In this Privacy statement, the following is understood under the terms listed below:
- ‘Vlerick’: Vlerick Business School, a public utility foundation with registered headquarters at Reep 1, B-9000 Ghent (Belgium) and the company registration number 0424.244.049 (Trade Registry in Gent).
- 'User’, ‘you’ or ‘your': Every natural person (B2C) or legal entity (B2B) that enters or has entered into a contractual relationship with Vlerick via its online platform.
- 'Programmes': The subject of one or more (electronic) contracts, either by means of a simple registration or through a login and registration procedure.
- ‘Privacy Act’: The law of December 1992 on the protection of privacy, with regard to the processing of personal information.
1. For what purposes will my information be used?
Vlerick attaches great importance to the protection of your privacy and your personal information. Vlerick will use or process your information exclusively in conformity with the Privacy Act and any other relevant legal regulations in force.
Vlerick collects or processes personal information with the primary objective of guaranteeing a smooth technical running of its portal. We may use your personal data also for providing you with information about the activities of Vlerick (such as new short or long term Programmes, workshops, seminars, changes in existing courses and conferences), events organized by Vlerick and her corporate partners, open positions, invoicing purposes, assessing whether Users meet the admission criteria of a Programme, et cetera. These (personal) data are stored in a secure and encrypted environment (database). The availability to your data can be transferred to third parties or partners for information or publicity purposes. In this event, e-mail addresses or other available (personal) data are never transferred to the third party. The third party can in such a case choose to spread a specific (advertising) message via the contact list of Vlerick. You can change these standard settings yourself at any time on ‘MyVlerick’ (see Item 3 below). Vlerick has undertaken all possible legal and technical precautions for preventing unauthorized access and use. We therefore assume no liability in any instance for cases of identity theft, data theft or computer crime. In the event that our computer systems are hacked, we will immediately take all possible measures to keep damages and/or theft to a minimum.
2. What is MyVlerick?
MyVlerick is an online user's portal, which is available from the Vlerick website. MyVlerick offers you the possibility of managing your profile, personal data, interests and (communication) preferences. MyVlerick requires an advance registration, during which you will be asked to provide personal data, such as your name, first name, e-mail address, term of address and preferred language. This information is necessary for guaranteeing the good operation of the portal, and it is collected in conformity with the Privacy Act. Below we will explain as to what this processing consists of, who is responsible for the processing and who the actual processor is, how you yourself can handle your information and how Vlerick can help you with this.
Privacy is a crucial concept for Vlerick. That is why we find it so important to inform you as comprehensively as possible. This Privacy statement therefore waives any responsibility by Vlerick, for the provision of further information in this regard on documents, online websites or campaign sites etc. When using this website, your attention will be brought to the ‘Legal notice’ of which this Privacy statement is an integral part.
3. What personal information is collected?
As for the application of the Privacy Act, any information concerning an identifiable natural person is understood to be part of such 'personal information'. A person will be viewed as identifiable if he/she can be directly (or indirectly) identified on the basis of an identification number, or any element that is characteristic for his/her physical, physiological, psychological, economic, cultural or social identity.
Every person has the right to the protection of his/her fundamental rights and liberties, and in particular to the protection of his/her privacy. Vlerick recognizes this right and makes great efforts to implement this online in a practical way. Privacy legislation is only applicable to an (entirely or partially) automated processing of the personal information, or, in the event of manual processing, whenever the personal information is written to a file.
The personal information must be properly and legally processed for specifically defined and legitimate purposes, and it must be sufficiently relevant and not excessive for the purpose, while being precise so as to make the identification of the involved person possible.
Vlerick fulfills the above mentioned requirements. Processing occurs for information-oriented and technical purposes. The intended purposes are expressly described under Item 2 above. The information is sufficient (name, first name, e-mail address, form of address and preferred language) and is not excessive.
4. Who is responsible for the processing?
Under 'person/entity responsible for processing' is understood the natural person or legal entity who or which on his/her or its own determines the goal and the resources used for the processing of personal information.
Vlerick acts as the responsible entity for such processing. We define the goal (see Item 2 above) and the legal and technical resources for processing. However, we do not carry out this processing ourselves; this is done by the actual processor.
5. Who is the actual processor?
Under 'processor' is understood the natural personal or legal entity that processes the personal information at the request and on the order of the 'person/entity responsible for processing', under exclusion of those persons who, under the direct authority of the person/entity responsible for processing, are empowered to process the information.
The following is stated to be the actual processor: Orbit One BVBA, with registered headquarters at Raas van Gaverestraat 83, B-9000 Ghent (Belgium) and the company number 0456.457.353 (Trade Registry in Ghent). The actual processor is responsible for the (at technical level) smooth running of the online portal, such as MyVlerick (see Item 3 above). The entity/person responsible for processing does not assume any liability for the loss or corruption of data, theft of identity, theft of information, viruses or Trojans, SQL injections and other attacks on the computer systems or online cloud portals. The actual processor decides autonomously over the technically most suitable application for processing the information, and this on the basis of its professional expertise. The person/entity responsible for the processing cannot be expected to dispose over the same technical expertise.
This processor provides sufficient guarantees for the technical and organizational security measures regarding the processing that must be carried out, and therefore fulfills the provisions of Article 16, §1 of the Privacy Act.
6. What are my rights?
The person/entity responsible for processing, and/or the actual processor, must provide the User at least with the following information, at the latest at the point in time that the information is collected:
- Name and address of the person/entity responsible for processing: See Items 1 and 5 above.
- Objectives of the processing: See Item 2 above.
- The existence of the right, on request and free of charge, to object against the processing of the corresponding personal information if such processing is carried out with the objective of direct marketing:
Vlerick collects and processes personal information with the primary objective of guaranteeing a smooth technical running of its portal. After all, the User is unable to consult the private portal 'MyVlerick' without advance registration. Registrations or subscriptions for Programmes also cannot be carried out without the advance submission of a filled in contact or appropriate registration form. The collected data can be used for marketing purposes whenever the technical and practical part has been fulfilled; however the User at all times has the right to manage this himself via 'MyVlerick'. Consequently Vlerick fulfills the above mentioned requirements.
- Other, additional information, namely: the existence of the right to access and to modify the personal information that is directly connected to the User:
You have at all times the legal right to partially or entirely supplement your personal information, to correct it or to delete it. Vlerick commits itself to fulfill your requests within a period of 15 working days. Such a request can also be made by mail (a letter addressed to Vlerick Business School, Data Knowledge Centre, Reep 1, B-9000 Gent) or by e-mail at firstname.lastname@example.org. You can, of course, at all times supplement or correct your personal data via 'My Vlerick'.
On simple request and on proof of identity, you have the right to receive the necessary information regarding the processing of your personal information.
7. Will my information be used outside of the EU?
Vlerick is active around the globe. This implies that data processing and transfers may be made to countries outside of the European Union. Under Article 21 of the Privacy Act, personal information may only be transmitted to countries that guarantee the same and an appropriate protection level, and where the same or equivalent privacy regulations are observed. The country, the duration of the transfer and storage, the type of information and the precise objectives are criteria that must be investigated in each case.
Vlerick guarantees that no data processing or storage will be initiated in countries that cannot offer the same guarantees, with the exception of the following:
- When express agreement has been given by the involved person;
- When the transmission is necessary for the implementation of a contract (between the User and Vlerick);
- When the transmission is necessary for the conclusion or implementation of a contract, which is to be/has been concluded in the interests of the User between that person/entity responsible for the processing and third parties;
- Whenever the transmission is necessary or legally mandatory (for an important general interest or right);
- Whenever the transmission is carried out from a public register, which is intended for informing the public.
8. Will cookies be used?
During a visit to the Vlerick websites, some data is collected for statistical purposes. These data include: The IP address, the assumed place of consultation, the hour and the day of consultation, the webpages that were visited. Whenever you visit the Vlerick website, you declare that you agree with the collection of this data, which is intended for statistical purposes as described above.