Privacy, cookies and terms
1. Who we are
This statement (the “Statement”) explains why and how your personal data is collected and processed by Corda Campus 2.0 NV, with registered office at Kempische Steenweg 311/1.02, 3500 Hasselt, Limburg, Belgium, company number BE0547573611 (referred to as “we”, “us” or “our”).
You can find our contact details under section 10 of this Statement.
We are responsible for the processing of personal data we request and use. As data controller, we take measures to ensure that you:
remain informed about how we process your personal data and about your rights;
retain control over the personal data we process;
can exercise your rights as described in section 9.
2. What data we collect
2.1 Personal data
“Personal data” means any information relating to an identified or identifiable natural person. The type of personal data we collect depends on the services you request and may include data relating to you and/or your representatives, staff, independent contractors and/or directors (together also referred to as “you” or “your”).
If you provide us with personal data relating to your representatives, staff, independent contractors and/or directors, you must inform them about the existence and content of this Statement, including our obligations, their rights and how they can exercise these rights.
In particular, we collect administrative and contact details that allow us to identify you, contact you, or do business with you as a customer, supplier or business partner. This may include:
name
address
telephone number
email address
bank account number (where relevant)
We do not intentionally collect or process “sensitive” data, such as:
data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership;
genetic or biometric data (e.g., facial images, fingerprints);
health data;
data concerning sex life or sexual orientation.
If such data is provided to us, we will not use it and will delete it.
2.2 Minors
We do not intend to process personal data of minors.
3. Why we need your data
3.1 Services and relationship management
We may use your personal data to manage our relationship with you and to provide activities or services you request (e.g., responding to inquiries, scheduling a meeting, providing information).
We process identification and contact details such as your name, email address, telephone number and address.
3.2 Information and commercial communications
We may contact you with information about our services, events or relevant updates, either at your explicit request or where we believe you may be interested.
You will receive direct marketing communications when you have given explicit consent. We will specifically request your consent if you are not already in a customer relationship with us.
Even without consent, you may still receive communications where you have an existing relationship with us, based on our legitimate interest (where applicable). If you do not wish to receive marketing communications, you can object as described in section 9.2.
We process your name, email address, telephone number, address and (where relevant) information about your stated interests.
3.3 Business operations (legitimate interest)
We may process personal data where necessary for the legitimate interests of our organisation, after balancing those interests with the potential impact on your privacy. If you object to these processing activities, you can exercise your right to object as described in section 9.3.
This may include:
keeping records as evidence (archives);
establishing, exercising or defending legal claims;
governance, risk management and compliance (e.g., fraud prevention, audits, complaints handling);
supporting and simplifying the use, delivery and termination of services (e.g., avoiding repeated data entry).
3.4 Profiling
We do not use your personal data for profiling purposes.
3.5 Cookies
Our website www.corda-arena.com uses cookies and similar technologies (small text files stored on your device). More information is provided in the cookie section on this page.
4. Legal bases for processing
We process personal data only when one of the following legal bases applies:
Contract: processing is necessary to perform a contract with you or to take steps at your request before entering into a contract (applies to section 3.1).
Consent: you have given explicit and freely given consent for a specific purpose (applies notably to direct marketing when there is no existing relationship).
Legitimate interest: processing is necessary for our legitimate interests, provided these are not overridden by your interests or fundamental rights (applies notably to section 3.3 and certain communications under section 3.2).
Legal obligation: we may be legally required to process and/or share certain data with authorities.
5. Sharing your data
Only employees who need access to your data to perform their tasks will have access, under our responsibility.
We may also use external suppliers (e.g., IT services, financial and accounting services) to provide our services. Where these suppliers process personal data on our behalf, we put in place technical, organisational and contractual measures to ensure data is processed only for the purposes described in this Statement.
We may share data with supervisory bodies, tax authorities or investigative services only when legally required.
6. Where your data is stored and processed
Your data will not be transferred outside the EU. If we foresee storage or processing outside the EU, we will explicitly mention it and ensure an equivalent level of protection as required within the EU.
Your personal data is never made available to third parties for their own marketing purposes.
7. How long we keep your data
We keep your personal data only as long as necessary for the purposes described in section 3, unless a longer retention period is required by law or is necessary to resolve disputes or enforce agreements.
When your data is no longer needed and no legal retention obligation applies, we will delete it or anonymise it where deletion is not possible.
8. How we secure your data
Your personal data is treated as strictly confidential. We take appropriate technical and organisational measures to protect it against destruction, loss, accidental alteration, damage, unauthorised access and any unlawful processing.
9. Your rights
9.1 Access, rectification, erasure, portability and objection
You have the right to access your personal data and receive a free copy. You also have the right to correct inaccurate data, request erasure in certain cases, request portability for data processed on the basis of consent or contract, and request restriction of processing in specific situations.
9.2 Objection to direct marketing
You can object at any time to the use of your data for direct marketing. If you object, we will stop processing your data for these purposes as soon as possible.
9.3 How to exercise your rights
To exercise your rights, please contact us:
by email: arena@cordacampus.com
by post: Kempische Steenweg 311/1.02, 3500 Hasselt, Limburg, Belgium
Please clearly indicate which right you wish to exercise and to which processing activity your request relates.
9.4 Important note
Objecting to certain processing activities or withdrawing consent may mean we cannot provide certain information or services.
10. Questions or complaints
If you have questions or complaints about how we process personal data, contact us:
by email: arena@cordacampus.com
by post: Kempische Steenweg 311/1.02, 3500 Hasselt, Limburg, Belgium
If you are not satisfied with our response, you have the right to lodge a complaint with the Belgian Data Protection Authority. More information is available via the official authority website.
Privacy contact (internal point of contact):
Ine Vanoeveren – i.vanoeveren@cordacampus.com
11. Updates to this statement
We may update this Statement from time to time. If important changes are made, the “last updated” date will be changed and we may inform you accordingly. We encourage you to review this page periodically.
