This version is effective since : 02/09/2021

1.   Introduction

The Belgian Bankers Academy values your privacy and cares about the way in which your personal information is treated. Our firm makes all possible efforts to guarantee full compliance with privacy regulations.

Personal data will be processed in accordance with data protection legislation, in particular European Regulation (EU) 2016/679 on the protection of the privacy of individuals with regard to the processing of personal data. (General Data Protection Regulation or “GDPR”).

Please note that we may make changes to this privacy policy from time to time, for example, to comply with new legal obligations. We encourage you to review this privacy policy periodically to be informed of how we use your personal information.

2.   Controller

The Belgian Bankers Academy registered in Belgium, 1050 Brussels, Avenue Louise, 500 under company number BE 0461.474.926, acts as controller.

If you have any questions about this Privacy Policy or want to exercise your rights set out in this Privacy Policy, you can contact:

By mail:

Belgian Bankers Academy

Privacy Compliance Officer

1050 Brussels, Avenue Louise 500. BELGIUM

By e-mail: info@bbacademy.be

3.   Data processed

We collect personal data including :

Identifying information, such as name, job title, company you work for, postal address, telephone number, mobile phone number, fax number and email address;

Financial information, such as credit card number, IBAN and BIC/SWIFT, invoicing information;

Further business information necessarily processed in a project or client contractual relationship;

Information provided by candidates when applying for a job;

Identification and background information on employees or suppliers provided by them or collected as part of our business acceptance process;

Any other data that you voluntarily communicate to us.

4.   Purposes and legal basis

We may collect personal information from you in the course of our business activities, when you contact or request information from us, when you engage our services or as a result of your relationship with one or more of our staff and clients.

We process your personal data for various purposes. For each purpose, only data relevant to the purpose in question is processed. Personal data may be processed for the following purposes (without limitation):

Establishing, executing and leading the contractual relationship with the customer; Providing services;

Responding to requests for information;

Compliance with legal obligations (record keeping obligations, anti-money laundering regulations, payroll administration,…);

Providing advice and representation of a client in the context of a regulatory mission;

Managing and administering business relationships, including processing payments, accounting, billing and collection, support services and evaluation of service providers and suppliers;

Informing of relevant developments in European Regulations, on service offerings or on events and trainings organized by the Belgian Bankers Academy;

Evaluation of job applications;

Employee suppliers, performance review, training;

For any marketing activities and promotions proposed to clients who have given their consent;

For any other purpose to which you have expressly consented.

Personal data can be processed on one or more of the following legal basis:

Performance of a contract: the Belgian Bankers Academy must collect some of your data to respond to your requests. If you choose not to share this data with the Belgian Bankers Academy, this may make the performance of the contract impossible;

Your consent;

Compliance with legal and regulatory obligations imposed on the Belgian Bankers

Academy;

The legitimate interest of the Belgian Bankers Academy: the Belgian Bankers Academy has a legitimate interest in interacting with you, responding to your requests and above all improving services, preventing abuse and fraud, monitoring the regularity of transactions, exercise, defend and preserve the rights of the Belgian Bankers Academy, unless these interests are superseded by your interests or your fundamental rights and freedoms requiring the protection of your personal data.

If the legal basis for the processing is your consent, you have the right to withdraw it at any time, without prejudice to the lawfulness of the processing performed prior to withdrawal.

You have the right to unsubscribe at any time from newsletters and other commercial communications for direct marketing purposes. To unsubscribe, you must send an e-mail to the following address: info@bbacademy.be or click on the link at the bottom of each e-mail.

5.   Recipients

We may share your personal information with certain trusted third parties in accordance with contractual arrangements in place with them, including:

Our professional advisers and auditors including the prudential authorities and regulators;

External third-party service providers to whom we outsource certain support services (IT service providers, accountant…).

In this case, third parties will only communicate the data to other third parties if this is necessary for the performance of the contract or when they are required to do so by a legal obligation.

6.   Storage term

We will keep your Personal Data no longer than the necessary for the purposes for which we collected the data.

The Belgian Bankers Academy will retain personal data where required to assert or defend against legal claims until the end of the relevant retention period or until the claims in question have been settled. Personal information may be retained for as long as we are required to do so by law or regulation

(the Belgian Bankers Academy is bound by the legal obligation to save your personal data for up to 10 years in order to prove your professional knowledge (access to the profession) or your continuing education).

7.   Data Protection

The Belgian Bankers Academy has in place appropriate technical and organizational measures to prevent or act against any unauthorized and unlawful processing or disclosure, as well as accidental loss, modification or destruction of Personal Data. These measures for protecting Personal Data will regularly be adjusted to the technical developments and organizational changes.

8.   Rights | complaints

In compliance with privacy regulations and within the limits of these regulations, data subjects have the following rights regarding the processing of their personal data by the Belgian Bankers Academy:

Right to access to all stored personal data

You are entitled to request details of the information we hold about you and how we process it.

Right to rectification

You are entitled to have your personal data corrected if it is incomplete or inaccurate.

Right to erasure (“right to be forgotten”)

You have the right to request the erasure of your personal data, except those that the Belgian Bankers Academy has a legal obligation to keep.

Right to limitation

You have the right to obtain the limitation of the processing of your personal data and, in case of limitation, to limit the processing to the simple storage of this data.

You can obtain the limitation of the processing when you object to the processing, when you dispute the accuracy of the data, when you consider that the processing is unlawful.

Right to data portability

You are entitled, in certain circumstances (e.g. the processing was carried out by automated means), to obtain personal data you’ve provided us with, in a structured, commonly used and machine-readable format and to transmit it to another data controller.

Right to withdraw consent

Where processing is based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. We may be able to continue to process your personal information to the extend required or otherwise permitted by law.

Right to object

You have the right to object, on certain grounds relating to your particular situation, to the processing of your personal data and at all times. In particular, you have the right to object at any time to the processing of your personal data for marketing purposes.

Any request should be addressed to the Belgian Bankers Academy:

By mail:

Belgian Bankers Academy

Privacy Compliance Officer

1050 Brussels, Avenue Louise 500

BELGIUM

By e-mail: info@bbacademy.be (mailto:info@bbacademy.be)

Each request must contain sufficient proof of identity. The Belgian Bankers Academy undertakes to examine any request or complaint and to respond to it in a timely manner and, in any event, within one month of receipt of the request. If necessary, this period can be extended to two months, taking into account the complexity and number of requests.

Right to lodge a complaint with a supervisory authority.

In any case, you have the right to lodge a complaint with the Data Protection Authority (DPA):

By e-mail: contact@apd-gba.be (mailto:contact@apd-gba.be)

By mail:

Data Protection Authority

Rue de la Presse 35

B – 1000 BRUSSEL

16.    Transfer

We only transfer your data to a third country if the latter offers a level of protection equivalent to that which you can find in your country of residence, including where an adequacy decision exists or through the use of standard contractual clauses (for more information on this subject, please consult the following link: https://ec.europa.eu/info/law/law- topic/data-protection/international-dimension-data-protection/adequacy-decisions_en).

17.   Minors

Our website and our services are not intended for children under the age of 18. If you learn that your minor child has provided us with personal data without your consent, contact us at the following address: info@bbacademy.be (mailto:info@bbacademy.be)

18.   Litigation

In the event of a dispute between us, the Belgian Bankers Academy undertakes to favor dialogue and openness in search of an amicable solution. You can also contact the Data Protection Authority (DPA).