Privacy Statement: Notification in Concession Agreements

Port of Antwerp-Bruges processes personal data in accordance with the notice in Annex X to this Concession Agreement.

When a Concessionaire becomes a party to this Concession Agreement, it declares:

• that it will always comply with the applicable laws and regulations on data protection and the processing of personal data and that it will handle correctly and lawfully the personal data of Port of Antwerp-Bruges employees, amongst others, which it will process in the context of this Concession Agreement. As such, the Concessionaire shall ensure that it correctly informs each data subject, maintains a processing register and takes appropriate technical and organisational measures to protect the personal data it processes. It will only process personal data in a manner consistent with the processing principles set out in the GDPR and only founded upon a legitimate legal basis.
• that it will provide the notice (Annex X) to all persons whose personal data Port of Antwerp-Bruges processes in the context of this Concession Agreement and that it will process those personal data in accordance with the applicable laws and regulations on data protection and the processing of personal data.

Port of Antwerp-Bruges (hereinafter referred to as "POAB", "we" or "us") attaches great importance to the protection of personal data. Personal Data is all the information about an identified or identifiable natural person (hereinafter the "data subject", "you", or "your"). We will always protect your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation or "GDPR") including any applicable current or future national or international legislation implementing or replacing the GDPR (hereinafter collectively "Applicable Privacy Legislation").

This notification on the processing of your personal data (hereinafter "Privacy Statement") was drawn up to clearly inform you about the processing of your personal data and your rights as a data subject. As such, please read this document carefully and contact us if you have any questions via the contact details in Article 9 below.

This Privacy Statement applies to the processing of personal data of the following categories of data subjects:

• Persons involved in this Concession and any communication relating thereto.

2.1 The controller for this processing is Port of Antwerp-Bruges.

2.2 The Data Protection Officers for Port of Antwerp-Bruges can be contacted at dpo@portofantwerpbruges.com.

Port of Antwerp-Bruges only processes the personal data that it obtains directly from the Concessionaire. In addition, Port of Antwerp-Bruges also processes personal data of persons concerned by the Concession Agreement, of whom the Concessionaire provides the personal data or who do this themselves via communication with Port of Antwerp-Bruges.Port of Antwerp-Bruges expects the Concessionaire to provide this notification to all such persons. 

In the context of this processing, your personal data are not transferred to third parties.

Your personal data will not be transferred outside the European Economic Area.

Port of Antwerp-Bruges shall retain your personal data for as long as is necessary for the purposes set out in Section 3. After that time, the personal data shall be deleted.For more information, you can always contact dpo@portofantwerpbruges.com. 

In accordance with the Applicable Privacy Legislation, you may exercise the following rights (if and to the extent applicable):

• You can request access to and receive a copy of any personal data we have processed concerning you;
• You can also request that your personal data that is incorrect or incomplete be corrected or completed;
• You can request that your personal data be deleted;
• You can object to the processing of your personal data, request that we restrict the processing of your personal data or request the portability of your personal data.
• You can also object, free of charge, to the processing of your personal data for direct marketing purposes by contacting POAB at the address below or by using the unsubscribe link in any direct marketing communication.
• If we collect and process your personal data with your consent, you can withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of any processing based on your consent before it is withdrawn.

You may exercise these rights by sending an email to the following e-mail address: dpo@portofantwerpbruges.com. We will handle your request in accordance with the Applicable Privacy Legislation.

• Finally, you also have the right to file a complaint with a supervisory authority.

Port of Antwerp-Bruges is responsible for the collection and use of your personal data as described in this Privacy Statement. You can contact us at dpo@portofantwerpbruges.com.

Contact details of the Data Protection Officer (DPO): dpo@portofantwerpbruges.com. 

We may update this Privacy Statement from time to time to comply with business, legal or technical developments. When we update our Privacy Statement, we will take appropriate measures to inform you, depending on the significance of the changes and the statutory requirements in this regard.