Privacy Policy

1. Parties et objet

MD Hospitality SRL
Boulevard de la Sauvenière 17, 4000 Liège
BCE/TVA : 0753944079
Mail : hello@md-hospitality.be Téléphone : 042650947

MD Hospitality has created this Privacy Policy to provide transparency to the Users of the website at the following address www.md-hospitality.be, of how personal data is collected and processed by MD Hospitality.

The term "User" refers to any user, i.e. any natural or legal person, who visits or interacts with the Site in any way.

In this respect, MD Hospitality determines all technical, legal and organisational means and purposes for the processing of the personal data of Users. To this end, MD Hospitality undertakes to take all necessary measures to ensure that the processing of personal data complies with the Act of July 30, 2018, on the protection of natural persons with regard to the processing of personal data!res staff and the European Regulation of April 26, 2016 on the protection of data of natural persons with regard to the processing of personal data and on the free movement of such data.

MD Hospitality is free to choose a natural or legal person who processes the personal data of users at its request and on its behalf. If applicable, MD Hospitality undertakes to select a subcontractor who provides sufficient guarantees on the technical and organisational security measures for the processing of personal data, in accordance with the law and the Regulation.

2. Processing of personal data

The use of the Site by Users may result in the communication of personal data. The processing of such data by MD Hospitality, as controller, or by service providers acting on behalf of MD Hospitality, is carried out in accordance with the Act and the Regulation.

Personal data will be processed by MD Hospitality, in accordance with the purposes set out below, through :

Automated procedure, registration form, use of cookies

3. Purpose of processing personal data

In accordance with Article 13 of the Regulation, the purposes of the processing of personal data are communicated to the user and are as follows

To ensure the performance of the services offered through registration forms, to ensure the improvement of the website through the compilation of statistics, to answer the User's questions.

4. Personal data that may be processed

By visiting and using the Stie, the User agrees that MD Hospitality collects and processes the following personal data, according to the methods and principles described in this Privacy Policy:

Name, first name, date of birth, e-mail address, telephone number, postal address.

5. Consent

By accessing and using the Site, the User declares that he is aware of and gives his free, specific, informed and unambiguous consent to the processing of his personal data. This agreement relates to the content of this Privacy Policy.

Consent is given by the positive act by which the User has ticked the box that presents the Privacy Policy as a hyperlink. This consent is a necessary condition for the performance of certain acts on the Site or for the User to enter into a contractual relationship with MD Hospitality. Any contract between MD Hospitality and a User relating to the services and goods offered on the Site is subject to the User's acceptance of the Privacy Policy.

The User consents to the Data Controller processing and collecting the personal data provided by the User on the Site or in connection with the services offered by MD Hospitality for the purposes set out above, in accordance with the terms and principles set out in this Privacy Policy.

Users have the right to withdraw their consent at any time. The withdrawal of consent shall not affect the lawfulness of the processing based on the consent previously given.

6. Duration of storage of users' personal data

In accordance with Article 13 of the Regulation and the law, the controller shall not store personal data for a period longer than is reasonably necessary for the purposes for which they are processed.

This period is in any case less than 2 years.

7. Recipients of data and provision of data to third parties

Personal data can be transferred to employees, collaborators, subcontractors or suppliers of MD Hospitality who provide adequate safeguards for data security and who cooperate with MD Hospitality in marketing products or providing services. They act under the direct authority of MD Hospitality and are responsible for the collection, processing or outsourcing of such data

In all cases, the recipients of the data and those to whom the data is provided must comply with the content of this privacy policy. MD Hospitality assures that it will only process these details for the intended purposes, in a discreet and secure manner.

If data is provided to third parties for direct marketing or prospecting purposes, the user will be informed in advance so that they can give their consent to the use of their personal data.

8. Rights of the Users

The User may exercise his/her rights at any time by sending a message by e-mail to the following address hello@md-hospitality.be, or by sending a letter with a copy of his/her identity card by post to the following address Boulevard de la Sauvenière 17, 4000 Liège.

a. Right of access

In accordance with Article 15 of the Regulation, MD Hospitality guarantees the User the right of access to their personal data. The User has the right to access the said personal data, as well as the following information

  • the purposes of the processing ;
  • the categories of personal data concerned
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular those established in third countries or international organisations
  • where possible, the period for which the personal data are to be retained or, if this is not possible, the criteria used to determine that period
  • the existence of automated decision making, including profiling, as referred to in Article 22(1) and (4) of the Regulation and, at least in those cases, relevant information as to the underlying logic and the meaning and the intended consequences of such processing for the data subject.

The data controller may require payment of a reasonable fee for additional copies requested by the User, based on administrative costs.

If the User makes such a request electronically (e.g. via e-mail address), the information will be provided in a common electronic format, unless the User requests otherwise.

The copy of the information will be communicated to the User no later than one month after receipt of the request.

b. Right of correction

MD Hospitality guarantees the User the right to rectification and deletion of personal data.

In accordance with Article 16 of the Regulation, incorrect, inaccurate or irrelevant data may be corrected or deleted at any time. The User will first make the necessary changes themselves from their user/other account, unless this cannot be done independently, in which case a request can be submitted to MD Hospitality.

In accordance with Article 19 of the Regulation, the Controller shall notify each recipient to whom personal data has been disclosed of any rectification of the personal data, unless such disclosure proves impossible or would involve a disproportionate effort. The controller shall provide the data subject with information on such recipients upon request.

c. Right to erasure

The user shall have the right to have their personal data erased as soon as possible in the cases referred to in Article 17 of the Regulation. Where the controller has made the personal data public and is required to erase it pursuant to the previous paragraph, the controller shall, taking into account the technology available and the cost of implementation, take reasonable steps, including technical measures, to inform other controllers processing such personal data that the data subject has requested the erasure by those controllers of a link to, or a copy or reproduction of, such personal data.

The two preceding subparagraphs shall not apply to the extent that such processing is necessary for :

  • in order to exercise the right to freedom of expression and information;
  • for compliance with a legal obligation to which processing is subject under Union law or the law of the Member State to which the controller is subject, or in order to fulfil a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • for the establishment, exercise or defence of legal claims.

Pursuant to Article of the Regulation, the controller shall notify any recipient to whom personal data have been disclosed of the erasure of personal data or of the restriction of processing, unless this proves impossible or involves a disproportionate effort. The controller shall provide the data subject with information on such recipients upon request.

d. Right to restrict processing

The user has the right to obtain restriction of the processing of his/her personal data in the cases listed in Article 19 of the Regulation.

Pursuant to Article 19 of the Regulation, the controller shall inform any recipient to whom personal data have been disclosed of any restriction on processing, unless this proves impossible or would involve a disproportionate effort. The controller shall provide the data subject with information on such recipients upon request.

e. Right to data portability

In accordance with Article 20 of the Regulation, Users have the right to receive from MD Hospitality personal data relating to them in a structured, commonly used and machine-readable format. Users have the right to transfer such data to another data controller without interference from MD Hospitality in the cases provided for in the Regulation.

When exercising their right to data portability in accordance with the previous paragraph, users have the right to have their personal data transferred directly from one data controller to another to the extent that this is technically possible.

Exercise of the right to data portability shall be without prejudice to the right to erasure. This right shall not apply to processing which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

The right to data portability is without prejudice to the rights and freedoms of third parties.

f. Right to object and automated individual decision-making

The user has the right to object at any time to the processing of his/her personal data on account of his/her particular situation, including the automation of data by MD Hospitality. In accordance with Article 21 of the Regulation, MD Hospitality shall no longer process personal data, unless there are compelling legitimate grounds for the processing which override the interests and rights and freedoms of the User, or for the establishment, exercise or defence of legal claims.

Where personal data are processed for the purposes of canvassing, the User shall have the right to object at any time to the processing of personal data concerning him/her for such purposes, including profiling in so far as it is related to such canvassing.

Where the data subject objects to the processing for canvassing purposes, the personal data shall no longer be processed for such purposes.

g. Right of complaint

The user has the right to lodge a complaint about the processing of his/her personal data by MD Hospitality with the Data Protection Authority, which is competent for the Belgian territory. More information can be found on the website:
www.autoriteprotectiondonnees.be

9. Cookies

You can consult our cookies policy

10. Limitation of liability of the data controller

The Website may contain links to other websites that are owned by third parties unrelated to MD Hospitality. MD Hospitality is not responsible for the content of these sites or their compliance with the Laws and Regulations.

The holder of parental authority must give explicit permission for a minor under 16 years of age to have personal information or data included on the Website. MD Hospitality strongly advises persons exercising parental authority over minors to promote responsible and safe use of the Internet. The Controller cannot be held liable for the collection and processing of personal data and information from minors under 16 years of age whose consent is not effectively covered by that of their legal parents, nor for any inaccurate data - particularly age - entered by minors. Under no circumstances will personal data be processed by the data controller if the user indicates that they are under 16 years of age.

MD Hospitality is not responsible for the loss, damage or theft of personal data, especially caused by the presence of viruses or as a result of computer attacks.

11. Applicable law and competent court

This privacy policy is governed exclusively by Belgian law. Any dispute shall be submitted to the courts of the judicial district where MD Hospitality has its registered office.

12. Contact

For questions or complaints in relation to this privacy policy, the User can contact the Controller at the following address hello@md-hospitality.be