By using this website you agree to these terms and to the disclaimer and limitation of liability below. If you do not agree to these terms please leave the site immediately.

Lisa Bingham (I, me) provides this website as a free service to internet users. It is intended to provide general information only, and nothing within it constitutes legal advice. The use of this site does not create any legal relations between you and Lisa Bingham.

Lisa Bingham gives users no representation, warranty or assurance as to the accuracy, completeness and/or reliability of the website and its contents.

You use this website at your own risk. Lisa Bingham shall not be liable in any circumstances to you or any other party for any losses or damages whatsoever arising in connection with the use of this website including, without limitation, any loss arising from or in consequence of the inaccuracy of any information contained on the website whether arising from spelling mistakes, typing errors or otherwise; any misrepresentation, misstatement or tortious act or omission including negligence (with the exception of intentional acts or omissions).

This website may contain links to other websites. These linked websites are not under Lisa Bingham’s control and Lisa Bingham is not responsible for the contents of any linked website or any link contained in a linked website. The inclusion of a link to another website in these pages does not imply an endorsement of that website by Lisa Bingham.

These terms are governed by Belgian law and you submit to the exclusive jurisdiction of the courts of Brussels.

This Privacy Policy applies to the processing of personal data by Lisa Bingham (I, me) for the purposes of the EU General Data Protection Regulation 2016/679 and Belgian law implementing that Regulation (“GDPR”).

This Privacy Policy is intended to inform people whose personal data I process about the handling of their personal data. This includes: (i) clients; (ii) prospective clients; (iii) people who have shown an interest in my services; (iv) users of my website; and (v) other people with whom I come into contact in the context of delivering services.

In the course of providing services, I may also receive personal data of people from third parties. When I receive such personal data indirectly from other sources, I often have no contact with the individuals whose data is processed. In those circumstances, providing individuals with the information in this Privacy Policy would either be impossible, would involve disproportionate effort or would otherwise be inappropriate. If I have direct contact with you and you provide me with personal data about others, you should therefore bring this Privacy Policy to the attention of those people and ensure that they are duly informed of the disclosure as required by applicable law.

What Personal Data Do I Collect?

As set out in this Privacy Policy, I process the following kinds of personal data:

·      Identity and Contact Data: your name, address, phone number, date of birth, gender, language, job title, nationality.

·      Sensitive Data: where necessary, in the provision of consulting services, I may collect “special categories of personal data” (GDPR Article 9(1)), i.e. data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or data concerning sex life or sexual orientation.

·      Financial Data: your bank account details, payment card details, billing information, and other personal data necessary to process payments to and by me.

·      Other Communication Data: when you contact me with an inquiry or other communication, any personal data included in the correspondence.

If I process personal data relating to criminal convictions and offences or related security measures (GDPR Article 10), I do so in accordance with applicable law providing for appropriate safeguards.

How Do I Collect Personal Data?

I collect personal data from you directly when you provide it to me, when you offer or provide me with services, provide me with your business card or otherwise communicate with me.

I may collect personal data about you indirectly from other sources in the course of providing services, for example from my clients, government agencies or public records.

If you choose not to provide me with your personal data, depending on the circumstances I may not be able to provide you with a particular service. I will advise you as necessary if this is the case.

How Do I Use Your Personal Data?

I process the personal data described above for a number of purposes. Below, I set out the various purposes for which I process data, the type of data processed for that purpose, potential recipients of that data, and the legal basis for processing.

Where I process data on the basis of my legitimate interests, such processing is only carried out to the extent that such interests are not overridden by your interests or fundamental rights and freedoms which require protection of personal data.

If processing of personal data is necessary for a further purpose that is not covered by the activities described below, I will ascertain whether the secondary purpose is compatible with the original purpose for which the data was collected. Where necessary, I will seek your consent for such further processing.

1.        Consulting Services

I process data in order to provide consulting services to my clients.

Types of Personal Data

Identity and Contact Data, Sensitive Data, Financial Data, Other Communication Data

Potential Recipients

Depending on the type of service I am providing and its specificities, and where there is a legal basis for doing so, your personal data may be shared with other people involved in the provision of the relevant service.

Legal Basis

The processing is necessary for the performance of a contract with you, or to take steps at your request prior to entering into a contract; or

The processing is necessary for the purposes of my legitimate interest in providing services to my clients.

For Sensitive Data, I process such data (i) where it is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity, (ii) where it is manifestly made public by you, or (iii) with your explicit consent.

2.        Business Management

I process personal data in order to operate and manage my business, including record-keeping, administration, legal and regulatory compliance, sanctions and other legal screening, billing, accounting, tax compliance, audit, payments, recovery of amounts due, engagement of service providers, handling any dispute arising out of my business operation or services, or as otherwise required by a court, tribunal or other legal body or legal obligation.

Types of Personal Data

Identity and Contact Data, Financial Data, Other Communication Data

Potential Recipients

Where there is a legal basis for doing so, your personal data may be shared with government and regulatory authorities or agencies, service providers, insurers, external professional consultants including accounting and legal advisers.

Legal Basis

The processing is necessary for:

·      the performance of a contract with you or in order to take steps at your request prior to entering into a contract;

·      compliance with a legal obligation to which I am subject; or

·      the purposes of my legitimate interest in the operation and management of my business.

3.        IT Management

Personal data is processed in order to ensure the proper management and security of my IT systems, including audits, monitoring, troubleshooting, responding to any information security incident, optimization and maintenance of such systems.

Types of Personal Data

Identity and Contact Data, Sensitive Data, Financial Data, Other Communication Data

Potential Recipients

IT service providers engaged to carry out management of my IT systems on my behalf.

Legal Basis

The processing is necessary for the purposes of my legitimate interest in information security and the operation and management of my business.

For Sensitive Data, I process such data (i) where it is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity, (ii) where it is manifestly made public by you, or (iii) with your explicit consent.

International Transfers

Personal data under my control is hosted on servers located in the EU. In pursuit of the processing activities outlined in this Privacy Policy, it may be necessary to transfer your personal data outside the EU to a jurisdiction that is not recognized by the European Commission as ensuring an adequate level of protection, or to an international organization. In those circumstances, we ensure that there is a legal basis for such transfer and adequate protection for personal data under applicable law.

Retention

Subject to any specific agreements, I retain personal data for as long as necessary to fulfil the purpose(s) of its processing and/or to comply with my legal obligations.

Your Rights

Under the GDPR, you have individual rights to exercise in relation to your personal data. Depending on the circumstances, these may include:

·      A right of access to your personal data and information about my processing of it, subject to certain exceptions;

·      A right to rectify inaccurate or incomplete personal data;

·      A right to have certain personal data erased;

·      A right to restrict processing of certain personal data;

·      A right to withdraw your consent, where I have relied on consent to process your personal data;

·      A right to a copy of your personal data (data portability);

·      A right to object to certain processing of your personal data;

·      A right not to be subject to a decision based solely on automated processing.

The extent of your rights may depend on applicable law, the nature of the personal data and the type of processing.

You can exercise your rights by contacting me via the contact details indicated on this website.

You also have the right to lodge a complaint with a data protection supervisory authority, such as the Belgian Data Protection Authority, at contact@apd-gpa.be

Lisa Bingham, self-employed, Belgian registration number 0809.356.221