Privacy policy – Belfius Olympics App

I. Processing of your personal data

Belfius Bank NV/SA, a limited liability company established under the laws of Belgium, having its registered office at Karel Rogierplein 11, 1210 Brussels, Belgium, and registered with the Register of Legal Persons of Brussels under company number 0403.201.185 (hereinafter "Belfius"), undertakes to comply with the regulations on the protection of personal data as described in the General Data Protection Regulation - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data (GDPR).

Belfius acts as data controller of this Belfius Olympic App and shall take all possible measures regarding the security and confidentiality of the processing of personal data and shall ensure that all processing is carried out properly and lawfully. Belfius may amend this privacy policy. The most recent version is always available here.

II. For what purposes do we collect, process and store your personal data?

Personal data are collected by Belfius and processed via this Belfius Olympics App in order to provide you with information related to your invitation during your stay at the Olympic Games in Paris 2024 (hereinafter "your invitation").

The personal data which you share with Belfius, or via our partners are collected in our database and processed by Belfius. The data are processed via this application for the purposes related to your stay during the Olympic Games in Paris 2024, such as, among others:/p>

• answer your requests for information related to your invitation (chat, phone,...)
• inform you on your activities, schedule, hotels, restaurants, transport, ...
• provide an optimal service
• manage your profile
• ...

The Belfius Olympics App collects location data to display the real-time risk alerts and personalized assistance notification features, even when the app is closed and not in use. This option can be changed later by going to the device settings.

III. What personal data do we collect?

We collect and use the following data:

• Identification data: surname, first name, email address, ...
• Information that you provide to us when you fill out our contact forms: subject, questions and further clarification.
• Information provided via chat

They will only be processed by the staff and subcontractors of Belfius for the purposes described above.

IV. With whom do we share your data?

The information we collect about you will be treated confidentially. They will only be used by the services of Belfius and its subcontractors who are granted access to them in the context of your invitation.

For all requests for support, your personal data - surname, first name, and e-mail address - will be added to a database managed by Belfius or its representative data processor.

We do not pass on personal data to third parties. Under no circumstances Belfius will disclose personal data to third parties for direct marketing purposes.

V. How long will your data be stored?

Your data will be kept as long as necessary for services related to your invitation, and then will be deleted.

VI. How can you consult your data, check their accuracy and, if necessary, correct them?

You have the right to request a copy of your personal data at any time in order to check, correct or update the accuracy of the information stored. You can also request that your personal data be completely deleted if no request from you is being processed.

To have access, to delete or to correct your personal data, please contact Belfius via olympicgames@belfius.be.

To ensure your privacy and security, we will take the necessary steps to verify your identity before you can view and, if necessary, correct or delete data.

VII. What do we do to prevent misuse or unauthorised access?

External subcontractors have signed a contract with Belfius under which they are legally obliged to comply with the applicable legislation on the protection and processing of personal data, and in particular the GDPR.

Your data is stored in Europe.

Belfius staff who have access to information enabling the identification of persons are obliged to protect this information in accordance with this statement on the protection of personal data. In particular, staff must refrain from using this information for purposes other than providing the services for which it is intended.

VIII. To whom should you address in case questions or complaints?

In the event of a dispute or a complaint you can contact the Data Protection Officer (bancassureur.privacy@belfius.be). If you are not satisfied, you can contact the Belgian Data Protection Authority (Drukpersstraat 35, 1000 Brussels).