Privacy Policy

1. Introduction and scope

This privacy policy ("Privacy Policy") applies to the website www.nineid.com (the “Website”), owned and operated by:

Nine Engineering BV      
Stapelplein 70 box 103  
9000 Ghent – Belgium  
company number: 0752.969.527
RLE Ghent, section Ghent          
("Nine Engineering", "NineID", "we","us").

Nine Engineering deems the protection of privacy of the utmost importance and wishes to enable you – as user of its Website – to maintain full control over what happens to your Personal Data and your privacy and to inform and protect you accordingly.

Your Personal Data and your privacy are protected by Nine Engineering in accordance with Belgian and European data protection laws, including the EU General Data Protection Regulation 2016/679 (“GDPR”) as well as any applicable national implementing and supplementing laws. The following describes not only your rights, but also the way in which you can exercise these rights.

By using our Website, disclosing your Personal Data, and accepting this Statement, you expressly consent to the manner in which Nine Engineering collects and processes your Personal Data as described in this Statement.

Nine Engineering has appointed a Data Protection Officer, who you can contact at any time for questions concerning your privacy and the processing of your personal data. If you have any questions regarding our data processing activities, you can reach our Data Protection Officer by e-mail at privacy@nineid.com.

2. What personal data is collected and processed?

Nine Engineering processes different types of personal data, depending on the services you use on the Website and as relevant:

3. What are the purposes and legal grounds for the processing of your personal data?

The purposes and legal grounds for the processing of your personal data mainly depends on the category of personal data concerned.

Identification and contact details

Technical information

Cookies

The legitimate interest as grounds for processing is justified with respect to technical information and information collected via cookies since it is important for Nine Engineering to improve and adjust its Website based on that information. The fact that Nine Engineering processes this information will benefit all users. Given the nature of the personal data collected, Nine Engineering considers that the processing will not adversely affect your fundamental rights and/or freedoms. You can always object to processing based on this legal ground by contacting us at privacy@nineid.com.

The consent you provide is always free, and you have the right to withdraw this consent at anytime, free of charge, and without this having any negative implications for you.You may withdraw your consent by contacting us at privacy@nineid.com. A withdrawal of consent does not affect the processing of personal data prior to such withdrawal.

The above reasons may not be exhaustive, and Nine Engineering may at any time process your personal data for any other legitimate reason. In such cases, Nine Engineering will notify you as soon as possible of the reason. Updates of this Privacy Policy may constitute such a notification.

4. Direct marketing

Nine Engineering will also use your personal data for direct marketing purposes. This enables Nine Engineering to keep you informed about its news update. You give your explicit consent for this, but you may withdraw this consent at any time.

5. With whom do we share your personal data?

Your personal data may be shared by Nine Engineering with the following third parties:

Nine Engineering will only share personal data that is relevant and necessary. We always ensure that appropriate protective measures are taken when we transfer your personal data to third parties. For example, we will, where appropriate, enter into a transferagreement or a processor agreement, which sets out restrictions on the use of your personal data and obligations in relation to the security of your personal data.

If you would be redirected to another website via our Website, other terms and conditions, privacy and cookie policies may apply. We therefore recommend that you read these additional terms and conditions carefully.

Your personal data and your profile will not be lent or sold to third parties without your prior express consent.

6. Will your personal data be transferred to countries outside the EEA?

The European Economic Area ("EEA") includes the countries of the European Union and Norway, Liechtenstein and Iceland. The GDPR requires additional safeguards if Nine Engineering transfers your personal data to countries located outside the EEA.

It is possible that Nine Engineering – through its processors or sub-processors – transfers your personal data to countries outside the EEA. Should a less strict protection for personal data apply in a specific country outside the EEA, Nine Engineering will ensure that the same level of protection is achieved (e.g. by concluding an agreement based on the Standard Contractual Clauses of the European Commission with the (sub-)processor located in a country outside the EEA).

7. How long will your personal data be retained?

Nine Engineering applies the following retention periods for your personal data:

8. How do we protect your personal data?

Nine Engineering takes appropriate technical and organisational security measures to ensure a level of security appropriate to the specific risks we have identified. We thus protect your personal data against destruction, loss, alteration, unauthorised disclosure of or access to personal data transmitted, stored or otherwise processed.

The measures include:

·      Appointment of a Data Protection Officer;

·      Encryption of your personal data;

·      Awareness raising of personnel;

·      Security policy;

·      Management plan in case of security incidents;

·      Identity and Access Management; and

·      Hardware Security.

Despite the aforementioned measures taken by Nine Engineering, you should be aware that there are always risks involved in transmitting personal data over the Internet. The security and protection of your personal data can never be fully guaranteed.

More information about our security measures is available upon simple request.  

9. What are your rights and how can you exercise them?

Within the limits defined in Articles 15-22 of the GDPR, you have the following legal rights in relation to your personal data:

·     Right of access: you have the right to obtain confirmation from us as to whether or not we are processing your personal data, to access that personal data and how and why it is being processed, as well as to receive a copy of that data.

·     Right to rectification:you have the right to obtain a rectification of your personal data or to request that we complete your personal data when you become aware that we are processing incorrect or incomplete data about you.

·    Right to erasure ('right to be forgotten'): you have the right to obtain erasure of your personal data in certain specific cases.

·    Right to restriction: you have the right to have the processing of your personal data restricted in certain specific cases.

·   Right to portability: you have the right to obtain the personal data you have provided to us in a structured, commonly used and machine-readable form, and to transfer (have transferred) that personal data to another controller.

·    Right to object: you have the right to object to the processing of your personal data on the basis of our legitimate interest for reasons relating to your specific situation.

You can exercise the above rights by sending an e-mail to privacy@nineid.com.  

The exercise of these rights is in principle free of charge. Only in the event of unreasonable or repeated requests we may charge a reasonable administrative fee.

We always try to answer your requests or questions as quickly as possible. It is possible that we will first ask you for proof of identity in order to verify your identity.

You have the right to lodge a complaint with the competent Data Protection Authority if you believe the processing of your personal data violates the applicable regulations. In Belgium, the competent authority is the Data Protection Authority (www.gegevensbeschermingsautoriteit.be, contact@apd-gba.be, Drukpersstraat 35, 1000 Brussels).

If you believe our business has violated the applicable regulations, we would like to have the opportunity to deal with any issues, so we kindly ask you to contact us first before contacting the Authority.

10. Changes to the Privacy Policy

Nine Engineering may modify this Privacy Policy at any time. The date of the last amended version is listed at the bottom of the Privacy Policy. Changes will be published on our Website and, if applicable, will be submitted for approval.

11. Liability

If Nine Engineering has lawfully provided your personal data to a third party (other than a subprocessor), it will not be liable for the unlawful processing or use by that third party.

12. Contact

If you have any questions or concerns regarding this Privacy Policy or the processing of your personal data by us, please do not hesitate to contact us by sending an e-mail to privacy@nineid.com, contact@nineid.com or by submitting a request via the contact form on our Website.

Latest update: July 19^th 2022

Cookie Policy

1. What is the purpose of this policy?

This is the Cookie Policy of Nine Engineering BV, a public limited company incorporated under Belgian law, with registered office at Stapelplein 70 box 103, 9000 Ghent, Belgium, with company number 0752.969.527, RLE Ghent, section Ghent ("NineEngineering", "NineID",  "we", "us").

With this Policy, we informyou about the use of cookies on our website www.nineid.com (the “Website”) so that you can easily manage your cookie-settings.

This Cookie Policy should be read together with our Privacy Policy, which can be found above.

2. What are cookies and why are they used?

Cookies are small text files that are stored on the hard drive of your computer or mobile device when visiting applications and websites via your browser. This text file stores certain information, such as your language preference. The Belgian Act on Electronic Communications (transposition of the European e-Privacy Directive) and the General Data Protection Regulation 2016/679 applies to them. When you visit the application or website again later, this cookie will be sent again to the application or website so that it can recognise your browser and thus remember your language preference.

Some of the cookies that we use on our Website are essential to make this Website work, others serve to provide you a better, faster and safer user experience. Through the use of cookies, you do not have to repeatedly identify yourself, for example, for personalised services (such as entering your username or password, selecting a language, etc.).

3. Which cookies does Nine Engineering use?

a.     Categories of cookies

Cookies are often grouped into the following categories:

·     “session cookies”: cookies that are automatically erased once the user closes the website.

·     “persistent cookies”: cookies that remain on a user’s computer or device even after the user closes the website, and stay there for a certain period of time (e.g. several minutes, days or years).

·     “own cookies”: cookies that are installed and managed by the operator of the website itself.

·     “cookies from third parties”: cookies that are installed and managed by a third party other than the operator of the website.

You will find more information on the specific cookies that we use on our Website in point b below, and you will learn how to manage these cookies (including, if desired, how to delete them) under point 4.

b.     Which cookies do we use?