How we collect, use and protect your personal data, and the rights you have.
Any questions? Just ask!
“We”, “us” and “our” mean iLean NV, with registered office at Veldkant 33A, 2550 Kontich, company number 0551.885.755, and iLean Agile NV, with registered office at Veldkant 33A, 2550 Kontich, company number 0761.802.762. We act as controller for the personal data we collect through your use of this website, www.ilean.be.
This Privacy Policy covers the processing of personal data through your use of the website, including when you buy a training from us. For our privacy practices under a separate services agreement, please refer to that agreement.
If you have questions, concerns or complaints about this policy or about how we process your personal data, or you want to exercise any of the rights set out in section 6, you can reach us by email at info@ilean.be or by post at iLean, Veldkant 33A, 2550 Kontich, Belgium.
Personal data means any information relating to an identified or identifiable person. Below we set out what we collect, why we collect it, and the legal basis we rely on under the GDPR.
When you use our contact form we collect your name, email address, phone number, company and whatever you write in the message field. We use it to answer you. Legal basis: our legitimate interest in responding to enquiries, or the steps necessary to enter into a contract if your question is about buying a training.
Please do not send us sensitive information through the form, such as health data or payment card numbers.
When you book a training we collect the billing name, email address, billing address, company name and VAT number of the person or organisation buying, and the name, email address, job title, phone number and company of each participant. We use this to take and administer your order, to raise your invoice, to register participants for the course, and to send joining instructions and course materials. Legal basis: performance of our contract with you, and compliance with our legal obligations for invoicing and bookkeeping.
For courses that lead to an external certificate, we share the participant’s name and email address with the certifying body, for example Scrum Alliance, so they can issue the certificate and membership. Legal basis: performance of our contract with you.
If you opt in, we use your email address and name to send you our newsletter, which may include invitations to events, seminars and trainings. Legal basis: your consent. You can withdraw it at any time using the unsubscribe link in any email, or by replying to us.
When you take part in an event, training or webinar organised by iLean, your name and contact details may be shared with other companies in the Bluu Cluster, part of the Cronos Group. This lets us tell you about similar initiatives, trainings or relevant content from those companies. Legal basis: our legitimate interest in knowledge sharing and collaboration within the cluster. Every communication, whether part of a campaign or a personal one-to-one email, gives you the option to unsubscribe or object. For personal emails you can simply reply to say you would rather not be contacted.
If you apply for a job with us we process your contact details and the information in your application, including your professional experience and education. Legal basis: the steps necessary to enter into an employment contract, and your consent where you ask us to keep your details on file.
We collect your IP address, device type and identifier, referral source, language settings, browser, operating system, approximate location, length of visit and pages viewed. We use this to keep the website secure, available and performing well, and to understand how it is used so we can improve it. Legal basis: our legitimate interest in operating and improving the website, and your consent for analytics cookies. Where this data is fully anonymised it is no longer personal data and this policy does not apply to it.
We may process your personal data to establish, exercise or defend legal claims, and to meet obligations placed on us by law. Legal basis: our legitimate interest in defending our position, and compliance with legal obligations.
We keep your personal data no longer than necessary for the purposes above.
If you withdraw your consent, or you object to our use of your data and that objection succeeds, we will remove your data from our systems. We may keep the minimum necessary to make sure your preferences are respected in future, for example to keep you off a mailing list.
None of the above prevents us from keeping data where we need it to comply with a legal obligation, to bring or defend a legal claim, or as evidence.
During trainings, workshops and events we may take photos or short video recordings to capture the atmosphere and document the session. We may use these for communication and marketing, such as social media posts, newsletters or promotional material.
By registering for a training and agreeing to this policy you accept that such images may be used, on two conditions: they are used in a respectful and professional context, and you are not the main subject of the image unless we have asked you separately and you have agreed.
If you would rather not appear in any photo or video, tell the trainer or photographer before or during the session, or email us at info@ilean.be. We will respect that without question.
To run our website and our business we work with service providers who process personal data on our behalf. Each is bound by a data processing agreement.
We may also disclose your personal data where we are required or permitted to do so to meet a legal obligation, or to protect your vital interests or those of another person.
We do not sell your personal data, and we do not pass it to advertising networks.
We use links to our social media channels so you can find and interact with our content. If you click one, that platform may collect data about you and link it to your existing profile there. We are not responsible for what they do with it, and in that case they act as controller. Their policies are worth reading: LinkedIn and Facebook.
Some of our service providers are established outside the EEA, or may process data outside it. This applies in particular to Webflow, Mailchimp and Zapier, which are based in the United States, and to Google Analytics.
Where data is transferred outside the EEA we make sure an appropriate safeguard is in place, either an adequacy decision by the European Commission, such as the EU-US Data Privacy Framework, or the European Commission’s Standard Contractual Clauses together with additional measures where needed. You can ask us for a copy of the safeguards that apply by emailing info@ilean.be.
Data protection law gives you a set of rights over your personal data. To exercise any of them, send us a written request using the contact details in section 1. We will respond without undue delay and in any event within one month of receiving your request. If we need longer, or if we decide not to act on your request, we will tell you why.
You can ask us to confirm whether we process your personal data and, if we do, to give you access to it along with the information set out in this policy. You can also ask for a copy of the data we hold, provided this does not adversely affect the rights and freedoms of others. The first copy is free. We may charge a reasonable fee for further copies.
If the data we hold about you is inaccurate or incomplete, you can ask us to correct or complete it.
In some circumstances you can ask us to delete your personal data without undue delay, including where the data is no longer needed for the purpose we collected it for, where you withdraw your consent and no other legal ground applies, where the processing is for direct marketing, where the data has been processed unlawfully, or where deletion is required by EU or Belgian law.
There are exceptions. We may need to keep data to exercise the right to freedom of expression and information, to comply with a legal obligation, or to establish, exercise or defend legal claims.
You can ask us to limit what we do with your data, meaning we store it but do not otherwise use it, if you contest its accuracy while we verify it, if the processing is unlawful and you prefer restriction to erasure, if we no longer need the data but you need it for a legal claim, or if you have objected and we are still considering that objection.
While a restriction applies we may still process the data with your consent, for legal claims, to protect someone else’s rights, or for reasons of important public interest. We will tell you before we lift a restriction.
Where we process your data on the basis of consent or contract and do so by automated means, you can ask us to give you that data in a structured, commonly used, machine-readable format, or to send it directly to another organisation where that is technically possible. This right does not apply where it would adversely affect the rights and freedoms of others.
Where we rely on legitimate interests, you can object to our processing on grounds relating to your particular situation. If you do, we will stop unless we can show compelling legitimate grounds that override your interests, rights and freedoms, or unless we need the data for legal claims.
You can object to our use of your data for direct marketing at any time, including profiling for direct marketing. If you do, we will stop, no questions asked.
Where we rely on your consent, you can withdraw it at any time. This does not affect the lawfulness of what we did before you withdrew it.
If you think our processing of your data breaches data protection law, you can lodge a complaint with a supervisory authority. You can do this in the EU member state where you live, where you work, or where the alleged breach took place. In Belgium that is the Data Protection Authority, Drukpersstraat 35, 1000 Brussels, contact@apd-gba.be.
We would rather hear from you first, though. If something is wrong, tell us and we will try to put it right.
We do not make decisions about you based solely on automated processing, and we do not profile you in a way that has legal or similarly significant effects.
We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. That includes encrypted connections to our website, access controls so that only the people who need your data can see it, and data processing agreements with every provider we work with. No system is perfect, but if a breach ever occurred that put your rights at risk we would notify the Data Protection Authority and you, as the law requires.
Our website uses cookies. For the detail on which ones, why, and how to manage them, see our Cookie Policy.
We may update this policy from time to time. The most recent version is always the one published here, and the date at the top tells you when it last changed. If we make a significant change we will draw attention to it.
