Privacy statement

1. Area of application & contact details Controller:

This privacy statement applies to all companies that come under the GMCOLAB Group (hereinafter called “GMCOLAB”, “we”):

• GMCOLAB BV, Tramweglei 77/4, 2500 Lier, Belgium – BE0771.561.853

You can always contact GMCOLAB by sending a letter to one of the above addresses or by contacting our certified data protection officer directly:

• Address: Tramweglei 77/4, 2500 Lier, Belgium
• E-mail address: co-create@gmcolab.com

2. General

The various companies of the GMCOLAB Group are aware that privacy is very important to its agency workers, employees, potential employees, job candidates, customers, suppliers and other visitors to the website.

For this reason in this privacy statement GMCOLAB explains in more detail how we process your personal data and we confirm that we will always handle and protect them with the greatest of care.

3. Personal data we process

GMCOLAB processes your personal data because you give them to us yourself in order to use our services. For example, we obtain personal data via our websites, at our events and in job applications. Depending on the nature of your request or your activities, the personal data we process include the following:

4. What do we use your personal data for?

We use the above personal data for the following purposes:

• Matching our content and resources to your preferences;
• Presentation of our website in the way that is most efficient for you and your machine or device;
• Responding to your questions and requests;
• Offering work, vacancies, projects, training opportunities, career advice and other HR services;
• Assessment of suitability of candidates for a certain position or project;
• Proposal of candidates and putting them in contact with potential employers and clients of GMCOLAB;
• Communication of available vacancies;
• Employment of employees and agency workers;
• Provision of information on GMCOLAB products and/or services;
• Management of customer relations;
• Provision of processors who have been engaged by GMCOLAB to perform specific services;
• Assessment and improvement of our services, systems and website;
• Communication about events, offers, surveys, competitions and research;
• Processing of personal data to comply with legal obligations;
• All activities to support and promote the continuity and sale of GMCOLAB services;
• Sending advertisements and e-mail messages within the context of direct marketing. You can always decide not to receive any more marketing e-mails in the future.

The processing of your personal data within the context of the above purposes is permitted by the General Data Protection Regulation for the following reasons:

• The processing may be necessary to comply with a legal obligation imposed on GMCOLAB;
• The processing may be necessary for the implementation of an agreement between you and GMCOLAB (e.g. employment contract);
• The processing is legal if it is necessary to promote the justified interests of GMCOLAB, except for the situation where your interests are more important than the interests of GMCOLAB;
• In certain cases, GMCOLAB will process your personal data based on your permission for the purposes described above, in so far as this is in line with the relationship between you and GMCOLAB.

5. Automated decision making

The processing of your personal data does not contain any profiling and will also not be subject to automated decisions by us.

6. How long do we keep personal data?

GMCOLAB will keep your personal data for as long as necessary for the purpose for which we use your data or no longer than is strictly necessary to comply with our legal and regulatory obligations. The final retention period will therefore always depend on the relevant legislation and the respective purpose for which your data are processed. You can consult a schematic overview per processing above.

7. Do we share your personal data with third parties?

GMCOLAB does not pass your personal data to third parties, except if and in so far as:

• This is necessary for the implementation of our agreement;
• GMCOLAB is entitled and/or obliged to do so based on legislation, or it is requested by a government institution or law enforcement authority;
• In the opinion of GMCOLAB this is necessary to protect its rights and/or property, or to prevent a crime and/or to protect state security or the safety of its employees.

To provide you with the best services and/or options, it is sometimes necessary to pass your personal details to a processor to perform specific tasks on our behalf. These processors will only have access to the personal data they need to perform their tasks. In addition, the processor may not use these data for any purpose other than that for which these data were obtained. GMCOLAB shall enter into a processing agreement with each processor. Consequently, GMCOLAB can guarantee that each processor provides the required level of data protection and only receives data necessary to provide the agreed services.

8. Do we send your personal data to countries outside the European Union?

GMCOLAB will only send your personal data to countries outside the European Union if the European Commission is of the opinion that an adequate level of protection is provided there and these countries appear on the list of third countries approved by the European Commission.

If this is not the case, GMCOLAB will ensure that the country or the international organisation has taken the necessary security measures to guarantee the protection of your personal data.

9. Cookies

Cookies are used on our website according to our cookie policy.

10. Liability

GMCOLAB can in no way be held liable for any direct or indirect damage arising from the use of our website, our services and/or the processing of your personal data. You shall compensate us in full for and indemnify us against all damage, costs, expenditure and losses that may result from this.

However, if and in so far as GMCOLAB may be liable in any way, the liability for indirect damage is in any event excluded. Any liability is moreover limited to an amount of € 1,000 per event and € 2,000 per calendar year. In addition, the amount of our liability will never exceed that paid by our insurance.

11. What are your rights?

a) Right to access and inspect

You have the right to access your personal data at any time free of charge and also to check that we use your personal data in accordance with the provisions applicable in the sector.

b) Right to correction, deletion and restriction

You can decide whether to share your personal data with us or not. In addition, you always have the right to ask us to correct, supplement or delete your personal data. You may not object to the processing of your personal data that we are required to keep and process by law.  You may also request restriction of the processing of your personal data.

c) Right to object

You also have the right to object to the processing of your personal data for serious and legitimate reasons.

d) Right to data transfer

You have the right to receive your personal data that are processed by us in a structured, current and machine-readable form and/or to transfer them to other controllers, this in accordance with the applicable provisions in the sector.

e) Right to withdraw permission

In so far as the processing is based on your prior permission, you have the right to withdraw this permission.

Exercising your rights

To exercise your rights you can contact us by letter or by e-mail using the e-mail address co-create@gmcolab.com .  To be certain that the request for inspection is made by you, we are obliged to check your identity and we ask you to send a copy of the front of your proof of identity with the request.  On this copy you should make illegible your passport photograph and the MRZ (machine-readable zone, the strip with numbers at the bottom of the identity page).  This copy will be destroyed immediately after your identity has been verified to protect your privacy.

We will respond as quickly as possible and certainly within four weeks after your request.

You also have the right to submit a complaint to the Data Protection Authority (1, avenue du Rock’n’Roll, L-4361 Esch-sur-Alzette).

12. How we protect personal data

GMCOLAB takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorised access, undesired disclosure and unauthorised change. If you believe that your data are not protected properly or there are signs of misuse, please contact one of our offices or go to co-create@gmcolab.com.

13. Changes

If changes are made to this privacy statement, we will always publish this on the GMCOLAB website. All essential changes will be published by appropriate notifications on this website or via other communication channels.