This Policy has been drawn up by:  OPERATEUR DE TRANSPORT DE WALLONIE, Société anonyme de droit public (SA), and registered in the Crossroads Bank of Enterprises under company number BE 0242.069.339. 

Address: Avenue Gouverneur Bovesse (JB), 96 in B-5100 Jambes (Namur) – Email: [email protected] 
Hereinafter, the “TEC”, “we”, “us” or “our” 

We are especially attentive to the protection of personal data (hereinafter referred to as “the data”) and to respecting the privacy of all individuals who are brought into contact with us. We act in a transparent fashion, in accordance with the national and international provisions in this regard, and in particular EU Regulation 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and the free movement of such data, and repealing directive 95/46/EC (hereinafter referred to as “the General Data Protection Regulation” or “GPDR”).

This policy may be amended at any time, in particular to ensure that we comply with any changes to regulations, case law or technology. We recommend that you consult it regularly. 

For our website, please read our cookie policy, which you can view at this link.

You can contact us in response to any of the practices described below.

This declaration is intended for all individuals whose data we process as data controller, such as users of our transport services or other products and services, and also visitors to our website and users of the mobile app, those who visit our offices and points of sale and those individuals who participate in a market survey, answer a questionnaire, enter a competition or attend an event, as well as to people who send us a request by email or using any other means of communication.  

This declaration is also intended for all individuals who perform the role of contact person at one of our suppliers, contractors or service providers, hereinafter referred to as “economic operators” and any enterprises whatsoever (businesses, public authorities, professional associations of employers or workers, schools, universities, etc.) with whom we have undertaken or are currently undertaking or intend to undertake a collaboration.

We wish to inform you that your data will be used in accordance with this data protection declaration.

We receive and process your personal data for a number of different reasons, and in this we apply a legal basis determined by GDPR (e.g. compliance with a legal obligation by which we are bound or the implementation of a contract concluded with you).

The table below lists the purposes and legal grounds for the related use of your personal data, and this in accordance with your profile.

1. If you are a user, the following table applies to you: 

2. If you are one of our economic operators, one of their workers or a person with whom we work in partnership, or one of their workers, this table applies to you:

3. The following table applies to you if you are a user, potential user, supplier or person with whom we work in partnership or if you have addressed a request to us: 

Unless there is a legal exception, you may refuse processing based on our legitimate interests, or where applicable you may withdraw your previous consent at any time simply by contacting us.

Depending on the intended use of the processing, the data processed is not the same.  Below you will find the data processed, listed by our end use.

You are entirely free to choose not to communicate your personal data to us. However, you should be aware that some services may be refused to you if you do not. We also wish to draw your attention to the fact that you will then be held solely responsible for the accuracy of the data you send to us and may contact us to correct it at any time.

We strive to only process the data that strictly requires it, in all circumstances.

1. If you are a user, the following table applies to you: 

2. If you are one of our suppliers, one of their workers or a person with whom we work in partnership or one of their workers, this table applies to you:

3. The following table is for you if you are a user, economic operator or person with whom we work in partnership or if you have sent us a request: 

The data listed above are accessible to people who are members of our team or where applicable act as partner workers, to our lawyers and all technical consultants and banking or insurance organisations only when strictly necessary. 

We may also send your data: 
a) at the request of a legal, judiciary, administrative or auxiliary justice authority; or 
b) in good faith and taking into consideration that this action is required in order to comply with any law or regulation in force; 
c) to protect and uphold our rights or those of other users of our services.

We may also allow our co-contractors - referred to as “subcontractors” - access to some data in the meaning of the legislation on data protection, but only if strictly necessary for the achievement of our goals, such as the functioning of apps or computerised management systems.

In all circumstances, we guarantee the protection of your data using agreements that guarantee confidentiality. 

For security reasons, the list of subcontractors, their field of activity, the goal pursued and where applicable the country in which the data is processed and hosted shall not be available on our site but may be accessed on request. We invite you to contact us to this end by sending an email to the following address: [email protected]. 

In principle, we avoid making transfers to outside the European Union. Where applicable, if we have to transfer this data to a country outside the EU, such transfers shall only be authorised if: 

• The European Commission has issued a decision granting adequate and equivalent protection to that specified by the European legislation, personal data will be transferred on these grounds. 
• The transfer shall be covered using adequate measures that provide a level of protection equivalent to that specified by the European legislation, such as the Commission Standard Clauses or any other agreement in accordance with article 46 of GDPR, consent.

The length of storage varies depending on the purposes of the processing of your data. This duration is limited to take into account any possible obligations regarding data storage imposed on us by the law. Below you will find a list of purposes and storage durations.

1. If you are a user, the following table applies to you: 

2. If you are one of our economic operators, their workers or a person with whom we work in partnership or one of their workers, this table applies to you:

3. The following table applies to you if you are a user, supplier or person with whom we work in partnership, or if you have sent us a request:

To guarantee an optimal level of security for data gathered on the website, we put appropriate technical and organisational measures in place (encrypting technology and security measures to protect and avoid loss, illegitimate use or alteration of the information collected on the websites). We take into account the state of knowledge, costs of implementation and the type, extent, context and purposes of the processing as well as the risks incurred for your rights and freedoms.

In all circumstances, we guarantee an appropriate level of technical and organisational security for your data, so that you can be warned in case of any data leaks and in particular of loss, destruction, public disclosure or unauthorised access as well as of any illegitimate use. However, if you are aware of the existence of a data leak or if you suspect one has taken place, we ask you to immediately contact us to report it.

Under no circumstances may we be held liable for any damage arising directly or indirectly from an erroneous or illegitimate manipulation of personal data committed by third parties.

Unless a legal provision in force in Belgium - including the GDPR - does not allow for it, you have the following rights under the regulations: 

• The right to access, including the right to know whether we process your data;
• The right to a copy of the data processed;
• The right to rectification of the data processed;
• The right to refuse the processing of your data, in particular if you wish to withdraw your previous consent, or for processing based on our legitimate interests;
• The right to limit processing of the data processed;
  •  If you are disputing the accuracy of this data. While waiting for assessment of interests present before exercising the right to refuse processing of some of your personal data. 
  • If the processing of your personal data is not carried out legitimately, but you nevertheless do not wish to exercise your right to delete the data. 
  • If we no longer require your personal data, but you require it in the context of legal proceedings.
• The right to delete the data processed. This right is not an absolute right however and we will not be able to apply it if a legal obligation requires us to process your data. 
• The right to portability for the data processed, i.e. the right to recover for your personal use or transfer to a third party of your choice the personal data that we process, and this in the same format in which we keep it.
• The right to lodge a complaint with the Data Protection Authority:

www.autoriteprotectiondonnees.be
Rue de la Presse, 35 - 1000 Brussels
Tel.: +32 (0)2 274 48 00
Fax: +32 (0)2 274 48 35
Email: [email protected]  

You can also lodge a complaint with the court of first instance in the legal district of your residential area. For further information on complaints and available appeals channels, we recommend you visit the following address for the Data Protection Authority: https://www.autoriteprotectiondonnees.be/citoyen/agir/introduire-une-plainte 

If you require any further information on your rights, please contact us. We will make sure we follow up on your request as quickly as we can and we will notify you of the action we have taken at the latest within the month following receipt of your request.

Depending on the degree of difficulty of your request and the number of requests we receive from others, this period may be extended by two months. In this case, we will warn you of this extension in the month following receipt of your form.

In addition, should it prove necessary, we may ask you to share a copy of your ID card so that we can check your identity. If so, the reply period of one month shall begin from the date of receipt of your ID card. 

In all circumstances, when this information is communicated we are always obliged to take the rights and freedoms of other people into account.

Should you wish to provide feedback regarding one of the practices described in this Policy, or if you want to exercise your rights, send an email to the following address: [email protected] or send a letter to the following postal address: Avenue Gouverneur Bovesse (JB), 96 - B-5100 Jambes (Namur).

These terms and conditions are subject to Belgian Law.

This Policy may be updated at any time and without prior notice of modification. We therefore recommend that you consult it regularly.
Last updated: May 2023.

GDPR - version EN from Le TEC on Vimeo.