I. WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?
The EPI Company (the European Payments Initiative Company) is the controller for the processing of your personal data. The EP Company is a societas Europaea under Belgian law, whose registered office is located at Havenlaan 2, 1080 Sint-Jans-Molenbeek and which is registered in the Crossroads Bank of Enterprises under number 0755.811.726 (“EPI Company”, “our” or “we”).
II. WHAT DATA DO WE PROCESS?
We process directly identifying data about you, such as your name, address, telephone number, etc., if you provide us with such data, for example when submitting information to us (e.g. via a tender) or when you contact us directly by e-mail or telephone with a specific question. We also process certain non-directly identifying data when you visit our website, such as your IP address.
III. WHY DO WE PROCESS YOUR DATA?
The EPI Company processes personal data for the purpose of assessing information and proposals and negotiating and awarding contracts as described on our website.
Personal data can be supplied by candidates in a response to a request for information (RFI) or a request for proposals (RFP) on our website. Personal data that may be communicated in this context include, but is not limited to:
Candidates that submit personal data of natural persons (e.g. of employees) ensure that they have adequately informed these persons about the processing of their personal data by EPI Company and that this personal data were obtained in a lawful manner.
The processing of personal data by the EPI Company is necessary for the legitimate interest of EPI Company to obtain information about potential candidates, to identify the candidates offering the most economically advantageous offer and to enter into agreements with candidates following requests for information (RFIs) or requests for proposals (RFPs).
If you ask a question to us by telephone, via the contact form on the website or by e-mail, we will process your personal data in order to answer that question.
For this reason, we can process data such as your name, your contact information, your correspondence with the EPI Company, and any other personal data you provide that may be relevant to answering your question.
The processing of these data is based on the legitimate interest of the EPI Company in order to be able to answer questions.
We process personal data obtained when you visit our website for the technical and functional management of our website. By using your data, we can make sure that our website is properly functioning when you visit it.
For this purpose, we can process data such as your IP address.
The processing of these data is based on the legitimate interest of EPI Company in providing a well-functioning website.
IV. WHO HAS ACCESS TO YOUR PERSONAL DATA?
The EPI Company engages third parties to perform certain (processing) activities, such as hosting the website.
The EPI Company takes appropriate organisational and technical measures, taking into account the state of the art, the nature of processing and the potential risks, to protect your personal data in the best way possible from destruction, loss, modification or any other unauthorised processing.
The EPI Company does not store your personal data longer than necessary for the purposes for which they are processed, taking into account legal retention obligations.
The EPI Company does not process your personal data outside the European Economic Area (EEA).
VII. HOW CAN YOU EXERCISE YOUR RIGHTS?
You have the right to request free of charge access to the personal data processed by the EPI Company, to request the correction or removal of your data or to request a restriction of the processing. You may also request the portability of your data and you may object, substantiated, to the processing of your personal data.
When the processing of your personal data is based on your consent, you may withdraw your consent at any time. Withdrawal of your consent does not affect the lawfulness of the processing based on consent before the withdrawal.
You can direct your dated and signed request based on the above rights to email@example.com or by mail to the above address. The EPI Company cannot handle your request without proof of your identity. Please note that the applicable legislation may impose conditions on exercising the above rights.
You also have the right to file a complaint with the supervisory authority, which is the Data Protection Authority (“Gegevensbeschermingsautoriteit” / “Autorité de protection des données”). It can be reached by mail at Rue de la Presse 35, 1000 Brussels, and by e-mail at the following e-mail address: firstname.lastname@example.org.