Your personal data is collected and processed by the Belgian Society of Cataract and Refractive Surgeons, hereafter referred to as “BSCRS”.

BSCRS is a non-for-profit organization incorporated and registered in Belgium, and has offices at Boulevard du souverain 280, 1160 Brussels Belgium

BSCRS acts as the data controller for the Personal Data that is collected via the Membership Portal.

1. Scope of the Privacy Statement

BSCRS values privacy and is therefore committed to protect the (personal) data of all its stakeholders with the greatest possible care, and to process personal data only in a fair, lawful and transparent manner. This Privacy Statement is applicable to BSCRS’ members for the personal data collected and processed by BSCRS through this Portal and the related services.

This Privacy Statement contains essential information on how BSCRS, as the data controller, collects and processes personal data, for what purposes and explains your rights as a data subject.

2. Processing of Personal Data

Personal data can be defined as any information that allows a natural person to be identified, directly or indirectly. You can provide us with your personal data in the context of the following activities, for the corresponding purposes and based on the stated grounds:

• User Profile: By accessing the Portal, you consent to BSCRS processing your username, name, postal address, phone number, email address, professional title, affiliation, areas of interest.

• Newsletter: If you subscribe to our newsletter, you consent to provide us with your email address. BSCRS collects these data based on your consent and for the purpose of sending you relevant information and keeping you up to date with our latest news.

• Membership Portal analytics: If you accept cookies used on the Membership Portal, BSCRS will process your IP address, country and behavioural data.

• Membership Communities: By joining the Membership Communities, you consent to BSCRS processing your username, name, address of practitioner, country of residence, email address, national family medicine organization, professional title.

• Other purposes: BSCRS may sometimes need to process personal information to comply with its legal obligations.

BSCRS considers your personal data confidential and commits to process it only in a way that is compatible with the purposes for which the data were initially collected.

3. Your Rights as a Data Subject

At all times, the data subject has the possibility to exercise his or her rights as described in the General Data Protection Regulation. The data subject can exercise the following rights:

Right of access

You have the right at any time and free of charge to access your personal data and to request a copy of the personal data that BSCRS collects about you.

Right to rectification
You always have the right to have incorrect personal data corrected, or incomplete personal data completed.

Right to erasure (“right to be forgotten”)
You can request to have your personal data erased from BSCRS’ systems.

The request to erase your personal data cannot always be granted due to contractual or legal obligations. BSCRS will take these obligations into account when replying to your request.

Right to object
You have the right to object to the processing of your personal data if the processing takes place on the ground of the legitimate interest of BSCRS or on the ground of the public interest. We will stop processing unless we can prove that there are compelling legitimate grounds for the processing or for the exercise of legal claims. You can also object in the case of direct marketing, so the personal data will no longer be processed for these purposes.

Right to withdraw consent
For the processing of your personal data collected by BSCRS with your consent, you can withdraw your consent at any time. For example, you can always unsubscribe from the newsletters. However, the withdrawal of your consent does not apply to processing previously carried out by BSCRS.

Right to restriction of processing

In certain cases, the data subject is entitled to obtain the restriction of the processing of his or her personal data. We will continue to store your data, but we will restrict its use. You can e.g. submit this request when you think that your personal data is inaccurate, or the processing by BSCRS is unjustified. We only have to grant these requests in specific cases as defined by law.

Right to data portability
The data subject has the right to receive the personal data concerning him or her, processed by BSCRS, in a structured, commonly used and machine-readable format and/or to transmit those data to another controller.

These rights can be exercised free of charge by sending an e-mail to privacy@BSCRS.net. We commit to answer your request within one month upon its receipt. It is possible that we request additional information first in order to confirm your identity and ensure the request originates from you.

Right to lodge a complaint
If, at any time, you believe that BSCRS infringes your privacy, you have the right to lodge a complaint with the competent Supervisory Authority.

4. Disclosure to Third Parties

BSCRS will refrain from disclosing or selling personal data of data subjects to third parties as well as publicly disclosing data subjects’ personal data, unless in the following specific cases:

• Personal data can be shared with third party service providers to which BSCRS outsourced certain processing activities. In any case, they are limited to processing your personal data in accordance with our instructions and if necessary, a data processing agreement will be concluded so they are obliged to comply with all obligations required by the applicable data protection legislation.
• If it is required by applicable laws or regulations.

Regarding international transfers of personal data and processing outside the European Economic Area (EEA), your data are only transferred to parties in third countries, such as software providers and cloud or mailing services, when permitted under the applicable data protection legislation. We guarantee appropriate safeguards which ensure that your rights are also respected by the data recipient outside the EEA in accordance with an adequate level of data protection.

5. Retention of your Personal Data

BSCRS acknowledges the importance of the protection of personal data. We do not retain your personal data longer than strictly necessary for the realisation of the purposes for which we received the data, or for the execution of a contract or for fulfilling a legal obligation. The retention periods differ with regards to the type of processing activity and the purpose for which the personal data were collected.

The personal data that we collect on the basis of your consent will be kept by us for as long as your consent remains valid.

In all cases, personal data may be retained for a longer period if there is a legal or regulatory reason to do so, or for a shorter period if the data subject objects to the processing of his/her personal data and if there is no longer a legitimate reason to retain them.

We guarantee to only provide limited access to archived data and to remove or render anonymous your personal data if the retention period has passed.

6. Security and Confidentiality of your Personal Data

BSCRS has taken technical and organizational security measures to prevent the destruction, loss, falsification, alteration, unauthorized access or disclosure of your personal data to third parties and any other unauthorised processing of these data.

We have made every effort to ensure the confidentiality, integrity and availability of the information systems and services that process personal data. These measures include physical and operational security measures, access control, awareness raising and confidentiality clauses. All our employees and third parties engaged by us are obliged to respect the privacy and security of your data.

7. Contact Details

If you have comments, questions or concerns about any of the information in this Statement, or any other issues relating to the processing of your personal data by BSCRS, please contact us via privacy@BSCRS.net.

In the event you prefer to contact us by post, please see below our address:
Boulevard du souverain 280
1160 Brussels
Belgium

8. Changes to this Privacy Statement

We may amend or update this Privacy Statement from time to time to reflect changes in our practices with respect to the processing of your personal data, or changes in applicable law. We will be doing this by posting the updated version on this website. When we publish changes to our Privacy Statement, we will change the date and version number of the “last update” of our Privacy Statement. Significant changes will be reported on our homepage. Nevertheless, we encourage you to read our Privacy Statement periodically.

This version of the Privacy Statement is effective as of 15 March 2021.