Privacy policy

OBHS Consult SRL attaches great importance to protecting your privacy and is committed to processing your personal data in accordance with applicable regulations, in particular Regulation (EU) 2016/679 of April 27, 2016 (RGPD) and the relevant Belgian laws. This Privacy Policy aims to inform you about how your data is collected, used and protected when you use the OB ProMatch Website.

Collected data

We only collect personal data about you if you provide it to us voluntarily, for example by contacting us by e-mail or via a form on the OB ProMatch website or application. The data collected may include your identification and contact information (such as surname, first name, e-mail address, telephone number), professional information (position, company) and the content of the message or request you send us. In addition, certain technical data may be collected automatically during your browsing of the Site (e.g. IP address, browser type, connection data), in particular via cookies and tracers – please see our Cookie Policy for further details. In any event, OBHS Consult SRL undertakes to collect only the data strictly necessary for the purposes set out below.

Purposes of processing

The data you provide is processed for specific and legitimate purposes. In particular, OBHS Consult SRL uses your data to: (a) respond to your requests for information, support or contact (by e-mail or via the form) and, more generally, communicate with you at your initiative; (b) provide you with the information or services you request concerning OB ProMatch or OBHS Consult’s activities; (c) ensure the operation and security of the Site, improve the quality of the Site and our services (for example, via anonymized usage statistics); (d) comply with any legal obligations we may have. Your data will not be further processed in a manner incompatible with these initial purposes.

Legal basis for processing

OBHS Consult SRL processes your personal data only on an appropriate legal basis.
In particular :

When you contact us voluntarily (via e-mail, form or application), the processing of your data is based on our legitimate interest in responding to you and handling your request appropriately. This interest is considered legitimate because you yourself take the initiative to contact us and you can reasonably expect a response from us.
If you provide data as part of a possible subscription to services or communications (e.g. newsletter subscription or creation of a user account, should such features be offered), we will process this data on the basis of your explicit consent, which you may withdraw at any time.
Similarly, the use of certain non-essential cookies (e.g. for audience analysis purposes) will only be carried out with your specific consent (see Cookie Policy).
Finally, certain processing operations may be based on a legal obligation (e.g. keeping accounting documents if you become a customer of OBHS Consult SRL) or on the performance of a contract that you may enter into with OBHS Consult (e.g. if you become a customer and sign a service contract outside the Site). In such cases, only the data required to fulfill the contract or comply with the law will be processed.

Data recipients

Your personal data will be used exclusively by OBHS Consult SRL and its authorized personnel, within the limits of their respective responsibilities. We may use trusted service providers or subcontractors to assist us in the operation of the Site or our activities (for example, the Site host, IT services or emailing tools). These service providers may have access to your data only to perform specific tasks on our behalf and are bound by the same security and confidentiality obligations as we are. Apart from these cases, OBHS Consult SRL will not pass on your personal data to third parties, unless required to do so by law, at the request of a competent judicial/administrative authority or with your explicit consent. In particular, we do not sell or rent your personal data to third parties for marketing purposes.

International transfers

Your data is stored mainly in Belgium or within the European Union. In principle, we do not transfer personal data to countries outside the European Economic Area (EEA). If, however, some of our subcontractors or tools involve processing outside the EEA (for example, use of cloud or analytics services that may involve servers in the United States), OBHS Consult SRL will ensure that appropriate safeguards are in place to frame this transfer, in accordance with the requirements of the RGPD (standard contractual clauses approved by the European Commission, adherence to the EU-US Data Privacy Framework if applicable, etc.). You can contact us for further information on this subject if necessary.

Shelf life

We keep your personal data for no longer than is necessary for the purposes for which it was collected. More specifically, any messages or requests you send us (via e-mail or form) will be kept for the time required to process and follow up on them, and then archived intermediately. In the absence of a subsequent contractual relationship, this contact data will be deleted or anonymized at the latest 2 years after the last exchange with you (unless there is a legal obligation to keep it longer). If you become a customer of OBHS Consult SRL as a result of your enquiry, your data may be kept for a longer period, in particular for the duration of the contractual relationship, and then archived for the applicable legal limitation period (e.g. 7 to 10 years for accounting documents). Data collected for audience analysis purposes via cookies is kept for the period indicated in the Cookie Policy (generally no more than 13 months for analytical cookies). After these periods, personal data is either deleted or irreversibly rendered anonymous.

Your rights

In accordance with data protection regulations, you have the following rights concerning your personal data:

Right of access: you can obtain confirmation that we hold data about you and request communication of this data, as well as information about the purposes of the processing and the recipients.
Right of rectification: you can ask for your personal data to be corrected or updated if it is inaccurate or incomplete.
Right to erasure (right to be forgotten): in certain cases, you may obtain the deletion of your data, in particular if it is no longer required for the purposes for which it was collected, or if you withdraw your consent (where consent was the legal basis for processing). This right may be limited by our legal obligations (for example, we cannot delete data that we are required by law to retain).
Right to restrict processing: you can request the temporary suspension of the processing of your data (for example, if you dispute the accuracy of the data or the basis for the processing), while we analyze your request.
Right to object: you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on our legitimate interests. If you exercise this right, we will cease the processing, unless we can demonstrate compelling legitimate grounds for continuing it (e.g. defending legal claims). You may also object at any time to the processing of your data for the purposes of commercial canvassing if we carry out such canvassing (this is not currently the case, as we do not send canvassing without consent).
Right to portability: for data that you have provided directly to us and that is processed on the basis of your consent or a contract, you may request to receive this data in a structured, commonly used and machine-readable format, or to have it transmitted directly to another data controller where this is technically possible.
Right to withdraw consent: where the processing of your data is based on your consent (e.g. optional newsletter subscription), you may withdraw this consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.
Post-mortem directives: (if applicable) Pursuant to Article 85 of the Belgian Law of July 30, 2018, you have the possibility of defining directives concerning the fate of your personal data after your death. Should we be informed of your death, and in the absence of directives, your data will be processed in accordance with the legal provisions in force.

To exercise your rights or for any questions relating to your personal data, you can contact us as indicated below (see Contact). We will reply as soon as possible and in any event within one month (extendable by two months if necessary given the complexity of the request), in accordance with the RGPD. We may ask you for proof of identity if we have reasonable doubt about the identity of the requester, in order to protect your data from fraudulent requests.

Data security

OBHS Consult SRL implements appropriate technical and organizational measures to ensure the security and confidentiality of your personal data, and to protect them against loss, theft, alteration or unauthorized access. For example, we use secure communication methods (HTTPS/TLS) on the Site, and we ensure that our service providers offer adequate security guarantees. Although we do our utmost to protect your information, it is important to note that no electronic transmission or storage system is 100% infallible. In the event of a breach of personal data that could pose a high risk to your rights and freedoms, we will inform you in accordance with the law.

Contact and Data Protection Officer (if applicable)

If you have any questions, concerns or requests about this Privacy Policy or your personal data, you can contact OBHS Consult SRL :

By email: contact@obpromatch.com
By post: OBHS Consult SRL, Rue Laurent Heirbaut 5 bte 2, 1083 Brussels, Belgium.

At present, given the size and nature of our business, OBHS Consult SRL is not required to appoint a Data Protection Officer (DPO). Nevertheless, for any questions relating to data protection, you can use the contact details above and your request will be dealt with by the person in charge of such matters internally.

Complaints to the authorities

If, after contacting us, you feel that your “Data Protection” rights have not been respected or that the processing does not comply with the applicable laws, you have the right to lodge a complaint with the competent supervisory authority.
In Belgium, this is theData Protection Authority (DPA ) – Rue de la Presse 35, 1000 Brussels (website: autoriteprotectiondonnees.be, e-mail: contact@apd-gba.be, telephone: +32 2 274 48 00).

This Privacy Policy may evolve to reflect changes in our practices or in regulations. We therefore invite you to consult it periodically. In the event of substantial modification, we will inform you by means of a special notice on the Site (or by any other appropriate means) so that you can take note of it.