This Privacy Statement describes how MoneyOak SA, with registered offices at Avenue Louise 523 at 1050 Brussels, company number 0763.340.510 (“MoneyOak” or “us”) processes your personal data.

“Personal data” refers to any information related to an identified or identifiable natural person.

We endeavour to process your personal data in compliance with the European Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation or “GDPR”).

How do we use your personal data?

We process your personal data for the following purposes:

(a) Customer Management

We process the following personal data of our customers and/or their employees in the context of our relationship with our customers:

• Identification data and contact details (name, surname, address, phone number)
• Financial data (payment details)
• Personal characteristics

The legal basis is contractual necessity. The personal data must be provided to enable the performance of the contract.

The personal data you provide may be supplemented through public sources (e.g. social networks such as LinkedIn).

Unless there is a legal retention period, the personal data will be retained for a period of 10 years after the end of the contractual relationship.

(b) Supplier management

In the context of supplier management, we process the following personal data of our suppliers and/or their employees:

• Identification data and contact details (name, surname, address, phone number)
• Financial data (payment details)
• Personal characteristics (language and sex)
• Professional data (profession)

The legal basis is contractual necessity. The personal data must be provided to enable the performance of the contract.

The personal data you provide may be supplemented through public sources (e.g. social networks such as LinkedIn) or by your employer.

Unless there is a legal retention period, the personal data will be retained for a period of 10 years after the end of the contractual relationship.

(c) Direct marketing

• Direct marketing communications

We process the following personal data in order to send you direct marketing communications :

• Identification data and contact details (name, surname, email address, home address, phone number)
• Personal characteristics
• Hobbies
• Consumption habits

If you are a customer of MoneyOak, the legal basis is our legitimate interest (freedom of entrepreneurship and direct marketing). If you are not a customer of MoneyOak, the legal basis is your consent.

The personal data you provide can be supplemented through public sources (e.g. social networks such as LinkedIn).

Unless a legal retention period applies, the personal data will be retained for a period of three years after the last meaningful contact with you.

• Prospection of new clients

In the context of our prospection for new clients, we process the following personal data (publicly available on LinkedIn) of employees of potential new clients (prospects) with the aim of providing these prospects with personalized offers regarding our services:

• Identification data (surname and first name)
• Data relating to the profession
• Education data

The legal basis is our legitimate interest (MoneyOak’s freedom of entrepreneurship).

This data is collected exclusively through a public source (LinkedIn).

Unless a legal retention period applies, the personal data will be retained a period of six months after its collection.

(e) Compliance with our legal obligations (including tax and accounting obligations)

We process the following personal data in order to comply with our legal obligations (including tax and accounting obligations):

• Identification data and contact details (name, surname, address, phone number)
• Financial data (payment details)
• Personal characteristics
• Professional data

The legal ground is our legal obligation.

The personal data shall be retained in accordance with the legal retention periods.

Who are the recipients of your personal data ?

We share your personal data under certain circumstances to a limited number of other third parties:

• Competent national and European authorities
• Banks and payment service providers
• Our professional advisers and lawyers
• Our service providers
• Other MoneyOak entities

MoneyOak does not transfer personal data outside the European Union.

Which rights do you have regarding the processing of your personal data?

According to the General Data Protection Regulation (GDPR), you have the following rights:

• to access and receive a copy of your data;
• to rectify your data if it is inaccurate;
• to object to the processing for direct marketing purposes and for reasons related to your particular situation;
• to erase your personal data (“right to be forgotten”) or restrict the processing of your data;
• when the processing is based on consent, to retract your consent at any time;
• to data portability when the processing is based on consent or contractual obligation.

You have the right to lodge a complaint with the competent supervisory authority (for Belgium, this is the Belgian Data Protection Authority). If you consider lodging a complaint, we kindly ask you to contact us first to seek an amicable resolution of the issue.

To exercise these rights, you must respect the conditions provided by the GDPR. Alternatively, to make things easier, you can contact us at the address below.

In case of reasonable doubt about your identity, we reserve the right to ask for proof of identity.

Which security measures are implemented?

In accordance with legal requirements, we have put in place an adequate system of protection of your personal data. These measures include technical and organisational measures necessary to protect your personal data against the accidental or unlawful destruction, loss, alteration, or unauthorised disclosure of personal data.

Nevertheless, no security system can guaranty 100% of security. You also have an important role to play in the security of your personal data by keeping your account details confidential and choosing a strong password. We remain at your disposal if you have any questions regarding the confidentiality and security of your personal data.

How to contact us

To exercise your data protection rights or if you have any question relating to the processing of your personal data, do not hesitate to send an email to privacy@moneyoak.com or contact:

MoneyOak SA
Avenue Louise 523
1050 Brussels

Updates

Please note that we reserve the right to update this document from time to time. In that case, the updated document shall be posted on our website and you will be notified.

This document was last updated on November 2022.