1. Introduction

Our real estate agency @Prometheus attaches great importance to the protection of your privacy. We commit to protecting and processing your personal data in strict accordance with privacy legislation and in complete transparency.

The purpose of this general privacy policy is to provide comprehensive information on the subject matter and on how we collect, use and store your personal data. The contractual terms that apply between us remain unchanged. We ask that you take the time to read this general privacy statement to familiarize yourself with our privacy practices.

You will also find information on the website of the Data Protection Authority at: www.gegevensbeschermingsautoriteit.be

2. Definitions

Personal data: any information about an identified or identifiable natural person. For example, this could be a person's name, a photo, a telephone number, a username, a password, a contract number, an e-mail address.

Processing of data: this is any operation involving personal data. The processing includes, among other things, all aspects relating to collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, transmission, dissemination or any other form of making available, comparison or association, limitation , erase or destroy such data.

Controller: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing.

Data breach: a breach of security leading to accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access to personal data.

3. Identity and contact details of the controller

As controller, our real estate agency processes the personal data collected in accordance with the General Data Protection Regulation (GDPR) of April 27, 2016 and all other applicable Belgian data protection regulations.

4. Data collected and processed

The personal data that we collect in the context of our relationships falls into different categories.

a) Non-specific categories of personal data

This includes:

Personal data: name, address, e-mail, telephone numbers, gender, marital status, family situation, date and place of birth, employer, position and professional experience, relations with the insured, beneficiary or claimant for compensation. Identification data: national identification number, identity card number, driving license number .Financial data: bank account number, information about income and other financial information.Data about the risk to be insured.Information about the insurance policy, the quotes that private individuals receive and the policies they receive.Data about previous claims for compensation.Data about current claims for compensation.

b) Specific categories of personal data

This includes data about your health:

We treat them with special care, for example for the proper management of insurance contracts regarding your health.

These categories of data will only be processed with your prior express consent and for the purposes for which you have given consent.

Access to this data is limited to persons who need it to perform their tasks in view of the agreed purpose.

c) Data on criminal convictions and offences

We also treat this data with special care and for the purposes for which you have given your consent.

We only process this data if we are allowed to do so on the basis of a law that provides sufficient guarantees.

5. What is the purpose of the data processing?

We process your personal data for various purposes. For each processing, only data that is relevant to the respective purpose is processed.

In particular, we use this personal data to:

to respond to your questions and to communicate with you and others in the context of our activities; to give you access to the information we make available online for users of our services; to contact you via our website www.atprometheus. eu;send you a newsletter if you subscribe to it;support and assist you in the context of our services;send you important information about changes to our products and services, conditions and other administrative, technical or commercial information; make decisions about providing services to you; conduct market research and analysis, including satisfaction surveys; provide you with marketing information (including information about our products or other products and services offered by our selected third party partners) in accordance with the preferences indicated by you; to enable you to actively participate in our activities, including forums, discussions, seminars, meetings and other events and to manage these activities. Some of these activities are subject to additional terms and conditions that may contain additional information about how we use and distribute your personal information. We therefore encourage you to read them carefully. to resolve complaints and manage requests for access to or correction of data; to comply with applicable laws and regulatory obligations (including laws outside the country in which you reside), such as those relating to the fight against money laundering and the financing of terrorism, as well as to respect legal processes and respond to requests from public authorities (including those outside your country of residence).

If we process personal data for purposes other than those set out in this article, we will inform you of this new purpose and provide you with all other necessary information before we start the new processing.

6. Data protection

We take appropriate technical and organizational measures against destruction, loss, falsification and unauthorized access or dissemination that are in accordance with privacy and data protection legislation.

If you have reason to believe that your interaction with us is no longer secure, for example if you feel that the security of any personal data you may hold with us has been compromised, then we ask that you inform us immediately to set.

We undertake to ensure that our salaried and self-employed employees, as well as trainees or external consultants, comply with the obligations arising from this privacy policy and the provisions of the regulations on the protection of personal data.

7. Data breach

In the event of a data breach, we may have to report the personal data breach to the Data Protection Authority on the one hand, and to the person(s) concerned on the other.

In the most serious cases, we must report the breach to the Data Protection Authority as soon as possible and no later than 72 hours after becoming aware of it.

In particular, we are obliged to document any breach of personal data. We must then indicate the facts surrounding the personal data breach, its consequences and the measures taken to remedy it, so that the data protection authority can verify compliance with the GDPR.

8. Who has access to your data?

We only grant access to your personal data to persons for whom this is necessary for the performance of their tasks. They are bound by strict professional secrecy and must comply with all technical and organizational requirements to ensure the confidentiality of the personal data.

9. Transfer of your data

We transfer your personal data to:

The insurance companies we work with. Other third parties as long as there is a legitimate interest. Any person or body in the context of a legal obligation or an administrative or judicial decision. Other third parties with whom we may share personal data in connection with an ongoing or proposed reorganization, merger, sale, joint venture, transfer, portfolio transfer or other transaction involving all or part of our business.

If we transfer your data outside the European Economic Area (EEA), to a country that does not provide an adequate level of protection for personal data, we further strengthen IT security and contractually require a higher level of security from our international counterparties.

10. Subcontractors

If we use subcontractors, they are contractually bound to us. They must then follow our instructions and adhere to the principles set out in our privacy policy.

We ensure that these subcontractors:

comply with the European Data Protection Regulation; only have data that is necessary for the performance of their tasks; undertake to treat this data in a secure and confidential manner and to use it only for the performance of their tasks.

11. What are your rights and how can you exercise them?

Within the limits of the regulations, you have the right to:

to take note of your data and, if necessary, have them corrected and transferred to third parties (right to portability); to give (or withdraw) your consent for certain processing; to oppose the processing of your data, the processing have it restricted and your data deleted. In certain cases we may not be able to continue the contractual relationship.

You can exercise your rights by sending a dated and signed request, with a two-sided copy of your identity card, by post to our real estate agency to the address on our website www.atprometheus.eu, or by e-mail to the address which is also on our website www.atprometheus.eu.

12. How long do we keep your data?

The processed data will be retained for the duration of the contractual relationship, the statutory limitation period, as well as for any other applicable legal and regulatory retention period.

13. Use of our website www.eurofin.be and mobile applications

If you are not a customer and visit one of our websites, you agree that we can use the data generated during this visit.

In addition to the information you voluntarily provide to us when using the site, we use technological means (such as cookies) to collect information.

If you are a customer and you use our mobile applications, we refer to the terms of use of these applications.

14. Privacy Policy Changes

In a changing world where technologies and legislation are constantly evolving, this privacy policy may be subject to change. We ask you to read the latest online version of this statement. We will inform you of any changes via the website www.atprometheus.eu or other usual communication channels.

15. Question - request - complaint

For questions or requests about this privacy policy or its privacy practices, or to make a complaint, please contact our real estate agency at the address shown on the website www.atprometheus.eu.

You can also always contact the Data Protection Authority via: https://www.gegevensbeschermingsautoriteit.be