28-02-2023.