The European Housing Network (hereafter “EURHONET”, “we”, “us”) is an international network of public and social housing companies, currently counting around 40 members from 6 countries (France, Germany, Italy, Sweden, Austria, Denmark, and the UK).
As a not-for-profit organisation we unite public and social housing companies that share the ambition of improving professional practices and performances in the housing sector. This Privacy Statement therefore applies to the personal data that we process from you in the context of this activity.
Data protection and privacy are of a particularly high priority for us. We commit ourselves to process your personal data (hereafter your “data”) in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection rules applicable to EURHONET. This Privacy Statement explains how we process your data and what rights you have in this regard.
Legally, EURHONET is an international not-for-profit organisation, registered as a company in Belgium. You can find all our relevant details below. Via the mentioned contact details, you can always reach us for further questions or comments regarding the processing of your data by us.
Name and legal form: The European Housing Network (international not-for-profit organisation, in Belgium legally an “A.I.S.B.L.” or “i-vzw”)
Company registration number: 0889.222.061
Registered office address: Square de Meeûs 18, 1050 Elsene (Brussels) Belgium
E-mail address: email@example.com
This Privacy Statement is only applicable when EURHONET is in charge of the processing of your data. This means that EURHONET acts as data controller and determines why and how your data is being processed.
‘Processing’ means any kind of data processing that could identify you as a natural person. Which specific data this may concern, will be explained in detail below. The concept of ‘processing’ is broad and includes for example the collection, storage, disclosure and distribution of your data.
This Privacy Statement is applicable on the processing of data by EURHONET from the categories of persons mentioned hereunder. For reasons of transparency and clarity, we will keep distinguishing between these categories of persons throughout the Privacy Statement, where relevant. Which data we process from you, the purposes for which we process your data, and other relevant elements are after all dependent on your relationship with EURHONET. The categories include persons who belonged to these categories in the past (e.g. former member), and persons who may belong to these categories in the future (e.g. potential future member).
If one of the persons referred to above is a legal person, we still process data from our contact persons at these entities and the GDPR applies.
Below we clarify which data we can process from you. We do not necessarily process all data mentioned below from you. Which data we process in a specific case, depends on your specific situation, the way in which you contact us, and your preferences. For clarity, below we first of all clarify which data we may potentially process from all our contacts. We then clarify which data we additionally process for specific categories of contacts, in particular our members, business partners and candidate employees.
We may process the following data from all of our contacts:
From the members of our international housing network, we may additionally process the data mentioned below:
From our business partners, we may additionally process the data mentioned below:
From candidate employees, we may additionally process the data mentioned below. Naturally, this will largely depend on which information you wish to provide to us in the context of your application.
We only process your data for legitimate purposes and based upon the legal bases that are listed in the General Data Protection Regulation (GDPR). Hereunder we clarify upon which legal bases we rely to process your data, depending on your relationship with EURHONET.
For clarity, below we first provide an overview of the purposes and legal bases of the general data processing activities within our organisation. We then list the processing operations that are relevant to specific categories of contacts, in particular our members, business partners and candidate employees. Under each process, we have listed the legal basis in the sense of the GDPR, upon which we rely to process your personal data.
o Legal basis: the establishment of our contract
We will not transfer your data to third parties, unless this is necessary for achieving one of the aforementioned purposes, you give your consent for such transfer, or we are required to do so by law.
Where necessary we engage external service providers, so called “data processors”, to support our operational purposes such as providing our services, managing our IT systems or performing any other (internal) business processes such as the digital storage of our member files. These external service providers may perform certain processing activities on your data on our behalf. We will only share your data with these external service providers to the extent necessary for the relevant purpose. The data may not be used for any other purposes by these third parties. In addition, these service providers are contractually bound to ensure the confidentiality of your data by means of a so-called “data processing agreement” concluded with these parties.
In concrete terms, this means that we may share your data, to the extent necessary as specified below, with the following third parties for the following purposes, with these third parties acting as data processors on our behalf in certain cases. Below each transfer, we have listed the legal basis in the sense of the GDPR, upon which we rely to transfer your data to these parties.
We do not store your data longer than is necessary for the purposes for which the data was collected. Depending on your relationship with EURHONET, we explain below how long we store your data.
We will always comply with specific legal requirements regarding the retention of your data, for example in the context of our accounting obligations as a company.
Data that we collect via our use of Google Analytics on the Website and Platform, is stored for a period of 26 months.
We will keep your data as long as necessary for the efficient management of your membership of EURHONET. When you create a personal account for the Platform as contact person for one of our members, the data obtained in this regard will be stored as long as your account is active. Should your organisation withdraw its membership of EURHONET, we will delete your account and the data that is related to it, as far as technically possible, within a reasonable timeframe. Your data that is (to a limited extent) included in our accounts, will be kept for at least 7 years in view of our legal obligations in this regard.
We will keep your data as long as necessary for the efficient management of the business relationship we have, had or will have with you under the agreement that is, was or will be in place between us. Your data that is (to a limited extent) included in our accounts, will be kept for at least 7 years in view of our legal obligations in this regard.
If we come to the final decision to not make you a proposal as candidate employee, we will delete your data within a reasonable timeframe. However, if you give your specific consent to keep your details so that we can contact you again in the future in light of new opportunities, we will keep your data for a maximum of 2 years.
We may obtain your data from you directly, because you represent or work for an organisation that is (interested in becoming) member of EURHONET, or because you represent or work for a company that we (may wish to) collaborate with.
We may also obtain your data indirectly from our members or business partners. This can be the case when you work for one of our (potential) members, or are otherwise connected to one of our members and we need your data in the context of the membership of your organisation. The same applies when you work for one of our (potential) business partners and we need your information in this regard.
We may also obtain your data indirectly from public sources. This mainly concerns limited data about your organisation that is publicly available, such as on the website of your organisation, or in the company register of your country. We do so to verify your membership application or your proposal to collaborate on behalf of an organisation.
Finally, we may consult the profile of candidate employees on professional social media platforms, or receive your details from a recruitment agency should you apply with us this way.
In the event we obtain your data indirectly, we will inform you about the processing of your data no later than at the time of our first contact with you.
Your data is mainly stored externally with specialised third parties, such as the external service providers we engage for hosting our Website and Platform. We outsource the majority of our technical processing activities to third parties, who act as data processors on behalf of EURHONET (please refer to our explanation under title 5). We make sure your data is stored as much as possible on IT systems in the European Economic Area (EEA). The servers of the Website and Platform are located in France in particular.
Should we, for limited and specific processing activities, rely on service providers that operate from outside the EEA, data transfers will only occur to countries from which the European Commission has confirmed that they guarantee an adequate level of protection for your data, or where other measures have been taken to ensure the lawful processing of your data in these third countries.
We and our processors have taken the necessary technical and organizational measures with a view to protecting your data against loss or any form of unlawful processing. We only grant access to the data to our own employees and third parties if they need access for legitimate, relevant business purposes.
You have various rights concerning the data we process from you. If you would like to exercise one of the rights described below, please contact us via the contact details provided under the first title of this Privacy Statement.
You have the following rights:
Rights to access and copy
You can have access to your data and receive a copy of it.
Right to rectification
You can obtain the rectification of inaccurate personal data that concerns you.
Right to erasure (‘right to be forgotten’)
You can ask us to delete your data. It is possible that it is still necessary to process this data limitedly for other purposes. For example: storing the necessary data in order to ensure we will not contact you again for marketing purposes.
Right to withdraw your consent
If the processing is based on your consent (see above under titles 5 and 6), you have the right to withdraw this consent at any time by contacting us. For newsletters or other promotional comunications that you receive from us via e-mail based on your consent, you can easily withdraw this consent by opting out via the unsubscribe link at the bottom of any such message.
Right to object
You can object to the processing of your data that is based on the legal basis of the legitimate interests of EURHONET or third parties. You also have an absolute right to object to the use of your data for direct marketing purposes, regardless of the legal basis we invoke for this processing activity. If you choose to object to the use of your data for direct marketing purposes, we will discontinue the relevant processing activities as soon as possible.
Right to restriction of the processing
You can exercise your right to restrict the processing, if you think that we process your personal data unlawfully. You can also ask we restrict the processing when you think we process inaccurate data about you, for the period needed to verify the accuracy of your data. The same applies when you object to the processing of your data. In this case you can restrict the processing for the time needed to verify our legitimate grounds to process your data.
Right to data portability
You have the right to obtain the data you provided to us in a structured, commonly used and machine-readable format. This enables you to easily transfer your data to another organisation. You can also ask us to directly transmit your data to another organisation. It might however be technically impossible to directly transmit your data to another organisation.
Right to lodge a complaint with a data protection authority
You also have the right to lodge a complaint with a competent supervisory authority in the field of data protection. Hereunder we refer to the contact details of the Belgian Data Protection Authority, since our network is administered by our Secretariat in Belgium. However, you can also lodge a complaint with the national supervisory authority of the EEA state where you have your habitual residence or place of work, or where the potential infringement occurred. For further information and the contact details of the supervisory authority of each EEA state, we refer to this web page of the European Data Protection Board.
Belgian Data Protection Authority
+32 (0)2 274 48 00
Finally, you also have the option to file a legal claim against EURHONET with the competent court in the EEA state where you have your habitual residence.
You can exercise the rights mentioned under title 9 by contacting EURHONET via the contact details provided under the first title of this Privacy Statement.
When you submit a request to exercise your rights, we will verify your identity if we have any doubts in this regard. We do so to prevent your data from falling into the wrong hands. If we have doubts about your identity, we will request you to provide us with documents that enable you to identify yourself without a reasonable doubt, such as a copy of your identity card. In this case we urge you to cross out the non-relevant information for the verification of your identity, such as your national citizen number and photo.
Exercising your rights is in principle free of charge. However, if your request appears to be manifestly unfounded or excessive (in particular because of its repetitive character), we may charge you a reasonable fee to charge our own administrative costs. In such cases, we may also simply opt to reject your request. In this event, you will be notified of the reasons for such decision.
In normal circumstances, you can expect a substantive answer to your request or complaint within one month. In case of complex or multiple requests, this period can be extended to 3 months, in which event you will be notified by EURHONET of the reasons for the delay.
We may unilaterally decide to modify this Privacy Statement. The most recent version is available on our Website and Platform at any time. We will however inform you directly – if possible – in the event of a substantial modification of the Privacy Statement that is relevant for you. You can find the date on which our Privacy Statement was last modified at the top of this page.
Eurhonet is a network of public and private social housing companies from France, Germany, Italy, Sweden, Austria and UK.
WhiteBook is a Eurhonet Sustainable Construction topic group project. It’s the unique knowledge portal about Sustainability in Social Housing developed by an Europe-wide expert group.
For any information about Eurhonet and the WhiteBook project, or if you want to collaborate with us, do not hesitate to contact us.