Privacy Notice – Customers & employees of customers |
General
CenEnergy considers the privacy and security of personal data it processes to be very important. As a data subject, you have the right to know which of your personal data we process and how we do this. In this privacy policy you will find answers to the following questions:
- Who is responsible for the processing of personal data?
- What do some of the key terms in this policy mean?
- When do we collect which personal data from you, what do we do with it, why are we allowed to do this and how long do we keep it?
- How do we protect your personal data?
- Who has access to your personal data?
- What are your rights as a data subject?
- - Who do you contact in case of questions regarding this privacy policy?
- - Changes to the privacy policy.
We divide the various processing operations involving personal data into 5 main parts:
- Part 1: Processing of personal data in the context of the partner relationship.
- Part 2: Processing of personal data in the context of the services by CenEnergy offered to the company.
- Part 3: Processing of personal data in the context of the services by CenEnergy offered to the employee of the company.
- Part 4: Processing of personal data in the context of the services by CenEnergy offered to individuals.
- Part 5: General Processing Operations applicable to all previous parts.
Who is responsible for processing your personal data?
If you have any questions regarding the processing of your personal data, please contact the DPO at dpo@cenenergy.be
What do some key terms in this policy mean?
AVG: the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data in force since 25 May 2018. (Also referred to as GDPR - General Data Protection Regulation.
Personal data: This is all information that allows people to be identified, directly (name, address, customer number, e-mail, date of birth, etc.) or indirectly (IP address, car license plate, etc.).
Special category of personal data: personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and processing of genetic data, biometric data for the purpose of uniquely identifying one person or data concerning health, or data relating to a person's sexual conduct or sexual orientation
Processing of personal data: any operation or set of operations involving personal data or a set of personal data, whether or not carried out by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction of data.
Data controller: CenEnergy NV
Data subject: A natural person
Processor: A partner who processes personal data on behalf of CenEnergy.
Standard Contractual Clauses (SCC) : an SCC is a model contract established by the European Commission to ensure that the level of protection at an organization in a third country matches the level of protection within the European Union.
Processor Agreement: a specific agreement between the processor and whereby CenEnergy determines and limits which data may be processed for which purposes and wherein the processor provides the necessary safeguards with respect to the processing of personal data in accordance with Belgian privacy legislation and the European Data Protection Regulation and any implementing acts.
PART 1 : Processing of PERSONAL DATA IN THE CONTEXT OF THE PARTNER RELATIONSHIP.
When do we collect which personal data from you, what do we do with it, why are we allowed to do this and how long do we keep it?
Which personal data? |
Purpose and why is this allowed? |
How long is it stored? |
Identification data, profession and employment, and contact details: surname, first name, position, name and address of your employer, business e-mail address, business mobile number. |
These are used to contact you, send you requested information, respond to questions, schedule a visit, schedule a meeting, send reports/contract updates, etc., all within the framework of the execution of our agreement. |
Your personal data will be stored as a contact person for as long as the collaboration lasts. The personal data will be deleted within 6 months thereafter. Note: if your personal data has been included on legal documents such as order form or invoice, we will keep it for as long as the legal retention period for these documents is running. |
Identification data, profession and employment, and contact details: surname, first name, position, name and address of your employer, business e-mail address, business mobile number. |
This data is processed for the purpose of inviting you to possible events organised by us. We have a legitimate interest in doing this so that the customer-partner relationship can be maintained. |
Your personal data will be stored as a contact person for as long as the collaboration lasts. The personal data will be deleted within 6 months thereafter. Any lists of invitees or attendees will be deleted within 3 weeks after the event. |
Identification data, profession and employment and contact details: surname, first name, position, name of your employer and your business e-mail address.
|
We have a legitimate interest in informing you as a customer about new products, initiatives, services, etc. With this regular information, we ensure that you as a customer are informed that we as a partner are not sitting still and can respond to changing needs. |
Your personal data will be stored as a contact person for as long as the collaboration lasts. The personal data will be deleted within 6 months after the end of the collaboration |
All personal data that may be included in a complaint file
|
When you have a complaint against the organisation, an employee or a third party linked to CenEnergy, we have a legitimate interest to follow up on these complaints and create a file. We have a legal obligation to transfer personal data to the competent authorities and parties in the context of investigations, e.g. social inspections, or legal proceedings. When handling complaints, in addition to identification data, other personal data may also be processed and this depends on the complaint. |
Up to 1 year after the closure of the file or according to legal deadlines, if applicable. |
All personal data requested in the context of investigations or legal proceedings |
We have a legal obligation to transfer personal data to the competent authorities and parties in the context of investigations, e.g. social inspections, or legal proceedings. |
We will keep all correspondence/files between CenEnergy and the competent services within this framework for 1 year after the closure of the file or according to legal deadlines, if applicable. |
PART 2 : PERSONAL DATA IN THE CONTEXT OF THE SERVICES offered by CenEnergy to the company.
When do we collect which personal data from you, what do we do with it, why are we allowed to do this and how long do we keep it?
Category(s) of personal data |
Source |
Why do we ask them and why are we allowed to do this? |
Retention period |
Id Contact details The information you give us in connection with a problem with the installation |
You, by contacting us in case of problems |
If you contact our helpdesk, we will register your problem and provide the best and fastest possible solution. For the performance of this processing, we rely on the 'performance of our agreement'. |
When we receive the information via (e)mail, we will keep your personal data for up to 1 year after the termination of the collaboration unless legal obligations would impose a different period. When we receive the information by phone and we can solve it immediately, we do not record any data of this call. |
Id Contact details Data regarding charging : number of kWh, charging location, time of charging, presence (time) at charging position. |
Yourself through collaboration |
We need this information to bill for our services and to contact you with questions. For the performance of this processing, we rely on the 'performance of our agreement'. |
We keep your personal data for 10 years after the end of the current fiscal year. This relates to both the legal deadline for billing and statute of limitations around fraud prevention. |
Id Contact details The information you give us in connection with a problem with the installation |
Yourself by contacting us in case of problems |
When you contact our help desk, we register your problem and will provide the best and fastest possible solution. For the performance of this processing, we rely on the “performance of our agreement”. |
If we receive the information by e-mail or post, we will keep your personal data for 2 years after the termination of the cooperation unless legal obligations would impose a different period. If we receive the information about the problem by phone and we can solve the problem on the phone, we do not record data from this call. |
Id Contact details Any personal data you wish to share with us in connection with a complaint. |
Yourself when you contact us to pass on a complaint. |
If you contact us to make a complaint, we will use the personal data provided to contact you in connection with your complaint. The legal basis for this is “Performance of the agreement”. |
We keep your personal data for 2 years after the termination of the cooperation unless legal obligations would impose a different period. |
Id Details of use and consumption. |
Yourself and any third parties when we believe it is necessary. |
We must ensure that fraud cannot happen to our cards or that it is detected as soon as possible. The legal basis for this is "Justifiable Interest". |
We keep your personal data for 10 years after the end of the current fiscal year. |
PART 3 : PERSONAL DATA IN THE CONTEXT OF THE SERVICES offered by CenEnergy to YOU AS an employee of the company
When do we collect which personal data from you, what do we do with it, why are we allowed to do this and how long do we keep it?
Category(s) of personal data |
Source |
Why do we ask them and why are we allowed to do this? |
Retention period |
Id Contact details Details of your residence |
Yourself through the partnership in case you want a charging station at your home. |
Preliminary action to determine if installation of a charging station is possible and if so, document preparations. We also need this information to be able to contact you with our services if you have any questions. To carry out this processing, we rely on the "preparation to reach an agreement Note: the personal data, details of your home, in the context of this processing will NOT be transferred to your employer. Your employer therefore does not have its own processing of this personal data. |
We store your personal data for up to 6 months after the termination of the collaboration, unless legal obligations impose a different period. If the assessment shows that a charging station cannot be installed, we will delete your data within 6 weeks after the audit report was sent to you. |
Id Contact details Details of your residence |
You, through the cooperation, in case the installation of a charging station at your home has been approved. |
We need this information to install the charging station. To carry out this processing, we rely on the "performance of our agreement We need this information to install the charging station. To carry out this processing, we rely on the "performance of our agreement”. Note: the personal data, details of the details of your home, in the context of this processing will NOT be transferred to your employer. Your employer therefore does not have its own processing of this personal data. |
We keep your personal data (the details of your residence) for 2 years after the termination of the cooperation unless legal obligations would impose a different deadline |
Id Contact details The information you give us in connection with a problem with the installation |
Yourself by contacting us in case of problems |
When you contact our help desk, we register your problem and will provide the best and fastest possible solution. For the performance of this processing, we rely on the “performance of our agreement”. |
When we receive the information by e-mail or post, we will keep your personal data for up to 6 months after the termination of the collaboration unless legal obligations would impose a different period. If we receive the information about the problem by phone and we can solve the problem on the phone, we do not record data from this call. |
Id Contact details Data regarding charging : number of kWh, charging location, time of charging, presence (time) at charging position. |
Yourself through collaboration |
We need this information to bill for our services and to contact you with questions. For the performance of this processing, we rely on the 'performance of our agreement'. The personal data related to charging may also be transmitted to your employer as part of the contractual relationship with your employer. The processing that your employer carries out with this personal data, will be communicated to you by your employer. |
We keep your personal data for 10 years after the end of the current fiscal year. This relates to both the legal deadline for billing and statute of limitations around fraud prevention. The retention periods for this processing will be communicated by your employer. |
Id Contact details Details about the use of electricity in your residence |
Yourself through the cooperation that was chosen |
If you have chosen the Load Balancing option, we need this data to provide the service. To carry out this processing, we rely on the "consent" included in the agreement.
|
We will keep your personal data for up to 6 months after the end of the collaboration, unless legal obligations would impose a different period. |
Id Contact details Details of use and consumption in all its facets (see processing above) |
Yourself through collaboration |
Both within the customer area on the website and on the APP, you can find overviews of all your activities related to the services of our collaboration. |
Within the operational system, we keep your personal data for 1 year after the customer relationship ends. However, your personal data are kept in e.g. the financial system (paper/digital) according to the legal deadlines with a max. of 10 for both the legal deadline for invoicing and prescription deadlines around fraud prevention. |
Id Contact details Any personal data you wish to share with us as part of your inquiry. |
Yourself when you contact us for a request for information |
When you contact us for information, we use the personal data provided to contact you in the context of your request. The legal basis for this is “Performance of the agreement”. |
If we receive the inquiry by e-mail or post, we will keep your personal data for 2 years after the termination of the cooperation unless legal obligations would impose a different period. If we receive your inquiry by phone and we can solve the problem on the phone, we do not record any data from this call. |
Id Contact details Any personal data you wish to share with us in connection with a complaint. |
Yourself when you contact us to pass on a complaint. |
If you contact us to make a complaint, we will use the personal data provided to contact you in connection with your complaint. The legal basis for this is "Performance of the Agreement. |
We store your personal data for up to 6 months after the termination of the collaboration, unless legal obligations impose a different period. |
Id Details of use and consumption. |
Yourself and any third parties when we believe it is necessary. |
We must ensure that no fraud can happen with our cards or that it is detected as soon as possible. The legal basis for this is "Justifiable Interest". |
We keep your personal data for 10 years after the end of the current fiscal year. |
PART 4 : PERSONAL DATA IN THE CONTEXT OF THE SERVICES offered by CenEnergy when you wish to conclude or conclude an agreement with us as a private individual
When do we collect which personal data from you, what do we do with it, why are we allowed to do this and how long do we keep it?
Category(s) of personal data |
Source |
Why do we ask them and why are we allowed to do this? |
Retention period |
Id Contact details Details of your residence |
Yourself through the partnership in case you want a charging station at your home. |
Preliminary action to determine if installation of a charging station is possible and if so, document preparations. We also need this information to bill our services and contact you with questions. To carry out this processing, we rely on the "preparation to reach an agreement |
We store your personal data for up to 6 months after the termination of the collaboration, unless legal obligations impose a different period. If the assessment shows that a charging station cannot be installed, we delete your data within 6 weeks after the audit report was sent. |
Id Contact details Details of your residence |
You, through the cooperation, in case the installation of a charging station at your home has been approved. |
We need this information to install the charging station. For the performance of this processing, we rely on the 'performance of our agreement'. |
We keep your personal data (the details of your residence) for 2 years after the termination of the cooperation unless legal obligations would impose a different deadline |
Id Contact details The information you give us in connection with a problem with the installation |
Yourself by contacting us in case of problems |
When you contact our help desk, we register your problem and will provide the best and fastest possible solution. For the performance of this processing, we rely on the ”performance of our agreement”. |
When we receive the information by e-mail or post, we will keep your personal data for up to 6 months after the termination of the collaboration unless legal obligations would impose a different period. If we receive the information about the problem by phone and we can solve the problem on the phone, we do not record data from this call. |
Id Contact details Data regarding charging : number of kWh, charging location, time of charging, presence (time) at charging position. |
Yourself through collaboration |
We need this information to bill for our services and to contact you with questions. For the performance of this processing, we rely on the 'performance of our agreement'. |
We keep your personal data for 10 years after the end of the current fiscal year. This relates to both the legal deadline for billing and statute of limitations around fraud prevention. |
Id Contact details Details about the use of electricity in your residence |
Yourself through the cooperation that was chosen |
If you have chosen the Load Balancing option, we need this data to provide the service. For the execution of this processing, we rely on the “consent” included in the agreement. |
We will keep your personal data for up to 6 months after the end of the collaboration, unless legal obligations would impose a different period. |
Id Contact details Details of use and consumption in all its facets (see processing above) |
Yourself through collaboration |
Both within the customer area and on the APP, you can find overviews of all your activities related to the services of our cooperation. |
Within the operational system, we keep your personal data for 1 year after the customer relationship ends. However, your personal data are kept in e.g. the financial system (paper/digital) according to the legal deadlines with a max. of 10 for both the legal deadline for invoicing and prescription deadlines around fraud prevention. |
Id Contact details Any personal data you wish to share with us as part of your inquiry. |
Yourself when you contact us for a request for information |
When you contact us for information, we use the personal data provided to contact you in the context of your request. The legal basis for this is “Performance of the agreement”. |
If we receive the inquiry by e-mail or post, we will keep your personal data for 2 years after the termination of the cooperation unless legal obligations would impose a different period. If we receive your inquiry by phone and we can solve the problem on the phone, we do not record any data from this call. |
Id Contact details Any personal data you wish to share with us in connection with a complaint. |
Yourself when you contact us to pass on a complaint. |
If you contact us to make a complaint, we will use the personal data provided to contact you in connection with your complaint. The legal basis for this is “Performance of the agreement”. |
We store your personal data for up to 6 months after the termination of the collaboration, unless legal obligations impose a different period. |
Id Details of use and consumption. |
Yourself and any third parties when we believe it is necessary. |
We must ensure that no fraud can happen with our cards or that it is detected as soon as possible. The legal basis for this is "Justifiable Interest". |
We keep your personal data for 10 years after the end of the current fiscal year. |
PART 5 : GENERAL processing operations with PERSONAL DATA applicable to all previous parts.
When do we collect which personal data from you, what do we do with it, why are we allowed to do this and how long do we keep it?
Category(s) of personal data |
Source |
Why do we ask them and why are we allowed to do this? |
Retention period |
All personal data processed by us.
|
See parts above. |
We have both contractual, legal obligations and a legitimate interest to process all personal data in our data centre to be able to perform all services correctly. |
See sections above depending on processing. |
Charging data: number of kWh, charging location, time of charging, presence (time) at the charging position. Data on problems and interventions. |
See parts above. |
We have a legitimate interest in monitoring the use of the charging stations and a contractual obligation to invoice. |
See sections above depending on processing. |
All necessary personal data in the context of a possible legal procedure. |
You, third parties, the employer/organisation. |
We have a legitimate interest to initiate legal proceedings when our rights are violated, and we wish to defend them |
Personal data required for the proceedings will be deleted 5 years after the conclusion of the proceedings / court ruling. |
Processing of special categories of data
CenEnergy does not process personal data of special categories within our relationship.
Note: When the customer uses the 'Load Balancing' option, an in-depth analysis could potentially define certain behavioural patterns. However, CenEnergy will never perform such analyses unless it is strictly necessary to solve technical problems.
Further processing
CenEnergy does not carry out any further processing with the personal data of customers than the processing operations described above.
How do we protect your personal data?
Your privacy is our top priority, which is why we make every effort to secure your personal data. We have taken all appropriate technical and organisational measures to protect your data against a possible data breach. Detailed information on the technical and organisational measures can be requested from the DPO via dpo@cenenergy.be.
Who has access to your personal data?
Internal
Within our organization, only authorized personnel and persons we designate have access to your personal data. These are only those persons who require access for the proper performance of their duties or for the needs of the service.
External
Personal data will not be passed on by us to third parties/processors, unless:
- There are legal obligations.
- For the execution or conclusion of our agreement, it is necessary that we pass on some data to partner companies such as transporters.
- Each of these parties provides the necessary guarantees that your personal data is processed in accordance with the requirements of the Belgian privacy legislation and the European Data Protection Regulation and all implementing decrees.
THIRD PARTIES/PROCESSORS WHO RECEIVE PERSONAL DATA FROM CENENERGY
The government as in the context of legal investigations.
Lawyers, bailiffs, government inspectorates and similar third parties in the context of investigations or legal proceedings.
If you, as an employee, have a charging station agreement with your employer, certain personal data will be forwarded to your employer. See the details (categories, legal basis, retention periods) in the summary tables above.
International
No personal data will be transferred to third parties or processors in inadequate countries.
Other
Your personal data, except in the situations described above, will not be transferred to third parties without your prior consent. Under no circumstances will they be sold, rented or made available to third parties without your prior consent.
What are your rights as a data subject?
As a data subject, you have several rights regarding your personal data. These are described below.
Right |
Description |
The right to information |
This right is described in this document |
The right of access |
You can always send CenEnergy a request to view or obtain an expression of all the data stored by us in a readable format. When you request this information, CenEnergy will provide it with all necessary information such as: the processing operations, the retention period, the legal grounds for processing and the recipients. If we have any doubt about the applicant's identity, we may request additional identification at any time. This information will be sent to you within the month. Exception is made for the right of access to camera images: when this right is invoked, we are not obliged to send you a copy, but we would like to invite you to watch a particular fragment together. |
Right of rectification |
You have the right to have any personal data we process about you amended if you know or suspect that it is inaccurate. CenEnergy will update it as soon as possible. |
Right to object |
You have the right to object to any processing of your personal data for which we believe we have a legitimate interest. The processing of relevant personal data will cease, unless we cite compelling legitimate grounds for such processing which outweigh your interests, rights and freedoms or if these personal data are related to the establishment, exercise or substantiation of a legal claim. |
Right of removal |
If you no longer wish CenEnergy to process your personal data, you can request by e-mail to CenEnergy to remove this data from our files/databases. However, this is not an absolute right and you should be aware that other legislation may limit this right. For example, you cannot request deletion of data for which a legal retention period has been established and this retention period has not yet been reached. All personal data that we process about you based on “consent” can be deleted immediately when you withdraw the consent. This can be done on simple request by sending an e-mail to the DPO via dpo@cenenergy.be. However, if there are disputes, e.g. a lawsuit or other discussion that may have legal consequences, our interest in retaining this data is more important than your right to erasure. If such activities are ongoing, we cannot delete data. dpo@cenenergy.be |
Right to restriction of processing |
If you do not agree with one or more of the processing operations that CenEnergy carries out on your data, you can invoke a restriction on this. This can be done by simply sending an e-mail to the DPO via dpo@cenenergy.be |
Right to data transfer |
If you wish to switch to another employer, you can ask CenEnergy by e-mail to the DPO via dpo@cenenergy.be to provide the data you have provided in a digital format so that you can communicate it to your new employer. [This right only applies to personal data processed based on consent or for the performance of a contract] |
The right to withdraw your consent
|
If you have given permission to process certain personal data, you can withdraw this consent on simple request via dpo@cenenergy.be. |
The right to file a complaint with the Belgian Authority |
If you suspect or think that CenEnergy is handling your personal data carelessly or is not respecting the rights described above, you may file a complaint about it with the competent Belgian Authority at the following address: Data Protection Authority, Complaints Service, Printing Press Street 35, 1000 Brussels. |
Who do you contact in case of questions regarding the policy?
If you have any questions regarding this privacy policy or the exercise of your rights in this context, please contact the DPO via dpo@cenenergy.be
Changes to the privacy policy
CenEnergy reserves the right to unilaterally amend the Privacy Notice. In the event of any changes to this Privacy Notice, you will be notified by e-mail.