Privacy Policy

Respecting Your Privacy with Credafin

 

Your satisfaction is our top priority, under all circumstances. That’s why we handle your client data carefully. This enables us to manage your credits and insurances optimally, providing you with offers and information tailored to your needs. Additionally, we place the utmost importance on your privacy. This is our commitment.

That is why we have established this Privacy Charter.

 

  1. Who is responsible for processing your data?

Credafin SPRL with its registered office at Rue de Mariomont 21 in 4801 Verviers (hereinafter referred to as “Credafin”). This charter aims to inform you about the processing of your data which Credafin is responsible for.

 

  1. What does the processing of personal data involve?

Personal data includes all information about an identified or identifiable natural person. This can include a name, identification number, location data, an online identifier, or any other data related to a person.

The processing of personal data involves any possible operation on these data, such as collection, recording, use, or storage.

Credafin processes your personal data for various purposes (see point 5), based on several legal grounds and ensures that only necessary data are processed.

You are not legally obliged to provide us with your personal data, but refusal may result in Credafin being unable to establish a relationship or continue a relationship with you.

 

  1. What personal data is processed?

Identification data such as your name, address, date and place of birth, email address…

Socio-demographic data such as your family situation, civil status…

Data related to your products and assets…

Financial and transaction data related to the payment of your credit…

Data about your behaviors and browsing habits on Credafin sites: consultation of information, simulations, requests, reactions to our commercial proposals like clicking or not clicking on an online advertisement or the source site (e.g., where you clicked on a Credafin ad)…

Data concerning our satisfaction surveys…

Geolocation data (exact place where you are found)…

Data through our contact centers…

Data obtained through third parties…

Data collected via cookies. (Cookies are essential for the proper functioning of our sites. They fulfill various roles: remembering your preferences, collecting statistical data, adapting site content and/or advertisements according to your needs. More info: https://www.credafin.be/mentions-legales)

Credafin does not process sensitive data such as health data, racial or ethnic data, philosophical or religious beliefs, trade union membership, or sexual life data.

 

  1. When do we collect your data?

We collect your data when you engage with Credafin, for example when you:

  • Become a client
  • Contact us
  • Participate in a survey
  • Use one of our products or services
  • Connect to our sites

 

  1. Why does Credafin process your data?

We may process your client data automatically for the following purposes:

  • Managing your client file
  • Granting and managing credits and services
  • Continually improving our services and processes
  • Ensuring the security of people and property
  • Conducting satisfaction surveys on our products and services
  • Conducting studies, modeling, and statistics
  • Managing risk and administration e.g., client relationship history
  • Preventing money laundering, fraud, and financing of terrorism
  • Implementing our legal obligations
  • Responding to any legitimate request from judicial or control authorities for access to data
  • Pre-filling fields
  • Pre-filling data already known from existing clients when requesting additional products or services
  • Direct marketing to propose our products and services and avoid offering non-relevant products or services
  • Verifying compliance by credit intermediaries with their legal, regulatory, or contractual obligations and commission payments

We may also operate automated client data processing:

  • For marketing purposes, to better estimate your needs and target our offers. The processing logic is based on criteria such as: age, location, property ownership, personal and professional situation, client relationship history
  • For granting/refusing a credit based on an algorithm. Criteria include: age, personal and professional situation, credit characteristics and guarantees, client relationship history, and expenses

 

  1. On what legal grounds do we base the processing of your data?

The Privacy Protection Law only relates to individuals, not to businesses.

Credafin processes your personal data only in the following cases:

  • we execute a contract or pre-contractual measures,
  • you have given your consent at our request,
  • we must comply with a legal or regulatory obligation,
  • on the legal basis of “legitimate interest”, we endeavor to ensure the balance between Credafin’s interests and yours, including privacy protection

 

  1. To whom can your data be transferred?

Your data is treated confidentially. Credafin will never sell your personal data.

Because we want to inform you clearly about how we protect your privacy and consider your preferences. Furthermore, your data is never sold to third parties. We conduct controls on compliance with this charter.

Rest assured: we guarantee the security of your client data.

All data collected via our web forms, by phone, or face-to-face, are entered into our management software CLIP (Anysoft). They will only be used for your loan or insurance requests and will not be transmitted to third parties except financial partners or insurance companies we collaborate with for processing your request.

Your personal data may be processed by one or more of the organizations below:

Consumer Credit

 Mortgage Credit

 Insurance

 

  1. What are your rights and how can they be exercised?

8.1. General right to object to direct marketing

You may object at any time to the use of your data that we collect, store, and process for direct marketing purposes without justification;

Directly to Credafin by mail to the commercial service or via email: info@credafin.be, with a copy of the front of your ID card.

You will no longer receive any commercial proposals thereafter.

8.2. Right to object to the use of your online behavior for direct marketing

Do you not want your behavior on Credafin sites to be used for direct marketing purposes? You can object without justification:

Let us know directly at Credafin by mail to the commercial service or via email info@credafin.be, with a copy of the front of your ID card.

8.3 Right of access, rectification, and portability of data

You have a permanent right to access your personal data, and within this framework, you may request the following information:

  • The categories of personal data we hold
  • The purposes of the processing
  • The recipients or categories of recipients

If your personal data is inaccurate, irrelevant, or incomplete, we will modify, complete, and, in certain cases, delete it as permitted by law.

Please specify your request: Directly to Credafin by mail to the commercial service or via email: info@credafin.be, with a copy of the front of your ID card.

  1. How long do we keep your data?

This varies depending on the type of data and regulations (e.g., anti-money laundering regulations). They are never retained longer than necessary for the purposes for which they were collected.

Retention periods are set on a case-by-case basis, but generally, your data will be kept for 10 years after the end of our contractual relationship or your credit request, but for a mortgage, some data will be kept for 30 years after the notarial deed is executed.

 

Document Client Retention Period Prospect Retention Period
Identification pieces 10 years After the end of the client relationship 1 year After the end of the prospect status
Supporting documents (e.g., payslip) 10 years After the end of the client relationship 1 year After the end of the prospect status
Credit application form 10 years After the end of the client relationship 1 year After processing
Credit decision 10 years After the end of the client relationship 1 year From the date of refusal
Credit contract 10 years After the end of the client relationship Not applicable Not applicable

 

  1. What happens if the Privacy Charter is modified?

We will inform you of any changes.

You can always consult the Privacy Charter on our Credafin site.

Questions? Our Data Protection Officer (DPO) is at your disposal

Our DPO can be contacted by writing to the following address: Rue de Mariomont 21, 4801 Verviers, or by sending an email to info@credafin.be

Complaint?

If we have not been able to satisfy you and in case of a dispute concerning the processing of personal data, you have the right to lodge a complaint with the Data Protection Authority, Rue de la Presse 35 in 1000 Brussels.