This policy and these conditions are valid since 25 May 2018 and were issued by Nuwhï bv, with registered office at 1790 Affligem(Belgium), Fooststraat 77A and registered with the CBE under number 0713913070.
Nuwhï makes every effort to protect your privacy. During your contact with Nuwhï, it is possible that you share personal data with us that allows us to identify you as an individual, employee of a company, etc. (such as your full name, e-mail address, address and phone number). This is your ‘personal data’.
This privacy statement applies to the personal data we collect about you for the purpose of offering you our services. By using the site or sharing your personal data with us during our services, you accept the practices described in this privacy statement.
The processing of personal data
Nuwhï collects, registers and processes the personal data of customers, candidates and users of its services. Data can be communicated, for example, by people themselves when they contact us or when services are provided by Nuwhï.
Personal data is always processed in compliance with the principles of privacy legislation and the General Data Protection Regulation, being the European Regulation 2016/679 of 27 April 2016 on the protection of personal data. Personal data is processed in a lawful, fair and transparent manner for a specific and explicit purpose. Data processing is limited to what is necessary and the period for which the personal data is stored is limited to what is necessary to fulfil the purposes of the processing. Personal data is properly secured using appropriate technical and organisational measures.
Nuwhï processes your personal data for various purposes, including:
- customer management;
- recruitment activities
- informing you about our professional and social activities or another topic that might concern you;
- sending you our newsletter
- contacting you if necessary, to carry out our services;
- further execution of agreements;
- informing you about modifications to our services and products;
- meeting legal obligations;
- when the legitimate interest of the company requires it, but this is always clear to the data subject.
Nuwhï as processor
Nuwhï sometimes gains access to the customer’s personal data in the context of the services it provides on behalf of the customer. In these situations, the customer will act as ‘controller’ and Nuwhï will act as ‘processor’, as defined in the GDPR. Nuwhï respects the ‘General terms and conditions concerning data protection’ when dealing with its customers.
Rights of the data subject
If you wish to consult, transfer, modify, correct, restrict or erase your data, you can send an e-mail free of charge, accompanied by a copy of your identity card, to the address email@example.com. You can use the same method to also object to the processing of personal data or if you wish to terminate communications. The data will be adapted or removed to the extent possible and technically allowed. Your request will be processed as soon as possible. It will be honoured as much as possible, unless this is not possible due to the company’s interest or a legal obligation. If a personal data breach occurs, which threatens to violate your rights and the protection of your personal data, the supervisory authority will be informed and you will be informed as a data subject if there is a high risk to the rights and freedoms of natural persons.
Security and confidentiality
Nuwhï has developed security measures, adapted on a technical and organisational level, to avoid the destruction, loss, fraud, modification, unauthorised access or accidental disclosure to third parties of personal data collected on the website, as well as any other unauthorised processing of this data. Under no circumstances can Nuwhï be held liable for any direct or indirect damage resulting from incorrect or unlawful use by a third party of the personal data. All data is always treated confidentially. If you believe that your data is not secure or that there are indications of abuse, please contact us by e-mailing firstname.lastname@example.org.
Accuracy of your data
Anyone who submits data to Nuwhï guarantees that it is accurate and complete. Submission of incorrect data or data belonging to third parties may result in the user being, temporarily or definitively, denied access, in whole or in part, to Nuwhï’s products and services.
Our website and/or services do not intend to collect data about website visitors who are younger than 16 years of age, unless they have consent from their parents or guardian. However, we cannot check if a website visitor is 16 or older. Therefore, we encourage parents to monitor the online activities of their children, to prevent data about children being collected without parental consent. If you are convinced that we have collected personal data about a minor without this consent, please contact us by e-mailing email@example.com and we will remove this data.
Intellectual property rights
The contents of this site, including brands, logos, drawings, data, product and company names, texts, images, etc., are protected by intellectual rights and belong to Nuwhï or entitled third parties.
Information on the website
The information provided on and via this website may not be saved (other than as necessary to view the website), reproduced, modified, made public, distributed or send, sold or transferred in any other way, nor may any rights to this information be granted to third parties.
The information on the website is of a general nature. The information is not adapted to personal or specific circumstances and can therefore never be considered as personal, professional or legal advice to the user. The website may contain hyperlinks to third-party websites or pages or refer to them indirectly. The publication of links to these websites or pages in no way implies an implicit approval of their contents.
Nuwhï expressly declares that it has no control over the content or other characteristics of these websites and can under no circumstances be held liable for their contents or characteristics or any other form of damage resulting from their use.
General terms and conditions concerning data protection applicable to Nuwhï’s professional relations
Nuwhï and parties with which Nuwhï has professional relations (customers, suppliers, etc.) shall comply with all legal obligations, including the General Data Protection Regulation of the EU (EU 2016/679, hereinafter the ‘GDPR’), when processing personal data. Personal data is processed in a lawful, fair and transparent manner for a specific and explicit purpose. Data processing is limited to what is necessary with regard to professional performance and the period for which the personal data is stored is limited to what is necessary to fulfil the purposes of the processing. Personal data is properly secured using appropriate technical and organisational measures. Nuwhï, the customer, their employees, affiliated companies and their processors treat personal data in a confidential manner.
Nuwhï strives to provide appropriate administrative, physical and technical security measures to protect personal data against accidental or unlawful destruction, unintentional loss, fraud, unauthorised distribution and unauthorised access. The personal data will not be transferred outside the European Economic Area (EEA), unless sufficient guarantees are given in accordance with the GDPR.
The customer expressly authorises Nuwhï to appoint processors to carry out the processing activities that are the subject of this agreement. Nuwhï will conclude an agreement or other legal act with these processors that contains protective provisions which are at least equivalent to the provisions in this document. The customer can receive a list of active and systematic processors of the customer’s personal data on request. The customer will be informed if the processors which process the customer’s personal data are supplemented or substituted and may object to these processors within 7 days. If no objection is received within this period, Nuwhï will assume that the customer approves the engagement of these other processors. The customer accepts that the above concerns processors who actively and systematically process personal data and that no approval is required for providing incidental services, such as technical maintenance.
Nuwhï as controller
The parties declare that Nuwhï may process personal data as controller with a view to or in connection with: (i) the provision of its services, if applicable, (ii) applicable legal or regulatory prescriptions, (iii) requests and communications from competent authorities, (iv) administrative, financial or accounting purposes, risk analyses and customer relations, and (v) informing the customer and/or its representatives, employees and directors about the professional and social activities of Nuwhï and any other topic that might concern them, on the understanding that, if the customer and/or its representatives, employees and directors no longer wish to receive such information in the future, they can send a free request by e-mailing Nuwhï (info@nuwhï.be).
Nuwhï as processor
Nuwhï sometimes gains access to the customer’s personal data in the context of the services it provides on behalf of the customer. In these situations, the customer will act as ‘controller’ and Nuwhï will act as ‘processor’, as defined in the GDPR. Nuwhï will process this personal data according to the instructions of the customer and/or in accordance with the delivery of the services specified in the agreement between Nuwhï and the customer or as required by the law, regulatory authority or competent authority. In the latter case, Nuwhï will inform the customer in advance as far as possible, unless the relevant law, regulatory authority or competent authority prohibits this. The foregoing determines the subject and duration of the processing, the nature and purpose of the processing, the type of personal data and the categories of data subjects.
The customer accepts that it is the primary responsible for the processing of personal data. Nuwhï will, with due regard to the nature of the processing and the information available to it, assist the customer as far as possible in enforcing the obligations pursuant to articles 32 to 36 of the GDPR. The customer will reimburse all this assistance.
- Assistance regarding processing security (article 32 of the GDPR).
- Assistance in case of a personal data breach (articles 33 and 34 of the GDPR) – Nuwhï shall notify the customer without undue delay after becoming aware of a personal data breach.
- Assistance with a privacy impact assessment (articles 35 and 36 of the GDPR) – where a type of processing is likely to result in a high risk to the rights and freedoms of natural persons, the customer shall, prior to the processing, carry out an assessment of the impact of the envisaged processing operations on the protection of personal data in accordance with articles 35 and 36 of the GDPR.
Upon termination of this agreement, Nuwhï will, on the customer’s request, immediately return or destroy the personal data and/or existing copies, if this is reasonably possible. Nuwhï will confirm that it has done so (unless a relevant law or authority requires Nuwhï to retain a copy of the personal data). For clarity, nothing in this point obliges Nuwhï to destroy copies of data that it holds in its own name as controller.
Regardless of damage, Nuwhï’s total liability will in any case never exceed the total amount of costs paid by the customer. The liability of Nuwhï is in any case always limited to the direct damage caused by serious error or fraud.
Liability concerning use of the website
Neither can Nuwhï be held liable for direct or indirect damage resulting from the use of the information on this site. If you find inaccuracies in the information made available via the site, please contact the site administrator. The contents of the site (including links) may be adapted, modified or supplemented at any time, without announcement or notification. Nuwhï gives no guarantees that the website will work properly and can in no way be held liable for a malfunction or temporary (non-)availability of the website or any form of damage, direct or indirect, that might result from access to or use of the website. Nuwhï can under no circumstances be held liable against anyone, in direct or indirect, particular or other way, for damage resulting from the use of this site or any other, in particular as a result of links or hyperlinks, which includes, without limitation, all losses, work interruptions, damage to programs or other data on the computer system, equipment, software or other of the user.
Liability concerning data protection
The customer indemnifies Nuwhï against all costs, expenses (including legal fees), indemnities, losses (including business loss or loss of profits), debts, demands, claims, procedures, legal proceedings, etc. which Nuwhï could be the object of because of: (i) Nuwhï carrying out the customer’s instructions in connection with the processing of personal data (including instructions in connection with requests from persons exercising their rights under data protection legislation and instructions to retain, disclose, adapt or process personal data in other ways), or (ii) any violation by the customer of these conditions.
The liability of Nuwhï is always limited to the cases specifically provided for in the GDPR. Nuwhï is only liable for the damage caused by the processing if the obligations in the GDPR specifically addressed to processors are not complied with during processing or actions are carried out outside or in violation of the lawful instructions of the controller. The liability of Nuwhï is in all cases always limited to the direct damage and in the event of a serious error or fraud. The customer indemnifies Nuwhï at all times for all claims from third parties.
This privacy statement may be modified from time to time, taking into account aspects such as new laws and regulations or evolutions in this respect. These modifications take effect automatically after publication.
If one of the provisions above concerning the processing of personal data or any other provision is not valid, then all parties agree that this will be replaced by a provision that will approximate the underlying purpose of the provision concerned as much as possible.
To the exclusion of all others, the Belgian authorities (such as the Data Protection Authority) and the courts competent for the registered office have jurisdiction on any disputes and complaints that may arise with regard to this website or its use or regarding the processing of personal data or any other dispute.
Please contact Nuwhï (firstname.lastname@example.org) for any issue regarding conformity with applicable legislation, rights and obligations arising from the General Data Protection Regulation or the follow-up of any information security incident.bv