Personal data protection — GDPR

Data controller

What a Work SRL, Rue de l’Yser 38, 4340 Villers-l’Évêque, Belgium, enterprise number BE 0789.601.378, is the controller for the processing described here. For questions about your data, contact office@whatawork.be or +32 4 290 54 78.

Data concerned and sources

We receive the information you provide: name, professional contact details, organisation, the contents of your request and, where relevant, a verification statement reference. Engagement documents may also contain contacts’ details and data needed to deliver the service. Limit your first message to relevant information; agree with us on an appropriate transmission method for sensitive documents.

Purposes and lawful bases

Quote requests and services are processed to take requested pre-contractual steps or perform a contract where you are a party. Managing correspondence with business contacts, statement-status requests and complaints relies on our legitimate interest in managing professional relationships and following up our activities. Processing required by law relies on the relevant legal obligation. ENR36 also describes customer, supplier, accounting, recruitment and personnel administration.

Marketing communications

ENR36 provides for prospects’ consent and, subject to applicable conditions, legitimate interests for certain communications to existing customers. This website has no newsletter registration. A quote request does not constitute consent to advertising. You can object free of charge at any time to the use of your data for direct marketing and withdraw consent you have given.

Recipients and confidentiality

According to ENR36, data is not sold. It may be accessed by employees, independent collaborators and service providers needed for the relevant activities, including case management and IT tools. Professional advisers and authorities may receive it where their involvement or the law requires this. Access is limited to the engagement’s needs and subject to applicable confidentiality commitments.

International transfers

Any transfer of personal data outside the European Economic Area must meet GDPR conditions, including an adequacy decision or appropriate safeguards where required. You can ask us for information about recipients, processing locations and safeguards applicable to your data.

Retention periods

What a Work applies retention periods of 7 years for customer records, 10 years for supplier records and accounting, and 5 years for marketing. These periods correspond to the categories in the ENR36 register; they are not a single period applicable to all data. For other processing, retention is determined by the purpose, the end of the relationship, legal obligations and applicable periods for exercising or defending rights. You can ask us for the period and its starting point for your records.

How the forms work

The fields prepare a message in your own email application. The website does not automatically transmit or store your entries. You choose whether to send them. Your name, organisation, email address and, for a status request, the statement reference help us handle the request. You can also contact us directly by email or phone. Without necessary information, we may be unable to respond to the request.

Cookies and technical data

This HTML version includes no analytics cookies, advertising trackers or local storage of your entries. The WordPress cookies described in ENR36 are not integrated into this version. Hosting may generate technical logs, including IP addresses, dates and requested resources, for operation and security; the details depend on the hosting configuration. Linked external websites apply their own policies.

Your rights

Subject to GDPR conditions, you may request access, rectification, erasure, restriction of processing and, where the conditions are met, data portability. You may object to processing based on legitimate interests on grounds relating to your situation, and without justification for direct marketing. Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.

Exercising your rights

Send your request to office@whatawork.be, stating the right concerned and information identifying your record. Additional information may be requested if there are reasonable doubts about your identity. A response is normally provided within one month; a further two-month extension is possible under GDPR conditions, with notice within the first month. Preparing an email or entering a statement reference does not result in an automated decision.

Lodging a complaint

You can lodge a complaint with the Belgian Data Protection Authority (APD/GBA), in particular if you believe your data is processed in breach of the GDPR. The procedure and complaints portal are available through the link below. You may also approach another competent supervisory authority depending on your circumstances.

Reference document

ENR36 version 1 is available below in its original English. It is preserved without changes and also describes earlier activities and configuration. The information above explains how this version of the website works. For questions about your records or differences between this information and the document, contact What a Work.

Reference documents

Privacy statement for our activities
ENR36 · v1 · PDF · EN

office@whatawork.be

Belgian Data Protection Authority — lodge a complaint ↗GDPR — official text ↗