Privacy statement

Dildiy asbl is committed to protecting your personal data (and that your privacy is respected).

In this privacy statement, we aim to provide clear and transparent information about (what data we collect) how we handle personal data. We make every effort to ensure your privacy and therefore handle personal data with care. Dildiy asbl adheres in all cases to the applicable laws and regulations, including the General Data Protection Regulation (Regulation EU 2016/679).

This entails that we will in any case:

Process your personal data in accordance with the purpose for which it was provided, these purposes and types of personal data are described in this privacy statement;
Limit processing of your personal data to only those data that are minimally necessary for the purposes for which they are processed;
Asking for your explicit consent if we need it for processing your personal data;
Have taken appropriate technical and organisational measures to ensure the security of your personal data;
Not pass on personal data to other parties unless this is necessary for carrying out the purposes for which they were provided;
Are aware of your rights regarding your personal data, wish to make you aware of them and respect them.

As Dildiy asbl, we are responsible for processing your personal data. If, after reading our privacy statement, or in a more general sense, you have questions about it or wish to contact us, you can do so using the contact details below:

Dildiy address: info@dildiy.org

To whom is this privacy notice addressed?

This privacy statement applies to all our current and former members, participants in activities, persons who show or showed interest in our activities.

What do we process what personal data for?

Your personal data are processed by Dildiy asbl for the following purposes and legal grounds:

Membership administration and member services (execution of agreement);
To be able to participate in the activities of Dildiy asbl(execution of agreement);
Participation in activities (access control, determination of rates, evaluation mailing before and/or after your visit, contact in case of programme change or cancellation);
Sending information about our activities, newsletters and invitations. (legitimate interest);
Obtaining government subsidies.

Insofar as the processing of personal data takes place on the basis of consent, you always have the right to withdraw the consent given.

For the above purposes, we may request and/or process the following personal data from you:

Personal identity data : name, first name, address;
Private contact details : telephone number, e-mail address;
Financial details: account number;
Presence;
Visual material (photos, videos, recordings, etc.).

We only collect personal data that you yourself communicate to us in various ways (e.g. registration forms, completion and contact forms on our website, personal / telephone / email contact, …). We do not collect personal data through third parties, with the exception of information received from affiliated associations / clubs or federations and the online tools Google Analytics and Google Search Console.

We use the collected data only for the purposes for which we obtained the data.

Whether or not you provide data yourself

The data listed must be provided, if applicable, in order to become a member or participate in activities of the association. With the exception of :

Visual material (for public relations);
Contact details (for direct marketing);
…

The consequence of not providing the data is not publishing targeted photos of you, and not receiving unsolicited commercial emails.

Provision of personal data to third parties – processors

For example, we use a third party (external service provider) for:

Storing and processing data in the Cloud (via a Cloud Service Provider);
Providing the internet environment (web hosting, mail hosting, etc.);
Taking care of IT infrastructure (including IT network, servers, …);
Insuring our members, participants and volunteers;
Measuring traffic on the website with Google Analytics and Google Search Console;
Providing (and distributing) newsletters and invitations.

We never pass on personal data to external service providers (processors) with whom we have not concluded a processing agreement (or the same provisions have been adopted in the contract terms).

With external service providers (processors), we naturally make the necessary agreements in this regard to ensure the security of your personal data.

Partners with whom we organise activities in collaboration (activities worked out with two or more organisations (including co-production), and for which participant lists are exchanged);
Government departments (including subsidising authorities, tax administrations, social security authorities, etc.).

Naturally, we make the necessary agreements with these parties to ensure the security of your personal data and that your data is treated confidentially.

Furthermore, we will not pass on the data you provide to other third parties unless required and permitted by law. An example of this is when the police request (personal) data from us in the context of an investigation. In such a case, we are obliged to cooperate and hand over this data.

At no time do we sell or rent your personal data to other third parties.

We also never pass on your contact details to third parties for commercial purposes.

We may, however, share personal data with other third parties if you give us permission to do so. You have the right to withdraw this consent at any time, without prejudice to the lawfulness of the processing before its withdrawal.

Retention period

Dildiy asbl retains personal data no longer than necessary to fulfil the purpose for which they were provided, taking into account the period necessary to comply with legal requirements (e.g. in the field of accounting). However, retention periods may vary according to purpose.

Dildiy asbl undertakes not to retain data for longer than a maximum of 3 years months after last use (or termination of cooperation).

Data security

We have taken appropriate technical and organisational measures to protect your personal data from unauthorised access, use, loss or disclosure (…breaches, loss and unlawful processing…).

For example, we have taken the following measures:

All persons who may learn of your data on behalf of Dildiy asbl are bound to secrecy;
We maintain a username and password policy on all our systems;
We pseudonymise and ensure the encryption of personal data if warranted;
We use a virus scanner and update it systematically and timely, and installed a ‘firewall’.

Your rights regarding your data

You have the right to access and copy personal data relating to you.

You have the right to rectification and completion if your data is incorrect or incomplete.

You have the right to data erasure (deletion) of the personal data received from you that is no longer strictly necessary for the purposes for which it was processed. However, we reserve the right to determine whether your request is justified.

You have the right to restriction of data processing: if you object to the processing of certain data, you can ask for this processing to stop.

You can also object (oppose) the way certain personal data of yours are processed. For example, you have the right to oppose the use of your personal data for direct marketing purposes (via unsubscribe options in e-mails).

You also have the right to have us transfer the data you provide to yourself or on your behalf directly to another party.

Via the address at the top of this privacy statement, you can contact us to exercise your rights, accompanied by a motivation for your request.

We may ask you to identify yourself before we can respond to the aforementioned requests, to prevent abuse we may ask you to provide adequate identification in doing so. To verify your identity, we ask you to attach a copy of the front of your identity card to your request. We strongly advise you to make your passport photo invisible when doing so and to add the fact that it is a copy.

No categories of individuals are subjected to any form of automated decision-making or profiling.

Complaints

Should you have a complaint about the processing of your personal data or about the exercise of your rights, we ask you to contact us directly about this.

You always have the right to lodge a complaint with the data protection supervisory authority :

Data Protection Authority (GBA)

Rue du Printing Press 35, 1000 Brussels

commission@privacycommission.be

Changes to our privacy statement

Dildiy asbl may amend its privacy statement at any time. We will make an announcement of such change on our website. Older versions of our privacy statement will be stored in our archives. Send us an e-mail if you wish to consult them.