Privacy Statement
We are aware that you place your trust in REVA vzw with registered office at Beselarestraat 44, 8890 Dadizele and with company number BE 0434.0445.306 (hereinafter referred to as “REVA”, or “us” or “we”). We therefore consider it our responsibility to treat your privacy with care. In this ‘Privacy Statement’, we inform you which personal data we process and for what purpose. This way, you understand exactly how we work.
In this context, we act in the capacity of data controller.
Our privacy statement applies to all our activities (hereinafter referred to as “Performance”), in particular to:
- The relationship with visitors to the fair;
- The relationship with the fair’s exhibitors;
- The relationship with suppliers;
- Attracting new visitors;
- The search for new exhibitors;
- Networking;
- The relationship with the fair’s staff.
Basis of our privacy policy
- We are compliant with GDPR, the new European privacy legislation;
- We only process personal data necessary for the defined purpose and limit such processing over time;
- We limit access to personal data to those for whom access is necessary;
- We strive for maximum completeness and correctness of personal data;
- We ensure maximum and reasonable security of personal data;
- We communicate transparently about which personal data are processed, for what purpose and what the rights of data subjects are;
Processing of personal data
In principle, we do not process sensitive personal data such as medical or biometric data, or data relating to ethnicity, sexual orientation, religion, political opinion, union affiliation or judicial information.
We process the following personal data:
(1) Customers (= exhibition exhibitors):
We keep this personal data from our customers:
- Coordinates (name; address; contact person; position; phone/gsm; e-mail; website);
- IP address;
- Financial info and order, performance and payment history;
- Product-technical and/or content-related content regarding the cooperation.
With the following purposes:
- Carrying out the operational aspects related to the exhibition organisation as well as possible (e.g. processing and handling questions; carrying out the service; administrative processing; solvency check; maintaining order and payment history; …);
- Tracking and reducing spam and increasing data security (with regard to the IP address);
- Being able to improve services in the future (in terms of content and form);
- Statistical processing of the geographical distribution of exhibitors, with a view to optimising our services to our exhibitors and our visitors;
- Providing information on new or renewed Performances.
The legal basis for processing this personal data is based on contractual processing or legitimate interest. By entering into a contract – via online registration for the exhibition, or by any other means – the exhibitor explicitly agrees to the processing of the above personal data for the above purposes.
This data will be kept for 10 years after the latest performance. This retention period is imposed on us to be in order with tax obligations.
(2) Prospects (potential exhibitors):
In order to organise the continuity of the REVA fair in a smooth way, we are always looking for (new) potential exhibitors. This can be done in various ways (e.g. via the website; via fairs, via networking; via word-of-mouth advertising; via publicity; newsletters…). In this context, we hold the following personal data:
- Coordinates (name; address; contact person; function; phone/gsm; e-mail; website);
- IP address;
- Financial info;
- Product-technical and/or content-related content regarding possible future cooperation.
With the following purposes:
- Being able to properly carry out the operational aspects of the possible future cooperation with our prospects (including processing and handling questions; administrative processing; keeping a history of contact moments; …);
- Tracing and limiting spam and increasing data security (with regard to the IP address);
- Being able to improve services in the future (in terms of content and form);
- Statistical processing of the geographical distribution of exhibitors, with a view to optimising our services to our exhibitors and our visitors;
- Providing information on new or renewed Performances.
The legal basis for processing these personal data is based on legitimate interest.
These data are kept for 6 years after the latest fair. This retention period typically covers 3 exhibition editions.
(3) Visitors to the fair
We keep this personal data from our visitors:
- Coordinates (name, first name, postal code, e-mail);
- Profile (resource user and over/under 65, professional, student, volunteer and/or carer).
- Assistance or guidance need.
With the following purposes:
- Sending access card.
- Statistical processing of the profiles of the exhibition visitors, with a view to optimising our service to and the experience of our exhibitors and our visitors;
- Invitation to subsequent editions of the fair
- Subscription to REVAnews
The legal basis for processing this personal data is based on legitimate interest. A separate consent is requested for the subscription to REVAnews and for the invitation to subsequent editions.
These data are kept for 6 years after the latest fair. This retention period typically covers 3 exhibition editions.
Information on the need for guidance or assistance is not stored.
Profiling data is irreversibly anonymised. No personal data are therefore stored in this context.
(4) Registrations for REVAtalks (= attending lectures):
We keep this personal data from participants in REVAtalks:
- Coordinates (name; institution; postcode; e-mail);
- Choice of desired seminars
- Application attestation of seminars attended
With the following purposes:
- Registration seminar
- Organisation of the various seminars on REVAstudy
- Drawing up a certificate of attendance
- Announcing the programme of the next editions of the fair
The legal basis for processing these personal data is consent.
These data are kept for 6 years (= typically 3 editions) after the latest fair.
(5) Suppliers
We hold this personal data on:
- Coordinates (name; address; phone/gsm; e-mail; website);
- Contact person (name; position; phone/gsm; e-mail);
- Financial info and order and performance history;
- Product-technical and/or content-related content regarding the collaboration.
With the following purposes:
- To be able to perform the operational aspects of the cooperation with our suppliers as well as possible (e.g. processing and handling of projects; administrative processing; solvency check; order and delivery history; …);
- Being able to improve cooperation in the future (in terms of content and form);
- Providing information on new or renewed possible collaborations.
The legal basis for processing these personal data is based on contractual processing. By entering into an agreement – orally, in writing, by delivery or in any other way – the supplier explicitly agrees to the processing of the above personal data for the above purposes.
We always pursue long-term relationships with our suppliers. Personal data processed in this context are retained for 10 years after the most recent performance. This retention period follows the customer retention period.
Transfer of personal data
The personal data processed by us are not disclosed to third parties, except to some of our suppliers (e.g. communication agency; operator of exhibition complexes; accountant; …), but limited to those who are necessary to fulfil the purposes described above. In these cases, only the personal data relevant to them are shared and an agreement is concluded with these third parties containing the necessary guarantees with regard to the confidentiality and privacy compliance of your personal data.
We will not sell or rent your personal data.
However, notwithstanding the above, we may disclose your personal data to the competent authorities (i) when we are required to do so by law or in the context of judicial or future legal proceedings and (ii) in order to safeguard and defend our rights.
There is no data transfer outside the EU zone.
Our performance may potentially contain links to third parties, without personal data being transferred. While we treat your privacy with the utmost care, please be aware that we are not responsible for the privacy policies or practices of these third parties.
Data subjects’ rights
Anyone whose personal data we process has the right to:
- Request and access their own personal data;
- Correct and update their own personal data;
- Have their own personal data deleted (right to be forgotten);
- Restrict one’s own personal data;
- Have one’s own personal data transferred;
- Withdraw consent given.
Anyone wishing to exercise any of these rights can contact us to do so (see coordinates at the bottom of this Privacy Statement). He/she must identify him/herself and will receive a response for this within 30 days. However, please know that data subjects’ rights are sometimes subordinated to higher interests (e.g. legal obligation to keep some data, …).
Security
All personal data processed by us are kept with the utmost care and we undertake to take reasonable, physical, technological and organisational precautions with a view to preventing (i) unauthorised access to your personal data, as well as (ii) the loss, misuse or alteration of your personal data.
Access to it will be restricted to those who need it for the purposes described above.
Notwithstanding our security policy, the controls we implement and the actions we take in this regard, a foolproof level of security cannot be guaranteed. No method of processing is 100% secure, thus we cannot guarantee absolute security in this context.
The data subject therefore acknowledges that any direct or indirect damage he/she might suffer as a result of an illegal or unlawful use of his/her personal data by third parties who are not authorised to do so can never be attributed to REVA, nor can the latter be held liable for this insofar as it is not due to gross error or fraud on REVA’s part.
Use of cookies
Our Website uses cookies. A cookie is a text file placed by our server in the browser of your computer or mobile device when you consult the Website. The cookie contains a unique code that allows your browser to be recognised during your visit to the Website (a so-called ‘session’ cookie) or on subsequent, repeated visits (a so-called ‘permanent’ cookie). Cookies may be set by our servers or by one of our partners with which the Website cooperates. Our server can only read the cookies it places itself and has no access to other information located on your computer or device.
Cookies generally make the interaction between the visitor and the Website easier and faster and help the visitor to navigate between different parts of the Website. Cookies may contain data about the elements of the Website that you have clicked on.
When you go to our Website, cookie settings are displayed and can be adjusted. Through the browser settings on your computer, you can delete cookies that have always been placed and refuse the placing of new cookies. The way to do this varies from one browser to another. If necessary, you can consult your browser’s help function.
We only use this information to track how you use the Website, to compile reports on website activity and to offer other services related to website activity and internet usage.
Update to this Privacy Statement
This Privacy Statement is tailored to the current use of and capabilities of our Performance. In a continuous search for improvements to our Performance, this may result in an update to this Privacy Statement. We are entitled to update this Privacy Statement by posting a new version on our website. It is therefore advisable to consult this Privacy Statement regularly.
Contact details
If you have a question or comment regarding this Privacy Statement, or if you wish to exercise your rights as a data subject, you can always reach us at the coordinates below:
REVA vzw
contact person: Mr. Bart Parmentier
address: Beselarestraat 44, B-8890 Dadizele
tel: +32 (0) 490/57.75.88
privacy@reva.be
Complaints
If you believe that your personal data are being processed incorrectly, you can lodge a complaint to this effect with us (see coordinates above) or directly with the privacy commission (commission@privacycommission.be).