Data Protection Rights

AAMAL EUROPE INVESTMENT, operating under the trade name BeneluxWeb, is committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (GDPR) and Belgian data protection laws.

This page provides detailed information about your data protection rights and how to exercise them.

Data Controller

1. Right of Access (Article 15 GDPR)

You have the right to obtain confirmation as to whether we process your personal data and, if so, to access that data.

What you can request:

• A copy of your personal data we hold
• Information about how we use your data
• Information about who we share your data with
• How long we keep your data
• Information about your other rights

2. Right to Rectification (Article 16 GDPR)

You have the right to have inaccurate personal data corrected and incomplete data completed.

When to use this right:

• Your contact information has changed
• We have recorded incorrect information about you
• Your data is incomplete and needs additional information

3. Right to Erasure / "Right to be Forgotten" (Article 17 GDPR)

You have the right to request deletion of your personal data in certain circumstances.

When this right applies:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• The data must be erased to comply with a legal obligation

Exceptions:

We may not be able to delete your data if we need it for:

• Compliance with legal obligations (e.g., tax records - 7 years)
• Establishment, exercise, or defense of legal claims
• Fulfilling contractual obligations

4. Right to Restriction of Processing (Article 18 GDPR)

You have the right to request that we limit how we use your personal data.

When this right applies:

• You contest the accuracy of the data (restriction during verification)
• Processing is unlawful but you don't want the data erased
• We no longer need the data but you need it for legal claims
• You have objected to processing (restriction pending verification)

When processing is restricted, we can only store your data and use it with your consent or for legal claims.

5. Right to Data Portability (Article 20 GDPR)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

When this right applies:

• Processing is based on consent or contract
• Processing is carried out by automated means

What you will receive:

Your data in a common format (e.g., CSV, JSON) that can be easily transferred to another service provider.

6. Right to Object (Article 21 GDPR)

You have the right to object to processing of your personal data in certain circumstances.

6.1 Object to Processing Based on Legitimate Interests

You can object to processing based on our legitimate interests. We must stop processing unless we can demonstrate compelling legitimate grounds that override your interests.

6.2 Object to Direct Marketing

You have an absolute right to object to direct marketing at any time. We will stop processing your data for marketing purposes immediately.

7. Rights Related to Automated Decision-Making (Article 22 GDPR)

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.

Note: We do not currently use automated decision-making or profiling that significantly affects you. If this changes, we will inform you and explain your rights.

8. Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

How to Exercise Your Rights

To exercise any of your data protection rights, please contact us using one of the following methods:

Right to Lodge a Complaint

If you believe that the processing of your personal data violates the GDPR or Belgian data protection laws, you have the right to lodge a complaint with the supervisory authority:

You can also lodge a complaint with the supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.