Privacy Policy

1. Introduction

Coreso (“we” or “Coreso”) guarantees and respects your privacy by complying with applicable laws and regulations regarding personal data protection.

This privacy policy (the “Policy”) clarifies the processing of the personal data of our website visitors, customers, suppliers, job applicants, stakeholders, shareholders and partners (“you”) collected from you or provided to us when visiting our website. When processing the collected data, CORESO S.A. (Avenue de Cortenbergh 71, 1000 Brussels, Belgium) acts as data controller and processor. For any questions, please contact us at privacy@coreso.eu.

This privacy policy is not applicable to websites of third parties that can be visited through links on this website.

2. Data collection and processing

Any data, information, or queries that you send to CORESO S.A (whether by e-mail or by means of the electronic query form) are not confidential and may be freely used and/or reproduced by CORESO, unless you explicitly indicate otherwise. The above does not apply to any data and information which must be treated confidentially pursuant to the Belgian Electricity Act of 29 April 1999. Any data that you send to www.coreso.eu must be truthful, correct and may not infringe on the rights of third parties.

By sending any data to CORESO, you grant CORESO a free and non-exclusive license to use and reproduce said data for its corporate purposes and those of its subsidiaries or parent companies.

We may process any data we receive from you when you navigate, answer questionnaires or fill in other sections of the website. The personal data that we process include, but are not limited to:

identification data (e.g. first name, last name, email address, phone number) that you enter directly in our website;
technical data (including your IP address, type and version of web browser, time zone, the operating system and platform used, the domain name of your Internet service provider) automatically collected;
data relating to your use of our website, processed in an aggregated and anonymized manner;
CV and cover letter that you upload directly on our website.

We may use this personal data in the following ways:

to provide information on products and services of CORESO and related third parties and conducting other promotional activities (however, in this case, CORESO will always ask for your prior consent before sending you said information);
to administer our website and for internal operations (including troubleshooting, data analysis, testing, research, statistical and survey purposes), to ensure that the content from our website is presented in the most effective manner for you and for your computer/device, and to keep our website safe and secure;
to notify you, if needed, about changes to our services or our website, about other services we offer that are similar to those that you have already used or enquired about, or about goods or services we feel may interest you;
to review and assess your job application;
to carry out our obligations arising from any contracts entered between you and us and to provide you with the information and services that you request from us; and
to pursue any legitimate interest of CORESO or the execution of a contract.

Your personal details will not be sold or put at the disposal of third parties that are not subsidiaries of CORESO or otherwise related to CORESO. Moreover, Coreso does not subject any data subject to decisions based solely on automated processing that have legal effect or similar effect on the data subjects.

3. Disclosure of your personal data

Your personal data is being collected and processed on the following legal bases:

if it is necessary for pursuing our legitimate interests, considering these interests are not overridden by your fundamental rights and freedoms, e.g., we use your personal data to know your preferences so as to be able to better personalize our services, to carry out satisfaction services, to prevent fraud and to secure our website.
if it is necessary for performing the contract we have with you, e.g., contact details in supplier contract or regulated contract ; or
if it is necessary for complying with a legal obligation or regulatory requirement to which we are subject; or
when you consented to this, e.g., if you have given your prior express consent thereto, we may use your email address for sending you marketing materials. In such a situation, you are free to remove your consent at any time.

4. Security

The security of your data is important to us, we have implemented a series of security measures on our website to create a secure and reliable website for you but be aware that the confidentiality of communications or documents transmitted to us or transmitted or received through our website or by email cannot be guaranteed. We accept no responsibility regarding the security of the data transmitted using these methods.

All data you provide to us is stored on secured servers. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

We follow industry best practices to ensure that data are not accidentally or unlawfully destroyed, lost, altered, disclosed or accessed in an unauthorized manner.

5. Transfer of personal data

You agree that we may share your personal data with selected third parties including:

our internal services to fulfil certain legal obligations or safeguard our legitimate interests;
our affiliates;
our business partners, including suppliers and stakeholders;
public authorities (including judicial and police authorities and regulators);
banks and insurers;
our suppliers (including professional advisors, recruitment related services, IT suppliers, online payment suppliers, analytics and search engine providers that assist us in the optimization of our website)
courts and tribunals in the event of a dispute involving you, or law enforcement authorities;
government entities authorized to access/obtain your data according to the applicable law;
in the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets;
if Coreso or substantially all of its assets are acquired by a third party, in which case information held by it about its customers may be one of the transferred assets;
if we are under a duty to disclose or share your personal data in order to comply with any legal obligation or to protect the rights, property, or safety of Coreso, our customers, or others. This includes exchanging information with public authorities (including judicial and police authorities and regulators) in the event of, for example, a cyber security incident;
if that is appropriate to achieve any of the purposes set out in section 2 of this Privacy Policy.

We strive to ensure that our processors also comply with data protection laws. Hence, we ensure that involved processors undertake, inter alia, to process your personal data on our instructions only, not to engage another processor without our agreement, to take appropriate technical and organisational measures to guarantee the security of your data, to ensure that the persons authorised to access your data are subject to confidentiality obligations, and to provide us with assistance in following up your requests regarding the exercise of your rights with regard to your data.

Exceptionally, we may transfer your personal data to a destination outside the European Economic Area (the EEA), if that is appropriate (i) to achieve any of the purposes set out under section 2 and/or (ii) to disclose your personal data to a third party in accordance with section 3 of this Privacy Policy. If we transfer your personal data outside of the EEA, we will make sure that your personal data is protected by adequate safeguards, such as (but not limited to) and Adequacy Decision, data protection clauses approved by the European Commission, or binding corporate rules or additional measures that guarantee an essentially equivalent level of protection to that guaranteed within the European Union.

If you wish to receive more information relating to the transfers of your personal data and/or the safeguards that have been implemented (including on how to receive a copy thereof), you can contact us through privacy@coreso.eu.

6. Your rights

You have certain rights regarding the personal data we hold about you. These rights can be exercised by contacting us as set out in Section 1:

you have the right to be informed in a clear, transparent and understandable manner about how we use your data and which are your rights. This information is provided through this policy;
you have the right to access the personal data we keep about you – this is because we want you to be aware of the personal data we have about you and to enable you to verify whether we process your personal data in accordance with the applicable data protection laws and regulations;
you have the right, under certain circumstances, to block or suppress further use of your personal data. When the processing is restricted, we can still store your personal data, but we can no longer use it;
if your personal data is inaccurate or incomplete, you have the right to request the rectification of your personal data;
you have the right, under certain circumstances, to request the deletion or removal of your personal data from our systems. This right is not absolute: we are likely to keep your data to the extent permitted by applicable law, and in particular when processing remains necessary to comply with a legal obligation to which Coreso is subject or to establish, exercise or defend a legal claim;
you have the right to lodge a complaint about the way we handle or process your personal data with your national data protection authority (the Data Protection Authority, Rue de la Presse 35, 1000 Brussels, +32 (0)2 274 48 00, contact(at)apd-gba.be, https://www.autoriteprotectiondonnees.be/);
if our processing of your personal data is based specifically on your consent, you have the right to withdraw that consent at any time. This includes your right to withdraw consent to our use of your personal data for direct marketing purposes. To do this, you can contact us at privacy@coreso.eu;
you have the right to obtain from us, under certain circumstances, your personal data in a structured, commonly used and machine-readable form so you can reuse it for your own purposes across different services. For example: if you want to work with a different service provider, this enables you to move your personal data easily and in a secure manner to this new service provider; and
you also have the right to object to certain types of processing, including processing for direct marketing purposes.

However, note that we may need to retain certain information, for example for legal or administrative purposes (e.g., keeping of accounting records).

For all requests set out above, please send us an email with “data privacy request” in the subject line and include a copy of your identity card or another proof of your identity (e.g., driver’s license) to help us prevent unauthorized individuals from accessing, changing, or deleting your personal data. We will respond to your request as soon as practically possible. If we need more than one month (from receipt of your request) to respond to your request, we will come back to you and let you know.

7. Retention of your personal data

The information we hold about you will be retained in a manner consistent with the applicable data protection legislation. In any event, your personal data shall not be kept longer than is required by the applicable contract, or than is necessary to achieve the purposes stated in this Privacy Policy, unless:

the processing of your personal data is necessary in connection with any actual or potential dispute (e.g., we need this information to establish or defend legal claims), in which case we will keep your personal data until the end of such dispute; and/or
the retention is necessary for us to comply with any legal or regulatory obligation (e.g., for tax purposes), in which case we will keep your personal data for as long as required by that obligation.

8. Changes to this Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and, if necessary, by email.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. Your continued use of this Website, following the publication of the changes to the Policy, implies your acceptance thereof. This Policy was last updated in November 2024.

9. Contact Details

Questions, comments, and requests regarding the Privacy Policy must be addressed to privacy@coreso.eu.