Privacy Notice

1. GENERAL

This notice explains how, as a data controller, Isabel NV/SA, part of Isabel Group, (“we”, “us”, “our”) with offices at Keizerinlaan 13-15, 1000 Brussels (phone: +32 2 545 17 11) processes personal data we collect from you.

 

2. UPDATES TO THIS PRIVACY NOTICE

We reserve the right to modify this notice at any time, but will in any case do so in accordance with the applicable laws and regulations. We will inform you by email, when possible, of any substantial changes to this notice.

This notice was last modified and revised on the 18/05/2021.

 

3. INFORMATION WE COLLECT

3.1 CUSTOMER RELATIONSHIP

When you or your company becomes a customer of Isabel Group, we collect the following types of personal data about you:

  • a. Identification data: your name, email address, language preference and phone number, we will also assign you or your company a customer number;
  • b. The products you or your company uses and invoicing information.

When you contact us through our website or by phone, we collect the following types of personal data about you:

  • a. Identification data: your name and title, email address and phone number;
  • b. Information relating to your company: your company name;
  • c. The messages you are sending us;
  • d. Any information shared during the call

We may also collect, when you provide it, information relating to your personal assistant.

3.2 CUSTOMER SUPPORT

When we initiate a screen sharing session with you, to support you in the use of our products, we collect the following types of personal data about you:

  • a. Identification data: your name and email address;
  • b. Any information shared during the screen sharing session (audio and video).

When we contact you regarding “parked payments” (payment transactions suspended because of their unusual characteristics), we collect the following types of personal data about you:

  • a. Identification data: your name and email address;
  • b. Your decision to release or cancel the payment;
  • c. Any information shared during the call.

When you participate in one of our surveys, we collect the following types of personal data about you:

  • a. Identification data: your name and email address;
  • b. The responses you provided to the survey.

3.3 MARKETING

When you register and attend an event we organise, we collect the following types of personal data about you:

  • a. Identification data: your name and title, email address and phone number;
  • b. Information relating to your company: your company name;
  • c. Any other information relating to the event.

We also collect personal data about you from other events organisers to which you have provided consent to share those personal data with us.

When you register for and attend a webinar, we collect the following types of personal data about you, through Zoom, the platform hosting the webinars:

  • a. Identification data: your name, email address, phone number and IP address;
  • b. Data relating to your company: its name and VAT number;
  • c. Data relating to security: security logs, connection and activity logs, and the user agent of your web browser;
  • d. The questions you may send during the webinar.

When you register to our newsletter, we collect the following types of personal data about you:

  • a. Identification data: your name, professional email and language preference;
  • b. Work information: your company name and address;

Your device and usage information are also collected when you read the newsletters.

When you request to receive a cost estimate by email via our Calculator (https://calculator.multibanking.eu/en), we collect the following type of personal about you:

  • a. Identification data: your name and professional email;
  • b. Information about additional users: their name(s) (optional); and
  • c. Information related to your company and potential use of our services: the number of bank accounts you would like to link in Isabel 6, the options you would like to use and the service cost estimate.

When you do not provide your email address, we do not store any other data encoded.

3.4 RECRUITMENT

When you apply to one of our vacancies or send a spontaneous application, we collect the following types of personal data about you through Otys (https://careers.isabelgroup.eu/), our selected recruitment partner:

  • a. Identification data: your name, title, home address, phone number and email address;
  • b. Data describing you: your birth year, nationality, photo (if you chose to share one), whether you have a driving license, your preferred means of transportation and if you are willing to travel as part of your employment;
  • c. Employment data: your employment status, your last, current and previous employers, activity sector, job category, job title and the year you started these jobs, your CV (if you chose to upload one) or LinkedIn page URL (if you chose to share it);
  • d. Education data: your education level, obtained degrees and the schools that issued them;
  • e. Information relating to your application: the position you apply for, the date and status of the application, and the estimated date at which you would be available to start at a new position;
  • f. Other: Any document you chose to attach to your application such as a CV or cover letter, references provided and the results of assessments centres, cognitive and personality tests.

When you are received for a job interview, we may collect all the above-mentioned types of personal data about you as well as any information you wish to provide during the interview. In particular, we may ask you questions relating to:

  • a. The reasons of your application for this specific job;
  • b. Your personality, your strengths and weaknesses, your skills and career objectives;
  • c. Your work experience, realisations and achievements;
  • d. Your current salary, compensation and benefits and your expectations for the job you are applying for.

3.5 WEBSITE BROWSING

While you browse our website, we collect the following types of personal data about you:

  • a. Identification data: your IP address;
  • b. Data relating to security: security logs, connection and activity logs, and the user agent of your web browser;
  • c. When you allow us, we also collect data relating to your use of the website such as the pages you consulted or if you already visited our website in the past.

4. PROCESSING PURPOSES

Your personal data is processed for the following purposes:

  • a. Where it is necessary for the performance of a contract between you and us or in order to take steps, at your request, to enter into a contract:

    • i. To allow you to register to and attend our webinars or our events;
    • ii. To answer your questions when you contact us;
    • iii. To manage the relationship with our and customers of other entities of the Isabel Group;
    • iv. To take steps to potentially enter into an employment contract with us.
  • b. Where you have given your consent:

    • i. To allow us to send you promotional offers and information on our and other members of the Isabel Group products, in line with your choices;
    • ii. To provide you with the cost estimates and information about the services you have requested;
    • iii. To send you surveys, allowing us to receive feedback allowing us to improve our products;
    • iv. To initiate screen sharing session when you request it to obtain support.
  • c. Where necessary for our legitimate interests, as listed below, and where not overridden by your interests or fundamental rights and freedoms:

    • i. To send existing customers information on the evolution of Isabel NV/SA and Isabel Group and their products; you may request these communications to stop at any time through an unsubscribe link present at the bottom of every communication;
    • ii. To allow for business correspondence and business meetings to take place;
    • iii. To improve the services we provide by identifying e.g. trends, recurrent issues, customer behaviours, through your use of our services;
    • iv. To ensure the security of our website and its database;
    • v. To allow review of past calls for training of agents and for quality control;
    • vi. To retain a trace that a parked payment was asked for release or cancellation by the payment initiator;
    • vii. To retain traces of actions taken during screen sharing sessions;
    • viii. To get non-nominative information on the visitors that consult our websites.

    For these purposes, we have conducted a balancing test, as the law requires, and have determined that, taking into account the limited personal data collected, the processing performed and your reasonable expectations, our legitimate interest in conducting this processing is not overridden by your interests or fundamental rights and freedoms.

  • d. Where it is necessary for us to comply with our legal obligations.

5. DISCLOSURE AND TRANSFER OF PERSONAL DATA

In order to deliver our services to you and for the above purposes, we need to share your personal data with:

  • a. Isabel NV/SA and Isabel Group personnel with access on a “need to know” basis and to contractors who have signed a confidentiality agreement with us.
  • b. Third party processors, located in the European Economic Area, who support us in the processing of your personal data only on our instructions and who are subject to appropriate confidentiality clauses:

    • i. Tobania, who provides and maintains our call centre and customer relationship solutions.
    • ii. Microsoft, who provides and maintains our customer relationship and screen sharing solutions.
    • iii. Connective, who provides us with a digital document signing solution.
    • iv. Google Analytics, who provides us with simple statistics on the number of unique visitors on our website.
    • v. Amazon Web Services (AWS), who ensure the hosting of our platform.
    • vi. SurveyAnyplace, who provides us with a survey solution.
    • vii. Groep Arthur, who helps us with the organisation of events.
    • viii. Korn Ferry, who conducts skill assessments for us when you apply for a position that requires such assessment.
    • ix. Otys, who provides us with a recruitment platform.
    • x. Flexmail, who sends out email communications on our behalf.
  • c. Third party processors located in the United States of America, who support us in the processing of your personal data only on our instructions and who are subject to appropriate confidentiality clauses:

    • i. Zoom, who provides us with a webinar solution.
    • ii. Mailchimp, who provides us with a newsletter solution.
  • d. YouTube, an independent controller, located in Ireland, who provides services to display videos on our website.
  • e. Google, an independent controller, located in Ireland, who provides reCAPTCHA, an anti-spam solution on our website.
  • f. Government institutions or regulatory bodies in compliance with our reporting obligations.

6. DATA SECURITY AND RETENTION

Your personal data is and will be kept strictly confidential.

We take all reasonable steps to protect your personal data. This includes setting up processes and procedures to minimise the unauthorised access to, or disclosure of your personal data. We ensure that the third parties we share your personal data with also have adequate security measures in place.

We will store your personal data for as long as it is necessary to achieve the purposes defined in section 3 (Processing Purposes), with maximum retention periods as defined below:

  • a. Your contact information and information used to allow you to sign contracts digitally will be kept until the end of our contractual relationship.
  • b. Basic customer data and billing information will be kept for 10 years after the end of our contractual relationship.
  • c. Calls and screen sharing recording will be kept for 1 month.
  • d. Data collected to release or cancel parked payments will be kept for 10 years.
  • e. Data collected to allow you to register and attend our events will be kept for 1 month after the events take place.
  • f. Data collected to allow you to register and attend our webinars will be kept for 12 months.
  • g. Data collected through surveys will be kept for 12 months.
  • h. Data collected for statistics purposes will be kept for 14 months.
  • i. Data collected for marketing purposes will be kept for as long as we have your consent.
  • j. Technical logs will be kept for a maximum of 6 months.

7. AUTOMATED DECISION-MAKING AND PROFILING

No automated decisions will be taken about you nor will profiles be made as part of the processing described in this notice.

A profile of your behaviour when you use our website will be created if you accept our advertising and tracking cookies to be placed on your computer.

8. YOUR RIGHTS

You have the right to ask us for a copy of your personal data, to ask us to correct, delete or restrict (stop any active) processing of your personal data and to obtain the personal data you provided us in a structured, machine-readable format. In addition, you can object to the processing of your personal data in some circumstances (in particular when we do not have to process your personal data to meet a contractual or other legal requirement).

Where we have asked for your consent, you may withdraw this consent at any time; however, this will not affect processing that has already taken place before the withdrawal. You may withdraw your consent by deleting the cookies linked to our domain.

You may exercise the above-mentioned rights by contacting us as described in the “Contact us” section below.

These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information that we are required to keep by law or that we have a compelling legitimate interest to keep.

If you have unresolved concerns, you have the right to complain to the Data Protection Authority: https://www.dataprotectionauthority.be/.

9. CONTACT US

If you have any questions about this Privacy Notice or wish to contact us for any reasons in relation to the processing of your personal data, please contact our Data Protection Officer at Isabel NV/SA, by sending an email to privacy@isabelgroup.eu, or by sending a dated and signed request to Isabel NV/SA, Keizerinlaan, 13-15, 1000 Brussels, Belgium.

10. COOKIES