De Cronos Groep NV values your privacy and responsible processing of your
personal data. We therefore commit to explaining in accessible language in this
privacy statement which personal data we collect from you, what we use it for
and what your rights are in this regard.
This version of this privacy statement (version: 4.0) dates from (01/12/2025).
1 Table of Contents
2 Who Are We?…………………………………………………………………. 2
3 Scope…………………………………………………………………………. 2
4 Why and How Do We Process Your Personal Data? ……………………….. 2
4.1 Use of our Website ……………………………………………………… 2
4.2 Contact via Website …………………………………………………….. 3
4.3 Customer Relationship Management (including prospecting for new
customers) ……………………………………………………………………… 3
4.4 Recruitment and Selection ……………………………………………… 4
4.5 Management of Supplier Relationships (including prospecting for new
suppliers) ……………………………………………………………………….. 6
5 Sharing Personal Data with Third Parties……………………………………. 6
6 Transfer of Personal Data Outside the EEA…………………………………. 7
7 How Long Do We Retain Your Personal Data?……………………………… 7
8 Automated Individual Decision-making …………………………………….. 8
9 What Are Your Rights and How Can You Exercise Them? …………………. 8
9.1 Right of Access: ………………………………………………………… 8
9.2 Right to Rectification: …………………………………………………… 9
9.3 Right to Restriction of Processing:……………………………………… 9
9.4 Right to Data Portability:………………………………………………… 9
9.5 Right to Object: …………………………………………………………10
9.6 Right to Erasure (Right to Be Forgotten):………………………………10
9.7 Right to Withdraw Your Consent:……………………………………….11
9.8 Right to Object to The Processing of Your Personal Data in Automated
Individual Decision-making: …………………………………………………..11
10 Who Can I Contact with Further Questions or Complaints About Privacy?
11
11 Changes to The Privacy Statement……………………………………….12
2 Who Are We?
“We”, “us” or “our” means De Cronos Groep NV, with registered office at 2550
Kontich, Veldkant 33A, and company number 0467.132.994.
If you have any questions, comments or complaints regarding this privacy
statement or the processing of your personal data, or if you wish to exercise one
of your rights, please contact us by e-mail at [email protected].
3 Scope
This privacy statement applies to this website, our direct marketing activities and
the general organisation of De Cronos Groep.
4 Why and How Do We Process Your Personal Data?
When you visit our website and/or are in contact with us, certain personal data
may be processed. Below you will find more information about the various
processing activities that may apply to you.
4.1 Use of our Website
When you visit our website, we may process personal data using online techniques
such as cookies, trackers, scripts and similar technologies (hereinafter referred
to as ‘cookies’). These may include (1) essential cookies that are strictly
necessary to send a message via an electronic communications network, to
ensure the security of our website or to store information about the provision of a
service you have expressly requested; (2) functional cookies that further shape
your use of our website; (3) analytical cookies to measure and analyse your use
of our website; (4) marketing cookies to deliver (personalised) advertisements to
you; and (5) other third-party cookies that we allow on our website.
More information about this can be found in our cookie statement.
4.2 Contact via Website
Consent – Contact forms are available on our website to get in touch with our
services. You can also reach us by e-mail or telephone. We process these
personal data to handle your contact request, but we have no view or control over
any other personal data you provide to us via the open fields. We request that you
do not provide any confidential or sensitive information here.
This processing is based on your consent. Please note that you can withdraw your
consent at any time. This withdrawal does not affect the lawfulness of the
processing that took place before withdrawing your consent.
– Which personal data do we process?
o Identification and contact details
o Other data that may be spontaneously provided in the contact form:
▪ Work-related details
▪ Personal details
▪ …
| – | How do we obtain these personal data? Directly from you when you complete our contact form |
– How long do we retain it?
Up to 1 year after handling the contact request, plus the archiving period
for related communications (such as emails)
– With whom can we share these personal data (other than affiliated and
associated companies)?
Processors (such as our hosting partner) that we use in the context of our
website, contact or relationship management
– Is automated individual decision-making used in these activities?
No
– Do these activities involve a transfer outside the EEA?
No
4.3 Customer Relationship Management (including prospecting for new customers)
Legitimate interest – De Cronos Groep NV is always looking for new customers,
actively establishing new contacts and building relationships with customers. In
this context, your personal data are processed (e.g. to invite you to other forms
of communication, an event, etc.).
This processing is based on the legitimate interest of De Cronos Groep NV. You
can always object to this in accordance with the conditions described under ‘right
to object’ in the section ‘What are your rights and how can you exercise them’.
– Which personal data do we process?
o Identification and contact details
o Other information that may have been discussed during further
contacts:
▪ Work-related details
▪ Leisure activities and interests
▪ Personal details
▪ …
| – | How do we obtain these personal data? Directly from you via customer relationship management |
| – | How long do we retain them? Up to 7 years after completion of a final assignment or contact |
– With whom can we share these personal data (other than affiliated and
associated companies)?
Processors (such as our CRM platform) that we use in connection with
our website, contact or customer relationship management
– Is automated individual decision-making used in these activities?
No
– Do these activities involve a transfer outside the EEA?
No
4.4 Recruitment and Selection
Consent for (unsolicited) applications and maintaining a recruitment reserve –
Legitimate interest for active recruitment –
When you submit a speculative application for a position at De Cronos Groep NV,
we process personal data relating to you for the purposes of recruitment and
selection for current or future vacancies. This processing, including the creation
and maintenance of a recruitment reserve, is based on your consent. You may
withdraw your consent at any time, without this affecting the lawfulness of the
processing carried out prior to the withdrawal.
When De Cronos Groep NV actively recruits, we process your personal data only
based on data that are publicly available about you (e.g. on platforms such as
LinkedIn and Google) or data that have been provided to us by third parties. This
processing is based on the legitimate interest of De Cronos Groep NV. You can
always object to this in accordance with the conditions described under ‘Right to
object’ in the section ‘What are your rights and how can you exercise them’.
Finally, we would like to emphasise that we rely on our legitimate interest when
sharing your personal data with our affiliated and associated companies in the
context of our recruitment process. We do so with a view to identifying a suitable
assignment for you. You may object to this processing at any time in accordance
with the conditions set out under “Right to Object” in the section “What Are Your
Rights and How Can You Exercise Them?”
– Which personal data do we process?
o Identification and contact details
o Other data as may be mentioned on your CV:
▪ Personal characteristics
▪ Social contacts
▪ Psychological data (e.g. a description of your personality or
character)
▪ Family composition
▪ Leisure activities and interests
▪ Academic curriculum
▪ Professional competence
▪ Professional experience
▪ Membership of/participation in professional organisations
▪ Current position
▪ Career
▪ Business information (cf. (partial) disability)
▪ Current salary
▪ Current fringe benefits
▪ National registration number
▪ …
– How do we obtain these personal data?
o (Speculative) application: directly from you when you apply
o Active recruitment: via third parties such as public platforms or
intermediaries
– How long do we retain them?
o For unsuccessful applicants: we retain the personal data relating to
your application for up to 1 year after your application.
o For applicants in our recruitment reserve: as long as consent is not
withdrawn and for up to 3 years after application.
– With whom can we share these personal data (other than affiliated and
associated companies)?
o Processors (such as recruitment agencies) that we use for
recruitment and selection
– Are automated individual decision-making processes used in these
activities?
No
– Do these activities involve a transfer outside the EEA?
No
4.5 Management of Supplier Relationships (including prospecting for new suppliers)
Legitimate interest – De Cronos Groep NV works with suppliers, actively
establishes new contacts for this purpose and builds relationships with current
suppliers. In this context, personal data of employees at our suppliers (e.g.
account managers) are processed.
This processing is based on the legitimate interest of De Cronos Groep NV. You
can always object to this in accordance with the conditions described under ‘Right
to Object’ in the section ‘What are Your Rights and How Can You Exercise Them’.
– Which personal data do we process?
o Identification and contact details
o Other data that may have been discussed during further contacts:
▪ Work-related data
▪ Leisure activities and interests
▪ Personal details
▪ …
| – | How do we obtain these personal data? Directly from you via customer relationship management |
| – | How long do we retain them? Up to 7 years after completion of a final assignment or contact |
– With whom can we share this personal data (other than affiliated and
associated companies)?
Processors (such as our CRM platform) that we use in the context of our
customer relationship management
– Is automated individual decision-making used in these activities?
No
– Do these activities involve a transfer outside the EEA?
No
5 Sharing Personal Data with Third Parties
When you visit our website or use our products and services as a customer, we
may engage third parties, such as partners, affiliated and associated companies,
and suppliers, with whom we may share your personal data. These third parties
help us to deliver, support and develop our products and services and to gain
insight into their use. They also provide services such as hosting, customer and
technical support, marketing, analysis, content delivery and/or online payment
processing.
In addition, we may also share data (including personal data) with third parties in
the context of a reorganisation, restructuring, merger, sale or other transfer of
business assets. We share the information you provide, automatically collected
information and information from others with these third parties to the extent
necessary to enable them to provide their services or support. For the activities
described above, we indicate for each activity with which categories of third
parties, other than affiliated and associated companies, we share your personal
data.
Furthermore, we may be required to provide access to your data or share your
data due to a legal obligation. This may be to authorities, government agencies
or other third parties.
Finally, we may share your data if this proves necessary in the context of your
vital interests.
6 Transfer of Personal Data Outside the EEA
De Cronos Groep NV always tries to limit the transfer of personal data to third
parties outside the European Economic Area (hereinafter: “EEA”).
If this does occur, we will ensure as soon as possible that this transfer is in line
with the GDPR (e.g. through the presence of an adequacy decision in the country
concerned or the implementation of an appropriate alternative, additional
measures where necessary, etc.).
For specific transfers, please refer to the section “Why and How Do We Process
Your Personal Data?”).
7 How Long Do We Retain Your Personal Data?
We do not retain your personal data for longer than is strictly necessary to fulfil
the purposes for which they were collected or as required by applicable legal
obligations. For the applicable retention periods, please refer to the section “Why
and How Do We Process Your Personal Data?”
8 Automated Individual Decision-making
European data protection legislation (GDPR/AVG) imposes certain conditions on
organisations when they make decisions about individuals based solely on fully
automated processing, including profiling, and when these decisions have legal
or other significant consequences. De Cronos Groep NV does not engage in this
type of decision-making.
9 What Are Your Rights and How Can You Exercise Them?
De Cronos Groep NV considers it important that you always retain control over the
processing of your personal data. Below you will find further information about
the various rights you have and may exercise in relation to the processing of your
personal data:
Depending on the processing and its legal basis, certain conditions or restrictions
may apply to the exercise of the rights listed below.
To exercise the above rights, or for information about them, please contact
[email protected] . We will subsequently provide you with more information if
certain conditions are attached to your request. We may also ask for additional
information to verify your identity so that your personal data are not wrongfully
deleted or shared with someone who is not entitled to it. We will endeavour to
respond without undue delay, but in any case, within one month of receiving your
request. If we are unable to respond within one month and wish to extend the
period, or if we do not comply with the request, we will notify you accordingly.
9.1 Right of Access:
Where we process your personal data, you have the right to access such data,
as well as certain additional information as described in this Privacy Statement.
You are entitled to receive a copy of the personal data we hold about you,
provided that this does not adversely affect the rights and freedoms of others.
The first copy will be provided free of charge; however, in the event of repeated
or manifestly unfounded requests, we reserve the right to charge a reasonable
fee.
9.2 Right to Rectification:
If the personal data we hold about you is inaccurate or incomplete, you have the
right to have this information corrected or, depending on the purposes of the
processing, completed.
9.3 Right to Restriction of Processing:
You have the right to have the processing of your personal data restricted. This
means that the personal data may only be stored by us and used for limited
purposes. This right applies if one of the following situations arises:
– You contest the accuracy of the personal data, for a period enabling us to
verify their accuracy;
– The processing is unlawful, but you oppose the erasure of the personal
data and request the restriction of its use instead;
– We no longer require your personal data for the processing purposes
described above, but you need it for the establishment, exercise or defence
of legal claims; or,
– You have objected to processing and asked us to restrict processing
pending the answer to the question of whether our interests outweigh
yours.
In addition to our right to store your personal data, we may still process them, but
only:
– With your consent;
– For the establishment, exercise or defence of legal claims;
– To protect the rights of another natural or legal person; or
– For reasons of public interest.
Before we lift the restriction on the processing of your personal data, we will inform
you accordingly.
9.4 Right to Data Portability:
If the processing of your personal data is based on your consent and is carried
out by automated processes, you have the right to receive a copy of your personal
data in a structured, commonly used and machine-readable format. You also
have the right to have your personal data delivered directly by us to a third party,
if this is technically possible. This right does not apply if it would adversely affect
the rights and freedoms of others.
9.5 Right to Object:
You have the right to object to the processing of your personal data in the activities
described above. In the latter case, this is only possible if the activity is related to
(1) the performance of a task carried out in the public interest or in the exercise
of official authority vested in us or (2) the pursuit of our legitimate interests or
those of a third party.
If you object to the processing of your personal data, we will no longer process
them unless we can demonstrate compelling legitimate grounds for the
processing that override your interests, fundamental rights and freedoms.
When your personal data is processed for direct marketing purposes, regardless
of whether it is initial or further processing, you have the right to object to this
processing at any time and free of charge, including in the case of profiling insofar
as it relates to direct marketing. If you object, we will stop processing your
personal data for this purpose.
9.6 Right to Erasure (Right to Be Forgotten):
You have the right to request us to erase your personal data. This means that we
must delete the personal data without undue delay. This right applies if one of the
following situations arises:
– The personal data are no longer necessary for the purposes for which they
were collected or otherwise processed;
– You withdraw your consent on which the processing is based, and there is
no other legal basis for the processing of your personal data;
– Your personal data have been processed unlawfully;
– Erasure of your personal data is required to comply with European or
Belgian law;
If you request us to erase your personal data, we will erase them unless one of
the following situations (exceptions) applies:
– The processing is part of exercising the right to freedom of expression and
information;
– Erasure is not possible for reasons of public interest in the field of public
health;
– The erasure is not possible due to the need for archiving in the public
interest or for statistical purposes;
– There is a legal obligation to retain the data; or,
– Erasure is not possible due to the establishment, exercise or defence of
legal claims.
9.7 Right to Withdraw Your Consent:
If you have given your consent for certain processing of your personal data, you
can withdraw it at any time. We try to make withdrawing your consent as easy as
possible and, as far as possible, as easy as giving your consent.
9.8 Right to Object to The Processing of Your Personal Data in Automated Individual Decision-making:
If your personal data are used in the context of automated individual decisionmaking and if these decisions have legal or other significant consequences, you
can request us to stop using your data. If you object to this processing, we will
stop or restrict the processing unless there are compelling reasons to continue.
10Who Can I Contact with Further Questions or Complaints About Privacy?
If, after reading this privacy statement, you have any further questions or
comments regarding the collection and processing of your personal data, you
can always contact us at the following e-mail address: [email protected].
In addition, you have the right to submit any comments or complaints to the
supervisory authority responsible for data protection. You can do this in the EU
Member State where you reside, where you work or where the alleged infringement
took place. In Belgium, you can lodge a complaint with the Data Protection
Authority:
Gegevensbeschermingsautoriteit (Data Protection Authority)
Drukpersstraat 35, 1000 Brussels
+32 (0)2 274 48 00
www.gegevensbeschermingsautoriteit.be/burger/acties/klacht-indienen
www.gegevensbeschermingsautoriteit.be
Because we value our mutual relationship, we ask that you contact us first so that
we may seek to resolve the matter forming the basis of your complaint.
11Changes to The Privacy Statement
Our organisation, and therefore also our website, is a dynamic and innovative
environment. This Privacy Statement may be amended if our services or
applicable legislation require it. This means that we are constantly looking for
ways to improve our services and tailor them to your needs. New applications
may be introduced that require us to collect or process your personal data in a
different way. We will, of course, inform you of any significant changes to this
privacy statement and will ask for your consent if necessary.