Last updated: May 2018
1. Who is responsible for Personal Data?
Lydian is the controller of all Personal Data it processes about its clients, prospective clients, suppliers, job applicants and Website visitors. Lydian is a burgerlijke vennootschap met handelsvorm Lydian CVBA / société civile à forme commerciale Lydian SCRL, with registered office at Havenlaan 86C b113 Avenue du Port, 1000 Brussels, Belgium, registered under number RPR Brussel/RPM Bruxelles 0473.627.046. Our contact details are set out in Section 12 below.
2. What Personal Data do we process?
The Personal Data we collect and process about you will differ depending upon our relationship. We will hold different types of Personal Data if you are a client, a prospective client, a supplier, an applicant or a visitor to our Website, or you have enquired about our services.
Below, we provide you with more information on the type of Personal Data we process.
Within the context of providing legal advice to clients, we may from time to time process sensitive data. Sensitive data are data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation. When we process such data, we do so for the establishment, exercise or defence of legal claims on behalf of our clients.
Within the context of providing legal advice to clients, we may also from time to time process data relating to criminal convictions and offences or related security measures. When we process such data, we do so for the protection of our clients' interests.
3. What Personal Data do we collect through our website?
In general, you are not obliged to provide us with any Personal Data when browsing our Website. Some of the functionalities provided on our Website however require you to provide us with certain Personal Data.
- Contact. If you contact us via our Website, we will collect and hold your contact details (such as first name, last name and email address).
Newsletter Subscription. If you subscribe to our newsletters, we will collect and hold your contact details (such as your first name, last name, job title, company, telephone, email address and postal address), your areas of interest, your language preferences and your preferred email format.
Event Registration. If you register for any of the events we are organising (such as lunch seminars), we will collect and hold your contact details (such as your first name, last name, job title, company, telephone, email address).
Job Applicants. If you apply for a position at Lydian, we will collect and hold your contact details (such as first name, last name, address, telephone, email address), personal details (such as your date of birth), information about the position you are applying for, language skills, education and training, curriculum vitae and motivation.
Furthermore, when you browse our Website, certain user and device data may be collected. This information may not reveal your identity and therefore may not be Personal Data. Examples of this type of user and device data are: internet browser and electronic device information, information collected through cookies, pixel tags and other technologies, demographic information, and aggregated data (i.e., data grouped together so that it is not possible to link the data to a particular individual). We and our third-party service providers may collect user and device data in a variety of ways when you use our Website, including through your internet browser or electronic device.
There exist various types of cookies:
- Strictly Necessary Cookies. These are cookies that are required for the operation of a website. They include, for example, cookies that enable users to log in to secure areas of a website, use a shopping cart or make use of e-billing services.
- Functionality Cookies. These are used to recognise users when they return to a website. They enable the personalisation of content and the recognition of users, and they remember user preferences (for example, their choice of language or region).
- Analytical/Performance Cookies. These types of cookies allow providers to recognise and count the number of visitors and to see how visitors move around their website when they are using it. This assists providers in improving the way their website works, for example, by ensuring that users are finding what they are looking for easily.
- Targeting Cookies. These cookies record a user’s visit to a website, the individual pages visited and the links followed. If the cookie is set by a third party (for example, an advertising network) which also monitors traffic on other websites, this type of cookie may also be used to track a user’s movements across different websites and to create profiles of their general online behaviour. Information collected by tracking cookies is commonly used to serve users with targeted online advertising.
- Third-Party Cookies. When you visit our website you may notice some cookies that are not related to us. When you visit a page that contains embedded content, for example from YouTube, you may be sent cookies from these websites. We do not control the setting of such cookies and we advise you to check the third-party websites for more information about these cookies and how to manage them.
To limit or block the cookies which are set by Lydian, you can amend your browser’s privacy settings. The Help function within your web browser will explain how this is done. Visit www.aboutcookies.org to find out how to limit or block cookies on an array of different browsers. There are details on how to delete cookies as well as general information about them. For information on how to do this on your mobile phone you will need to refer to the manufacturer’s guide. Please be aware that you may have to manually adjust some preferences every time you visit a site and that some services and functionalities may not work if you choose to limit or block cookies.
On our Website, so-called social plugins provided by the social networks Facebook, Twitter and LinkedIn are used. Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. Twitter is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103. LinkedIn is operated by LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. The social plugins are a Facebook, Twitter or LinkedIn logo. An overview of the Facebook, Twitter or LinkedIn plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins, https://dev.twitter.com/web/overview and https://developer.linkedin.com/plugins.
4. For what purposes do we use Personal Data?
The purposes of processing your Personal Data will be different depending on our relationship.
As a prospective client, you are not obliged to provide any Personal Data to us. If you are a client or a supplier, the provision of certain Personal Data is a statutory or contractual requirement (e.g., we need certain Personal Data of clients in order to document our engagement, for billing purposes and to comply with anti-money-laundering obligations). If you are a job applicant, the provision of certain Personal Data is a requirement necessary to entering into a possible contract.
5. What are the legal grounds for our use of Personal Data?
Applicable data-protection legislation requires us to be transparent about the legal grounds or justification for the processing of Personal Data. We generally rely on the following legal grounds for the processing of Personal Data.
- Your consent. In many cases, your Personal Data will be processed by Lydian on the basis of your consent. For example, we may ask your consent to process your data in order to provide you with marketing information, to send you invitations to lunch seminars or to send you legal news updates. We may seek your consent in writing or electronically. When seeking your consent, we will inform you about how your data will be used, as well as the purposes. In some circumstances, such as telephone conversations, consent can be given verbally. When you have provided your consent, you can withdraw it at any time.
- Necessary for the performance of a contract. Personal Data of clients may be processed by us in order to establish, perform and terminate a contract (e.g., for the provision of our services). Prior to a contract – during the contract initiation phase – Personal Data may be processed to prepare bids, pitches or purchase orders or to fulfil other requests of the prospective client that relate to contract conclusion. Prospective clients can be contacted during the contract preparation process using the information that they have provided.
- Legal obligations to which we are subject. In some cases, we may need to process your Personal Data because applicable laws or regulations require, request or allow it, for example to prevent, detect and investigate fraud or crime or to comply with specific tax obligations.
- Our legitimate interests. In many cases, we process your Personal Data because we have a legitimate business interest in doing so. This is the case, for example, when processing your Personal Data to communicate with you, to improve the quality of our services, to provide you with marketing information (incl. direct marketing) and to manage our business operations and IT infrastructure. Depending on the specific processing, Lydian's legitimate interests will in general consist of (i) the pursuit of our business activities and commercial objectives; (ii) the protection of our business, partners, shareholders and clients; (iii) the improvement or further development of our services and our business operations in general; (iv) the compliance with legal and regulatory obligations, standards, guidelines and codes of conduct and/or (v) the maintenance and improvement of our position on the market.
The legal basis for our processing of Personal Data will be different depending upon our relationship. Below, we have set out the main legal justifications that apply to our processing of Personal Data.
6. Who may Personal Data be shared with?
In connection with the purposes described above in Section 4, we may need to share your Personal Data with third parties, so-called ‘recipients’. These third parties (recipients) may include:
- external third-party service providers (e.g. security professionals, accountants, auditors, experts, lawyers and other professional advisors; call-centre service providers; IT systems, hosting service providers; banks and financial institutions; third-party claim administrators; and other third party vendors and outsourced service providers that assist us in carrying out our business activities);
- government authorities;
- third-party participants in legal proceedings and their advisors; and
- other third parties (e.g., credit-rating agencies, commercial-information providers, purchasers and prospective purchasers or other parties in any actual or proposed reorganisation, sale, joint-venture, merger, assignment, transfer or other transaction relating to our business, assets, companies or stock).
7. Where do we process Personal Data?
Lydian is a Belgian independent law firm and has no offices outside Belgium. In principle, your Personal Data will be kept in Belgium or in another country within the European Economic Area. From time to time, we may however need to transfer your Personal Data to entities (recipients) located in countries outside the European Economic Area (EEA), including countries which do not offer adequate protection of Personal Data.
8. How do we protect Personal Data?
Lydian has in place appropriate technical and organisational measures to prevent or act against any unauthorised and unlawful processing or disclosure, as well as accidental loss, modification or destruction of Personal Data. Before the introduction of new methods of data processing, particularly new IT systems, technical and organisational measures to protect Personal Data will be defined and implemented by Lydian. These measures will be based on the state of the art, the risks of processing, and the need to protect the Personal Data. Furthermore, these technical and organisational measures for protecting Personal Data will regularly be adjusted to the technical developments and organisational changes.
9. How long do we keep Personal Data?
We will keep your Personal Data no longer than necessary for the purposes for which we collected the data. The precise period will depend on the purposes for which we hold your Personal Data. In addition, there are laws and regulations that apply and which set maximum periods for retention of Personal Data. We will provide you with more detail about how long we keep your Personal Data in separate privacy notices.
10. What rights do you have as a Data Subject?
As a Data Subject, you enjoy the following rights vis-à-vis Lydian:
- Right of access. You have the right to obtain confirmation about whether or not your Personal Data is being processed and, if so, to obtain access to your Personal Data and information regarding the processing.
- Right to rectification. You have the right to correct incorrect Personal Data, complete your Personal Data and have recipients to whom Personal Data was provided informed of the rectification.
- Right to erasure. Subject to certain conditions, you have the right to have your Personal Data erased. If your Personal Data was made public, Lydian will take reasonable steps to inform the controllers who are processing the Personal Data of your request to erase it and to inform the recipients of Personal Data of your request to erase it.
- Right to restriction of processing. Subject to certain conditions, you have the right to obtain restriction of the processing of your Personal Data, and, in case of restriction, have the processing limited to mere storage.
- Right to data portability. Subject to certain conditions, you have the right to be provided with your Personal Data, which you can reuse as you wish. If you so request, Lydian has the obligation to transfer your Personal Data directly to another controller.
- Right to object. You have the right to object to the processing of your Personal Data based on certain grounds and the right at all times to object to the use of your Personal Data for direct marketing purposes.
- Right to withdraw consent. If you have given your consent to our processing of your Personal Data, you have the right to withdraw that consent at any time, without such withdrawal affecting the lawfulness of processing based on consent before its withdrawal.
- Automated individual decision-making, including profiling. In the case of automated individual decision-making, you have the right to obtain human intervention, give your point of view, receive an explanation for the automated decision, and challenge that decision.
- Right to lodge a complaint with a supervisory authority. You have the right to lodge a complaint with a supervisory authority. The Belgian Commission for the Protection of Privacy (as of 25 May 2018, the 'Data Protection Authority') can be contacted by regular mail at Drukpersstraat 35, 1000 Brussel, Belgium, by telephone at +32 (0)2 274 48 00, by facsimile at +32 (0)2 274 48 35 and by email at firstname.lastname@example.org.
The above rights may be applicable in certain circumstances only and may be subject to certain conditions, exemptions or exceptions as set out in applicable data protection legislation.
11. How to change your marketing preferences?
We will provide you from time to time with opportunities to inform us about your marketing preferences. You can decide to change your marketing preferences at any time.
If you are a past or current client, we may use your contact details, including your email address, to send you marketing communications. You can at any time and free of charge opt out of receiving marketing communications by contacting us (see Section 12).
If you are not a past or current client, we may use your contact details, including your email address, to send you marketing communications, provided you have given your consent.
Marketing communications used by Lydian may include the following: (i) receiving e-mail messages from us; (ii) receiving telephone communications and postal or electronic mail from us; and (iii) sharing your Personal Data with selected third-party partners for their marketing purposes.
12. Who to contact about your Personal Data?
If you have any questions, concerns or complaints about the manner in which your Personal Data is used by us, you can contact us by email or regular mail using the contact details below:
- regular mail: LYDIAN CVBA/SCRL, Att. Marketing Department, Havenlaan / Avenue du Port 86C b113, 1000 Brussels, Belgium