GDPR

GDPR, Van Herreweghe & De Graeve Advocaten and You

This article aims to answer any questions you might have about the General Data Protection Regulation, and explain what happens at the intersection between GDPR, Van Herreweghe & De Graeve Advocaten and you.


What’s GDPR?


The General Data Protection Regulation (GDPR) is a legal framework that sets guidelines for the collection and processing of personal information of individuals within the European Union (EU).

This regulation defines the roles and processes organizations must implement to ensure that any personal data they possess is secure and processed under a legal basis which could be the consent of the person, legitimate interest or other ground under the GDPR.

In short, the EU commission felt that people should have more say about how their personal data is processed, especially by tech companies, so they passed a regulation that aims to improve how organizations collect, protect and secure personal information, and provide EU and EEA citizens with greater control over their data.

It’s not about stopping companies from processing personal data, but ensuring it is looked after properly, kept accurate and not abused.

Once GDPR comes into effect on May 25, 2018, it will immediately become law in all EU member states, and every organization will have to adhere to its processes. Even companies outside the EU will have to comply with the GDPR if they do business within the European Economic Area.


What is personal data?


Any piece of information that can identify a living individual is considered personal data. Even a single email address is considered personal data.


What rights do I have?


The core of GDPR is to provide anyone with rights they can exercise against organizations processing their personal data.

  • Access. You can request access to your personal data and learn how an organization uses it after they’ve obtained it from you.
  • Erasure. You have a right to withdraw consent to store and use your personal data and have the information erased.
  • Data Portability. If technically possible, you have the right to transfer your data from one service provider to another.
  • Rectification. You can require any errors in personal data to be corrected. To Be Informed. All companies must be transparent and clear about how they gather data and must do it before they collect it.
  • Restrict Processing. You have the right to block, restrict and suppress processing of your personal data. Stop Processing. You can object to using and processing all your personal data. However, stopping and even restricting certain types of personal data could mean that rendering the service to you might turn out impossible. Thus, it could mean the end of the relationship.


Will companies comply?


EU companies and companies that process EU citizens data are obliged to comply with the new regulation and act on any requests from persons wishing to exercise their rights.

If they don’t, GDPR fines can go up to twenty million Euros or 4 percent of annual global revenue, whichever is highest.


What information is tracked?


When you use Van Herreweghe & De Graeve Advocaten and you provide us with your profile, we record and process the following information.

We do not collect any personal data about you which is made available outside our platform.

Profile data, possibly including name, date of birth, location, work experience, skills, education, contact information, e-mail address and other personal information related to the information we need to have in order to work in the lawyers office. Application data, including responses.

Messages sent to and received from you or us or other parties involved.


How does Van Herreweghe & De Graeve Advocaten use that information?


We try to limit our use of the above mentioned information as much as possible. That said, we perform the following actions.

  • Share your information with other parties involved, when necessary.
  • Provide you with information concerning our office.
  • Provide an overall better user experience.
  • Resolve any service quality issues between us.
  • Profile and other personal information is not available to the public and it is not indexed by search engines such as Google.
  • Profile and other personal information is stored on office computers and harddisks, and a Carbonite backup server that states that it’s fully GDPR-compliant.


What rights do I have regarding my information?


Under GDPR, you have strong rights related to your data, and how Van Herreweghe & De Graeve Advocaten makes use of it. In other words, you have absolute rights to:

  • Know what information is being recorded and how it will be used
  • Access and viewing the information
  • Have your information erased
  • Correct the information about you
  • Get a copy of the information for yourself
  • Restrict specific uses or stop altogether the usage of your information.

To invoke these rights, simply email Vaast@iura.be and submit your request.