Privacy Policy

COSA Consulting attaches great importance to the protection of privacy and personal data

With this privacy statement (hereinafter referred to as the “Privacy Statement”), COSA Consulting BV wishes to inform the user in detail about the processing of his/her personal data and the attached rights when using COSA Consulting. We reserve the right to change this privacy policy.  We recommend you to thoroughly read this privacy statement.

Processing of Personal Data

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Personal data means any information relating to an identified or identifiable natural person (‘data subject’) an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

A Processor

A processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

A Controller

A controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

FOR WHOM DOES THIS PRIVACY POLICY APPLY?

This Privacy Statement applies to all prospects, customers, suppliers, visitors of the website, visitors of the COSA Consulting offices, applicants and all other person of whom COSA Consulting  process personal data

WHO IS RESPONSABLE FOR THE PROCESSING?

COSA Consulting is considered the data controller if he determines the purposes for which and the means by which personal data is processed. Only when COSA Consulting acts as data controller art  5 up to and including 9 of this privacy statement are applicable. If you as data subject want to exercise your rights, always address the data controller (responsible for the processing).

Based on the performance of a contract

COSA Consulting processes personal data necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract.

Personal data processed for customer and supplier administration.

• COSA Consulting submits a list (CRM) with contact details of customers, suppliers and prospects with the aim of sending commercial messages and proposals or for following existing contracts and / or orders. This list is also used to invite existing business relations to network events.

When filling out the contact form on the website.

• If you want more information about the services of COSA Consulting, it is possible via a web form on the website to contact COSA Consulting. Here, personal identification data are processed in order to provide you with a correct answer.

Based on your permission

When processing personal data based on your consent, you always have the right to withdraw your consent.

Use of targeted visual material on social media and the website.

• When publishing specific images on the social media and the COSA Consulting website, your permission will always be requested. With targeted visual material we mean images in which the person is clearly identified (close-up, image focused on a specific person, posed photo, …)

Based on legitimate interest of COSA Consulting

Use of camera images in and around the COSA Consulting office spaces & buildings.

• In and around the COSA Consulting office spaces & buildings cameras are used with the aim to prevent, determ or detect crimes against persons or goods or nuisance, or to maintain public order. Images are collected, processed and stored for this purpose.

Sending direct marketing.

• COSA Consultings sends direct marketing and processes personal identification data. COSA Consulting respects related regulations, whereby only direct marketing is sent if there is a customer relationship, with regard to the same products or services that COSA Consulting itself delivers, and where the person concerned has had the opportunity to unsubscribe. In addition, in every mail the possibility will be given to unsubscribe.

Personal data processed for customer and supplier administration.

• COSA Consulting submits a list (CRM) with contact details of customers, suppliers and prospects with the aim of sending commercial messages and proposals or for following existing contracts and / or orders. This list is also used to invite existing business relations to network events.

Personal data that is processed when you contact COSA Consulting for questions or information.

• As a person you can contact COSA Consulting through various channels (telephone, email, chat, contact form website, social media). The personal data you provide via telephone, mail, chat, a web form, will only be used to answer your questions.

Take a satisfaction survey with advice and / or training.

• COSA Consulting attaches great importance to the quality of the services and training provided. To gain an insight into the experiences of the customers and / or participants, COSA Consulting will make use of a satisfaction survey after the service or training provided. In this way COSA Consulting wants to work on a constant improvement of products supplied by us.

With Whom we share

We do not share your personal data with third parties, unless (i) we have received your prior consent, (ii) we are obliged to do so in the context of a regulation or legal procedure, or (iii) we are requested to do so by legislative or judicial authorities.

We do call on certain subcontractors and this in order to outsource some of our services to them. These subcontractors are not considered third parties. We ensure that these subcontractors take the necessary technical and organizational measures to process your personal data legally and lawfully and also under no circumstances make it known to third parties.

Security Of

COSA Consulting recognizes that the security of personal data is part of data protection. Therefore, COSA Consulting takes appropriate technical and organizational measures to protect your personal data against unauthorized processing or unauthorized access in order to prevent misuse.

With each transfer of personal data to a processor outside the European Economic Area (EEA), COSA Consulting always complies with the terms of this privacy statement and COSA Consulting follows applicable data protection laws and regulations to ensure adequate safeguards.

Storing of

COSA Consulting will only keep your personal information for the minimum period necessary to fulfill the purposes set out in this privacy statement. Unless required to resolve disputes or if a longer storage period is required by law. Non-personal information can be kept in time without restriction for statistical purposes.

What are Cookies

Cookies are small text files that are stored on your computer when you visit a website. This allows the website to remember your actions and preferences (such as language, font, view options etc.) for a certain period of time. The advantage is that when you visit the website again or navigate between different web pages, you don’t have to set your preferences again.

Cookies are used to simplify and improve your browsing experience. When you visit the website, cookies ensure your personal settings are retrieved. In addition, cookies collect information about how the website was accessed. That way, we can improve the website’s general performance with regard to speed and operation. Cookies never work independently and are always linked to a website. Cookies never access any data located on your computer or phone. If you don’t want a website to place cookies on your computer, you can modify your browser settings accordingly.

Types of Cookies

• Strictly necessary cookies are essential in order to enable you to move around the website and to use the linked features. These cookies do not identify you as an individual. By refusing to accept these cookies, several features within the website will be (partially) disrupted.

• Functionality cookies enhance the website’s user friendliness by remembering your choices (e.g. language preference). These ensure that certain settings are customised upon your request. If you refuse to accept these cookies, this may affect the website’s performance and functionality and it can limit your access to the website’s content.

• Performance/Analytical cookies collect information about a website’s use, such as the number of visitors, the time visitors spend on certain pages and possible error messages. They help COSA Consulting to improve the website’s performance. These cookies do not identify you as an individual.

• Advertising Cookies are used to deliver content more relevant to you. They can be used to deliver targeted advertisements or limit the number of times you see an advertisement. They also help us measure the effectiveness of advertising campaigns on the COSA Consulting websites. We can use these cookies to remember which websites you visited and we can share this information with third parties, including advertisers and our offices.

• Third party cookies. First party cookies are cookies that are sent from our servers or domains, wherefrom the requested service is offered. Third party cookies are cookies sent to your browser from a server or domain that is not managed by COSA Consulting, but by a cooperating organisation. Only these third parties have access to those cookies and to the information collected by the cookies.

How can you exercise your rights?

You can exercise your rights by sending an e-mail to info@cosa-consulting.eu. To prevent any unauthorized disclosure of your personal information, COSA Consulting may request more information to verify your identity. COSA Consulting has one month to answer your request. This period starts when COSA Consulting has received your request and has all the information required to fulfill your request.

COSA Consulting will provide the requested information free of charge.

If requests are unfounded or excessive, in particular because of their repetitive nature, COSA Consulting may charge a reasonable fee or COSA Consulting may refuse the request.

If for any reason you assume that COSA Consulting did not handle your request correctly, you can contact COSA Consulting again and we will look for a solution together with you.

For the sake of completeness, we inform you that if COSA Consulting does not respond to your request, it refuses or if our response does not meet your expectations, you always have the right to file a complaint with the Data Protection Authority (formerly known as the Privacy Commission). ), Rue de la Loi 35, 1000 Brussels, Tel +32 (0) 2 274 48 00, or via the e-mail address contact@apd-gba.be.

What are your rights?

• Right of access: You can ask us which personal data we process from you, for which we process it, which categories of personal data we process, with which categories of third parties we share your personal data, the origin of the processed data and – when applicable – which logic we use when processing personal data automatically.

• Right to rectification: If information is not correct, you can ask us to correct it.

• Right to delete your data: If data is not processed lawfully or if your data is no longer needed than the purpose for which it was collected, you can ask us to delete your data.

• Right to limit processing: By restricting the processing of your personal data, your personal data can still be kept but its use is limited. When you have requested a processing restriction, we may only store your data. This means that no other transactions can happen with your data.

• Right to object: You have the right to object to the fact that your data is processed if that processing is based on a general interest or the legitimate interest of the person who processes your data. Moreover, you can also exercise this right of objection if your personal data are processed for direct marketing purposes. This right of appeal also applies to profiling that forms the basis for processing for direct marketing purposes.

• The right to withdraw consent: If the processing of your personal data is based on the basis permission, you have the right to withdraw this permission at any time.

• The right to transfer data: You have the right to obtain your personal data in a standard, structured and machine-readable form and you have the right to transfer this personal data to another controller with the processing based on the data, legal grounds permission or contractual relationship.