We are delighted that you have shown interest in our company. Data protection is of a particularly high priority for IDEA Consult NV.
For specific projects, we may have to process personal data on a case-by-case basis. This information as well as the nature, scope and purpose is always communicated to the data subject and explicit consent has to be given before any type of processing. The data subject may exercise the right to remove his or her consent at any time by contacting IDEA Consult NV using this e-mail address:
Aggregate data are made up from microdata files and are the result of a combination of different measures. They are obtained by adding or averaging the individual values obtained. They provide information on groups that have common characteristics.
The anonymization of personal data consists in modifying the content or structure of this data in order to make it very difficult or impossible to “re-identify” natural persons.
Consent of the data subject is any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
Controller or controller responsible for the processing:
Controller or controller responsible for the processing is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
Cookies are text files that are stored in a computer system via an Internet browser.
A cookie ID is a unique identifier of the cookie. It consists of a character string through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows visited Internet sites and servers to differentiate data subject’s browser from other Internet browsers that contain other cookies.
Data subject is any identified or identifiable natural person, whose personal data is processed by the controller responsible for the processing.
Encryption is the process by which segments of data are mathematically mixed using a password.
General Data Protection Regulation:
The General Data Protection Regulation is a set of rules designed to protect the personal data of European citizens. This Regulation covers the protection of personal data in the broadest sense of the term, regardless of their form or nature: private, professional, public. The GDPR was approved in April 2016 and as from 25 May 2018, this Regulation is fully applicable in all EU countries.
Personal data means any information relating to an identified or identifiable natural person (“data subject”). In the definition provided above, “any information” means any information, such names, genders, occupations and other types of data that is available in different forms, including alphabetical, numerical and graphical, and is kept on paper or stored in computers or in any other manner.
Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
Recipient is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed whether a third party or not. However, public authorities who may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
Restriction of processing:
Restriction of processing is the marking of stored personal data with the aim of limiting their processing in the future.
Third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
2. Name and Address of the controller
IDEA Consult NV, Jozef-II straat 40 B1, 1000 Brussel, België, tel +32 (0)2 282 17 10, email:
3. Data Protection Officer (DPO)
4. Bases and nature of the personal data we collect, use and process
We may be called to collect, use and/or process personal data based on the following:
- Consent: the individual has given clear consent for us to process their personal data for a specific purpose.
- Contract: the processing is necessary for a contract we have with the individual, or because they have asked us to take specific steps before entering into a contract.
- Legal obligation: the processing is necessary for us to comply with the law (not including contractual obligations).
- Public task: the processing is necessary to perform a task in the public interest.
- Legitimate interests: the processing is necessary based on our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.
Examples of personal data we may be called to collect use and or process include but not limited to: first name, last name/surname, maiden name, e-mail address, home address (street, zip, postal code, city), phone number, photo, date of birth, national identification number (social), employee number, IP address, cookie ID, location data, social media profile IDs/links, employment history, job title, education history (…). Special personal data may include: sex/gender, race/ethnicity, place/city/country of birth, spouse name (…)
5. Technical and organizational measures
IDEA Consult NV has implemented numerous technical and organizational measures to ensure the most complete protection of personal data. The following measures have been implemented (including but not limited to):
- Only authorized personnel have access to personal data regarding specific projects
- Only persons who process personal data have access to them
- Use of passwords
- Aggregation of data
The data subject may, at any time, prevent the setting of cookies through our website by changing the settings of the Internet browser used, and may thus permanently deny the setting of cookies.
Furthermore, already set cookies may be deleted at any time via an Internet browser or other software programs. If the data subject deactivates the setting of cookies in the Internet browser used, some functions of our website may not be entirely usable.
7. Period for which the personal data will be stored
We shall process and store the personal data of the data subject only for the period necessary to achieve the purpose of storage, often being for the duration of a specific project, contract or legal obligation. If the purpose of storage is no longer applicable, or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data are routinely blocked or erased in accordance with legal requirements.
The personal data processed are stored in a secure environment. Employees involved in the processing of personal data are contractually bound by a very strict confidentiality obligation.
8. Rights of the data subject
In compliance to the GDPR, all data subjects are entitled to the following rights:
- Right to transparency
- Right of confirmation
- Right of access
- Right to rectification
- Right to erasure (Right to be forgotten)
- Right of restriction of processing
- Right to data portability
- Right to object
- Automated individual decision-making, including profiling
- Right to withdraw data protection consent.
For more information on these rights please refer to the GDPR.