Privacy notice Lochting platform
Summary: 2-minute-read
We take our obligation to protect your privacy seriously!
That is why we provide you with this 2-minute summary, containing the necessary information on how we process your Personal Data.
What you need to know:
First of all: you will always remain the sole owner of your data!
To whom does this Privacy Notice apply?
This Notice applies to any person whose Personal Data we may collect, use, share or otherwise process, and in particular to the users of the Lochting platform.
What information do we collect about you?
- Your identification details necessary for the creation of a user profile on the Lochting Platform;
- Your identification details that are necessary for your webshop, if you have one, bound by legal obligations;
- Your profile and usage data, related to your use of the Platform.
Why do we collect this information?
- To provide you access to the Lochting Platform through your personal user profile;
- To ensure that your webshop is in line with the legal requirements;
- To improve our services and ensure the security of the Lochting Platform.
Who has access to your data?
- Only that part of our team that needs your data for its operations has access to your information.
- Furthermore, we use some suppliers and service providers, such as, but not limited to, those offering computer security services, digital solutions and web hosting services. These parties are required by law to ensure your privacy at all times and will only process personal data in accordance with our purposes.
- Finally, a third party may be commissioned to process personal data. However, they can only do so for the abovementioned purposes, on our behalf and after signing a data processing agreement.
What are you in control of?
- You can ask us to change or delete your data at any time. To do so, please send us an e-mail to dpo@lochting.com and follow the procedure described in our full Privacy Notice under article 5.7.
- You can also request a copy of all the information we have collected about you at any time by sending an e-mail to the same address.
What do we do to protect your data?
- We adopted the required safety measures on a technical and an organizational level;
- Your data is stored on high-security servers within the European Union;
- In order to improve our services, we may use the data you provided. However, at all times, we shall use this data in a GDPR-compliant manner, using state of the art software and solutions;
- We have implemented internal procedures to ensure the confidentiality of our IT-infrastructure and to make sure it is managed responsibly.
If you want to know more: we invite you to read our entire Privacy Notice below, which explains everything in further detail.
PRIVACY NOTICE
LOCHTING PLATFORM
Version 1.0 – 05/09/2023
Article 1 – GENERAL
- A.C.N. Meditech, (hereinafter “we“, “us“, “our“, “Meditech“), with its registered office at Lodewijk De Raetlaan 20, 8870 Izegem, registered with the Crossroads Bank for Enterprises, under company number 0829.935.166, assumes responsibility for the processing of your Personal Data as “Controller“, including the use of the Lochting Platform (https://platform.lochting.com/) (hereinafter “Platform”).
Our Privacy Notice can be subject to future amendment and modification. In this event we will notify you with an invite to take a look at these changes, which we will clearly indicate in the Privacy Notice.
- In our Privacy Notice, “Personal Data” means any information relating to an identified or identifiable natural person. We may collect, use, share or otherwise process Personal Data of individuals belonging to the following categories:
- Users of the Platform (hereinafter “you”, “your”, “User”)
- The collection and processing of Personal Data is governed by strict conditions, enforced by law. We acts in accordance with :
- the EU Regulation of 2016 concerning the protection of individuals with regards to the processing of personal data, regarding the free movement of such data and repealing Directive 95/46/EC; (hereinafter “GDPR”); and/or
- all (future) Belgian applicable laws regarding the implementation of the GDPR or regarding the processing of Personal Data.
- The access to or use of the Platform implies your full and unreserved understanding of this Privacy Notice. This means that you were fully informed of how we collect, use and process your Personal Data, in accordance with the provisions of this Privacy Notice and for the purposes listed in this Privacy Notice.
Article 2 – CATEGORIES OF PERSONAL DATA PROCESSED
2.1 We may process the following categories of Personal Data for the purposes set out in Article 3:
| Data Category | Details | Context |
| Category 1Your identification and contact details | First- and last nameAddress Telephone numberE-mail addressAPB-numberVAT-numberRIZIV-number (optional)Password hashFunction title | Your identification and contact details will be provided to you when registering your account for the Platform. |
| Category 2Information about your usage of the Platform | Information related to your use of the Platform, such as:Login historyEmail preferences | Information about your usage of the Platform will be processed when you make use of the Platform. |
Article 3 – LEGAL BASIS AND PURPOSE OF PROCESSING
We process your Personal Data only when we have a specific purpose and a lawful basis for doing so. Moreover, we only process what is relevant to pursue each specific purpose in question, and in particular:
3.1 General purposes
| Data Category | Lawful basis | Purpose |
| Category 1Your identification and contact details | Necessary for the performance of the contract we have entered into or are considering entering into with youand/orYour consent | We process your identification details in order to be able to create a unique user profile through which you will be able to access the Platform, in accordance with the Platform’s Terms of Use. Additionally, you will be able to complete your user profile with additional information. For the processing of this Personal Data, we rely on your consent. |
| Category 2Information about your usage of the Platform | Our legitimate interestsand/orYour consent | We process information about your usage of the Platform in order to pursue our legitimate interests of improving our services, providing technical support and ensuring the functionality and security of our Platform.Where required or appropriate, we will ask your consent prior to collecting your usage information. |
3.2 Direct marketing
As part of our commitment to keep you informed, we may use your contact details to send promotional updates about similar products and services we provide, based on our legitimate interest. Other promotional communication, about different products and services, will only be sent if you have given us your prior consent to do so.
You can opt out of receiving such communications at any time, free of charge and without need for explanation. This can be done by clicking the unsubscribe button at the end of every promotional email or by sending an email to info@lochting.com.
3.3 Transfer to third parties
We treat Personal Data as confidential information and will not disclose it to third parties beyond the conditions outlined in this Privacy Notice or as required by law.
Your Personal Data may be shared with select third parties as necessary for our operations. This may include, but is not limited to, providers of IT support, hosting, computer security, and specialized services. Such third parties are prohibited from further disclosing your Personal Data, except when:
- Their suppliers or subcontractors require the data to support our operations;
- Legal or regulatory obligations compel them to share certain information or documents with relevant authorities.
We will not sell, rent, distribute or otherwise make your Personal Data commercially available to third parties, except as provided in this Privacy Notice, or when you have given your explicit prior consent.
In the event of our total or partial reorganization of, the transfer of our activities or in the event of us being declared bankrupt, your Personal Data may be transferred to new entities or third parties. We will inform you in advance of the fact that we transfer your Personal Data to such third parties.
3.4 Legal requirements
In exceptional occasions, we may be legally required to share your Personal Data due to a court order or in compliance with laws and regulations. If permissible, we will strive to notify you in advance of such a disclosure.
Article 4 – DURATION OF THE PROCESSING
We will retain your Personal Data for the duration necessary to fulfill the purposes listed in Article 3 of this Privacy Notice, including for as long as it is essential for the performance of the contract between us and you.
We may also retain your Personal Data to comply with applicable legal requirements, including requirements to retain your Personal Data further after termination of the contractual relationship between you and us. These include applicable limitation periods for billing, payment, accounting, tax and regulatory compliance purposes. The retention periods set out below may therefore be deviated from if such legal obligation applies.
Retention periods:
| Data | Retention period |
| Category 1Your identification and contact details | Your Personal Data contained in Category 1 will be retained for two (2) years after end of our contractual relationship. |
| Category 2Information about your usage of the Platform | Your Personal Data contained in Category 2 will be retained for one (1) years after the end of our contractual relationship. |
Article 5 – YOUR RIGHTS
5.1 Right of access and right to obtain a copy
You have the right to request access to your Personal Data at any time and to be informed about the purpose of our processing.
5.2 Right to rectification, erasure or restriction
You always have the right to ask us to rectify your Personal Data if you believe it to be incorrect or no longer up to date. You can also request the processing of your Personal Data to be restricted if you think that your Personal Data is inaccurate and you subsequently notified us about this.
In addition, you have the right to ask us to erase your Personal Data in as far as we were not able to anonymize it, meaning you can exercise your right to be forgotten.
Furthermore, you acknowledge that a refusal to share data or a request to erase your data may make the delivery of several of our services impossible.
5.3 Right of objection
You have the right to object to the processing of your Personal Data if you have legitimate reasons and communicate them to us.
You also have the right to object to the use of your Personal Data for direct marketing. In this case, you do not need to provide a specific reason for your objection.
5.4 Right to data portability
You have the right to request to obtain your Personal Data processed by us in a structured, commonly used format and/or to transfer such data to another controller.
5.5 Right to withdraw consent
Where the processing of your Personal Data by us is based on your prior consent, you have the right to withdraw this consent at any time. Your withdrawal of consent shall not affect the lawfulness of processing based on consent before such withdrawal.
5.6 Automated decisions and profiling
You will not be subjected to decisions based solely on automated processing which produces legal effects concerning you or similarly significantly affects you.
Nevertheless, you have the right to request us not to be subject to such automated decision making.
5.7 Exercising your rights
You can exercise your rights by contacting us with a copy of the essential parts of your proof of identity, such as name and date of birth, attached:
Either through email to dpo@lochting.com
Or via ordinary mail to,
Meditech DPO
Lodewijk De Raetlaan 20
8870 Izegem
BELGIUM
5.8. Right to file a complaint
If you feel unhappy about how we treated your personal data or handled your privacy requests (which we truly hope won’t be the case), you have the right to lodge a complaint with the data protection supervisory authority:
Data protection authority,
Drukpersstraat 35, 1000 Brussel,
Tel: +32 (0)2 274 48 00, Fax: +32 (0)2 274 48 35,
E-mail: contact@apd-gba.be
This is without prejudice to proceedings before the civil courts. If you are from an EU member state other than Belgium, you can also complain to your national data protection authority (a list of the data protection authority for each EU member state can be found here: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm).
If you have suffered damages as a result of the processing of your Personal Data, you may file a claim for compensation.
Article 6 – SAFETY AND CONFIDENTIALITY
We have taken security measures that are appropriate on a technical, organizational and physical level to prevent the destruction, loss, falsification, modification, unauthorized access or notification of Personal Data accidentally to a third party, as well as the unauthorized processing of such data.
If these events should nevertheless occur and affect your Personal Data, we will, where appropriate and permitted by law, notify you of the breach without undue delay, including a brief description of the potential consequences and a recommendation for measures to mitigate the potential negative impact of the breach.
We are in no way liable for any direct or indirect damage caused by an unlawful or improper use of the Personal Data by a third party.
At the same time, you also share responsibility for maintaining your privacy, for example by not allowing third parties to see your confidential communication(s).
Article 7 – APPLICABLE LAW AND JURISDICTION
This Privacy Notice is administered, interpreted and implemented in accordance with Belgian law which is exclusively applicable to any potential dispute.
The courts and tribunals of Ghent shall have exclusive jurisdiction to settle any dispute arising out of or in connection with the interpretation or implementation of this Privacy Notice.