WHITEWOOD considers it of great importance that personal data is handled with care. Personal data is processed and secured by us in accordance with the General Data Protection Regulation (GDPR).
This Privacy Statement contains information about our use of your personal data. We reserve the right to amend this Privacy Statement at any time.

1 Personal data

We provide services in the field of technical, commercial, and administrative management of real estate on behalf of various property owners. In order to carry out these activities properly, it is sometimes necessary for us to process your personal data — data that can be directly or indirectly traced back to you and that is provided through the use of our services.

Personal data is collected for purposes including the conclusion of agreements such as rental agreements, purchase agreements, or contracts for the provision of goods or services. We only process and store personal data that is directly necessary for the proper performance of our services.

2 Identity

The controller responsible for the processing of your personal data is:

Whitewood, located at 47 Rue Royale, 1000 Brussels, registered with the Chamber of Commerce under number 57030995.

3 Types of personal data and purposes of use

We collect and store the following personal data:

Type of personal data

• - Name and address details
  - Telephone number
  - Email address
  - Copy of identity document
  - Signature
  - VAT number
  - Bank account number
  - Chamber of Commerce number
  - Central Business Register number
  - Annual accounts
  - Credit information (e.g. D&B, Graydon Creditsafe)

Purposes

• - Drafting and executing agreements
  - Processing invoices and payments
  - Relationship management
  - Providing marketing information such as invitations to events, relevant service offers, or sharing white papers and reports
  - Optimising the user experience and ensuring the security and proper functioning of our website.

Legal basis

• - Drafting and performing agreements
  - Processing for direct marketing purposes by the controller or a third party (without prejudice to any required opt-in consents for the sending of marketing communications)
  - Processing for the purpose of establishing, exercising, or defending legal claims
  - Communication with users

Retention period

Up to two years after the end of the contractual term.

Consequences of not providing data

If the necessary personal data is not provided, it may be impossible to legally conclude or execute agreements.

4 Retention periods

We will retain your personal data for the maximum period specified in section 3, unless we are required by law to retain it for a longer period or if a longer retention period is essential for the performance of our business activities.

5 Use of personal data by third parties

Your personal data will not be shared with third parties without your explicit consent, unless we are required to do so by law.
If we provide third parties with access to your data, we will do so only when we are certain that the third party will use the data exclusively for the purpose for which it was provided, and in accordance with the confidentiality and security requirements prescribed by law.
To ensure this, we have entered into data processing agreements with all parties to whom we provide personal data.


6 Use of cookies

We use cookies on this website. A cookie is a small text file that is sent along with pages from this website and stored by your browser on your device’s hard drive.
The information stored in these cookies can be sent back to our servers upon your next visit. For more details, please refer to our Cookies Policy available on our website.

7 Right of access and correction

You have several rights regarding your personal data:
- Right to object: You can object to the use of your personal data if you believe it is not necessary for the performance of our activities or to comply with legal obligations.

- Right of access: You may request access to your personal data to learn which data we hold about you and for what purposes it is used.
- Right to rectification: If you believe that your data is incorrect, you may request that it be corrected.
- Right to restriction: You may ask us to restrict the processing of your data, including for the period during which your request or objection is being assessed.
- Right to erasure (“right to be forgotten”): You can ask us to delete your personal data from our systems.
- Right to data portability: You can request that your personal data be transferred to another organisation.
We will comply with your request unless we have a compelling legitimate interest that outweighs your privacy interests.

Requests or objections can be submitted by email to info@whitewood.srv02.ehero.es, including your name, address, telephone number, and a copy of a valid ID.

Please ensure that your national identification number is made illegible and your passport photo is covered before sending. You will receive a response within four weeks.

8 Data breaches

We have established a procedure for handling data breaches. This procedure is available upon request.

9 Contact and complaints

If you have any questions regarding the use of your personal data, please contact us at:
info@whitewood.srv02.ehero.es

We are happy to assist you if you have any complaints regarding the processing of your data.

If you are not satisfied with how we handle your complaint, you also have the right under privacy legislation to lodge a complaint with the Data Protection Authority.