At Transport & Mobility Leuven, we are committed to protecting and respecting your privacy and to complying with the General Data Protection Regulation (GDPR) and other legislation applicable. Please find below our privacy policy.
1 When and for which purposes do we collect and process data?
Transport & Mobility Leuven NV (TML) is an independent research company and, as such, is continuously working on a diversity of projects. We process a variety of data on a regular basis. On the one hand, we process data in a more generic way, to ensure and support the general functioning of the company. These include, amongst others, our customers and suppliers management, as well as our communications and marketing activities, which are primarily focused towards a transparent dissemination of information towards our various stakeholders.
On the other hand, we also carry out more specific, project-related data collection, which varies depending on the nature and purpose of the project. Both categories are explained in more detail in the sections below.
2 Which data do we collect and process?
2.1 Data collected and processed for TML’s general management and marketing and communication purposes.
2.1.1 Contact list of our customers and suppliers for the usual client and suppliers management
We collect and process personal data from our suppliers (including subcontractors and persons associated with our suppliers and subcontractors) in order to receive or provide services to our customers. These are mainly business card data.
2.1.2 Website
2.1.2.1 Use of cookies
While you are visiting our website, it is possible that cookies are being installed on your computer’s hard drive. A cookie is a text file that is installed in the browser of your computer or mobile device by the server of a website at the moment you are visiting that website. Cookies can’t be used to identify people; a cookie is only able to identify a certain IP-address and accompanying PC.
More detailed information about the type of cookies our website uses and how to change your cookie preferences can be found at the bottom of this page under the separate heading '*The use of cookies'.
2.1.2.2 Google analytics
This website uses Google Analytics, a web analysis service offered by Google Inc. (‘Google’). Google Analytics uses cookies to help the website analyse how users visit the site. The information generated by cookies (including your IP address) is transferred to Google and stored by Google to servers in the United States. Google uses this information to keep track of how you use the website, to generate reports on website activities (for website operators), and to offer other services regarding website activity and internet usage. Google is allowed to transfer this information to third parties if they are legally obliged to do so, or if third parties process this information on behalf of Google. Google will not combine your IP address with other data possessed by Google. You can refuse the use of cookies by choosing the appropriate settings in your browser (but note that you won’t be able to use this website in the best possible way). By accessing this website, you automatically give permission to let Google process the information in the manner previously described and for the purposes previously indicated. For more information on Google Analytics, please consult
their website.
2.1.2.3 Subscriber list newsletter
To keep you informed on our projects, we send an electronic newsletter to our subscriber list a few times a year. Your email address and language preference will, after your explicit consent, be stored in our files on our server. Should you wish to do so, you can unsubscribe to the newsletter at any time. In that case, your email address will be put on hold for newsletter purposes, but it will remain passive in our database, so that we will not write to you in the future asking you if you wish to receive the newsletter.
2.2 Data collected and/or processed in the context of specific projects
Specific projects may require the processing of data containing personally sensitive information. If the data from the study is gathered directly from the participant, the participant will be informed at the start of the study, explaining which data will be collected, for which purpose, on what basis, for how long, and whether the data will be shared with third parties. At the start of such a project, a specific privacy clause or processor agreement will be drawn up and a note will be created in the data register managed by TML, which is coordinated by the internal GDPR manager. In that case, the people concerned will always be informed carefully so that they can give their consent or not.
Previously collected data may also be further processed within the framework of scientific research on the basis of the GDPR. Wherever possible, the persons whose data are being processed will again be informed individually about what data is involved, for which purpose, on which basis, for how long, and whether the data will be shared with third parties. Otherwise, the relevant information will be made publicly available. The same applies if previously collected data is obtained via a third party.
2.3 Employee data
These data are being processed as part of personnel management. It concerns personal data as prescribed by laws, regulations, and instructions on regional, federal, and international level, regarding labour law, social security, or fiscal law, including collective and individual agreements and work regulations. This concerns the administration of wages, allowances, and commissions.
3 How do we collect and process data?
We collect data directly or indirectly.
We collect data directly from the people concerned: for example through email or via our website (cf. point 2), for informative or research purposes. In such cases, the people concerned are always informed on the purpose and the way in which their data are being collected; either via email, via a notification on the newsletter/survey, or on demand.
In some cases, we collect data indirectly, via partners: for some projects, we request data via our project partners or subcontractors. In such cases, a data processing agreement or specific clause is drafted, in order to ensure the privacy of the people concerned.
4 What are the principles for the processing of data?
The processing of data is always done in the context of legitimate interest. The purpose of the data processing is always communicated to the people concerned and is being in the data processing register.
5 Are the data supplied to third parties?
At times it is necessary for us to supply data to third parties, but only in cases of legitimate interest and for specific purposes.
In such cases, a separate agreement is drafted in order to ensure your privacy. This ‘processing agreement’ establishes the goal of the data processing as well as the confidentiality and the security of the data. This applies, for instance, to our website partner, who ensures the technical management of our website and therefore has access to data being collected through our site – for example to manage the newsletter. Likewise, we also have a processing agreement with our payroll administrator.
6 How are the data secured?
a) The data that are collected within the framework of the newsletter/website/social media are stored in a data file on the server of TML, which is only accessible to its own employees. Additionally, the data are stored on the server of our website partner, with whom TML has a processing agreement to ensure the compliancy to TML’s data privacy policy.
b) If TML collects and/or processes data as part of specific projects, the framework is always registered by means of a clause or agreement. In case of a questionnaire or stakeholder survey, the people concerned will always be informed on the goal of the survey, the way in which the data are being stored and secured, and their rights. The data collected in this context is stored in a separate password-protected folder, which can only be accessed by employees directly involved in this project.
c) Personnel data is stored in a database on the TML server, which can only be accessed by those employees who are competent for personnel administration and management. In addition, the data necessary for payroll administration and insurance are shared with our social secretariat and insurance office, for whom a processing agreement has been drawn up.
7 Your rights
A privacy controller assigned by TML ensures the compliance with our privacy policy.
Should you have any questions regarding the storage or processing of your personal data, or would like to get access to your data, change your data, or have your data removed, please contact our Data Protection Officer (DPO) via our special email address:
[email protected], or send your request by regular mail to Transport & Mobility Leuven, to the attention of the Data Protection Officer, Dieststesteenweg 71, 3010 Leuven.
Your request will be handled within 1 month. If requests are complicated, this can be extended by 2 months, as provided by law.
In case you haven’t received any answer within the legal time frame, you are entitled to file a complaint at the Belgian data protection authority (via
www.gegevensbeschermingsautoriteit.be/burger).
