Your personal data is collected and processed by Rockestate SRL, the controller, hereafter referred to as “Rock.estate”. Rock.estate has its headquarters at Rue des Pères Blancs4, 1040 Etterbeek, registered with company number 0677.823.726.
Rock.estate processes personal data in accordance with the legal requirements set out in the DataProtection Regulation or "GDPR", and, where applicable, the Belgian law on the protection of natural persons with regard to the processing of personal data.
Rock.estate values privacy and, more specifically, the protection of your personal data and is therefore committed to protect the (personal) data of all its stakeholders with the greatest possible care. Your personal data will only be processed in a fair and lawful manner.
This Privacy Statement is applicable to our customers, partners and website visitors for the personal data collected and processed by Rock.estate through this website and the related services.
This Privacy Statement contains essential information on how Rock.estate, as the data controller, collects and processes personal data, for what purposes and explains your rights as a data subject.
Personal data can be defined as any information that allows a natural person to be identified, directly or indirectly (a.o. name, e-mail address, address, phone number,…). You can provide us with your personal data in the context of the following activities, for the corresponding purposes and based on the stated grounds:
Rock.estate considers your personal data as confidential and commits to process it only in a way that is compatible with the purposes for which the data were collected.
At all times, the data subject has the possibility to exercise his or her rights as described in the General Data Protection Regulation. The data subject can exercise the following rights:
You have the right to exercise the right of access to your personal data at any time, and to request a copy of the personal data Rock.estate collects about you.
You always have the right to have incorrect personal data corrected, or incomplete personal data completed.
You can request to have your personal data erased from Rock.estate’s systems. The request to erase your personal data is subject to restrictions due to contractual or legal obligations. Rock.estate will take these obligations into account when replying to your request.
You have the right to object to the processing of your personal data if the processing takes place on the ground of the legitimate interest of Rock.estate or on the ground of the public interest. We will stop processing unless we can prove that there are compelling legitimate grounds for the processing or for the exercise of legal claims. You can also object in the case of direct marketing, so the personal data will no longer be processed for these purposes.
For the processing of your personal data collected by Rock.estate with your consent, you can withdraw your consent at any time. However, the withdrawal of your consent does not apply to processing previously carried out by Rock.estate.
In certain cases, you are entitled to obtain the restriction of the processing of your personal data. We will continue to store your data, but we will restrict its use. You can e.g. submit this request when you think that your personal data is inaccurate, or the processing by Rock.estate is unjustified. We only have to grant these requests in specific cases as defined by law.
You have the right to receive your personal data, processed by Rock.estate, in a structured, commonly used and machine-readable format and/or to transmit those data to another controller.
These rights can be exercised free of charge by sending an e-mail to dpo@rock.estate. We commit to answer your request within one month upon its receipt. It is possible that we request additional information first in order to confirm your identity and ensure the request originates from you.
If at any time you believe that Rock.estate is committing a breach in the context of processing your personal data, you have the right to lodge a complaint with the Belgian Data Protection Authority: Gegevensbeschermingsautoriteit, Drukpersstraat 35, 1000 Brussels, Tel +32 (0)2 274 48 00, e-mail: contact@apd-gba.be.
Rock.estate will refrain from disclosing or selling your personal data to third parties as well as publicly disclosing your personal data, unless in the following specific cases:
Regarding international transfers of personal data and processing outside the European Economic Area (EEA), your data are only transferred to parties in third countries, such as software providers and cloud or mailing services, when permitted under the applicable data protection legislation. We guarantee appropriate safeguards which ensure that your rights are also respected by the data recipient outside the EEA in accordance with an adequate level of data protection.
Rock.estate acknowledges the importance of the protection of personal data. We do not retain your personal data longer than strictly necessary for the realisation of the purposes for which we received the data, or for the execution of a contract or for fulfilling a legal obligation. The retention periods differ with regards to the type of processing activity and the purpose for which the personal data were collected.
We keep customer and supplier information about your purchases for as long as reasonably necessary to execute our agreements, to comply with our legal obligations (such as accounting and tax obligations) and to resolve disputes or enforce agreements. Therefore, this personal information is retained for the duration of our contractual relationship and for 10 years after the end of the contractual relationship.
In all cases, personal data may be retained for a longer period if there is a legal or regulatory reason to do so, or for a shorter period if the data subject objects to the processing of his/her personal data and if there is no longer a legitimate reason to retain them.
We guarantee to only provide limited access to archived data and to remove your personal data if the retention period has passed.
Rock.estate has taken technical and organisational security measures to prevent the destruction, loss, falsification, alteration, unauthorised access or disclosure of your personal data to third parties and any other unauthorised processing of these data.
We make every effort to ensure the confidentiality, integrity and availability of the information systems and services that process personal data. These measures include physical and operational security measures, access control, awareness training and confidentiality clauses. All our employees and third parties engaged by us are obliged to respect the privacy and security of your data.
If you have comments, questions or concerns about any of the information in this Statement, or any other issues relating to the processing of your personal data by Rock.estate, please contact us via dpo@rock.estate.
In the event you prefer to contact us by post, you can do so on the following address:
Rue des Pères Blancs 4
B-1040 Etterbeek
To the attention of Mathieu Carette
We may amend or update this Privacy Statement from time to time to reflect changes in our practices with respect to the processing of your personal data, or changes in applicable law. We will be doing this by posting the updated version on this website. When we publish changes to our Privacy Statement, we will change the date and version number of the “last update” of our Privacy Statement. Significant changes will be reported on our homepage. Nevertheless, we encourage you to read our Privacy Statement periodically.
Version 2.0
Latest update on 2022-11-04
