Personal data are understood to mean any form of information directly or indirectly allowing the identification of yourself as a natural person.
CRES attaches great importance to the protection of your personal data and fully respects your privacy. CRES processes and protects your personal data in a legitimate, appropriate and transparent manner.
In processing your personal data CRES obviously respects all relevant legal provisions, viz. the Act of 8 December 1992 on the Protection of Privacy and, since 25 May 2018, European regulation 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (more commonly known as 'GDPR') as well as any other future legal provision that modifies the former.
For more details on privacy protection please contact the Belgian Privacy Commission, as of 25 May 2018 renamed the Belgian Data Protection Authority.
We invite you to read the present declaration carefully in order to familiarise yourself with the policy of CRES.
This declaration is updated on a regular basis. The most recent version of the declaration is available on our website. You will be informed of important changes to the declaration via the usual communication channels.
II. WHO IS THE CONTROLLER ?
CRES, with registered office at Grotesteenweg 515, 2600 Antwerpen is the controller of your personal data.
CRES is also your point of contact and will answer to the Belgian Data Protection Authority as to the processing of your personal data. CRES determines the purposes for which your personal data are processed as well as the means used and the processing characteristics.
Please address all questions regarding the protection of your privacy to the manager. You can contact the manager by sending an email to email@example.com.
III. WHICH CATEGORIES OF PERSONAL DATA DOES CRES PROCESS ?
Below you will find a list of the categories of personal data that CRES can process. It is possible that other data will also be processed if they are necessary or useful for the continuation of the contractual relationship with CRES.
In such cases the context in which CRES obtains or processes this data is indicated. This table should be read in conjunction with the description of the purposes for which CRES processes the data.
Category Examples Context
1/ Identity information of the customer / principal (seller or lessor)
2/ Identity information of prospective buyer or lessee Name, address, date and place of birth, nationality, home or mobile phone number and email address.
Name, address, date and place of birth, nationality, home or mobile phone number and email address.
This data is provided by you and processed when you make inquiries, become a customer, conclude a brokerage agreement or when you register online to use the services of CRES (online), for any type of identification or use. Amongst others, this data can be acquired by reading in your identity card.
Data on the property of the customer / principal (seller or lessor)
Title of property, urban development statement, soil certificate, inspection certificate of the electrical installation, EPC certificate, information on overcurrent sensitivity, post-intervention file, information on the heritage value.
This data is supplied by you or obtained by CRES from the government or technical experts on your behalf.
Data of the prospective lessee relating to a proposed lease
Information on occupation and employment situation, solvability, family situation, salary, etc.
This data is collected using forms and contracts filled out by you on your request.
Additional data for the conclusion of a lease or preliminary sales agreement
National registry number
This data is supplied by you
The national registry number is only used in cases where such is stipulated or required by law.
Personal data of co-owners (or their lessees)
Name, address, date and place of birth, nationality, home or mobile phone number and email address.
This data is supplied by you as co-owner to CRES when CRES acts as the trustee
Data related to the performance of trustee services.
Payments including names and account numbers, communication and references, card numbers, etc.
This data pertains to your transactions as co-owner that are coordinated by the trustee.
Data on the transactions of CRES with you
The information relating to your contacts with CRES by telephone, email, fax, etc. and your interactions on the web pages regarding CRES, its services or its partners, on social networks, etc.
This data originates from contacts of any nature between you and CRES (in case of meetings or events, subscription to a newsletter, social networks, etc.)
Data on the customer's behaviour and preferences
Information on your behaviour and preferences regarding the use of communication and relationship channels, information on your personal choices and lifestyle, private or professional projects, hobbies, etc.
This data is the consequence of choices you have expressed or analyses performed by CRES in accordance with this declaration and its legal obligations.
CRES processes no data that reveal your race or ethnicity, your political beliefs, religious or philosophical beliefs, union membership, health or life-related data or sexual orientation, genetic or biometric data.
IV. FOR WHAT PURPOSES DOES CRES PROCESS YOUR PERSONAL DATA?
CRES collects and processes your personal data solely for the purposes described below. CRES takes care to only process data that is necessary and relevant to a specific purpose.
CRES processes your data in situations permitted by law, to wit:
- To meet the legal obligations that CRES must fulfil (12.).
- To execute a contract concluded with you or to take certain measures on your request before the conclusion of said contract (13.).
- To protect the legitimate interests of CRES, in which these interests are weighed against your fundamental rights and freedoms (14.).
- In specific cases, with your consent, as the result of a specific and unambiguous request, preceded by clear and comprehensible information; in accordance with the law you can revoke this consent at any time (15.).
CRES must comply with the legislation compelling it in specific circumstances to process your personal data as part of its activities. These obligations may entail that CRES must cooperate with the competent authorities and/or third parties and, possibly, supply them with certain of your personal data.
Amongst others, this includes:
- The obligation to contribute to the prevention of money laundering and the financing of terrorism.
- The obligations imposed upon a trustee with respect to the management of co-ownership.
- The obligation to respond to a formal request from the Belgian tax and judicial authorities.
The list of legal obligations for which CRES must process your data is non-exhaustive and subject to change.
Contractual relationships between CRES and you as a customer
In order to conclude a contract CRES must sometimes acquire and process certain data in order to, amongst others:
- Respond to your request.
- Assist you in supplying information and when concluding the contract.
- Follow-up on a request, evaluate suitability and assess the risks arising from a possible contract.
- Fulfil the brokerage agreement.
As part of current contracts or the management of contracts CRES must process certain data, more specifically to meet its administrative and accounting obligations.
Within this context your data may be forwarded within CRES to several departments, including those not directly responsible for the relationship with you or the execution of a certain contract.
More specifically CRES processes your data as follows with the execution of contracts:
- Management of current contracts / services ordered.
- Central management and a general picture of the customers.
- The management of your property.
- Management of the co-ownership of which you are a co-owner.
CRES can process your personal data for additional reasons within the scope of its relationship with you and the execution of contracts.
Legitimate interests of CRES
CRES also processes your data to protect its legitimate interests. In so doing CRES strives to strike a fair balance between the necessity to process data and the respect for rights and freedoms, including the protection of your privacy.
Amongst others personal data are processed with a view to:
- Personalising the services of CRES.
Improving the quality of the service provided to you through:
- The evaluation and improvement of processes including campaigns, simulations and sales through the use of different means such as statistical analysis, satisfaction surveys and various other search methods.
- The improvement of existing products or products under development by CRES based on customer surveys by CRES, statistics, tests and customer feedback on social networks (Twitter, Facebook) coupled with CRES.
- The supervision of activities by CRES including the size of the turnover, the number of meetings at our branches, the number of calls and visits to the website of CRES, the nature of the questions asked by customers, etc.
- The preparation of studies and statistics that use anonymisation and pseudonymisation of those involved.
- The training of our staff through the use of practical examples by way of illustration, including the recording of certain telephone conversations.
- The storage of evidence (archives).
- The determination, exercise, defence and retention of the rights of CRES or all the individuals it represents, for instance in case of recovery procedures or disputes.
Specific legitimate interest of CRES: direct marketing purposes
CRES performs a customer segmentation - specifically in accordance with your needs - to offer you, for instance, suitable properties and/or services that correspond with your professional and personal situation. To this end, CRES can, amongst others:
- Assess the services you are already using as well as your sociodemographic data (age, composition of your household, revenue, etc.).
- Analyse your behaviour via multiple channels (visits/meetings, emails, website visits, messages via our website), derive your preferences and, as a result, personalise the information and the web pages you have visited.
- Adjust the ads on the web pages so they cater to the interests you have shown through your behaviour on our website, social networks, in a branch or elsewhere (e.g. at events where CRES was present).
- Simplify the completion of forms by filling out certain fields in advance with known data and ask you to verify their accuracy and make adjustments if necessary.
- Assess the key moments at which certain services would best suit you.
- Send you personalised ads by phone or regular mail.
CRES can process all your personal electronic contact information (viz. your mobile number and email address) to send you personal information, advertisements or proposals via direct marketing or newsletters. In this case CRES must obtain your express consent beforehand.
V. WITH WHOM DOES CRES SHARE YOUR PERSONAL DATA?
CRES treats your personal data with the utmost care and only shares your data to offer you the best possible service in the execution of its assignment.
CRES can forward your data to other entities within its group, both at home and abroad, viz. the other entities of the group that assist CRES in the execution, management and control of the activities including reporting, support and computer security or the offering of specific products and services.
In some cases CRES is obligated by law to share your data with third parties, including:
- Public or supervisory authorities when there is a legal obligation to supply information
- Judicial authorities: at their explicit request
CRES also transfers your data to specific service providers to help with:
- The design and maintenance of computer equipment and internet applications.
- The offering of publicity and communication services, including online and social network providers.
- The preparation of reports and statistics, the printing of documents and the design of products or services.
- The commercialisation of its activities, the organisation of events and customer communications management.
CRES must also share your data with the online and social network providers it uses to offer publicity services.
Also, your personal data may be shared with bailiffs or lawyers within the scope of legal proceedings.
In the above-mentioned cases CRES will take care to restrict the access of third parties to those personal data that is necessary to perform the required specific tasks. CRES will also make sure that third parties commit themselves to using the personal data in a safe and confidential manner and in accordance with the instructions of CRES and its data protection policy.
CRES stores your data within the EEA. As a result, no data is transferred to countries outside the EEA.
VI. HOW LONG IS YOUR PERSONAL DATA STORED?
CRES will not store your personal data any longer than strictly necessary to fulfil the purposes for which the data were gathered.
This period is linked to the legal and tax obligations of CRES, as well as the legal necessity to store your data beyond the storage period as evidence or to react to information requests from competent authorities e.g.:
- 10 years within the scope of the anti-money laundering legislation
- 10 years within the scope of the contractual liability of CRES
- 7 years for the accounting and supporting documents of the co-owners' associations in light of the exercise of CRES's duties as a trustee.
Outside these periods your personal data is either removed or anonymised.
VII. HOW IS YOUR PERSONAL DATA PROTECTED?
CRES implements strict standards to protect the personal data under its control against unauthorised or illegitimate processing and against inadvertent loss, destruction or damage.
CRES implements measures of a technical and organisational nature such as encryption, antivirus software, firewalls, access control and a strict selection of staff and suppliers to prevent and detect unauthorised access, loss or disclosure of your personal data.
In the unlikely and unfortunate event that your personal data under the control of CRES is compromised by a breach of our information security, CRES will immediately undertake the necessary actions to determine the source of the breach and take adequate measures to keep this from happening again in the future. If necessary, CRES will inform you of the incident in compliance with the applicable legislation.
VIII. WHAT ARE YOUR RIGHTS WITH THE PROCESSING OF YOUR PERSONAL DATA?
The right of access, the right to rectification, restriction, erasure, the right to data portability and the right to object
For the above-mentioned purposes you have:
- The right of access to your personal data at CRES. This means that you can ask CRES whether it processes your personal data, for which purposes it is processed, which categories of data are processed and with whom the data is shared.
- The right of rectification if you find that your personal data is incorrect or incomplete.
- The right to restriction if e.g. you contest the accuracy of your personal data and this for a period enabling CRES to verify this.
- The right to erasure of your personal data. When your contract with CRES comes to an end you can ask CRES to delete your personal data if it is no longer needed for the purposes for which it was originally collected. You can also at all times request erasure of the personal data processed by CRES on the basis of your consent (unless CRES has a different legal ground for the processing) or on the basis of the legitimate interest of CRES (unless there are compelling predominant legitimate grounds for the processing). CRES can at any rate maintain your personal data if such is required for the purposes of proof within the scope of a legal claim.
- The right to portability of the data you yourself have supplied to CRES if your personal data is processed on the basis of an agreement or on the basis of your consent to send electronic communications and if this personal data is processed by automated means. In exercising this right you can request that CRES forward your personal data to yourself or directly to another controller where technically feasible for CRES.
- The right to object to the processing of your data for the purposes listed under article 14. In this case, CRES will no longer process your personal data unless CRES demonstrates compelling legitimate grounds for the processing that override your interests, rights and freedoms or unless there are grounds related to the establishment, exercise or defence of a legal claim.
- The right to object to direct marketing. Article 15 asked for your consent to process your electronic contact details and use them to send you commercial information, publicity or personal proposals (via direct marketing actions or electronic newsletters). This applies specifically to communications to your mobile number and email address. You have the right to object against the processing of your personal data for electronic direct marketing purposes and to oppose the future reception of such publicity. However, the exercise of this right cannot withhold CRES from contacting you for a different purpose, including a legal obligation or the execution of the contract, in accordance with this declaration.
The right to lodge a complaint
You can exercise your rights by sending a dated request in writing by regular mail, duly signed and with a copy of your identity card, to CRES, Grotesteenweg 515, 2600 Antwerpen, or via email to firstname.lastname@example.org.
You can also lodge a complaint with the privacy commission via regular mail to Drukpersstraat 15, 1000 Brussels, or via email at email@example.com, or by phone at +32 2 274 48 00.
When visiting a website or using an application or app of CRES files and technologies may be used that store information on your end device (PC, laptop, smartphone, tablet, etc.) or that access information already stored on your end device. These files and technologies may consist of cookies, web beacons, log files, settings and information on your end device and such.
The website of CRES uses the following categories of cookies:
- Functional cookies: These cookies enable the basic functions of the website. They guarantee the proper technical operation of the website and enhance its user-friendliness.
- Analytical cookies: These cookies enable us to analyse the use of the site so we can measure and improve its performance (e.g. Google Analytics).
- Third-party cookies: This website includes Facebook functions. CRES has no influence on third-party cookies and the data these cookies process. Read the Facebook privacy declaration to find out what they do with the (personal) data that is processed via these cookies.
The cookies, web beacons, log files and other files and technologies used by CRES can be disabled to the extent and in the way described below. Removing and/or refusing cookies, web beacons, log files and other files and technologies may impact the usability of the website.
The mode of operation depends on your browser and can be consulted by clicking on the links below.
- Google Chrome: Click here
- Internet Explorer: Click here
- Firefox/Mozilla: Click here
- Safari: Click here
- Opera: Click here