1. Introduction
This Charter explains how the architectural firm DDS+, Sc (hereafter “DDS+”) processes data that can identify you(*) directly or indirectly (Personal Data) and the rights you have concerning this data.
(*) Personal data collected by DDS+ about individuals acting in their own name or as an agent, part of a body, contributor or employee of a legal entity bound via an agreement with DDS+, in a co-contractor relationship with a mutual client or as a former, current or potential client of DDS+.
This Charter is kept up to date and may be modified. As such, we recommend that you regularly check the contents in order that you are informed of any substantial modification made to the Charter. Any substantial modification will be notified to you or referenced directly on the DDS+ homepage.
Specific agreements or clauses may be added to supplement this Charter, with the aim of covering specific aspects of our relationship with you when we need to provide additional information to you on how we collect and use your personal data.
Last updated
2. General principles
All of the personal data that DDS+ collects (hereafter “Data”) will be processed in in accordance with the applicable Belgian and European regulations on the protection of personal data, in particular EU Regulation 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and the free movement of such data, and repealing directive 95/46/EC (the General Data Protection Regulation (GDPR) or hereafter “the Regulation”), Directive 2002/58/EC, amended by Directive 2009/136/EC, and the Law of 13 June 2005 (The Law on Electronic Communications) amended by the Law of 10 July 2012.
Terms such as “processing”, “data controller”, “subcontractor”, “data subject”, “personal data”, etc. shall have the meaning given in the General Data Protection Regulation (GDPR) (Regulation no. 2016/679 of 27 April 2016 on the protection of individuals, on the processing of personal data and on the free movement of such data).
The GDPR is available at the following address
3. Data controller
The data controller of your personal data is the architectural firm DDS+, Sc, with registered office at 1050 Brussels, Avenue Louise 251 bte 7, registered with the CBE as number 0883.205.982 and registered on the regional list of the Belgian Order of Architects of Brussels-Capital and Walloon Brabant as number 2500033 (hereafter “DDS+”).
If you have any questions about the processing of your personal data, please contact us at the email address mail@dds.plus.
4. Purposes of the processing
Your personal data is collected and processed by DDS+ for specific purposes that vary according to the type of relationship DDS+ has with you or with the legal entity in which you are part of a body, or are the representative, employee or contributor, acting as:
- Client of DDS+
Purpose: Communicating with you to allow us to perform the assignments given to us via an agreement and/or to keep you informed of our professional activities.
- Co-contractor(s) in an assignment given by a client of DDS+
Purpose: Enabling us to collaborate with you on executing our agreement as part of the project with our mutual client.
- User of the DDS+ website, writer of an email or letter sent to DDS+ (you or the legal entity you are acting on behalf of, regardless of whether you are already a client of DDS+)
Purpose: Enabling you to use our website, receive newsletters you are subscribed to, contact us to be kept up to date on our activities that you have indicated you are interested in or to answer questions you have asked about our activities.
- Supplier or service provider for DDS+
Purpose: Enabling us to manage our contractual relationship.
5. Legal basis for the processing
The processing of your personal data by DDS+ has the following legal bases:
a. Our contract with you or with the legal entity you are acting as a part of:
In most cases, DDS+ processes your personal data where needed for the execution of the agreement, in order to allow DDS+ to execute the agreement and provide its services as part of this agreement.
These agreements primarily consist of:
- Agreements through which an assignment is given to DDS+ in its capacity as an architectural firm.
- Collaboration agreement signed with DDS+ by you as an individual or with the legal entity through which you are acting, for the provisions of services to DDS+.
- Product and/or service supply agreements signed by DDS+ with you as an individual or the legal entity through which you are acting.
DDS+ only collects the data needed for the execution of the agreement, i.e. those that enable DDS+ to communicate with you, to provide the requested services and to enable DDS+ to receive the agreed services executed by you as an individual or the legal entity through which you are acting.
b. Our legitimate interest
In certain cases, DDS+ may process your personal data because it has a legitimate interest in doing so.
This is the case in particular when DDS+ processes your personal data collected under the circumstances defined in Article 4 in order to communicate with you, to provide you with information or to respond to requests related to our activities. For these cases, the legitimate interest for DDS+ is the pursuit and development of our activities. This scenario also covers direct marketing, the use of your contact details, email or IP address to send you communications about these activities, because you have already been a client of DDS+ or because you had been in contact with DDS+ or signalled an interest in our activities with respect to a potential collaboration.
You may opt out of receiving these kinds of communications (see Article 7).
c. Your consent
In certain cases, you may give your explicit consent to the processing of your personal data. When you have given your consent, you can withdraw it at any time.
When viewing our website or during email conversations or correspondence with DDS+, you are deemed to have read the terms of this Charter and to have agreed to the collection, storage and use of your personal data in accordance with the provisions of this Charter.
d. Our legal obligations
DDS+ may also legally process personal data if this processing is required for the execution of our legal obligations.
6. Categories of personal data processed by DDS+
The categories of personal data that DDS+ processes about you varies according to the type of relationship that DDS+ has with you or the legal entity through which you are acting:
- Client or co-contractor in one of our projects or assignments:
→ Contact details (surname, first name, postal address, telephone number, fax and email address, IP address)
→ Personal characteristics (gender)
→ Professional information (professional qualifications, title/position, department)
- An independent contributor of DDS+ or contributor of the legal entity through which you are acting:
→ Contact details (surname, first name, postal address, telephone, date of birth, fax and email address, IP address)
→ Personal characteristics (gender)
→ Professional information (professional qualifications, diplomas, position, professional experience, length of service)
→ Financial and banking information (account number, other financial information)
→ Marital status, family status
→ Social security details
→ Photographs during activities organised by DDS+
- Independent supplier (current or potential) of a product or service or acting as supplier on behalf of the legal entity through which you are acting:
→ Contact details (surname, first name, postal address, telephone number, fax and email address, IP address)
→ Personal characteristics (gender)
→ Professional information (company, title/position, diplomas, professional experience, department, website)
→ Information enabling us to receive your products or services
- A potential client of DDS+ acting as such on behalf of the legal entity through which you are acting:
→ Contact details (surname, first name, postal address, telephone number, fax and email address, IP address)
→ Personal characteristics (gender)
→ Professional information (company, title/position, department, website)
→ Information enabling us to receive your products or services
DDS+ does not collect or store sensitive personal data about individuals we have been in contact with, either through an agreement, through the use of our website, product or service offerings or, more broadly, direct contact via mail or email.
7. Recipients of personal data and guarantees concerning transfers to third countries
In order to achieve the purposes described in Article 3, DDS+ may transfer your data to third parties (“recipients”) who are:
- Contributors and subcontractors of DDS+ for the purposes of the execution of agreements of DDS+ formed for the execution of an assignment given to us by one of our clients.
- Other participants in a project given an assignment by the client of DDS+ for which you or the legal entity through which you are acting, working on the same project in which DDS+ is executing its assignment.
- Clients or potential clients of DDS+ as part of projects for which we may propose your involvement or that of the legal entity through which you are acting.
- External service providers required for the execution of our assignments (subcontractors) and in particular IT, accommodation or accounting service providers or, if you are any employee of DDS+, social security service providers.
- The competent administrations and authorities for data that is strictly required by them for the execution of our (legal or contractual) obligations, in particular social, tax and/or accounting obligations.
When this data is sent to “subcontractors” (as per the meaning in the Regulation) of DDS+, DDS+ ensures that the processing of this data by these subcontractors complies with the regulatory and legal requirements and provisions.
In principle, your personal data will stored in Belgium or another country in the European Economic Area.
If DDS+ is required to transfer your personal data to recipients outside of the European Economic Area, DDS+ will ensure that the recipient provides appropriate guarantees to protect your data according to standards equivalents to those imposed by European legislation.
DDS+ will under no circumstances, without having received you consent, transmit your personal data for purposes other than those mentioned above.
8. Period for which your personal data will be stored
DDS+ will store your personal data for no longer than is required for the achievement of the purposes for which it was collected.
9. Your rights pertaining to your personal data
You have the following rights with respect to your personal data that DDS+ processes:
a. Right of access
You have the right to know whether DDS+ is or is not processing your personal data and when they are, to access it and obtain information about the processing. For this, you may send a request to the following address: mail@dds.plus
b. Right to rectification
You have the right to rectify your personal data if it is inaccurate, or provide additional information if it is incomplete.
c. Right to erasure
You have the right to request the erasure of your personal data when there are no longer grounds for it to be processed.
d. Right to restriction of processing
You have the right to request the restriction of processing of your personal data, in which case we may only store this personal data, with any other form of processing ruled out.
e. Right to object
You have the right to object to the processing of your personal data. When your personal data is processed for direct marketing purposes, you have the right to object to their processing under any circumstances.
f. Right to withdraw your consent
When you have given your consent to the processing of your personal data, you have the right to withdraw this right at any time, without prejudice to the lawfulness of the processing based on the consent given before the withdrawal of the consent.
g. Right to lodge a complaint with the data protection authority
You have the right to lodge a complaint with the data protection authority, under the conditions and the limitations laid down by the GDPR and any other legislation applicable to the processing of personal data. The contact details of the data protection authority are provided below:
Autorité de protection des données,
Rue de la Presse, 35,1000 Brussels
Tel.: +32 (0)2 274 48 00
Fax: +32 (0)2 274 48 35
Email: contact@apd-gba.be