Privacy notice for users of the website www.audibrussels.be
This website ("Website") is an initiative of AUDI BRUSSELS S.A./N.V., whose registered office is at Britse Tweedelegerlaan 201, 1190 Brussels, with VAT and company number BE 0407.687.238 (hereinafter "AUDI BRUSSELS" or "we").
Each user or visitor of the Website ("User", "Visitor" or "you"), by visiting and/or using the Website, provides personal data as explained below. AUDI BRUSSELS acts as controller for the processing of personal data collected through the Website.
We process your personal data in accordance with applicable data protection legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation - AVG or GDPR) and related Belgian legislation.
1. Who processes your personal data?
AUDI BRUSSELS acts as controller. AUDI BRUSSELS also uses a number of subcontractors who, on behalf of AUDI BRUSSELS, process your personal data and who, among other things, ensure the proper technical functioning of the Websites.
AUDI BRUSSELS uses the following categories of processors in the context of the Website: other entities within the Volkswagen group, partners responsible for hosting, maintaining and ensuring the proper functioning of the Website and scheduling appointments for company visits.
2. Why are your personal data processed?
AUDI BRUSSELS collects and processes your personal data to provide you with a secure and optimal user experience of the Website. The data processing is essential for the proper functioning of the Website and its related services.
In addition, the processing of certain personal data is also done for the following purposes, and other compatible purposes:
- Provide the User with access to the Website
- The detection of and protection against fraud, error, criminal or unlawful conduct and/or any other act that violates the terms under which our Website is offered
- The organization of company visits
- The processing of a request for contact after filling out the contact form
AUDI BRUSSELS processes your personal data collected through the Website based on different grounds:
1. your Consent when filling out our contact form or for booking a company visit
2. the preparation and execution of the contract in the context of job applications
3. compliance with our legal obligations such as cooperation with the Authorities in the context of judicial investigations, and/or
4. the protection of the legitimate interest of AUDI BRUSSELS in the prevention of fraud, the management of internal administration or the monitoring of appropriate network and information security
Your personal data are obtained on the one hand through yourself, or through various technical means used by the Website to optimize the User and Visitor experience and to detect any (technical) errors in the Website, such as cookies (see Article 8). 5. What categories of personal data are processed?
AUDI BRUSSELS processes the following categories of personal data:
- When using our website: data relating to the device used (fixed or mobile), browser data, operating system data, etc.
- When filling in the contact form: the identification and contact details provided by you
- When requesting a company visit: the identification and contact information you provide
6. Will my data be transferred to third parties within the EU?
Your personal data may be shared with the categories of subcontractors as defined in Article 1 of this Policy and with government agencies (to the extent that the latter are entitled to do so).
Your personal data will not be sold, passed on or communicated to third parties.
7. Are my data being processed outside the EU?
Your personal data will not be transferred to and/or processed in countries outside the EU.
8. Cookie policy
8.1. Use of cookies
This Website uses cookies.
Cookies are small groups of information recorded on your end device, containing data such as page configurations or registration information. This information is generated and transmitted by the web server that you have connected to by using your browser.
We apply technologies that facilitate and improve the use of our website by providing various functionalities (to make the website safer for the user). These technologies include cookies, pixels and scripts (hereinafter "cookies").
The default configuration of most browsers is set to accept cookies automatically. You can at any time refuse the use of cookies in the future by configuring your browser to accept only certain cookies, or no cookies at all, or to alert you when a cookie is sent.
If you want to know what cookies have been placed on your device or if you want to delete them, you can use a setting in your browser. You can find more information about this via the links below
Google Chrome
Safari
Firefox
Internet Explorer
Edge
Opera
Please note that the configurations only concern your browser. If you use different browsers or devices, you must reconfigure them. In addition, you always have the option of deleting cookies from your drive. All information on the configuration, changing it or deleting cookies can be found in the help function of your browser.
There are also software products that can organise cookies for you. On the internet, you can find more extensive information about cookies and their use.
Which cookies are used:
Cookies can be permanent or temporary. Permanent cookies record information for a certain period of time, until the end of the validity of the cookies on your end device (or until you delete them). A so-called "session cookie" records the information of the session temporarily, namely as long as you are active on the website. We do not use session cookies.
Here is an overview of the cookies used by our website:
8.2. External links
Our website contains external links to document certain information or to guide you further in finding information
- Direct web-link to the other website
- Icons are used to link to the AUDI BRUSSELS LinkedIn profile
- At the bottom of the grey bar of our website you will also see the following icons:
- My Audi
When you click on these links you leave our website. Activation of these links is the responsibility of the user. We advise you to consult both the privacy statement and the cookie policy of the website(s) concerned.
9. What are my rights?
You may exercise certain rights in respect of your personal data at AUDI BRUSSELS, insofar as they are provided for by the applicable legislation.
You can exercise these rights at dataprotection.audibx@audi.de, accompanied by proof of identity. AUDI BRUSSELS will respond to your requests and take action or not in accordance with the applicable law and in principle within a period of one month, also in accordance with the applicable law.
You also have the right to address or lodge a complaint with the
Data Protection Authority, Rue de la Presse 35, 1000 Brussels or by e-mail addressed to contact@apd-gba.be.
10. Security
AUDI BRUSSELS will take all necessary measures to ensure the security of your personal data in order to prevent any loss, destruction, falsification, manipulation and access by unauthorised persons and unauthorised disclosure.
11. Contact and Data Protection Officer (DPO)
For any questions, exercise of your rights or other information concerning the processing of your personal data by AUDI BRUSSELS, please contact the Data Protection Officer, who can be contacted directly at any time at the following address: dataprotection.audibx@audi.de.
12. Entry into force and amendment
This Privacy Notice shall enter into force on and shall therefore apply from the time of its posting on our website.
This Policy is subject to future amendments and modifications by AUDI BRUSSELS. Modifications will be applicable from the moment of their publication on the Website. It is therefore the Visitor or User's responsibility to regularly consult this notice.
13. Applicable law and competent court
This Privacy Notice, as well as any dispute arising out of or in connection with this Privacy Notice, shall be governed by Belgian law. The courts of Brussels, Belgium shall have exclusive jurisdiction over any dispute arising out of or in connection with this Privacy Notice.
This Privacy Notice was amended on 30 September 2021.
Privacy notice for suppliers of Audi Brussels
Your Privacy is important to us!
Please read this Privacy Notice carefully. It explains why and how we collect your personal data, how we protect these and for how long we retain these. We strive to process your personal data in accordance with applicable data protection legislation, in particular the Belgian Privacy Act of 8 December 1992 and the General Data Protection Regulation no. 2016/679 of 17 April 2016 (‘GDPR’).
You are hereby expressly requested to notify this Privacy Notice to other data subjects whose personal data are processed by AUDI BRUSSELS, such as your employees, other contact persons, etc. Where necessary, you must also ensure their consent for the processing of their personal data as described in this Privacy Notice.
Who will process the personal data?
The data controller for the processing of your personal data is the following legal entity:
AUDI BRUSSELS NV/SA
Bd 2me Armée Britannique 201
1190 Forest
Company number: 0407.687.238
Hereinafter “AUDI BRUSSELS” or “we”
In addition, AUDI BRUSSELS will make use of the categories of processors as described in Article 6 of this Privacy Notice for the processing of your personal data.
Why are the personal data being processed?
AUDI BRUSSELS will process your personal data for the following purposes, and for other purposes that may be compatible therewith:
• Leveranciersbeheer
• Supplier management;
• Contacting you;
• Ensuring and facilitating the services you provide to AUDI BRUSSELS;
• Execution of purchasing activities;
• Follow-up of invoices and payments;
• Managing disputes;
• Complying with our legal obligations;
• Follow-up and handling of incidents, problems and accidents;
• Ask for an offer;
• Terminate contracts.
If you effectively access the site of AUDI BRUSSELS for the provision of services, the following purposes and other compatible purposes therewith may also apply:
• Medische controles en verstrekken van eerste hulp;
• Medical examinations and provision of first aid;
• Access control (including use of badges and distribution of keys);
• Time recording (if applicable);
• Camera surveillance;
• Security;
• Reviews and evaluations (if applicable);
• Organisation of education and training (if applicable);
• Insurance;
• Incident management, back-up and maintenance of software and IT systems;
• Social inspections;
• Collaboration for purpose of criminal proceeding or other mandatory by law.
What is the legal ground for the processing of personal data?
Your personal data are processed by AUDI BRUSSELS based on amongst others the following legal grounds:
• Your consent (if necessary) ; and/or
• The preparation, entering into and performance of the agreement you have with us; and/or
• The compliance with our legal obligations (a.o. collaboration with tax, social or criminal proceedings); and/or
• The legitimate interests pursued by AUDI BRUSSELS or a third party, if these override your interests or fundamental rights and freedoms, such as, but not limited to, guaranteeing safety, preventing fraud, as foreseen in article 5, f) of the Belgian Privacy Act of 8 December 1992, etc.;
• The protection of your vital interests.
Which categories of personal data are being processed?Personal data includes any information relating to you that may identify you directly or indirectly.
For the purposes described above, AUDI BRUSSELS processes, inter alia, the following categories of personal data: identification data, contact data, professional data (employer, profession, position), financial data, personal characteristics, etc.
If you effectively access the site of AUDI BRUSSELS for the provision of the services, the following categories of data may also be processed: medical data, photograph, image/video recordings, evaluation data, access control data (time, place, access rights, start and end date, time registration), identity card, number plate, etc.
How are the personal data collected?
Your personal data that are processed by or on behalf of AUDI BRUSSELS are:
1. either obtained directly from you, for example via information entered into or provided by you, etc.;
2. either obtained via other information channels, such as your organization or employer, etc.;
3. either obtained by actions of AUDI BRUSSELS itself, for example via certain controls or checks, evaluations, camera surveillance, access control measures, etc.
Who will have access to the personal data?
Internal use
Your personal data may be shared with other departments and employees within AUDI BRUSSELS, to the extent that these departments and employees require your personal data for the performance of their tasks and for the provision of our services.
External use
For the purposes described in article 2, your personal data may be communicated to, and possibly processed by, third parties engaged by AUDI BRUSSELS, such as:
- IT- and hosting providers;
- Legal and tax advisors;
- Legal institutions such as for tax, social and criminal law within the framework of such proceedings for which a collaboration is mandatory for AUDI BRUSSELS;
- Other suppliers to ensure the good collaboration and organization of a project;
- Affiliated entities of AUDI BRUSSELS belonging to the Volkswagen group.
- If you effectively access the site of AUDI BRUSSELS for the provision of the services, your personal data may also be communicated to and possible processed by the following categories of third parties:
- Insurance companies;
- Education and training centres;
- Evaluation centres;
- Security companies;
- Legal institutions such as for tax, social and criminal law within the framework of such proceedings for which a collaboration is mandatory for AUDI BRUSSELS.
In addition, your personal data may also be shared with public authorities to the extent that these are entitled thereto.
Are the personal data being transferred outside the European Union?
Your personal data may be shared with third parties as described in Article 6 of this Privacy Notice, which are usually located in the European Union.
However, it is possible that one of these recipients would be located in a country outside the European Union. In such a case, AUDI BRUSSELS shall, where required, ensure that appropriate safeguards are put in place to protect your personal data, such as the conclusion of standard data protection clauses as adopted or approved by the European Commission.
How long are the personal data being stored?
Your personal data will not be kept longer than necessary for the purposes described in article 2 of this Privacy Notice or communicated in any other way. In any event, your data will be kept for the period required by law or as long as AUDI BRUSSELS may have a legitimate interest in the retention of your personal data, such as, for example, for the duration of the applicable statutory period of limitation.
Which rights do I have?
You may exercise a number of rights regarding your personal data vis-à-vis AUDI BRUSSELS, in so far as you effectively have those rights under applicable data protection legislation.
The first point of contact for exercising these rights is and for any other comments, objections or questions regarding the processing of your personal data is the Data Protection Officer (see Article 13). AUDI BRUSSELS shall respond to such requests and may or may not comply with such requests in accordance with applicable legislation and, in principle, within a period of one month, also in accordance with applicable legislation.
You also have the right to address yourself to or to file a complaint with the Belgian Data Protection Authority (Belgian Privacy Commission): (https://www.autoriteprotectiondonnees.be, contact@apd-gba.be).
What are the obligations of suppliers?You have the duty to protect the privacy, security and confidentiality of all personal data of which you become aware in the context of your services for, contacts with or access to AUDI BRUSSELS. You must at all times behave as a bonus pater familias, thus demonstrating a general duty of care in relation to the processing of or access to personal data.
If, during or in the context of your services for, contacts with or access to AUDI BRUSSELS, you would become aware of any incident involving the security, protection or integrity of personal data, in any manner and of any size or importance whatsoever, you shall immediately inform AUDI BRUSSELS and the Data Protection Officer (see Article 13) thereof in as much detail as possible.
Access controlIn order to optimally protect the security of both the company's goods and its employees, AUDI BRUSSELS also uses an access control system. This includes the following aspects: verifying your identity when accessing the site, use of badges, time registration, etc. Your personal data may only be processed by competent employees of AUDI BRUSSELS with their badge. Actually all PC are secured by badge control en password. Access to SAP, where all your personal data is stored is strictly defined and limited. This access right are regularly controlled.
Camera surveillance
In order to optimally protect AUDI BRUSSELS’ assets as well as the safety of its employees, certain premises and sites are placed under permanent camera surveillance. An overview of the cameras installed can be consulted via interanet > B/GW > security > camera list.
The camera images are kept for a period of one month. However, these images may be kept longer if (i) they provide evidence of damage and/or crime or offence, or (ii) they can contribute to the identification of an offender, a witness or a victim.
In addition, both police and judicial authorities may have the right to consult the stored camera images which may also be transferred to insurance companies within the framework of an incident.
Data Protection Officer
Your contact person at AUDI BRUSSELS for any further information regarding the processing of your personal data and for the exercise of the rights described in Article 9 is our Data Protection Officer, who can be contacted directly at all times via the following details:
DPO
AUDI BRUSSELS S.A./N.V
Bd. De la Deuxième Armée Britannique, 201
B-1190 FOREST
dataprotection.audibx@audi.de
02/348 22 96
Entry into force and modifications
This Privacy Notice enters into force on, and is therefore applicable as of, 25 May 2018 for an indefinite period of time.
We reserve the right to amend this Privacy Notice from time to time, for example in the light of new developments or new legislation, but always within the limits of applicable privacy and data protection legislation. AUDI BRUSSELS will inform you in a timely manner of any such changes. In any case, it is recommended to consult this Privacy Notice on a regular basis.
This Privacy Notice has last been modified on 25/05/2018.
Code of Conduct Business PartnerPrivacy notice for employees
Audi Brussels values your privacy and personal data. We collect and process your data in accordance with the applicable legal provisions, specifically the law of July 30, 2018, regarding the protection of individuals with respect to the processing of personal data ("Privacy Law") and the European Regulation of April 27, 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data ("GDPR").
Audi Brussels’ activities will be progressively reduced from March 2025 until liquidation (closure of the plant). This data protection notice aims to inform you about how your data will be processed during and after the closure of the plant. This notice is an addition to Audi Brussels’ general data protection notice (“data protection declaration for Audi Brussels employees”). Insofar not deviated herein, the data protection declaration remains applicable.
This notice aims to inform you about the following topics, during and after archiving data of Audi Brussels:
1. Who processes your personal data
2. The categories of personal data processed
3. How and why your data is processed
4. How long is your data retained
5. What security measures are taken to protect your data
6. Who has access to your data
7. Absence of automated individual decision-making
8. Transfer of your personal data outside the EU
9. How to exercise your rights
10. Changes to the privacy policy
1. Who processes your personal data during and after the archiving?
In accordance with the data protection declaration, Audi Brussels will remain the "data controller" if it is not being liquidated. After the liquidation of Audi Brussels, different archive owners within the groupwill be appointed to keep all Audi Brussels’ relevant files.
2. What personal data is still processed during and after the archiving?
The categories of personal data to be processed during and after the archiving will not substantially deviate from the personal data contained in the General Notice. Please note however that the technical teams have been trained and have received specific instructions in order to ensure that:
- all data that would no longer be required for their initial purpose would be deleted, unless there is a legal or business reason to keep such data;
- all data would be classified with appropriate KSU/CSD classification;
- all data would be assessed in the light of the general principles of transparency, proportionality, data securisation, purpose and storage limitation.
3. How and why is your data processed during and after the archiving?
We may first process your personal data for archiving purposes, either because:
- we are legally required to retain this data for a certain period of time, or
- we need to defend our interests in the framework of a pending or future dispute; or
- we need to document the proper fulfilment of our contractual and/or legal obligations; or
- we need to keep a document as unaltered for historic or permanent business relevance, and your personal data appears incidentally in it.
Depending on the use case, our legal basis to keep your data during and after the archiving might be either:
- the legal obligation (Article 6(1)(c) of the GDPR); or
- our legitimate interest (Article 6(1)(f) of the GDPR) to documenting the proper fulfilment of our legal or contractual obligations; or
- our legitimate interest (Article 6(1)(f) of the GDPR) to defend ourselves in the case of a pending or future obligation; or
- our legitimate interest (Article 6(1)(f) of the GDPR) to document the history of Audi and VW Group.
4. How long is your data retained during and after the archiving?
In the context of a liquidation, most of your data will be deleted 5 years following the closure of the liquidation of the company (statutory retention). Please consider that some data might be retained for a longer period due to statutory requirements or as long as necessary to enable us to defend our interests.
Data transferred to third parties will be retained by these recipients as long as required by law.
5. What security measures are taken to protect your data during and after the archiving?
All technical and security measures have been taken to minimize the risks of illegal or unauthorized access to or processing of your personal data.
These measures consider European and local Belgian legislation as well as the Audi Brussels regulatory world in the context of information security requirements.
6. Who has access to your data during and after the archiving?
Your data is exclusively intended for members of the staff of Audi Brussels or any company belonging to the same group as Audi Brussels.
Some of your personal data might be transferred to:
- an AUDI Group company, acting as an archive holder on behalf of Audi Brussels. The name of the entity will be communicated in due time.
- third party suppliers who are legally or contractually bound to keep specific data sets on behalf of Audi Brussels (e.g. our social secretary Attentia).
- statutory auditors or public authorities in charge of the oversight of Audi Brussels (a.o. social or tax authorities).
7. Will your data be subject to automated individual Decision-Making during or after the archiving?
Audi Brussels does not apply any automated individual decision-making during the archiving procedure that could affect you.
8. Will your personal data be transferred outside the EU in the framework of the archiving?
Audi Brussels does not transfer any of your personal data outside the European Economic Area (EEA) in the framework of the Archiving. In the unlikely event that this would happen, Audi Brussels will abide with the requirements of Chapter V of the GDPR.
9. What are your rights during or after the archiving?
9.1. Right of access and copy
You have the right to obtain a free copy of your personal data, insofar it is readily available (see a.o. the separate communication on health data). All other rights to access will be performed to the best of our abilities insofar the systems are still available.
Please note that only limited documents will be stored in a paper format, and that the right to obtain copies of such data will be assessed on a case-by-case basis. We may charge a reasonable fee that does not exceed the administrative cost of research and copy.
Requests that are manifestly unfounded, excessive, or repetitive may be declined.
9.2. Right to rectification
Inaccurate or incomplete personal data can be corrected, insofar the systems will allow such modifications.
9.3. Right to erasure (or “right to be forgotten”)
You remain entitle to further request that your personal data erased in the following situations:
- your personal data is no longer necessary for the purposes for which it was collected;
- you withdraw your consent for processing, and there is no other legal basis for processing;
- you have validly exercised your right to object;
- your data have been processed unlawfully;
- your data must be erased to comply with a legal obligation.
However, please note that your personal data has already been minimized during the archiving process, and in any case, we are obliged to retain your personal data for legal or legitimate reasons. For these reasons, erasure request will always be analyzed on a case-by-case basis but are likely to be denied.
9.4. Right to object and restrict of processing
Request to object or restrict the processing of your personal data will be assessed on a case-by-case basis. However, such object or restriction might not be possible as your data will mainly be stored for archiving purposes.
9.5. Right to data portability
You have the right to obtain all personal data you have provided to us in a structured, commonly used, and machine-readable format. At your request, these data can be transferred to another provider, unless technically impossible. We encourage you to proceed to such request prior to the closure of the liquidation, after which such request might no longer be technically feasible.
9.6. Right to withdraw your consent
Audi Brussels does not longer process personal data based upon your consent. It is thus not possible to withdraw such consent.
10. How to exercise your rights?
To exercise your rights, simply send the DSR request form by registered mail to
AUDI BRUSSELS S.A./N.V.
Boulevard 2ème Armée Britannique, n° 201
1190 Forest Belgium
or by email to dataprotection.audibx@audi.de. We will respond as soon as possible, and no later than one month after receiving the request.
If you are not satisfied with the processing of your personal data by Audi Brussels, you have the right to file a complaint with the Data Protection Authority:
Rue de la Presse, 35, 1000 Brussels
+32 (0)2 274 48 00
+32 (0)2 274 48 35
contact@apd-gba.be
11. Changes to the privacy policy
We reserve the right to make changes to our privacy policy at any time. Any substantial changes will be communicated on our website.