Who are we?
Group Securex vzw, acting in its own name and for its own account, as well as in the name and for the account of all legal persons forming the economic entity Group Securex (Securex for short), whose registered office is located in Belgium, in 1040 Brussels, Tervurenlaan 43, VAT BE0419.678.319, RPR Brussels and which can be reached by telephone at + 32 2 729 92 11, fax +32 2 705 28 92 and by e-mail at info@securex.be
Securex an international player in the field of social administration and HR for individuals, start-ups, the self-employed, SMEs and large companies. As a full-service HR partner, we focus on the well-being and talent of employees, collaborators, partners, clients and the self-employed. Sustainable employability is important, for everyone. Therefore, we develop various solutions to support those involved preventively and proactively.
In doing so, Securex also develops and manages HR management solutions that help companies and their employees streamline their most important HR processes.
This privacy statement covers the processing of personal data when using MySecurex.
In doing so, we always attach great importance to the protection of your privacy and your personal data and to your feedback.
Purpose of processing personal data
MySecurex is a complete and integrated self-service platform for customers, partners and employers to communicate with Securex in a fast and efficient way. Through this platform you can:
- Launch a new question and track its status where and when you want to
- Further communicate with us about your request
- View the history of your communications with us
- View a summary of invoices and payment status
- Consult a calendar with the important dates related to indexing and tax and social deadlines
- Review and follow up on your to do's regarding your client file(s)
- Consult your company and customer data and request changes
Personal data is hereby processed in accordance with the European Regulation (EU) 2016/679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter AVG) in connection with the use of our services.
Your personal data will then be processed for the following purposes:
- To register and identify you as a user of and provide access to our tools and information
- To manage your file(s) correctly and efficiently
- To provide you via our support tool with an insight or overview of the information, documentation and personalized documents we hold
- To provide you, if applicable, with overviews and statistics, including on the status of social contributions, withholding taxes and evolutions of social contributions.
- To provide you with an overview of any outstanding items as part of debtor management
- To proactively inform you of upcoming events
- To fulfill and follow up on your questions or requests
- To evaluate the ease of use and utilization of the platform and monitor and evaluate the needs of users
Legal basis for the processing
The legal basis for processing personal data while using MySecurex is based on:
- The execution of the connection agreement between you or your organization and Securex
- Your request or consent to process or share data
The legal basis for monitoring, analyzing and evaluating MySecurex and our services by and with users is based on Securex's legitimate interest in optimally managing its services and products and understanding how they are experienced and used so that ease of use, performance and services in general can be optimized.
The legitimate interest of Securex is also the legal basis for processing personal data of contact persons or representatives of the employer regarding
- Customer Contract & Relationship Management: for business management and its optimization
- Direct marketing activities: to promote the services of EDPB Securex, as well as the services of the other Securex entities, to its customers
Securex will only send you general newsletters and/or e-zines if you have given your permission to do so.
Categories of stakeholders
Securex processes personal data of users of MySecurex (employers, partners, self-employed...), their representatives and employees of the companies involved who have a connection or agreement and use this service.
Categories of data processed
Personal data can be defined as any information relating to an identified or identifiable natural person (data subject).
Securex processes or may process the following data from you or your employees in function of your connections:
- Social and administrative data (including name, first name, national register number, date of birth, national register number and/or company number...)
- Contact information : address, phone number, e-mail address,...
- Occupational data and workstation data.
- Health data (absences, any fitness or inability...)
- Financial, tax & payroll data
- Navigation and platform user data: click and read behavior, open sessions, speed,...
Personal data can be supplied by you yourself, through your connection with one of the of entities of the economic entity Group Securex or through the use of our applications, through a partner or other representative or through a connection with a government crossroads database.
Data retention period
Securex will not store your personal data for longer than strictly necessary for processing purposes and for as long as required by law.
Confidentiality and data protection
In accordance with current legislation, Securex ensures an appropriate level of protection for personal data. These measures include the technical and organizational measures necessary to protect personal data against accidental or unauthorized destruction, against accidental loss, as well as against the modification of, access to, and any other unauthorized processing of personal data.
Nevertheless, Securex points out that no security system can guarantee 100% security. However, one can always contact us for all questions regarding the confidentiality and security of your personal data.
Recipients of data
Your personal data are processed and shared only in function of the purposes provided:
- Certain of such data may hereby be passed on to subcontractors, who provide certain services in the strict context of a subcontracting agreement and for the sole purpose of providing Securex with the necessary technical assistance.
- Via our applications, your personal data in our files may be shared with other employees who have been granted rights and/or access based on your approval or power of attorney or that of the responsible employer or manager, who is ultimately responsible for the affiliation agreements.
- Data can also be shared with other entities of the economic entity Group Securex if this is necessary or useful for client management and for the execution of the affiliation agreement or of separate agreements concluded between the affiliated party and this legal entity of Group Securex
However, it may also happen in exceptional cases that Securex must pass on certain personal data to the supervisory authorities, to our lawyers, to our experts or to judicial authorities.
Transfer of data to third countries
Securex does not transfer personal data outside the European Economic Area.
If a data transfer to a country outside the EEA should nevertheless be necessary for the performance or provision of services, Securex will implement appropriate safeguards in accordance with data protection legislation and ensure that enforceable rights and effective remedies are available to data subjects.
To ensure enforceable rights and effective remedies for data subjects, the processing and transfer can then only take place under one of the following conditions:
- The transfer is to a country that provides an adequate level of protection based on European Commission adequacy decisions
- The transfer is to a (sub-)processor to which Binding Corporate Rules (BCRs) apply. These corporate rules guarantee an adequate level of protection
- The transfer is to a (sub-)processor with which an additional model agreement has been concluded (Standard Contractual Clauses, cf. (EU) 2021/914 of 4 June 2021) and for which an additional risk analysis has also been carried out beforehand. The contractual clauses and any additional measures following a prior risk analysis or data transfer impact assessment must then provide the necessary guarantees in terms of data protection
If there are no appropriate guarantees about the level of protection, Securex will not transfer (or have transferred) personal data to such third countries, unless with the consent of the data subject.
Your rights
Through MySecurex, you can learn about your data and, where necessary and/or possible, correct it yourself.
You can learn about the data processed by Securex and, if necessary, have it corrected by means of a dated and signed request, sent together with a copy of the recto of the identity card via e-mail to the address privacy@securex.be or by mail to Group Securex, Data Protection Officer, Tervurenlaan 43, 1040 Brussels.
Moreover, you can oppose or request the restriction of data processing according to the same modalities and within the limits established by the AVG. You can also request that your data be deleted or transferred. More information can be obtained at the same address.
Therefore, although we take your rights and freedoms seriously, they do not apply in all circumstances and there may be circumstances where we are unable to comply with your request, for example where this would mean that we would not be able to comply with our own legal or contractual obligations with, for example, your employer, as the data controller. In these cases, we will always let you know why we cannot comply and whether you need to contact your employer, for example.
If you believe that there has been a breach with respect to the processing or your rights, you may file a complaint with the Data Protection Authority. if necessary.