PAGS Privacy policy

1. Who are we?

1. We are PAGS BV, a company incorporated under Belgian law, having its registered office at Researchdreef 10, 1070 Anderlecht, Belgium (“PAGS”, “us”, “we” or “our”) and registered with the Crossroads Bank for Enterprises (Kruispuntbank van Ondernemingen or KBO) under enterprise number 0761.801.376.
2. PAGS is the psychosocial analysis tool of choice to achieve efficient communication, interaction and analysis (“Services”), while ensuring that the ultimate management of the application remains with the customer, as described on our website (https://nl.pagsprofile.com).
3. We value your right to privacy and make every effort to protect your personal data in accordance with applicable data protection law, including the General Data Protection Regulation (EU) 2016/679 ("GDPR") and national implementing legislation. In this Privacy Policy, we explain what personal data we collect from you, for what purposes we will process this data, on what legal basis we base this processing, to whom your personal data may be transferred, how long we keep your data, how we protect your data and what rights you have in relation to the processing of your personal data.
4. All concepts not explicitly defined in this Privacy Policy, have the same meaning as in our Terms and Conditions and/or the GDPR.

2. From whom do we collect data?

1. In the course of our business, we may collect Personal Data from customers, users of the Services, prospects, visitors to our website, persons who provide their business card or otherwise their contact details to us, and persons who contact us by e-mail or otherwise.

3. Which personal data do we process?

1. By using our website or our Services, we collect and process your data. Some aspects of these data can be qualified as personal data.  We process the following categories of personal data:
2. ~personal data that you enter yourself on the website;

1. ~personal data entered by customers and users of PAGS;

1. ~personal data collected by PAGS when browsing the website: for example, through the use of cookies.

1. PAGS may process the following personal data in accordance with the provisions of this Privacy Policy.

1. ~administrative data (e.g. name, address, e-mail address, phone number, login credentials, etc.);

1. ~medical data (limited to disabilities and notes);

1. ~behavioural data (knowledge, performance, skill data in behavioral field);

1. ~cognitive data (knowledge, performance, skill data in the cognitive field);

1. ~development progression metrics;

1. ~data on how the Service is accessed and used (e.g. IP address, browser type, browser version, the pages of our Service that you visit, the time and data of your visit the time spent on those pages, unique device identifiers and other diagnostic data) (“Usage Data”).

4. For which purposes do we process your personal data?

1. We may use the aforementioned personal data for the following purposes:
2. ~to provide and maintain our Service;

1. ~(1) To notify you about changes to our Service;

1. ~(2) To allow you to participate in interactive features of our Service when you choose to do so;

1. ~(3) To provide customer support;

1. ~(4) To gather analysis or valuable information so that we can improve our Service;

1. ~(5) To monitor the usage of our Service;

1. ~(6) To detect, prevent and address technical issues.

1. For your complete information, please find below the legal grounds relevant to these processing operations:
2. ~the processing of personal data for (1), (2), (3), (4), (5) and (6) is based on the explicit consent of the data subject (art. 9.2 a GDPR);

1. ~in addition, the processing of (1), (2), (3) and (4) is based on the necessity for the performance of the contract we concluded with the data subject (art. 6.1 b GDPR). This legal ground is only applicable insofar as no special category of personal data is involved.

5. For which purposes do we process your personal data?

1. We may disclose your personal data to third parties. These third parties have access to your personal data only to perform tasks on our behalf and are obligated not to disclose or use it for any other purpose. We may disclose your personal data to the following parties:
2. ~third parties who provide services to us or who provide services in our name on our behalf such as IT service providers, payment service providers, PR service providers, consultants,…;

1. ~governmental bodies such as police and judicial authorities if PAGS is required to do so by law or in response to valid requests.

1. ~in the context of a merger, acquisition or asset sale, your personal data may be shared. We will provide notice before your personal data is shared, and you will be subject to another Privacy Policy.

1. ~employees, representatives, shareholders, (sub)contractors, affiliated companies, external advisors or consultants of PAGS.

1. When transferring personal data to third parties, we always ensure that we implement appropriate technical and organisational protection measures. Where necessary, we will, for example, conclude a transfer agreement or a processor agreement, which sets out restrictions on the use of your personal data and obligations in respect of the security of your personal data.
2. Your personal data will not be lent or sold to third parties for marketing purposes without your prior express consent.
3. To the extent that your data is transferred in the context of this article to countries outside the European Union which do not provide an adequate level of protection for your data, PAGS will ensure that the companies to which your data is transferred do provide an adequate level of protection. In particular, we can conclude Standard Contractual Clauses (SCC) with those companies, when necessary. PAGS guarantees to always verify, on a case-by-case basis, whether an adequate level of protection is in place for transfers to third countries. Our servers are located in the Netherlands.

6. How long do we store your personal data?

1. We do not keep your personal data longer than necessary for the purposes for which it is collected and processed (as described above).
2. For the purposes of providing services to our customers, we will retain it for as long as necessary to fulfil the purposes set out above, unless a longer retention period is (i) necessary to cover our liability or (ii) required or permitted by law.
3. PAGS will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or when we are legally obligated to retain this data for longer periods.
4. All personal data purely for the purpose of scientific research or statistical purposes may be stored for longer periods.
5. Regarding the data of visitors to our website, we refer to our Cookie Policy.

7. How do we secure your personal data?

1. We take appropriate technical and organisational measures to ensure a level of security appropriate to the specific risks we have identified.
2. We thus protect your personal data as best as we can against the destruction, loss, alteration or unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed. However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.
3. Withdraw your consent at any time: you have the right to withdraw consent where they have previously given their consent to the processing of your personal data.
4. Object to processing of your personal data: you have the right to object to the processing of your personal data if the processing is carried out on the legal basis of a legitimate interest, including profiling. You also have the right to object to the processing of your personal data for direct marketing purposes. This right is absolute - we will always comply with it.
5. Right to access: You have the right to obtain confirmation from us as to whether or not we are processing your personal data, to obtain access to that personal data and how and why it is being processed, as well as to receive a copy of that data.
6. Right to rectification: You have the right to obtain a correction of your personal data or to request that we complete your personal data if you notice that we are processing incorrect or incomplete data about you.
7. Right to erasure: You have the right to obtain data erasure in certain specific cases.
8. Right to restriction: You have the right to have the processing of your personal data restricted in certain specific cases.
9. Right to data portability: You have the right to obtain the personal data you have provided us with in a structured, commonly used and machine-readable form, and to transfer that personal data (or have it transferred) to another controller.
10. You may exercise the above rights by sending an e-mail to privacy@pagsprofile.com or in the case of the right to object to direct marketing also via the opt-out link included in our marketing e-mails. The exercise of these rights is in principle free of charge. Only in case of unreasonable or repeated requests may we charge a reasonable administrative fee. We always try to answer your requests or questions as quickly as possible. It is possible that we will first ask you for proof of identity in order to verify your identity. For further information and advice on the above rights, please visit the webwebsite of the Data Protection Authority: www.gegevensbeschermingsautoriteit.be. In addition to the above rights, you also have the right at any time to lodge a complaint with the Data Protection Authority in connection with the processing of your personal data by us. You can contact the authority at contact@apd-gba.be or by mail at the following address:
    
    ‍Gegevensbeschermingsautoriteit,
    Drukpersstraat 35,
    1000 Brussel

8. Children's privacy

1. Users must keep a signed parental consent for anyone under the age of 18 that https://pagsprofile.com is being used for/upon. User must provide these consent forms within 24 hours after PAGS request to do so.
2. If you are a legal guardian and you know or suspect that we unlawfully store data of your child, please contact us immediately by email privacy@pagsprofile.com. If we become aware that we have collected personal data from children without verification of parental consent, we take steps to remove that information from our servers.

9. Links to other websites

1. Our Service may contain links to other sites that are not operated by us. If you click a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.
2. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party websites or services

10. Changes to our privacy policy

1. From time to time it may be necessary to amend this Privacy Policy. When we post changes to the policy, we will change the "last updated" date at the bottom of the document. The most recent version of this Privacy Policy will be available on our website at all times.

11. Contact

1. If you have any questions or concerns regarding this Privacy Policy or our processing of your personal data, you may contact us at privacy@pagsprofile.com.