Privacy policy (GDPR)

1. About the GDPR

‍

The General Data Protection Regulation (GDPR) came into force on 25 May 2018. It strengthens and unifies the protection of personal data for all individuals within the European Union.

‍

2. Our GDPR commitment

‍

Fidly is fully committed to complying with the GDPR and applies the following principles:

‍

• Lawfulness, fairness and transparency: data is processed lawfully and transparently
• Purpose limitation: collection for specified and legitimate purposes
• Data minimisation: collection limited to what is strictly necessary
• Accuracy: data kept accurate and up to date
• Storage limitation: retention according to defined periods
• Integrity and confidentiality: appropriate security of the data

‍

3. Your rights in detail

‍

Right of access (Article 15)

‍

You have the right to know whether we process your personal data and to obtain a copy of that data, together with information about how it is processed.

‍

Right to rectification (Article 16)

‍

You can ask for inaccurate or incomplete personal data about you to be corrected.

‍

Right to erasure (Article 17)

‍

In certain circumstances, you can ask for your personal data to be erased:

• The data is no longer needed
• You withdraw your consent
• The data has been processed unlawfully
• There is a legal obligation to erase it

‍

Right to restriction of processing (Article 18)

‍

You can ask for the processing of your data to be restricted in the following cases:

• You contest the accuracy of the data
• The processing is unlawful but you do not want the data erased
• The data is needed to defend your rights
• You have objected to the processing, pending verification

‍

Right to data portability (Article 20)

‍

You have the right to receive your data in a structured format and to transmit it to another controller, where:

• The processing is based on consent or a contract
• The processing is carried out by automated means

‍

Right to object (Article 21)

‍

You can object to the processing of your personal data:

• On grounds relating to your particular situation
• Where the processing is based on legitimate interest
• At any time for direct marketing

‍

4. How to exercise your rights

To exercise your GDPR rights:

• By email: privacy@fidly.be with proof of identity
• Response time: 30 days maximum (extendable by 60 days for complex requests)
• Free of charge: exercising your rights is free (except for excessive requests)

‍

5. Data breaches

‍

In the event of a data breach likely to result in a risk to your rights and freedoms:

• Notification to the supervisory authority within 72 hours
• Communication to the people concerned if the risk is high
• Immediate measures to limit the consequences

‍

6. Impact assessment

‍

Fidly carries out data protection impact assessments (DPIAs) for processing likely to result in a high risk to people's rights and freedoms.

‍

7. Transfers outside the EU

‍

Where necessary, data transfers outside the EU are governed by:

• Standard contractual clauses approved by the European Commission
• Appropriate safeguards for data protection
• An assessment of the laws of the destination country

‍

8. Data protection officer

‍

Our DPO ensures GDPR compliance and supports you in exercising your rights:

• Contact: dpo@fidly.be
• Tasks: advice, monitoring, training, contact point for the authority

‍

9. Supervisory authority

‍

You can lodge a complaint with the competent supervisory authority:

• Belgium: Data Protection Authority (DPA)
• Website: www.dataprotectionauthority.be
• Contact: contact@apd-gba.be

‍

10. Updates to this information

‍

This GDPR information may be updated to reflect changes in regulations or in our practices. You will be notified of any significant change.

‍