Privacy Notice

For merchants, customers, partners and suppliers, you will find our privacy policy here.

Version 3.3.4, date of publication October 3, 2023

Edenred Belgium attaches great importance to the protection of the personal data that it has to process as controller in the course of its activities.

The processing covers all operations applied to the data that directly or indirectly helps identify a natural person, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

This document is intended to provide the data subjects with the information required by the applicable regulations and in particular by Regulation (EU)2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation or “GDPR”).

Edenred Belgium, a limited liability company whose registered office is located at 1160 Brussels, Boulevard du Souverain, 165, bte 9 and registered with the Crossroads Bank for Enterprises under number BE 0407.034.269 (hereinafter “Edenred Belgium”), represented by its Chief Executive Officer, Mr Olivier Bouquet, is responsible for the processing of personal data as part of its activities.

The data processing operations are as follows :

• The management of Ticket Restaurant ;
• The management of Ticket EcoCheque ;
• The management of Ticket Compliments ;
• The management of Chèque Consommation (also known as « Consumptiecheque ») ;
• The management of Ticket Sport & Culture ;
• The management of the services Mobility Edenred (hereinafter ‘the Mobility Edenred Services’);
• The use of the website https://www.myedenred.be (hereinafter the ‘the Myedenred Website’) and/or the application My Edenred Belgium (herinafter ‘the Myedenred Application’)
• The use of the platform accessible online and the Edenred Belgium application offering, under the Ekivita brand, advantages in the form of price reductions to the staff members of the employers granting access to this platform and this application (hereinafter collectively referred to as ‘the Ekivita Platform’ and ‘the Ekivita Application’);
• The use of the online shop accessible via the site https://eshop.edenred.be allowing beneficiaries of electronic Ticket Compliments to make online purchases using them (hereinafter ‘the Online Shop’);
• The promotion of Edenred Belgium’s products and services ;
• The promotion of the products and services of third-party partners by Edenred Belgium ;
• The use of the websites https://www.edenred.be and/or https://mobility.edenred.be/ (hereinafter collectively referred to as ‘the Edenred Website’), of social networks, and contact not covered by other data processing operations ;
• Security ;
• Statistics.

The persons whose personal data are processed by Edenred Belgium in its capacity as controller are  hereinafter referred to individually as ‘the User’ or collectively as ‘the Users’.

Edenred Belgium also processes personal data in the context of:

• The management of the ALE paper voucher system in the Walloon Region for the FOREM (more information on www.ale-wallonie.be);
• The management of the ALE paper voucher system in the Brussels-Capital Region for ACTIRIS (more information on  www.ale-bruxelles.be);
• The management of the ALE paper voucher system in the German-speaking Community for ADG (more information on  www.adg.be/Iba);
• The management of the Wijk-werkcheques electronic and paper voucher system in the Flemish Region for the VDAB (more information on vdab.be/wijk-werken);
• The management of the Opleidingscheques paper voucher system in the Flemish Region for the VDAB (more information on https://www.vdab.be/opleidingscheques/werknemers.shtml);
• The management of the Loopbaancheques electronic voucher system in the Flemish Region for the VDAB (more information on https://www.vdab.be/loopbaanbegeleiding);
• The management of the Chèques Taxi paper voucher system for the Brussels-Capital Region (more information on  https://mobilite-mobiliteit.brussels/en/a-taxi-a-the-portee- of all  );
• The management of the Chèques Propreté paper voucher system for various municipal administrations.

In this context, Edenred Belgium acts as processor of these authorities, who remain responsible for the processing carried out on their behalf by Edenred Belgium.

Boulevard du Souverain, 165 Box 9 1160 Brussels
Email: dpo.belgium@edenred.com
Tel.: 02/678 28 11 – Fax: 02/678 28 28
Google Maps link

For any request relating to personal data, and in particular to exercise the rights referred to in Article V below, the User may contact:

Edenred Belgium
Privacy team
Boulevard du Souverain 165, box 9
1160 Brussels
Online form
Tel.: 02/678 28 11 – Fax: 02/678 28 28
Multimodal access plan (PDF).

Contact forms are also made available to Users via the Help Centre accessible on the Edenred Website, the Myedenred Website and the Mobility Edenred Website.

1. Purpose

Edenred Belgium processes personal data for purposes relating to the management of electronic meal vouchers published by it, as an authorised publisher, under the brand Ticket Restaurant (hereinafter ‘Ticket Restaurant’).

The management of Ticket Restaurant covers the following:

• The management of Ticket Restaurant orders ;
• The publishing of Ticket Restaurant vouchers and their provision to the beneficiaries of Ticket Restaurant(hereinafter ‘the Beneficiaries of Ticket Restaurant’) ;
• The provision and activation of the card support allowing beneficiaries to use the Ticket Restaurant   vouchers (hereinafter ‘the Edenred Card’) ;
• The notification to the Beneficiaries of Ticket Restaurant every time the Ticket Restaurant is loaded, and about the approaching expiry date, the available balance and the transactions made using Ticket Restaurant ;
• The provision of information regarding the use of the Ticket Restaurant vouchers to the Beneficiaries of Ticket Restaurant in electronic form ;
• The secure use of Ticket Restaurant vouchers including the provision of various means to block the Edenred Card in case of loss or theft ;
• The processing of transactions made using Ticket Restaurant vouchers following the “first in, first out” principle and reimbursement of merchants affiliated to the Edenred Belgium network who have accepted them as payment.

2. Legal basis of the processing

The processing is necessary to fulfil the obligations undertaken by Edenred Belgium in its capacity as an authorised publisher under:

• the Royal Decree of 28 November 1969 implementing the Act of 27 June 1969 revising the Decree-Law of 28 December 1944 concerning the social security of workers (Article 19bis) ;
• the law of 30 December 2009 containing various provisions (Articles 183 to 185) ;
• the Royal Decree of 12 October 2010 laying down the approval conditions and procedure for publishers of electronic meal vouchers or eco-cheques, implementing Articles 183 to 185 of the law of 30 December 2009 on various provisions.

3. Data source

The personal data concerned are communicated by:

• the employer when ordering Ticket Restaurant vouchers for Beneficiaries of Ticket Restaurant ;
• the Beneficiaries of Ticket Restaurant themselves when using the Ticket Restaurant voucher ;
• the individuals authorised by the employers to use their Employer Space on the Myedenred Website or to communicate with Edenred Belgium as part of the management of Ticket Restaurant vouchers ;
• the individuals authorised by the merchants affiliated to the Ticket Restaurant network to use their Merchant Space on the Myedenred Website or to communicate with Edenred Belgium as part of the management of Ticket Restaurant vouchers.

4. Categories of data processed

The personal data communicated by the employer concerning Beneficiaries of Ticket Restaurant include:

• identification data:
  – necessary data: last name, first name, address, national register number;
  – complementary data: landline and/or mobile phone number, email address ;
• personal characteristics:
  – necessary data: birth date, birth place, language ;
  – complementary data: title ;
• data relating to Ticket Restaurant vouchers associated with a Beneficiary of Ticket Restaurant: quantity, face value, validity period, point of distribution/delivery.

The personal data communicated by the Beneficiaries of Ticket Restaurant concerning the use of Ticket Restaurant include :

• data relating to transactions made using Ticket Restaurant ;
• data relating to incidents that may occur while using the Ticket Restaurant.

5. Data recipients

The personal data are exclusively intended for:

• the individuals and organisations in direct contact with Edenred Belgium requiring the data as part of the management of Ticket Restaurant;
• the employers of the Beneficiaries of Ticket Restaurant as part of the management of Ticket Restaurant for members of their staff;
• the Beneficiaries of Ticket Restaurant as part of the management of their Ticket Restaurant  vouchers;
• the authorities that require such data, including the National Social Security Office.

They are not shared with third parties.

The processors of Edenred Belgium include:

• For application development, maintenance and support: EDENRED SE, a company incorporated under French law ;
• For the hosting of information systems: DXC TECHNOLOGY FRANCE SAS, MICROSOFT FRANCE SAS, two companies incorporated under French law  as well as  NSI IT SOFTWARE & SERVICES, a company incorporated under Belgian law ;
• For authorisation of transactions: PREPAY TECHNOLOGIES Ltd, a company incorporated under the laws of the UK  ;
• For manufacturing Edenred Cards: GEMALTO BV, a company incorporated under Dutch law ;
• For the Card Stop service: WORLDLINE SA, a company incorporated under Belgian law ;
• For the Customer Service: WENGAGE NV, a company incorporated under Belgian law ;
• For services communications : SELLIGENT BENELUX SA, a company incorporated under Belgian law.

6. Data transfer

Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

.

7. Decision based exclusively on automated processing, including profiling

The processing does not involve any decision based exclusively on automated processing, including profiling.

8. Retention period

Personal data are archived and access is limited as soon as they are no longer required for the management of Ticket Restaurant.

Personal data are kept for a period of 10 years after the closure of the employer’s file and, in the event of legal proceedings brought during this period, until all legal remedies have been exhausted.

9. Purpose

Edenred Belgium processes personal data for purposes relating to the management of electronic eco-vouchers published by it, as an authorised publisher, under the brand Ticket EcoCheque (hereinafter ‘Ticket EcoCheque’).

The management of Ticket EcoCheque eco-vouchers covers the following:

• The management of Ticket EcoCheque orders ;
• Publishing Ticket EcoCheque eco-vouchers and providing them to the beneficiaries of Ticket EcoCheque(hereinafter ‘the Beneficiaries of Ticket EcoCheque’) ;
• The provision and activation of the card support allowing beneficiaries to use the Ticket EcoCheque eco-vouchers (hereinafter ‘the Edenred Card’) ;
• The notification to the Beneficiaries of Ticket EcoCheque every time the Ticket EcoCheque is loaded, and about the approaching expiry date, the available balance and the transactions made using Ticket EcoCheque ;
• The provision of information regarding the use of the Ticket EcoCheque eco-vouchers to the Beneficiaries of Ticket EcoCheque in electronic form ;
• The secure use of Ticket EcoCheque eco-vouchers including the provision of various means to block the Edenred Card in case of loss or theft ;
• The processing of transactions made using Ticket EcoCheque eco-vouchers following the “first in, first out” principle and reimbursement of merchants affiliated to the Edenred Belgium network who have accepted them as payment.

10. Legal basis of the processing

The processing is necessary to fulfil the obligations undertaken by Edenred Belgium in its capacity as an authorised publisher under:

• the Royal Decree of 28 November 1969 implementing the Act of 27 June 1969 revising the Decree-Law of 28 December 1944 concerning the social security of workers (Article 19quater);

and regarding the Ticket EcoCheque electronic eco-vouchers:

• the law of 30 December 2009 containing various provisions (Articles 183 to 185);
• the Royal Decree of 12 October 2010 laying down the approval conditions and procedure for publishers of electronic meal vouchers or eco-cheques, implementing Articles 183 to 185 of the law of 30 December 2009 on various provisions.

11. Data source

The personal data concerned are communicated by:

• the employer when ordering Ticket EcoCheque eco-vouchers for Beneficiaries of Ticket EcoCheque;
• the Beneficiaries of Ticket EcoCheque themselves when using the Ticket EcoCheque eco-voucher;
• the individuals authorised by the employers to use their Employer Space on the Myedenred Website or to communicate with Edenred Belgium as part of the management of Ticket EcoCheque eco-vouchers;
• the individuals authorised by the merchants affiliated to the Ticket EcoCheque network to use their Merchant Space on the Myedenred Website or to communicate with Edenred Belgium as part of the management of Ticket EcoCheque eco-vouchers.

12. Categories of data processed

The personal data communicated by the employer concerning Beneficiaries of Ticket EcoCheque include:

• identification data:
  – necessary data: last name, first name, address, national register number;
  – complementary data: landline and/or mobile phone number, email address;
• personal characteristics:
  – necessary data: birth date, birth place, language ;
  – complementary data: title ;
• data relating to Ticket EcoCheque eco-vouchers associated with a Beneficiary of Ticket EcoCheque: quantity, face value, validity period, point of distribution/delivery.

The personal data communicated by the Beneficiaries of Ticket EcoCheque concerning the use of Ticket EcoCheque include:

• data relating to transactions made using Ticket EcoCheque;
• data relating to incidents that may occur while using the Ticket EcoCheque.

13. Data recipients

The personal data are exclusively intended for:

• the individuals and organisations in direct contact with Edenred Belgium requiring the data as part of the management of Ticket EcoCheque;
• the employers of the Beneficiaries of Ticket EcoCheque as part of the management of Ticket EcoCheque for members of their staff;
• the Beneficiaries of Ticket EcoCheque as part of the management of their Ticket EcoCheque  eco-vouchers;
• the authorities that require such data, including the National Social Security Office.

They are not shared with third parties.

The processors of Edenred Belgium include, where appropriate:

• For application development, maintenance and support: EDENRED SE, a company incorporated under French law ;
• For the hosting of information systems: DXC TECHNOLOGY FRANCE SAS, MICROSOFT FRANCE SAS, two companies incorporated under French law  as well as  NSI IT SOFTWARE & SERVICES, a company incorporated under Belgian law ;
• For authorisation of transactions: PREPAY TECHNOLOGIES Ltd, a company incorporated under the laws of the UK  ;
• For manufacturing Edenred Cards: GEMALTO BV, a company incorporated under Dutch law ;
• For the Card Stop service: WORLDLINE SA, a company incorporated under Belgian law ;
• For the Customer Service: WENGAGE NV, a company incorporated under Belgian law ;
• For services communications : SELLIGENT BENELUX SA, a company incorporated under Belgian law.

14. Data transfer

Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

15. Decision based exclusively on automated processing, including profiling

The processing does not involve any decision based exclusively on automated processing, including profiling.

16. Retention period

Personal data are archived and access is limited as soon as they are no longer required for the management of EcoCheque Tickets.

Personal data are kept for a period of 10 years after the closure of the employer’s file and, in the event of legal proceedings brought during this period, until all legal remedies have been exhausted.

17. Purpose

Edenred Belgium processes personal data for purposes relating to the management of electronic gift vouchers published by it, as an authorised publisher, under the brand Ticket Compliments (hereinafter ‘Ticket Compliments’).

The management of Ticket Compliments gift vouchers covers the following:

• The management of Ticket Compliments orders;
• Publishing Ticket Compliments gift vouchers and providing them to the beneficiaries of Ticket Compliments (hereinafter ‘the Beneficiaries of Ticket Compliments’) ;
• The provision and activation of the card support allowing beneficiaries to use the Ticket Compliments gift vouchers (hereinafter ‘the Edenred Card’) ;
• The notification to the Beneficiaries of Ticket Compliments every time the Ticket Compliments is loaded, and about the approaching expiry date, the available balance and the transactions made using Ticket Compliments ;
• The provision of information regarding the use of the Ticket Compliments gift vouchers to the Beneficiaries of Ticket Compliments in electronic form ;
• The secure use of Ticket Compliments gift vouchers including the provision of various means to block the Edenred Card in case of loss or theft ;
• The processing of transactions made using Ticket Compliments gift vouchers following the “first in, first out” principle and reimbursement of merchants affiliated to the Edenred Belgium network who have accepted them as payment.

18. Legal basis of the processing

The processing is required for the performance of a contract to which the Beneficiaries of electronic Ticket Compliments gift vouchers, the companies granting them the affiliates of the Ticket Compliments and Edenred Belgium are respectively parties or for the execution of pre-contractual measures taken at their request.

19. Data source

The personal data concerned are communicated by:

• the employer when ordering Ticket Compliments gift voucher for the the Beneficiaries of Ticket Compliments ;
• the Beneficiaries of Ticket Compliments themselves when using the Ticket Compliments gift voucher ;
• the individuals authorised by the companies granting the Ticket Compliments gift vouchers to use their Employer Space on the Myedenred Website or to communicate with Edenred Belgium as part of the management of Ticket Compliments gift vouchers ;
• the individuals authorised by the merchants affiliated to the Ticket Compliments network to use their Merchant Space or to communicate with Edenred Belgium as part of the management of Ticket Compliments gift vouchers.

20. Categories of data processed

The personal data communicated by the employer concerning Beneficiaries of Ticket Compliments include:

• identification data:
  – necessary data: last name, first name, address, national register number ;
  – complementary data: landline and/or mobile phone number, email address ;
• personal characteristics:
  – necessary data: birth date, birth place, language ;
  – complementary data: title ;
• data relating to the Ticket Compliments gift vouchers associated with a Beneficiary of Ticket Compliments: quantity, face value, validity period, point of distribution/delivery.

The personal data communicated by the Beneficiaries of Ticket Compliments concerning the use of Ticket Compliments include:

• data relating to transactions made using Ticket Compliments ;
• data relating to incidents that may occur while using the Ticket Compliments.

21. Data recipients

The personal data are exclusively intended for:

• the individuals and organisations in direct contact with Edenred Belgium requiring the data as part of the management of electronic Ticket Compliments gift vouchers ;
• the companies offering Ticket Compliments gift vouchers as part of the management of Ticket Compliments for members of their staff or their business relations ;
• the Beneficiaries of electronic Ticket Compliments gift vouchers as part of the management of their Ticket Compliments gift vouchers ;
• the authorities that require such data, including the National Social Security Office.

They are not shared with third parties.

The processors of Edenred Belgium include:

• For application development, maintenance and support: EDENRED SE, a company incorporated under French law ;
• For the hosting of information systems: DXC TECHNOLOGY FRANCE SAS, MICROSOFT FRANCE SAS, two companies incorporated under French law  as well as  NSI IT SOFTWARE & SERVICES, a company incorporated under Belgian law ;
• For authorisation of transactions: PREPAY TECHNOLOGIES Ltd, a company incorporated under the laws of the UK  ;
• For manufacturing Edenred Cards: GEMALTO BV, a company incorporated under Dutch law ;
• For the Card Stop service: WORLDLINE SA, a company incorporated under Belgian law ;
• For the Customer Service: WENGAGE NV, a company incorporated under Belgian law ;
• For services communications : SELLIGENT BENELUX SA, a company incorporated under Belgian law.

22. Data transfer

Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

23. Decision based exclusively on automated processing, including profiling

The processing does not involve any decision based exclusively on automated processing, including profiling.

24. Retention period

Personal data are archived and access is limited as soon as they are no longer necessary for the management of Ticket Compliments.

Personal data are kept for a period of 10 years after the closure of the employer’s granting Ticket Compliments’s file and, in the event of legal proceedings brought during this period, until all legal remedies have been exhausted.

25. Purpose

Edenred Belgium processes personal data for purposes relating to the management of consumption vouchers published by it, as an authorised publisher, under the brand Chèque Consommation (in french or ‘Consumptiecheque’ in dutch) (hereinafter ‘Chèque Consommation’).

The management of Chèque Consommation vouchers covers the following:

• The management of Chèque Consommation orders;
• Publishing Chèque Consommation vouchers and providing them to the beneficiaries of Chèque Consommation (hereinafter ‘the Beneficiaries of Chèque Consommation’) ;
• The provision and activation of the card support allowing beneficiaries to use the Chèque Consommation gift vouchers (hereinafter ‘the Edenred Card’) ;
• The notification to the Beneficiaries of Chèque Consommation every time the Chèque Consommation is loaded, and about the approaching expiry date, the available balance and the transactions made using Chèque Consommation ;
• The provision of information regarding the use of the Chèque Consommation vouchers to the Beneficiaries of Chèque Consommation in electronic form ;
• The secure use of Chèque Consommation including the provision of various means to block the Edenred Card in case of loss or theft ;
• The processing of transactions made using Chèque Consommation vouchers following the “first in, first out” principle and the reimbursement of merchants affiliated to the Edenred Belgium network who have accepted them as payment.

26. Legal basis of the processing

The processing is required for the performance of a contract to which the Beneficiaries of Chèque Consommation vouchers, the companies granting them the affiliates of the Chèque Consommation and Edenred Belgium are respectively parties or for the execution of pre-contractual measures taken at their request.

27. Data source

The personal data concerned are communicated by:

• the employer when ordering Chèque Consommation voucher for the the Beneficiaries of Chèque Consommation ;
• the Beneficiaries of Chèque Consommation themselves when using the Chèque Consommation voucher ;
• the individuals authorised by the companies granting the Chèque Consommation vouchers to use their Employer Space on the Myedenred Website or to communicate with Edenred Belgium as part of the management of Chèque Consommation vouchers ;
• the individuals authorised by the merchants affiliated to the Chèque Consommation network to use their Merchant Space or to communicate with Edenred Belgium as part of the management of Chèque Consommation vouchers.

28. Categories of data processed

The personal data communicated by the employer concerning Beneficiaries of Chèque Consommation include:

• identification data:
  – necessary data: last name, first name, address, national register number;
  – complementary data: landline and/or mobile phone number, email address;
• personal characteristics:
  – necessary data: birth date, birth place, language ;
  – complementary data: title ;
• data relating to the Chèque Consommation vouchers associated with a Beneficiary of Chèque Consommation: quantity, face value, validity period, point of distribution/delivery.

The personal data communicated by the Beneficiaries of Chèque Consommation concerning the use of Chèque Consommation include:

• data relating to transactions made using Chèque Consommation;
• data relating to incidents that may occur while using the Chèque Consommation.

29. Data recipients

The personal data are exclusively intended for:

• the individuals and organisations in direct contact with Edenred Belgium requiring the data as part of the management of Chèque Consommation vouchers ;
• the companies offering Chèque Consommation vouchers as part of the management of Chèque Consommation for members of their staff or their business relations ;
• the Beneficiaries of electronic Chèque Consommation vouchers as part of the management of their Chèque Consommation vouchers ;
• the authorities that require such data, including the National Social Security Office.

They are not shared with third parties.

The processors of Edenred Belgium include:

• For application development, maintenance and support: EDENRED SE, a company incorporated under French law ;
• For the hosting of information systems: DXC TECHNOLOGY FRANCE SAS, MICROSOFT FRANCE SAS, two companies incorporated under French law as well as  NSI IT SOFTWARE & SERVICES, a company incorporated under Belgian law ;
• For authorisation of transactions: PREPAY TECHNOLOGIES Ltd, a company incorporated under the laws of the UK  ;
• For manufacturing Edenred Cards: GEMALTO BV, a company incorporated under Dutch law ;
• For the Card Stop service: WORLDLINE SA, a company incorporated under Belgian law ;
• For the Customer Service: WENGAGE NV, a company incorporated under Belgian law ;
• For services communications : SELLIGENT BENELUX SA, a company incorporated under Belgian law

30. Data transfer

Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

31. Decision based exclusively on automated processing, including profiling

The processing does not involve any decision based exclusively on automated processing, including profiling.

32. Retention period

Personal data are archived and access is limited as soon as they are no longer necessary for the management of Chèque Consommation.

Personal data are kept for a period of 10 years after the closure of the employer’s granting Chèque Consommation’s file and, in the event of legal proceedings brought during this period, until all legal remedies have been exhausted.

33. Purpose

Edenred Belgium processes personal data for purposes relating to the management of electronic gift vouchers published by it, as an authorised publisher, under the brand Ticket Sport & Culture (hereinafter ‘Ticket Sport & Culture’).

The management of Ticket Sport & Culture gift vouchers covers the following:

• The management of Ticket Sport & Culture orders;
• Publishing Ticket Sport & Culture gift vouchers and providing them to the beneficiaries of Ticket Sport & Culture (hereinafter ‘the Beneficiaries of Ticket Sport & Culture’) ;
• The provision and activation of the card support allowing beneficiaries to use the Ticket Sport & Culture gift vouchers (hereinafter ‘the Edenred Card’) ;
• The notification to the Beneficiaries of Ticket Sport & Culture every time the Ticket Sport & Culture is loaded, and about the approaching expiry date, the available balance and the transactions made using Ticket Sport & Culture ;
• The provision of information regarding the use of the Ticket Sport & Culture gift vouchers to the Beneficiaries of Ticket Sport & Culture in electronic form ;
• The secure use of Ticket Sport & Culture gift vouchers including the provision of various means to block the Edenred Card in case of loss or theft ;
• The processing of transactions made using Ticket Sport & Culture gift vouchers following the “first in, first out” principle and reimbursement of merchants affiliated to the Edenred Belgium network who have accepted them as payment.

34. Legal basis of the processing

The processing is required for the performance of a contract to which the Beneficiaries of electronic Ticket Sport & Culture gift vouchers, the companies granting them the affiliates of the Ticket Sport & Culture and Edenred Belgium are respectively parties or for the execution of pre-contractual measures taken at their request.

35. Data source

The personal data concerned are communicated by:

• the employer when ordering Ticket Sport & Culture gift voucher for the the Beneficiaries of Ticket Sport & Culture ;
• the Beneficiaries of Ticket Sport & Culture themselves when using the Ticket Sport & Culture gift voucher ;
• the individuals authorised by the companies granting the Ticket Sport & Culture gift vouchers to use their Employer Space on the Myedenred Website or to communicate with Edenred Belgium as part of the management of Ticket Sport & Culture gift vouchers ;
• the individuals authorised by the merchants affiliated to the Ticket Sport & Culture network to use their Merchant Space or to communicate with Edenred Belgium as part of the management of Ticket Sport & Culture gift vouchers.

36. Categories of data processed

The personal data communicated by the employer concerning Beneficiaries of Ticket Sport & Culture include:

• identification data:
  – necessary data: last name, first name, address, national register number ;
  – complementary data: landline and/or mobile phone number, email address ;
• personal characteristics:
  – necessary data: birth date, birth place, language ;
  – complementary data: title ;
• data relating to the Ticket Sport & Culture gift vouchers associated with a Beneficiary of Ticket Sport & Culture: quantity, face value, validity period, point of distribution/delivery.

The personal data communicated by the Beneficiaries of Ticket Sport & Culture concerning the use of Ticket Sport & Culture include:

• data relating to transactions made using Ticket Sport & Culture ;
• data relating to incidents that may occur while using the Ticket Sport & Culture.

37. Data recipients

The personal data are exclusively intended for:

• the individuals and organisations in direct contact with Edenred Belgium requiring the data as part of the management of electronic Ticket Sport & Culture gift vouchers ;
• the companies offering Ticket Sport & Culture gift vouchers as part of the management of Ticket Sport & Culture for members of their staff ;
• the Beneficiaries of electronic Ticket Sport & Culture gift vouchers as part of the management of their Ticket Sport & Culture gift vouchers ;
• the authorities that require such data, including the National Social Security Office.

They are not shared with third parties.

The processors of Edenred Belgium include:

• For application development, maintenance and support: EDENRED SE, a company incorporated under French law ;
• For the hosting of information systems: DXC TECHNOLOGY FRANCE SAS, MICROSOFT FRANCE SAS, two companies incorporated under French law  as well as  NSI IT SOFTWARE & SERVICES, a company incorporated under Belgian law ;
• For authorisation of transactions: PREPAY TECHNOLOGIES Ltd, a company incorporated under the laws of the UK  ;
• For manufacturing Edenred Cards: GEMALTO BV, a company incorporated under Dutch law ;
• For the Card Stop service: WORLDLINE SA, a company incorporated under Belgian law ;
• For the Customer Service: WENGAGE NV, a company incorporated under Belgian law ;
• For services communications : SELLIGENT BENELUX SA, a company incorporated under Belgian law.

38. Data transfer

Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

39. Decision based exclusively on automated processing, including profiling

The processing does not involve any decision based exclusively on automated processing, including profiling.

40. Retention period

Personal data are archived and access is limited as soon as they are no longer necessary for the management of Ticket Sport & Culture.

Personal data are kept for a period of 10 years after the closure of the employer’s granting Ticket Sport & Culture’s file and, in the event of legal proceedings brought during this period, until all legal remedies have been exhausted.

41. Purpose

Edenred Belgium processes the personal data of Users of the Myedenred Website and/or the Myedenred Application in order to enable the User to create a personal account that gives him access to the balance of Ticket Restaurant and/or Ticket EcoCheque and/or Ticket Compliments from which he benefits as well as to the history of transactions made using his Edenred Card (hereinafter ‘the Myedenred Personal Account’). The User can manage his Edenred Card there and in particular block it in the event of loss or theft as well as manage his profile and rectify, if necessary, his personal data.

The Myedenred Website and the Myedenred Application also allow Users to locate affiliates accepting the Edenred Card as payment and to benefit from the promotional offers displayed on it.

In addition, the Myedenred Website allows the User, if he/she consents, to receive promotional communications.

42. Legal basis of the processing

This processing is based on the User’s prior consent given by registering on the MyEdenred Website and/or through the Myedenred Application.

The use of the Myedenred Website and/or the Myedenred Application is in no way subject to the acceptance of any form of promotional communication.

The User has the right to unsubscribe and therefore delete his Myedenred Personal Account at any time, by contacting Edenred Belgium.

The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Prior to giving consent, the data subject shall be informed thereof.

43. Data source

The personal data concerned are communicated by the Users of the Myedenred Website and/or the Myedenred Application when registering and using the Myedenred Website and/or the Myedenred Application.

44. Categories of data processed

The personal data communicated by the Users of the Myedenred Website and/or the Myedenred Application include, as the case may be:

• identification data: last name, first name, address, landline and/or mobile number, email address, username, password;
• personal characteristics: birth date, title, language;
• electronic identification data: IP addresses, cookies;
• data relating to the behaviour and habits of Users  when using the Myedenred Website and/or the Myedenred Application;
• data relating to incidents that may occur while using the Myedenred Website and/or the Myedenred Application.

45. Data recipients

The personal data are exclusively intended for:

• the individuals and organisations in direct contact with Edenred Belgium requiring the data to manage the Myedenred Website and/or the Myedenred Application;
• the Users of the Myedenred Website and/or the Myedenred Application;
• the authorities that require such data, including the National Social Security Office.

They are not shared with third parties.

The processors of Edenred Belgium include:

• For application development, maintenance and support: EDENRED SE, a company incorporated under French law ;
• For the hosting of information systems: DXC TECHNOLOGY FRANCE SAS, MICROSOFT FRANCE SAS, two companies incorporated under French law  as well as  NSI IT SOFTWARE & SERVICES, a company incorporated under Belgian law ;
• For the Help Centre: PREMIUM PLUS SPRL, a company incorporated under Belgian law ;
• For the Customer Service: WENGAGE NV, a company incorporated under Belgian law ;
• For services communications : SELLIGENT BENELUX SA, a company incorporated under Belgian law.

46. Data transfer

Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

47. Decision based exclusively on automated processing, including profiling

The processing does not involve any decision based exclusively on automated processing, including profiling.

48. Retention period

Personal data are archived and access is limited as soon as the User unsubscribes.

Personal data are kept for a period of 10 years after the closure of the employer’s and, in the event of legal proceedings brought during this period, until all legal remedies have been exhausted.

49. Purpose

Edenred Belgium processes the personal data of the Users of the Ekivita Platform and/or the Ekivita Application for purposes relating to the management of the Ekivita Platform and/or the Ekivita Application, accessible online and allowing the Users of the Ekivita Platform and/or Application to create a personal account that gives them access to benefits in the form of price reductions offered by the Ekivita Platform.

Registration allows the User to manage his profile and to rectify, if necessary, his personal data as well as to access the history of transactions carried out using his account on the Ekivita Platform (hereinafter ‘the Ekivita Personal Account’).

In addition, the Ekivita Platform and/or the Ekivita Application allows the User, if he consents, to receive benefits in the form of price reductions, promotional communications from Edenred Belgium and/or merchants affiliated to the Ekivita network, to participate in competitions via the Ekivita Platform and/or the Ekivita Application.

50. Legal basis of the processing

51. Data source

The concerned personal data shall be communicated by :

• the employer when he grants members of his staff access to the Ekivita Platform;
• the User of the Ekivita Platform and/or the Ekivita Application when registering and when using the Ekivita Platform and/or the Ekivita Application.

52. Categories of data processed

The personal data communicated by the employer regarding the Users having access to the Ekivita Platform are, where applicable :

• identification data: last name, first name ;
• personal characteristics: title;
• characteristics related to the granting of the benefit: date of entry, date of exit, language, professional email address, activation code.

The personal data communicated by the Users of the Ekivita Platform and/or the Ekivita Application are, where applicable :

• identification data: address, phone number (landline or mobile), personal email address, login, password ;
• personal characteristics: date of birth ;
• electronic identification data: IP addresses, cookies;
• data relating to transactions carried out on the Ekivita Platform ;
• data relating to the behaviour and habits of the Users when using the Ekivita Platform and/or the Ekivita Application ;
• data relating to incidents that may occur during their use of the Ekivita Platform and/or the Ekivita Application.

53. Data recipients

The personal data are exclusively intended for:

• the individuals and organisations in direct contact with Edenred Belgium requiring these data within the framework of the management of the orders placed on the Ekivita Platform and/or the Ekivita Application ;
• the Users of the Ekivita Platform and/or the Ekivita Application within the framework of the management of their orders and/or their participation in competitions ;
• the authorities that require such data.

The data are not shared with third parties.

The processors of Edenred Belgium are :

• For application development and support  Encima BV, a company incorporated under Belgian law ;
• For the hosting of the information systems : Level27 BV, a company incorporated under Belgian law ;
• For contest management Qualifio SA, a company incorporated under Belgian law ;
• For Edenred Belgium’s communications :  SELLIGENT BENELUX SA company incorporated under Belgian law.

54. Data transfer

Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

55. Decision based exclusively on automated processing, including profiling

The processing does not involve any decision based exclusively on automated processing, including profiling.

56. Retention period

Personal data are archived and their access is restricted as soon as the User of the Ekivita Platform and/or the Ekivita Application unsubscribes from the Ekivita Platform and, where applicable, from the Ekivita Application.

The concerned personal data are archived and access to it is limited, when they are not necessary for the management of the Ekivita Platform and/or the Ekivita Application, as soon as the User withdraws his consent when the processing is based on consent.

Personal data are kept for a period of 10 years after the closure of the employer’s file and, in the event of legal proceedings brought during this period, until all legal remedies have been exhausted.

57. Purpose

Edenred Belgium processes personal data for purposes relating to the management of orders made in its Online Shop accessible via the https://eshop.edenred.be website enabling beneficiaries of electronic Ticket Compliments to make online purchases using them (hereinafter ‘the Online Shop’).

The management of orders covers in particular the following aspects:

• The sending of a confirmation e-mail, summary of the order ;
• The sending of an e-mail informing the User of the possible unavailability of a product ordered and the option offered to him to choose a similar product or to cancel his order and obtain a refund of the corresponding price ;
• The processing of the transactions carried out and the possible refund of the Users, including in case of withdrawal ;
• The delivery of the ordered products ;
• The management related to the exercise by the User of his possible right of retraction ;
• The after-sales service, and in particular the management of the guarantee of conformity, if necessary, offered to the User ;
• The archiving of purchase orders and invoices ;
• The optimisation of navigation in the Online Shop.

58. Legal basis of the processing

The processing is necessary for the performance of a contract to which the User of the Online Shop and Edenred Belgium are respectively parties or for the performance of pre-contractual measures taken at the User’s request.

59. Data source

The personal data concerned are communicated by the Users of the Online Shop.

60. Categories of data processed

The personal data communicated by the the User of the Online Shop are, where applicable :

• identification data: last name, first name, phone number (landline or mobile), email address ;
• personal characteristics: title ;
• electronic identification data: IP addresses, cookies ;
• data relating to transactions carried out on the Online Shop and in particular the delivery address (street, number and box, company, postcode and town) and the billing address (title, first name, surname, street, number and box, postcode and town) ;
• data relating to the behaviour and habits of the Users when using the Online Shop ;
• data relating to incidents that may occur during their use of the Online Shop or the ordered products.

61. Data recipients

The personal data are exclusively intended for:

• the individuals and organisations in direct contact with Edenred Belgium requiring these data within the framework of the management of the orders placed on the Online Shop ;
• the Users of the Online Shop within the framework of the management of their orders ;
• the authorities that require such data.

The data are not shared with third parties.

The processors of Edenred Belgium are :

• For application development, maintenance and support: EDENRED SE, a company incorporated under French law ;
• For the hosting of information systems: DXC TECHNOLOGY FRANCE SAS, MICROSOFT FRANCE SAS, two companies incorporated under French law  as well as  NSI IT SOFTWARE & SERVICES, a company incorporated under Belgian law.

62. Data transfer

Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

63. Decision based exclusively on automated processing, including profiling

The processing does not involve any decision based exclusively on automated processing, including profiling.

64. Retention period

Personal data are kept for a period of 10 years after the User’s order and, in the event of legal proceedings brought during this period, until all legal remedies have been exhausted. The personal data are archived and their access is restricted as soon as it is no longer necessary for the execution of the User’s order.

65. Purpose

Edenred Belgium processes the personal data of Users of the Myedenred Website and/or the Myedenred Application and/or the Ekivita Platform and/or the Ekivita Application to promote its own products and/or services.

66. Legal basis of the processing

This processing is based on the User’s consent that he gives in advance by checking the opt-in box specifically dedicated to such processing.

The use of the Ticket Restaurant, the Ticket Ecocheque, the Tickets Compliments, the Tickets Sport & Culture, the Myedenred Website, the Myedenred Application, the Ekivita Platform, the Ekivita Application is in no way subject to the acceptance of any form of promotional communication.

The User has the right to withdraw his consent at any time.

It is as easy for the User to withdraw as to give consent. To withdraw his consent, the User may simply uncheck the box used to confirm his opt-in. This box is in his/her Myedenred/Ekivita Personal Account provided for customers on the Myedenred/Ekivita Website where a User can manage his/her account.

The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Prior to giving consent, the data subject shall be informed thereof.

An unsubscribe link is included in each electronic communication sent to the User.

67. Data source

The personal data concerned are communicated by the Users of the Myedenred Website and/or the Myedenred Application and/or the Ekivita Platform and/or the Ekivita Application when registering and using the Myedenred Website and/or the Myedenred Application and/or the Ekivita Platform and/or the Ekivita Application .

68. Categories of data processed

The personal data communicated by the Users of the Myedenred Website and/or the Myedenred Application and/or the Ekivita Platform and/or the Ekivita Application  include, as the case may be:

• identification data: last name, first name, address, landline and/or mobile number, email address, username, password ;
• personal characteristics: birth date, title, language ;
• electronic identification data: IP addresses, cookies ;
• data relating to the behaviour and habits of Users  when using the Myedenred Website and/or the Myedenred Application and/or the Ekivita Platform and/or the Ekivita Application ;
• data relating to incidents that may occur while using the Myedenred Website and/or the Myedenred Application and/or the Ekivita Platform and/or the Ekivita Application .

69. Data recipients

The personal data are exclusively intended for:

• the individuals and organisations in direct contact with Edenred Belgium requiring the data to promote the products and/or services of Edenred Belgium ;
• the Users of the Myedenred Website and/or the Myedenred Application and/or the Ekivita Platform and/or the Ekivita Application ;
• the authorities that require such data.

They are not shared with third parties.

The processors of Edenred Belgium include:

• For application development, maintenance and support: EDENRED SE, a company incorporated under French law ;
• For the hosting of information systems: DXC TECHNOLOGY FRANCE SAS, MICROSOFT FRANCE SAS, two companies incorporated under French law  as well as  NSI IT SOFTWARE & SERVICES, a company incorporated under Belgian law ;
• For the Help Centre: PREMIUM PLUS SPRL, a company incorporated under Belgian law ;
• For the Customer Service: WENGAGE NV, a company incorporated under Belgian law ;
• For promotional communications : SELLIGENT BENELUX SA, a company incorporated under Belgian law.

70. Data transfer

Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

71. Decision based exclusively on automated processing, including profiling

The processing does not involve any decision based exclusively on automated processing, including profiling.

72. Retention period

Personal data are archived and access is limited as soon as the User withdraws his consent to the processing by Edenred Belgium of his personal data to promote his own products and/or services.

Personal data are stored for a period of 2 years and, in the event of legal proceedings during this period, until all legal remedies have been exhausted.

73. Purpose

Edenred Belgium processes the personal data of Users of the Myedenred Website and/or the Myedenred Application and/or the Online Shop to promote the products and/or services of third-party partners.

74. Legal basis of the processing

This processing is based on the User’s consent that he gives in advance by checking the opt-in box specifically dedicated to such processing.

The use of the Ticket Restaurant, the Ticket Ecocheque, the Tickets Compliments, the Ticket Sport & Culture, the Myedenred Website, the Myedenred Application and the Online Shop is in no way subject to the acceptance of any form of promotional communication.

The User has the right to withdraw his consent at any time.

It is as easy for the User to withdraw as to give consent. To withdraw his consent, the User may simply uncheck the box used to confirm his opt-in. This box is in the Myedenred Personal Account provided for customers on the Myedenred Website where the User can manage his/her account. The User may also contact Edenred Belgium for this purpose.

The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Prior to giving consent, the data subject shall be informed thereof.

An unsubscribe link is included in each electronic communication sent to the User.

75. Data source

The personal data concerned are communicated by the Users when registering and using the Myedenred Website and/or the Myedenred Application and/or the Online Shop.

76. Categories of data processed

The personal data communicated by the Users of the Myedenred Website and/or the Myedenred Application and/or the Online Shop include, as the case may be:

• identification data: last name, first name, address, landline and/or mobile number, email address, username, password ;
• personal characteristics: birth date, title, language ;
• electronic identification data: IP addresses, cookies ;
• data relating to the behaviour and habits of Users  when using the Myedenred Website and/or the Myedenred Application and/or the Online Shop ;
• data relating to incidents that may occur while using the Myedenred Website and/or the Myedenred Application and/or the Online Shop.

77. Data recipients

The personal data are exclusively intended for:

• the individuals and organisations in direct contact with Edenred Belgium requiring the data to promote the products and/or services of third-party partners ;
• the Users of the Myedenred Website and/or the Myedenred Application and/or the Online Shop ;
• the authorities that require such data.

They are not communicated to third parties, including third-party partners.

The processors of Edenred Belgium include, as the case may be:

• For application development, maintenance and support: EDENRED SE, a company incorporated under French law ;
• For the hosting of information systems: DXC TECHNOLOGY FRANCE SAS, MICROSOFT FRANCE SAS, two companies incorporated under French law  as well as  NSI IT SOFTWARE & SERVICES, a company incorporated under Belgian law ;
• For the Help Centre: PREMIUM PLUS SPRL, a company incorporated under Belgian law ;
• For the Customer Service: WENGAGE NV, a company incorporated under Belgian law ;
• For promotional communications : SELLIGENT BENELUX SA, a company incorporated under Belgian law.

78. Data transfer

Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

79. Decision based exclusively on automated processing, including profiling

The processing does not involve any decision based exclusively on automated processing, including profiling.

80. Retention period

Personal data are archived and access is limited as soon as the User withdraws his consent to the processing by Edenred Belgium of his personal data to promote the products and/or services of third party partners.

Personal data are then stored for a period of 2 years and, in the event of legal proceedings during this period, until all legal remedies have been exhausted.

81. Purpose

Edenred Belgium processes the personal data of the Users of the Edenred Website as well as any User who deals with the company through any of the offered channels to optimise browsing on the Edenred Website or to best meet the requests of the persons contacting it for processing activities other than those specified above.

Edenred Belgium processes the personal data of Users of social networks who follow the pages of Edenred Belgium and who publish personal data designated as public or who come into contact with Edenred Belgium through these social networks.

82. Legal basis of the processing

This processing is necessary for the legitimate interests pursued by Edenred Belgium, whose legitimate interest is to meet the expectations of Users as effectively as possible.

83. Data source

The personal data concerned are communicated by the Users of the Edenred Website and/or communication channels offered by Edenred Belgium and/or the Edenred Belgium’s pages on social networks.

84. Categories of data processed

The personal data communicated by the Users of the Edenred Website and/or the channels offered by Edenred Belgium and/or Edenred Belgium’s pages on social networks, are, as the case may be:

• identification data : last name, first name, address, landline and/or mobile number, email address, function, employer ;
• personal characteristics: title, language ;
• electronic identification data: IP addresses, cookies ;
• data relating to the behaviour and habits of Users  when using the Edenred Website ;
• personal data designated as public on social networks ;
• data relating to incidents that may occur while using the Edenred Website and/or the communication channels offered by Edenred Belgium.

85. Data recipients

The personal data are exclusively intended for:

• the individuals and organisations in direct contact with Edenred Belgium requiring the data for the management of the Edenred Website and/or the communication channels offered by Edenred Belgium and/or Edenred Belgium’s pages on social networks, and to respond to the requests made ;
• the Users of the Edenred Website and/or communication channels offered by Edenred Belgium and/or Edenred Belgium’s pages on social networks ;
• the authorities that require such data.

They are not shared with third parties.

The processors of Edenred Belgium include, as the case may be:

• For application development, maintenance and support: EDENRED SE, a company incorporated under French law ;
• For the hosting of information systems: DXC TECHNOLOGY FRANCE SAS, MICROSOFT FRANCE SAS, two companies incorporated under French law  as well as  NSI IT SOFTWARE & SERVICES, a company incorporated under Belgian law ;
• For the Help Centre: PREMIUM PLUS SPRL, a company incorporated under Belgian law ;
• For the Customer Service: WENGAGE NV, a company incorporated under Belgian law ;

86. Data transfer

Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

87. Decision based exclusively on automated processing, including profiling

The processing does not involve any decision based exclusively on automated processing, including profiling.

88. Retention period

The personal data of Users with whom Edenred Belgium has no contractual relationship are kept, and access to these data is limited, for a period of 5 years from the last contact.

The personal data of Users with whom Edenred Belgium has a contractual relationship are kept, and access to these data is limited, for a period of 10 years and, in the event of legal proceedings brought during this period, until all legal remedies have been exhausted.

89. Purpose

Edenred Belgium processes personal data of Users in order to guarantee the security of their personal data and in particular for the purpose of prevention, detection and circumvention of faults and fraud.

90. Legal basis of the processing

This processing is necessary for the legitimate interests pursued by Edenred Belgium, whose legitimate interest is to guarantee the security of the personal data for which it is responsible.

91. Data source

The personal data concerned are communicated by the Users.

92. Categories of data processed

The personal data communicated by the companies granting Ticket Restaurant and/or Ticket Ecocheque and/or Tickets Compliments and/or Ticket Sport & Culture concerning the beneficiaries thereof and/or access to the Ekivita Platform, as the case may be:

• identification data:
  – necessary data: last name, first name, address, national register number ;
  – complementary data: landline and/or mobile phone number, email address ;
• personal characteristics: birth date, birth place, title, language ;
• data relating to Ticket Restaurant and/or aux Ticket Ecocheque and/or aux Tickets Compliments and/or Chèque Consommation and/or Ticket Sport & Culture associated with a Beneficiary of these Vouchers and/or Services: quantity, face value, validity period, point of distribution/delivery ;
• characteristics related to the granting of the benefit: date of entry, date of exit, language, professional email address, activation code.

The personal data communicated directly by the Users, that is, as the case may be:

• identification data : last name, first name, address, landline and/or mobile number, email address, username, password ;
• personal characteristics: birth date, title, language ;
• electronic identification data: IP addresses, cookies ;
• data relating to transactions made using Ticket Restaurant and/or Ticket Ecocheque et/ou des Tickets Compliments end/or Chèque Consommation and/or the Ticket Sport & Culture and/or the Ekivita Platform and/or the Online Webshop;
• data relating to the behaviour and habits of Users  when using the Edenred Belgium’s websites, platforms and applications;
• data relating to incidents that may occur while using the Edenred Belgium’s Edenred Belgium’s cards, websites, platforms and applications.

93. Data recipients

The personal data are exclusively intended for:

• the individuals and organisations in direct contact with Edenred Belgium requiring the data to guarantee the security of the personal data of Users ;
• the Users ;
• the authorities that require such data.

They are not shared with third parties.

The processors of Edenred Belgium include as the case may be:

• For application development, maintenance and support: EDENRED SE, a company incorporated under French law ;
• For the hosting of information systems: DXC TECHNOLOGY FRANCE SAS, MICROSOFT FRANCE SAS, two companies incorporated under French law  as well as  NSI IT SOFTWARE & SERVICES, a company incorporated under Belgian law ;
• For authorisation of transactions: PREPAY TECHNOLOGIES Ltd, a company incorporated under the laws of the UK  ;
• For manufacturing Edenred Cards: GEMALTO BV, a company incorporated under Dutch law ;
• For the Card Stop service: WORLDLINE SA, a company incorporated under Belgian law ;
• For the Customer Service: WENGAGE NV, a company incorporated under Belgian law ;
• For the hosting of the information systems of the Ekivita Platform: Fredhopper, a company incorporated under Dutch law;
• For the Help Centre: PREMIUM PLUS SPRL,a company incorporated under Belgian law; 
• For services communications : SELLIGENT BENELUX SA, a company incorporated under Belgian law.

94. Data transfer

Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

95. Decision based exclusively on automated processing, including profiling

The processing does not involve any decision based exclusively on automated processing, including profiling.

96. Retention period

Personal data are retained, and access to these data is limited, for a period of 2, 5 or 10 years, depending on the applicable limitation period and, in the event of legal proceedings brought during this period, until all legal remedies have been exhausted.

97. Purpose

Edenred Belgium processes the personal data of Users for research and statistical purposes, including marketing.

98. Legal basis of the processing

This processing is necessary for the legitimate interests pursued by Edenred Belgium, whose legitimate interest is to improve the quality of its services to Users.

99. Data source

The personal data concerned are communicated by the Users.

100. Categories of data processed

The personal data communicated by the companies granting Ticket Restaurant and/or Ticket Ecocheque et/ou des Tickets Compliments and/or Ticket Sport & Culture concerning the beneficiaries thereof and/or access to the Ekivita Platform, as the case may be:

• identification data:
  – necessary data: last name, first name, address, national register number ;
  – complementary data: landline and/or mobile phone number, email address ;
• personal characteristics: birth date, birth place, title, language ;
• data relating to Ticket Restaurant and/or aux Ticket Ecocheque and/or aux Tickets Compliments and/or Chèque Consommation and/or Ticket Sport & Culture associated with a Beneficiary of these Vouchers and/or Services: quantity, face value, validity period, point of distribution/delivery ;
• characteristics related to the granting of the benefit: date of entry, date of exit, language, professional email address, activation code.

The personal data communicated directly by the Users, that is, as the case may be:

• identification data : last name, first name, address, landline and/or mobile number, email address, username, password ;
• personal characteristics: birth date, title, language ;
• electronic identification data: IP addresses, cookies ;
• data relating to transactions made using Ticket Restaurant and/or Ticket Ecocheque et/ou Tickets Compliments and/or Chèque Consommation and/or Ticket Sport & Culture and/or the Ekivita Platform and/or the Online Webshop ;
• data relating to the behaviour and habits of Users  when using the Edenred Belgium’s websites, platforms and applications ;
• data relating to incidents that may occur while using the Edenred Belgium’s Edenred Belgium’s cards, websites, platforms and applications.

101. Data recipients

The personal data are exclusively intended for:

• the individuals and organisations in direct contact with Edenred Belgium requiring the data for research and statistical purposes ;
• the Users ;
• the authorities that require such data.

They are not shared with third parties.

The processors of Edenred Belgium include as the case may be:

• For application development, maintenance and support: EDENRED SE, a company incorporated under French law ;
• For the hosting of information systems: DXC TECHNOLOGY FRANCE SAS, MICROSOFT FRANCE SAS, two companies incorporated under French law  as well as  NSI IT SOFTWARE & SERVICES, a company incorporated under Belgian law ;
• For authorisation of transactions: PREPAY TECHNOLOGIES Ltd, a company incorporated under the laws of the UK  ;
• For manufacturing Edenred Cards: GEMALTO BV, a company incorporated under Dutch law ;
• For the Card Stop service: WORLDLINE SA, a company incorporated under Belgian law ;
• For the Customer Service: WENGAGE NV, a company incorporated under Belgian law ;
• For the hosting of the information systems of the Ekivita Platform: Fredhopper, a company incorporated under Dutch law;
• For the Help Centre: PREMIUM PLUS SPRL,a company incorporated under Belgian law; 
• For services communications : SELLIGENT BENELUX SA, a company incorporated under Belgian law.

102. Data transfer

Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

103. Decision based exclusively on automated processing, including profiling

The processing does not involve any decision based exclusively on automated processing, including profiling.

104. Retention period

Personal data are retained, and access to these data is limited, for a period of 2, 5 to 10 years, depending on the applicable period of limitation and, in the event of legal proceedings brought during this period, until all legal remedies have been exhausted.

Edenred Belgium may not refuse to comply with Users’ requests under this Article V unless it can demonstrate that it is unable to identify the User concerned.
The identification of the User may in particular be carried out by means of a copy of his identity document.

As soon as possible and at the latest within one month from the receipt of the request, Edenred Belgium provides the User exercising one or more of the rights referred to below, with information on the measures taken following the request. The one-month period can be extended by two months, given the complexity and the number of requests. In the latter case, Edenred Belgium informs the User of the extension and the reasons justifying it.

When the User makes his request in electronic form, the information is provided by Edenred Belgium electronically where possible and unless the User requests otherwise. The request can be made through this link.

If Edenred Belgium does not respond to the User’s request, it shall promptly inform the User, at the latest within one month from receipt of the request for reasons of this refusal and the possibility for the User to lodge a complaint with the Data Protection Authority and to file a judicial recourse.

The requests under this Article V shall be free of charge except where a User’s requests are manifestly unfounded or excessive, in particular because of their repetitive nature. In the latter case, Edenred Belgium may require the payment of reasonable fees that take into account the administrative costs related to these requests or refuse to act on them.

Where Edenred Belgium has reasonable doubts concerning the identity of the User making the request, it may request the provision of additional information necessary to confirm the identity of the data subject.

The User has the right to lodge a complaint with the Data Protection Authority (DPA) (Art. 77 GDPR). A form is available on the DPA website: https://www.autoriteprotectiondonnees.be. The complaint must then be sent either by email: contact@apd-gba.be, or by post to the DPA address: Rue de la Presse 35 at 1000 Brussels.

The User has the right to obtain from Edenred Belgium confirmation as to whether or not the personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:

• the purposes of the processing ;
• the categories of personal data concerned ;
• the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients outside the European Economic Area or in international organisations ;
• where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period ;
• the existence of the right to request from Edenred Belgium rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing ;
• the right to lodge a complaint with the Data Protection Authority ;
• where the personal data are not collected from the data subject, any available information as to their source ;
• the existence, as the case may be, of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the User.

Where the personal data are transferred to a country outside the European Economic Area or to an international organisation, the User shall have the right to be informed of the appropriate safeguards relating to the transfer.

The User has the right to obtain, free of charge, from Edenred Belgium a copy of the personal data being processed. This right, however, may not affect the rights and freedoms of others, including the trade secrets of Edenred Belgium or its intellectual property rights.

Where the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic form.
Edenred Belgium may require the payment of reasonable fees based on the administrative costs, fixed at EUR 25.00, for any additional copies requested by the data subject.

The User shall have the right to obtain, free of charge, from Edenred Belgium the rectification of inaccurate personal data concerning him or her, without any undue delay.

Taking into account the purposes of the processing, the User shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

The User shall have the right to obtain from Edenred Belgium the erasure of personal data concerning him or her without undue delay and Edenred Belgium shall have the obligation to erase personal data without undue delay where one of the following grounds applies:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed ;
• the User withdraws consent on which the processing is based and where there is no other legal ground for the processing ;
• the User objects to the processing pursuant hereto ;
• the personal data have been unlawfully processed ;
• the personal data have to be erased for compliance with a legal obligation to which Edenred Belgium is subject ;
• the personal data have been collected in relation to the offer of information society services to children.

Where Edenred Belgium has made the personal data public and is obliged pursuant to paragraph 1 to erase the personal data, Edenred Belgium, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the User has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

Paragraphs 1 and 2 shall not apply to the extent that processing is necessary:

• for exercising the right of freedom of expression and information ;
• for compliance with a legal obligation which requires processing to which Edenred Belgium is subject ;
• establishment, exercise or defence of legal claims ;
• for statistical purposes in so far as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing.

The User shall have the right to obtain from Edenred Belgium restriction of processing where one of the following applies:

• the accuracy of the personal data is contested by the User, for a period enabling Edenred Belgium to verify the accuracy of the personal data ;
• the processing is unlawful and the User opposes the erasure of the personal data and requests the restriction of their use instead ;
• Edenred Belgium no longer needs the personal data for the purposes of processing, but they are required by the User for the establishment, exercise or defence of legal claims ;
• the User has objected to processing based on Edenred Belgium’s legitimate interests pending the verification whether these interests override those of the User.

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with the User’s consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest.

A User who has obtained restriction of processing shall be informed by Edenred Belgium before the restriction of processing is lifted.

Edenred Belgium shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance herewith to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. Edenred Belgium shall inform the data subject about those recipients if the data subject requests it.

Subject to the rights and freedoms of third parties, the Users shall have the right to receive the personal data concerning them, which they have provided to Edenred Belgium, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from Edenred Belgium, where:

• the processing is based on consent, or on a contract; and
• the processing is performed using automated means.

In exercising his or her right to data portability, the User shall have the right to have the personal data transmitted directly from Edenred Belgium to another controller, where technically feasible.

The exercise of the right to portability of personal data is without prejudice to the provisions on the right to erasure. This right shall not apply to processing necessary for the performance of a task carried out in the public interest.

Where personal data are processed for direct marketing purposes, the User shall have the right to object at any time to processing of personal data concerning him for such marketing, which includes profiling to the extent that it is related to such direct marketing.

When the User objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.

The User shall have the right to object, on grounds relating to his particular situation, at any time to processing of personal data concerning him which is based on legitimate interests pursued by Edenred Belgium.

Edenred Belgium shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the User or for the establishment, exercise or defence of legal claims.

The User shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or similarly significantly affects him, except when the decision:

is authorised by the regulations to which Edenred Belgium is subject and which also lays down suitable measures to safeguard the User’s rights and freedoms and legitimate interests; or

is necessary for entering into, or performance of, a contract between the User and Edenred Belgium; or

is based on the explicit consent of the User.

In the last two cases, Edenred Belgium shall implement suitable measures to safeguard the User’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of Edenred Belgium, to express his point of view and to dispute the decision.