Privacy Policy Cultuur Netwerk Leuven (CNoL) on behalf of KU[N]ST Leuven vzw

General

1. This privacy policy (“Privacy Policy”) governs the processing of your personal data as part of your use of our Website (the “Website”) and the related services (collectively referred to as the “Services”). This processing is carried out by Cultuur Netwerk Leuven (CNoL) under KU[N]ST Leuven vzw as the data controller, located at Prof. Van Overstraetenplein 1, 3000 Leuven (“we”, “us”), registered in the Crossroads Bank for Enterprises under number 0848.195.912, in accordance with applicable data protection legislation.

2. By using our Website and/or our Services, you acknowledge that you have read this Privacy Policy carefully and that you agree to it without reservation. We reserve the right to modify the Privacy Policy regularly at our discretion. Such changes will be communicated through the Website.

3. By clicking the checkbox stating: "I declare that I have read and understood the Privacy Policy in full and that I agree to it without reservation. I give permission for my personal data to be processed as outlined in this Privacy Policy," you declare that you have indeed read this Privacy Policy and agree to it. You declare that you understand the purposes for which your personal data is processed. You also agree that your continued use is understood as continued consent.

4. Please note that we may use so-called 'cookies' or similar technologies as part of the Website and/or the Services. Cookies are small text files that are placed on the hard drive of a device and contain certain information, including sometimes personal data. For more information regarding our use of cookies, please read our cookie policy.

5. This Privacy Policy was last updated on 04/12/2024.

Why do we collect and process your personal data?

1. In principle, we obtain the personal data mentioned above directly from you. In addition to the aforementioned purposes, we may also process your personal data:

a) To provide you with information about products and services that you request in a personalized and efficient manner, whether via the Website, email, phone, or social media channels.

b) To process your personal data so that we can provide the Services.

c) For direct marketing purposes, i.e., to be able to provide you with targeted communication, promotions, offers, and other advertisements from us or our selected partners. For this, we will ask for your prior consent.

d) For carrying out statistical analyses to improve our Website and/or Services, or to develop new products or services.

e) To provide to a financial institution or payment service provider, to enable your financial institution and the payment service provider to meet their legal obligations.

f) To transfer to the police or judicial authorities as evidence of possible crimes or if there are reasonable grounds to suspect an unlawful act or crime committed by you through your registration with or use of the Website or the Services.

g) In the context of a potential merger with, acquisition by/from, or splitting by a third party, even if that third party is outside the EEA.

2. By using our Website and/or our Services, you acknowledge that you have read this Privacy Policy carefully and that you agree to it without reservation. We reserve the right to modify the Privacy Policy regularly at our discretion. Such changes will be communicated through the Website.

By ticking the checkbox stating: “I declare that I have fully read and understood the Privacy Policy and that I unreservedly agree with it. I consent to the processing of my personal data as set out in this Privacy Policy,” you declare that you have indeed read this Privacy Policy and that you agree with it. You declare that you understand the purposes for which your personal data is processed. You also agree that your continued use shall be understood as continued consent.

4. Please note that we may use so-called 'cookies' or similar technologies as part of the Website and/or the Services. Cookies are small text files that are placed on the hard drive of a device and contain certain information, including sometimes personal data. For more information regarding our use of cookies, please read our cookie policy.

5. This Privacy Policy was last updated on 04/12/2024.

Who we share your data with

1. The personal data you provide to us will not be shared with third parties, unless this is necessary for providing our Service and/or we have received your written consent via our form.

2. We may engage external processors to provide you with the Website and/or Services. We ensure that third-party processors may only process your personal data on our behalf, and based on our written instructions. We guarantee that all external processors are selected with the necessary care so that we can rely on the safety and integrity of your personal data.

Processing your data

1. The personal data you provide to us will not be shared with third parties, unless this is necessary for the provision of our Service and/or we have received your written consent through our form.

2. Your personal data will only be processed as long as necessary to achieve the purposes stated in this Privacy Policy or until the moment you withdraw your consent for its processing. Please note that withdrawing consent may imply that you are no longer able to use the Website and/or Services in whole or in part. If you have registered on our Website, we will delete your personal data if you delete your profile, unless a legal or regulatory obligation or a court or administrative order prevents us from doing so.

3. We will take appropriate technical and organizational measures to keep your personal data secure against unauthorized access or theft and against accidental loss, manipulation, or destruction. Access by our staff or staff of our external processors is only possible on a need-to-know basis and is subject to strict confidentiality obligations. However, you understand that the care for safety and security is only a best-efforts commitment, which can never be guaranteed.

4. For some Services, we rely on external processors of personal data. The following processors apply to KU[N]ST Leuven vzw:

a) Google LLC

b) Facebook (Facebook Inc.)

Both processors are certified for the EU-US Privacy Shield. Based on that, it is permissible under the GDPR to share personal data with countries outside the European Union.

Your rights

1. You have the right to request access to all personal data that we process about you. However, requests for access that are clearly made with the intent to cause annoyance or damage to us will not be processed.

2. You have the right to request that all personal data about you that is incorrect or inaccurate be corrected free of charge. If such a request is made, you must also include evidence with the request that the personal data for which correction is sought is incorrect.

3. You have the right to withdraw your previously given consent for the processing of your personal data. You can withdraw your consent at any time by sending an email to info@cnol.be.

4. You have the right to request that personal data concerning you be deleted if they are no longer necessary in light of the purposes set out in this Privacy Policy, or if you withdraw your consent for their processing. However, you should be aware that a request for deletion will be assessed by us in light of legal or regulatory obligations or administrative or judicial orders that may prevent us from deleting the relevant personal data.

5. Instead of deletion, you can also request that we limit the processing of your personal data if:

a) You dispute the accuracy of that data

b) The processing is unlawful

c) The data is no longer necessary for the stated purposes, but you need it
to defend yourself in legal proceedings

6. You have the right to object to the processing of personal data if you can demonstrate that there are serious and justified reasons related to specific circumstances that justify such an objection. However, if the intended processing is considered direct marketing, you have the right to object to such processing free of charge and without justification.

7. When your personal data is processed based on consent or based on a contract and the processing is carried out by automated means, you have the right to receive the personal data you provided to us in a structured, commonly used, and machine-readable format and, where technically feasible, you have the right to transmit this data directly to another service provider. The technical feasibility of this is assessed solely by us.

8. If you wish to submit a request to exercise one or more of the rights mentioned above, you can send an email to info@kunstleuven.be. This request must clearly state which right you wish to exercise and why. It must also be dated and signed, and accompanied by a digitally scanned copy of your valid identity card that proves your identity. We will promptly notify you of the receipt of such a request. If the application is found to be justified, we will comply with it as soon as reasonably possible and no later than thirty (30) days after receipt of the application.

9. If you have a complaint about the processing of your personal data by us, you can always contact us via the email address info@cnol.be. If you are not satisfied with our response, you are free to file a complaint with the competent data protection authority, the Belgian Privacy Commission. For more information, go to http://www.privacycommission.be.