Privacy Policy

Privacy notice

Who are we?

The ISACA Belgium Chapter is a not-for-profit association established in Belgium and is part of the global ISACA membership association; we have over 800 members and are one of the largest ISACA chapters in Europe.

The aim of the Chapter is to sponsor local professional development sessions, provide assistance for ISACA exam candidates, conduct educational seminars and workshops, and help to further promote and elevate the visibility of the IS audit, control and security profession in Belgium.

The association currently focuses on assurance, security, and governance and provides globally recognised certification in assurance (Certified Information Systems Auditor), security (Certified Information Security Manager), and governance (Certified in the Governance of Enterprise IT).

Our data privacy representatives can be contacted directly @ dpo@isaca.be

What personal data we collect and the Legal Basis

Personal data we would collect from/process on you

Personal data shared by ISACA International

The personal information shared by ISACA International is used to meet ISACA Belgium Chapter objectives as an affiliate of ISACA International and provide membership services to ISACA Belgium Chapter members.

We use your personal data to provide following services:

• Maintain your record of registration for attending the ISACA BELGIUM CHAPTER event and share it with event venue host/provider to print and issue attendee badges for security, health and safety.
• Keep you informed of future ISACA BELGIUM CHAPTER and partner educational events (including events, certification courses etc.)
• Send you Newsletter and track the IP address to the demographic analysis of the geographical location of constituents. • Contact you to participate in the relevant surveys and research initiatives supported by ISACA Belgium Chapter.
• Contact you to participate in Annual General Meeting of the ISACA Belgium Chapter (applicable to fully paid up members of ISACA International and ISACA Belgium Chapter).

Personal Data collected by Mailchimp and Zoom

ISACA Belgium Chapter  only collects the registration information that you provide when you register to attend ISACA Belgium Chapter  in-person and on-line educational events.

This event registration information is used by ISACA Belgium Chapter  and its service providers and venue hosts to provide services including:

• Issue event ticket,
• authenticate on arrival,
• provide with a name badge,
• record evidence of entry and attendance to the event to ensure compliance with security, health and safety requirements.

If you are an ISACA member, your ISACA membership number and duration of the event will be passed on to ISACA International to update your central CPE records. For audit purposes, the information collected during this registration will be retained by ISACA- Belgian Chapter for a maximum of five (5) years.
If you are not an ISACA member, your registration data collected by ISACA Belgium Chapter  will be erased within sixty (60) days of the event.
If you are a member of a partner organisation, by virtue of which you are entitled to attend an ISACA event free of charge, we may pass on your event registration details to the participating Partner organisation.

For any queries on how Mailchimp processes or use your personal information please consult Mailchimp’ s Privacy Policy

Partners holding an event that you attended

If you are a member of ISACA Belgium Chapter  attending our partner events, participating partner may share your registration detail including ISACA Membership number, which we in turn would pass on to ISACA International to update your central CPE records. For audit purposes, the information collected during this registration will be retained by ISACA- Belgian Chapter for a maximum of five years.

Our legal basis for processing for the personal data

Due to ISACA Belgium Chapter 's affiliation with ISACA International, ISACA BELGIUM CHAPTER is required to process ISACA Belgium Chapter’s members (subjects) data in order to provide membership services under its by-laws (affiliation agreement) with ISACA International. ISACA International is responsible for managing the consent directly. Please note that if you are fully paid up member of ISACA International or ISACA Belgium Chapter then please contact ISACA International to withdraw your consent for processing of personal identifiable data by ISACA Belgium Chapter. You can withdraw consent directly using ISACA International website (www.isaca.org)

Any legal obligation that ISACA Belgium Chapter  is required to meet being a Belgium registered association;

You can choose to ‘opt out’ of ISACA BELGIUM CHAPTER s newsletters and other communications by clicking the ‘unsubscribe’ link at the bottom of our emails communication.

If you wish to change your contact details or preferences please contact ISACA International.

Security

ISACA Belgium Chapter  employs a risk based variety of technical and organisational measures to keep personal data safe and to prevent unauthorised access to, or use or disclosure of it.

ISACA Belgium Chapter  respect your personal data and will never sell your personal data to third parties.

International Transfers

The ISACA Belgium Chapter may use service providers who are based on non-EU countries. In such cases ISACA Belgium Chapter  will inform members and ISACA International list of sub-processors based in non-EU countries.

ISACA Belgium Chapter  currently uses following named organisations based in third country (non EU) as service providers and share your least amount of personal information to provide services to you outlined in previous sections.

Retention period

ISACA Belgium Chapter  will continue to process personal data of members whilst they are fully paid up members of ISACA International and ISACA Belgium Chapter .
For information collected as part of event registration (via Mailchimp) process data for sixty (60) days and will store the personal data for up to five (5) years. We remove most information provided to us by members as soon as memberships are ceased, and data will cycle out of long-term backups up to six months later. We store logs of outbound emails for up to twelve (12) months after the email is sent for the purposes handling abuse complaints and compliance monitoring.

We will continue to store limited information about our members (including transaction records?) for seven (7) years plus the current calendar year for accounting, audit, record keeping and administrative purposes.

If we consider there is a need to store records for longer (for example, the transaction has been the subject of a dispute or claim) then we will retain the data for as long as is necessary.

Your rights as a data subject

You have a number of rights in relation to your personal information under data protection law. In relation to certain rights, we may ask you for information to confirm your identity and, where applicable, to help us to search for your personal information. Except in rare cases, we will respond to you within 30 days after we have received this information or, where no required, after we have received your request. At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights:-

• Right of access – you have the right to request a copy of the information that we hold about you.
• Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete. Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
• Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
• Right of portability – you have the right to have the data we hold about you transferred to another organisation.
• Right to object – you have the right to object to certain types of processing such as direct marketing.
• Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.
• Right to judicial review: in the event that ISACA Belgium Chapter refuses your request under rights of access, we will provide you with a reason as to why. You have the right to complain as outlined in section below.

All of the above requests will be forwarded on should there be a third party involved in the processing of your personal data.

Please note that since most of your personal data is shared with ISACA Belgium Chapter  by ISACA International, we would suggest that you raise your queries with International as well in order to exercise your subject rights with ISACA International as well.

Modifications to this Privacy Notice

We keep our privacy notice under regular review. From time to time, ISACA Belgium Chapter may need to update or modify this Privacy Notice, to reflect changes in our business practices, data collection practices or organization. We reserve the right to amend this Privacy Notice at any time, for any reason, without notice to you, other than the posting of the amended Privacy Notice on the Sites, or, if you have provided your email address to us, sending you an email notifying you of the amended Privacy Notice.

Questions or Concerns

If you have any questions or concerns about this Privacy Notice, please contact ISACA’s Belgium data protection resource at: dpo@isaca.be.

Complaining to the Belgium data protection authority

You have the right to complain to the Data Protection Authority the if you are concerned about the way we have processed your personal information. Please visit the website (Data protection authority) for further details.