Privacy

1. Parties and Purpose

DentalFLUX “DentalFLUX” or the “Data Controller”
Email: marketing@dentalflux.be
Telephone: +32 (0)2 319 58 27

Regulated profession: non-profit association (ASBL)

DentalFLUX has established this Privacy Policy, the purpose of which is to transparently inform Users of the website hosted at the following address: www.dentalflux.be, about how personal data are collected and processed by DentalFLUX.

The term “User” refers to any user, i.e., any natural or legal person who visits or interacts in any way with the Site.

In this capacity, DentalFLUX determines all technical, legal, and organizational means and purposes for processing Users’ personal data. To this end, DentalFLUX undertakes to take all necessary measures to ensure that personal data are processed in accordance with the Law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data and the European Regulation of 26 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

DentalFLUX is free to choose any natural or legal person to process users’ personal data on its request and on its behalf. Where applicable, DentalFLUX undertakes to select a Processor offering sufficient guarantees regarding the technical and organizational security measures for processing personal data, in accordance with the Law and the Regulation.

2. Processing of personal data

Use of the Site by Users may result in the communication of personal data. The processing of these data by DentalFLUX, in its capacity as Data Controller, or by service providers acting in the name and on behalf of DentalFLUX, will comply with the Law and the Regulation.

Personal data will be processed by DentalFLUX, in accordance with the purposes listed below, via the registration form, the newsletter, cookies, and the sending of surveys or questionnaires.

3. Purpose of processing personal data

In accordance with Article 13 of the Regulation, the purposes of processing personal data are communicated to the User and are as follows:

1. ensure the performance of the services offered and agreed on the site
2. ensure monitoring of the performance of the services offered
3. respond to the user’s questions
4. improve the quality of the site and the products offered by the data controller
5. enable better identification of the user’s interests

4. Personal data that may be processed

When visiting and using the Site, the User consents to DentalFLUX collecting and processing, in accordance with the terms and principles described in this Privacy Policy, the following personal data:

1. Users’ information when completing forms or contacting us by telephone, email address, or users’ phone number
   a) With regard to each visit by users to the site, the information automatically collected is the IP address, browser type and model, time zone, and operating system.
   b) All information about the pages the user viewed on the site, including the URL, browsing time, etc.
2. Consent. By accessing and using the Site, the User declares that they have read and freely, specifically, informedly, and unambiguously consented to the processing of their personal data. This consent relates to the content of this Privacy Policy.
   Consent is given by the positive act whereby the User ticks the box referring to the Privacy Policy via a hyperlink. This consent is an essential condition for carrying out certain operations on the Site or for enabling the User to enter into a contractual relationship with DentalFLUX. Any contract between DentalFLUX and a User relating to the services and goods offered on the Site is subject to the User’s acceptance of the Privacy Policy.
   The User consents to the Data Controller processing and collecting, in accordance with the terms and principles set out in this Privacy Policy, their personal data that they communicate on the Site or in connection with the services offered by DentalFLUX, for the purposes indicated above.
   The User has the right to withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent previously given.

5. Retention period for Users’ personal data

In accordance with Article 13(2) of the Regulation and the Law, the Data Controller retains personal data only for the time reasonably necessary to achieve the purposes for which they are processed.

In any event, this period is less than: 6 months.

6. Data recipients and disclosure to third parties

Personal data may be transmitted to agents, employees, subcontractors, or suppliers of DentalFLUX who provide adequate data security guarantees and who collaborate with DentalFLUX in the context of marketing products or providing services. They act under the direct authority of DentalFLUX and are, in particular, responsible for collecting, processing, or subcontracting these data.

In all cases, the recipients of the data and those to whom these data have been disclosed comply with the content of this Privacy Policy. DentalFLUX ensures that they will process these data only for the intended purposes, discreetly and securely.

If the data are disclosed to third parties for direct marketing or prospecting purposes, the User will be informed in advance so that they can give their consent to the use of these personal data.

7. Data Protection Officer (DPO)

The following person is appointed as Data Protection Officer (hereinafter “DPO“): Raquel Galvão

The role of the DPO is to ensure the proper implementation of national and supranational provisions regarding the collection and processing of personal data.

The DPO can be contacted as follows:
marketing@dentalflux.be
+32 (0)2 319 58 27

8. Users’ rights

At any time, the User may exercise their rights by sending an email to the following address: marketing@dentalflux.be, or a letter by post, enclosing a copy of their identity card, to the following address: Brussels

1. Right of access

In accordance with Article 15 of the Regulation, DentalFLUX guarantees the User the right of access to their personal data. The User has the right to obtain access to said personal data as well as the following information:

• the purposes of the processing;
• the categories of personal data concerned;
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients established in third countries or international organizations;
• where possible, the envisaged period for which the personal data will be stored or, if not possible, the criteria used to determine that period;
• the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the Regulation and, at least in such cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject

The Data Controller may require payment of reasonable fees based on administrative costs for any additional copy requested by the User.

Where the User submits this request electronically (via email address, for example), the information is provided in a commonly used electronic form, unless the User requests otherwise.

A copy of their data will be provided to the User no later than one month after receipt of the request.

2. Right to rectification

DentalFLUX guarantees the user the right to rectification and erasure of personal data.

In accordance with Article 16 of the Regulation, incorrect, inaccurate, or irrelevant data may be corrected or erased at any time. The User first makes the necessary changes themselves via their user account/other, unless these cannot be made independently, in which case the request may be made to DentalFLUX.

In accordance with Article 19 of the Regulation, the Data Controller notifies each recipient to whom the personal data have been disclosed of any rectification of personal data, unless such communication proves impossible or involves disproportionate effort. The data controller provides the data subject with information about those recipients if the data subject requests it.

3. Right to erasure

The User has the right to obtain the erasure of their personal data without undue delay in the cases listed in Article 17 of the Regulation.

Where the Data Controller has made the personal data public and is obliged to erase them pursuant to the previous paragraph, the data controller, taking account of available technology and the cost of implementation, takes reasonable measures, including technical measures, to inform other data controllers processing the personal data that the data subject has requested the erasure by such data controllers of any links to, or copy or replication of, those personal data.

The two preceding paragraphs do not apply to the extent that processing is necessary:

• for exercising the right of freedom of expression and information;
• for compliance with a legal obligation requiring processing under Union law or the law of the Member State to which the data controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
• for the establishment, exercise, or defence of legal claims.

In accordance with Article 19 of the Regulation, the Data Controller notifies each recipient to whom the personal data have been disclosed of any erasure of personal data or restriction of processing carried out, unless such communication proves impossible or involves disproportionate effort. The data controller provides the data subject with information about those recipients if the data subject requests it.

4. Right to restriction of processing

The User has the right to obtain restriction of the processing of their personal data in the cases listed in Article 19 of the Regulation.

In accordance with Article 19 of the Regulation, the Data Controller notifies each recipient to whom the personal data have been disclosed of any restriction of processing carried out, unless such communication proves impossible or involves disproportionate effort. The data controller provides the data subject with information about those recipients if the data subject requests it.

5. Right to data portability

In accordance with Article 20 of the Regulation, Users have the right to receive from DentalFLUX the personal data concerning them in a structured, commonly used, and machine-readable format. Users have the right to transmit those data to another data controller without hindrance from DentalFLUX in the cases provided for by the Regulation.

Where the User exercises their right to data portability pursuant to the previous paragraph, they have the right to have the personal data transmitted directly from one data controller to another, where technically feasible.

The exercise of the right to data portability is without prejudice to the right to erasure. This right does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.

The right to data portability does not adversely affect the rights and freedoms of third parties.

6. Right to object and automated individual decision-making

The User has the right at any time to object to the processing of their personal data due to their particular situation, including automated processing carried out by DentalFLUX. In accordance with Article 21 of the Regulation, DentalFLUX will no longer process the personal data unless there are compelling legitimate grounds for the processing that override the interests and rights and freedoms of the User, or for the establishment, exercise, or defence of legal claims.

Where personal data are processed for prospecting purposes, the User has the right to object at any time to the processing of personal data concerning them for such prospecting purposes, including profiling to the extent that it is related to such prospecting.

Where the data subject objects to processing for prospecting purposes, the personal data are no longer processed for such purposes.

7. Right to lodge a complaint

The User has the right to lodge a complaint regarding the processing of their personal data by DentalFLUX with the Data Protection Authority, competent for Belgian territory. Further information can be found on the website: https://www.autoriteprotectiondonnees.be.

A complaint may be submitted to the following addresses:

Data Protection Authority
Rue de la Presse 35, 1000 Brussels
Tel. +32 2 274 48 00
Fax. +32 2 274 48 35
E-mail: contact@apd-gba.be

The User may also lodge a complaint with the court of first instance of their place of residence.

9. Limitation of liability of the Data Controller

The website may contain links to other websites owned by third parties not affiliated with DentalFLUX. The content of these sites and their compliance with the Law and the Regulation are not the responsibility of DentalFLUX.

The holder of parental authority must give express consent for a minor under the age of 16 to disclose information or personal data on the website. DentalFLUX strongly advises persons exercising parental authority over minors to promote responsible and secure use of the Internet. The Data Controller cannot be held liable for having collected and processed information and personal data of minors under the age of 16 whose consent is not effectively covered by that of their legal parents, or for incorrect data—particularly regarding age—entered by minors. Under no circumstances will personal data be processed by the Data Controller if the User states that they are under 16 years of age.

DentalFLUX is not responsible for the loss, corruption, or theft of personal data caused, in particular, by the presence of viruses or following cyberattacks.

10. Security

The Data Controller implements organizational and technical measures to ensure an appropriate level of security for the processing and collection of data. These security measures depend on the implementation costs in view of the nature, context, and purposes of processing personal data.

The Data Controller uses standard encryption technologies within the IT sector when transferring or collecting data on the Site.

11. Changes to the Privacy Policy

DentalFLUX reserves the right to amend this Privacy Policy in order to comply with legal obligations in this area. Users are therefore invited to consult the Privacy Policy regularly to become aware of any changes and updates. Any such change will be posted on the Site or sent by email for enforceability purposes.

12. Applicable law and competent jurisdiction

This Privacy Policy is exclusively governed by Belgian law. Any dispute will be brought before the courts of the judicial district of the registered office of DentalFLUX.

13. Photography

We have received the authorizations to use the images. Copyright has been assigned to the non-profit association (ASBL).
The right to one’s image derives from legislation on the protection of privacy and Article XI.174 of the Code of Economic Law.

The photographs used on this site were taken by Adèle Mattijs (www.adelemattijs.com) and Anthony Waarden.

14. Contact

For any questions or complaints relating to this Privacy Policy, the User may contact the Data Controller at the following address: marketing@dentalflux.be