The privacy policy set out below applies to the www.carpool.be website or the Mpact MobiCalendar app and associated domain names and relates to the processing by Mpact vzw and Mpact asbl of personal data belonging to users, visitors, customers and website subscribers (app included). The Privacy Policy and consequent processing of personal information are in line with the General Data Protection Regulation (GDPR). This Privacy Policy sets out who is responsible for the personal data collected and processed via the website, the type of data collected, the conditions under which data are processed and the purpose for which they are processed, the amount of personal data shared with third parties, the measures taken to keep personal data secure and the means by which the user is able to check the processing of his/her personal data and assert his/her rights on the grounds of the privacy legislation.
Data entered to the website by the subscriber are treated as confidential in keeping with the privacy legislation.
1. DATA CONTROLLER
The website is managed by Mpact, and the privacy data controller is Mpact vzw, which has its registered office at 9000 Ghent, Maria Hendrikaplein 65B. Contact details can be found at www.Mpact.be/contact and in the disclaimer.
Mpact asbl, with registered office at 5030 Gembloux, Rue Buisson-Saint-Guibert 1, post box B, has access to the data collected via the website given that it is also a user of the software tool.
Mpact vzw may also use processors. The processor is the natural or legal person that processes the data on behalf of the personal data controller. The processor is responsible for processing the personal data on behalf of Mpact vzw and Mpact asbl and for ensuring the sound technical functioning of the website (data transmission). This policy does not extend to the people authorised to process the data under the direct authority of the controller.
It goes without saying that the data controller chooses its processors with great care. For example, the processor must offer sufficient guarantees in terms of the technical and organisational security measures it employs in relation to processing and satisfy the obligations set out under the General Data Processing Regulation.
2. TYPE OF PERSONAL DATA PROCESSED AND REASONS FOR PROCESSING
Mpact may collect anonymous or aggregated data of a non-personal nature, such as your browser type, the operating programme you use, or the domain name of the website(s) you used to arrive at the Mpact website or to leave it. This helps us to permanently optimise the Mpact website(s) for users. This browsing information is deleted after anonymised processing but may still be used to establish responsibility if the website or websites become the target or the vehicle of a criminal offence.
Visitors can register for mobicalendar.be and the Mpact Mobicalendar app to record their mobility or travel behaviour and so take advantage of other benefits. Mpact records and processes the personal data volunteered by the user when she/he uses the functionalities on the aforementioned website(s) and the services offered through these website(s). The personal data collected and processed by Mpact are: surname and first name, address and email address. In the case of employees the place of work, employee reference number and department may be added. In specific cases the name/make of car and registration number(s) may be requested.
The personal data is used for the following purposes:-
Exchange of data with the employer
- Surname and first name
- The email address is used for identification and to ensure optimal functioning of the MobiCalendar service (internal messaging, badges earned, password reset). The user can also opt to receive a weekly/monthly reminder and/or summary of trips in the last month.
- The address is used only for statistical processing and to produce a tax certificate if required. The place of work is also used to produce the tax certificate.
- Employee personal and mobility data can only be accessed by the mobility coordinator. No data is shared with third parties. There is no public interface through which these data can be viewed.
- The employees’ personal data can be passed on to the mobility coordinator and processed for support purposes, commuter mobility campaigns and tax purposes.
- The personal data can also be used to inform users through an electronic newsletter of matters relating to MobiCalendaring, sustainable mobility and Mpact news, but only if their explicit consent has been given.
The following mobility data may be stored: distance of trip, type of trip (based on Modus), date of trip and, where applicable, name, employer of the MobiCalendar partner(s).
Personal data are stored for three (3) years after last use, for the convenience of anyone who would like to resubscribe and have the option to generate further tax certificates.
When an account is deleted all personal and mobility data are anonymized, after which they cannot be accessed or reconstructed. A user may make a request at any time, and this will be immediately and automatically processed.
Every time the user provides personal data Mpact will handle this data in line with the established policy and the legal obligations pertaining to personal data processing.
Mpact may also collect, through website log files, anonymous or aggregated data of a non-personal nature such as your browser type, the operating programme you use, or the domain name of the website(s) you used to arrive at the Mpact website or the link you used to leave it. This helps us to permanently optimise the Mpact website(s) for users.
These website log files are stored by Mpact for 6 months maximum. This browsing information is deleted after anonymized processing but may be used to establish responsibility if the website or websites become the target or the vehicle of a criminal offence
3. DATA FROM THIRD PARTIES
Personal data may also be imported from a mobility coordinator's organisation to MobiCalendar, but only with the explicit consent of the employee. The employee will be notified of the purposes of the data processing, and of his/her right to access, rectification and erasure of the data. Mpact is not responsible for data from third parties.
4. PERSONAL DATA SECURITY
Personal data entered to the website are stored and processed through an Mpact-managed electronic system in a locked, secure environment which does not allow public access. These data can only be accessed by a set number of people in the employ of Mpact vzw and Mpact asbl, who are authorised to view and process the data.
5. RIGHT TO ACCESS, RECTIFICATION AND ERASURE OF PERSONAL DATA
The subscriber has a legal right to access and rectify the personal data. The subscriber may also freely object to us sharing his/her personal data with third parties, combining his/his personal data to create a profile and sending information and offers by mail or email. The subscriber also has the right to request that his/her personal data be erased or deleted if there is no overriding reason for further processing or if the subscriber objects to its processing and there are no legitimate overriding reasons to justify that processing.
A subscriber may, provided he/she demonstrates his/her identity (copy of identity card) send written, dated and signed notice to Mpact vzw, at Koningin Maria Hendrikaplein 65B te 9000 Ghent, info@Mpact.be, requesting a paper copy of his/her personal data. If necessary, the subscriber may also request the rectification of any data which are incorrect, incomplete or not pertinent, or erasure of the data in compliance with the applicable legislation. If Mpact cannot or cannot entirely establish the personal data to which the subscriber's request for access, rectification or erasure relates, Mpact may ask the subscriber for a (more) specific request.
The subscriber has the right to data portability, which places him/her in a position to access personal data shared with Mpact in a structured, standard and electronic form, and to reuse it for his/her own purposes across several services.
When personal data are used to keep the subscriber up to date on new facts, events and services provided by Mpact, the user may - if he/she does not which to receive this information - notify Mpact of this preference. In addition, all email information notices and electronic newsletters issued by Mpact contain an unsubscribe link. Mpact may provide the user with information via newsletters for up to two (2) years after last use.
The subscriber is also free to lodge a complaint with the supervisory authority if he/she is of the opinion that Mpact has not respected his/her rights: Belgische Gegevensbeschermingsautoriteit, Drukpersstraat 35, 1000 Brussel (Tel.: +32 22744800; Fax: +32 22744835, Email: contact@apd-gba.be).
6. COOKIES
Cookies are small files used to store information about a website visitor. They are linked to your browser.
The MobiCalendar.be website uses just a few cookies. They apply to every subdomain of the website (www.MobiCalendar.be, events.MobiCalendar.be etc). When visiting the website visitors are asked for their explicit consent to accept non-essential cookies.
Cookies can be roughly divided according to duration, origin and purpose.
Duration
Session cookies — these cookies are temporary and expire once you close your browser (or once your session ends).
Permanent cookies — this category includes all cookies that stay on your hard disc until you or your browser delete them, depending on the cookie expiry date.
Origin
First-party cookies — as the name suggests, first-party cookies are placed directly on your device by the website you visit.
Third party cookies — these are the cookies placed on your device, not by the website you visit, but by a third party such as an advertiser or analysis system.
Purpose
Essential cookies — without these cookies the site cannot function, and for this reason they cannot be deleted by the website user.
Preference cookies (‘functional cookies’) — these cookies allow you to save your preferences. They record the preferences of users that are not logged in.
Statistics cookies — .these cookies are also called 'performance cookies', and they collect information about how you use the website, the pages you have visited and the links you have clicked, etc. None of this information can be used to identify you. It is aggregated and therefore anonymised. Their sole purpose is to improve the functioning of the website.
Marketing cookies — these cookies remember your online activity to help advertisers supply more relevant advertising or limit how often you see an advert. These cookies can share the information with other organisations or advertisers. They are permanent cookies and almost always belong to a third party. MobiCalendar.be does not use marketing cookies.
Cookies on MobiCalendar.be
Essential cookies (first-party, by MobiCalendar.be)
| Name | Purpose | Duration |
|---|---|---|
| PHPSESSID | Preference cookies (first-party, by MobiCalendar.be) | Session |
Preference cookies (first-party, by MobiCalendar.be)
| Name | Purpose | Duration |
|---|---|---|
| cookie_consent | Storage of cookie preferences | 1 year |
Statistics cookies (first-party, website statistics by Google Analytics)
| Name | Purpose | Duration |
|---|---|---|
| _ga | Used to distinguish users. | 1 year |
| _ga_9C6QFPMJRL | Used to persist session state. | 1 year |
MobiCalendar.be places these cookies for Google Analytics via a Google script on the website. Google Analytics mostly uses first-party cookies, as browsers often block third party cookies. However, MobiCalendar.be does not use “marketing cookies”. These are third party cookies (DoubleClick cookies). An advert for MobiCalendar.be will never suddenly appear on another website because you have visited ours.
You can change your cookie preferences at any time by clicking the icon bottom left of the website.
7. MAILCHIMP
Mpact uses Mailchimp for its newsletters. Newsletters will not be sent without the subscriber's explicit consent.
8. CHANGES TO THE PRIVACY POLICY
Mpact may change the content of this privacy policy at any time, provided the change is conformant with current European and national legislation. Changes will be announced on the homepage of the website and/or by email and come into effect seven (7) days after the announcement.
Mpact.be also reserves the right to change the content of this website at any time without prior notice.