Purpose of this Privacy Policy

The website available at the address www.creafund.be (hereafter: the ‘website’) is the property of Creafund Asset Management nv, with enterprise number 0679.859.835 and with registered office at Kapitein Maenhoutstraat 77B, 9830 Sint-Martens-Latem, Belgium (hereafter: ‘we’, ‘us’ or ‘our’).

The purpose of this Privacy Policy is to inform you about the processing of your personal data on or via the website. This Privacy Policy aims to guarantee the proper and transparent processing of your personal data.

We strongly recommend that you read this Privacy Policy carefully. This Privacy Policy only applies to the processing of your personal data on or via the website by us and/or by external service providers or subcontractors who process your personal data on our behalf and have entered into an agreement with us for this purpose.

This Privacy Policy does not in any way whatsoever cover the privacy policies of other websites or applications to which the website refers via (even permitted) hyperlinks. We are responsible for the processing of your personal data and take all appropriate technical and organizational measures to ensure that the processing is in compliance with Regulation (EU) 2016/679 of 27th April 2016 (hereafter: ‘GDPR’). Our appointees or employees who have access to your personal data are also required to comply with the obligations of the GDPR.

This Privacy Policy is made available to you electronically and can be consulted at any time under the ‘Privacy Policy’ section on the website. In case of requests or additional questions, you can always send an e-mail to assistant@creafund.be. We will inform you of the action taken within a reasonable period of receipt of your request or question.

We reserve the right to change this Privacy Policy at any time. This Privacy Policy was last updated on 10th October 2023.

We must point out that you must always obtain the express permission of the person(s) concerned before uploading data to or placing information on the website about these people.

Who are we and how can you contact us?

Company name: Creafund Asset Management nv

Legal form: Public Limited Company

Registered office: Kapitein Maenhoutstraat 77B, 9830 Sint-Martens-Latem, Belgium

VAT number: BE0679.859.835

Telephone number: +32 (0)9 272 62 00

E-mail: assistant@creafund.be

Website: www.creafund.be

For what purposes do we process your personal data?

We process your personal data that you provide on or via the website, as part of the given consent, to communicate about Creafund Asset Management nv or Creafund nv via the newsletter and we store your personal and business-related data in the context of our business relationship. What is the legal basis for processing your personal data? We process your personal and business-related data exclusively in accordance with legal regulations. We record and process this data only in the context of the fulfilment of our business obligations towards you or to send you communications regarding Creafund Asset Management nv or Creafund nv via our newsletter. We cannot have a business relationship with you or send you newsletters unless you have provided us with this information yourself. We only use your personal and business-related data in situations and to the extent that you have given your specific consent.

By clicking on the ‘Allow’-button prior to using the website and/or processing personal data on or via the website, you approve with our Privacy Policy. From that moment on, you give us your free, specific, informed and unambiguous consent to process your personal data and you explicitly agree to the manner in which this is processed, as set out in this Privacy Policy.

Which personal data do we process?

On or via the website, we only process data relating to personal or business situations to the extent that you have provided said data to us. This may include your full name, title, gender, postal address, your telephone number(s), fax number, your e-mail address and/or your company name. Among other things, we also process the following data: device data, log file data such as the IP address, browser, and operating system, the external website that referred you to our website, and the pages you visited on the website (and the date and time you visited these pages). This data is automatically (without any sort of registration) processed solely for statistical purposes and with a view to further improving the website.

Who receives and/or processes your personal data?

Your personal data is also processed on our behalf by, among others, our IT supplier and our site administrator. This processing is regulated in a processing agreement that we have concluded with them.

Do we pass on your personal data on to (companies or entities in) non-EU countries?

When your personal data is transferred outside the EEA, we will put in place appropriate safeguards to ensure that this transfer is carried out in accordance with applicable data protection rules. You can request additional information about this.

How long do we keep your personal data?

We will not store your personal data for longer than necessary to achieve the purposes set out in Article 4. In this respect, we may retain your personal data for some time. In any case, we will not store your personal data for longer than 10 years after the end of our business relationship.

What are your rights?

You have the right to request us to:

• have access to your personal data;
• a correction (rectification) or removal (deletion) of your personal data;
• a restriction of the processing that concerns you.

You have the right to object to the processing of your personal data. You can object at any time and free of charge to the processing of your personal data for direct marketing, including the newsletter.

You have the right to transfer your personal data to another controller.

You have the right to withdraw your consent to the processing of your personal data at any time. However, withdrawing your consent does not have retroactive effect and does not affect the lawfulness of processing based on your consent before its withdrawal.

You have the right to file a complaint with the Privacy Commission/Data Protection Authority.

The exercise of the above rights is subject to the requirements and conditions set out in the GDPR.

To exercise the above rights, you can simply send us a request via assistant@creafund.be, providing sufficient proof of your identity.

What are our obligations?

We take all appropriate measures to ensure a security level tailored to the risks for the protection of your personal data.

We cooperate with the competent privacy authorities (at their request).

Where necessary and/or mandatory, we will immediately report security incidents or data leaks (including illegal processing, loss, unavailability, destruction, damage, or unauthorized distribution of your personal data) to the Privacy Commission/National Data Protection Authority within 72 hours after becoming aware of said issue.

Where such infringement is likely to pose a high risk to your rights, and under the conditions set out in the GDPR, we will also notify you.

If you become aware of such an infringement in relation to your personal data or that of others, you can contact us via the e-mail address assistant@creafund.be.

If we use certain new technologies or applications to process your personal data, which are likely to pose high risks in relation to your data protection, we will carry out a so-called ‘Data Protection Impact Assessment’ (DPIA) under the conditions set out in the GDPR and, if required, consult the Privacy Commission/Data Protection Authority in advance.