Introduction: the data protection policy for sa fullmark

For FULLMARK, protecting the personal data of natural persons is a priority and, above all, a legal obligation (GDPR applicable as of 25/05/2018), to which FULLMARK gives the highest priority.
With this policy text, we want to explain how we safeguard the rights and freedoms of the natural persons concerned and employees (“data subjects”) when we process personal data, both on paper and in the digital information environment.
We pay particular attention to higher-risk processing of personal data, such as (where applicable) the use of data for specific purposes, taking appropriate technical and organisational measures in processing, sharing this data with other parties… We also monitor the processing of our staff’s personal data and that of other parties—especially when we use technologies that, without protection, could infringe their privacy.

Objectives of the data protection policy

Providing quality products and/or services is an absolute priority for FULLMARK. An important aspect of this is high-quality processing of personal data. FULLMARK’s management pursues this policy to ensure that the rights and freedoms of all individuals are protected in the processing of personal data.
The purpose of drafting this policy is to demonstrate proper handling of personal data. It sets out the policy objectives and formalises them. It clarifies the data processing culture by respecting everyone’s rights and freedoms.
In concrete terms, we pursue the following objectives (insofar as they apply): FULLMARK

1. Is transparent about the personal data it processes and the purpose of processing, both to the data subject and to the supervisory authority. Communications are fair, easily accessible and understandable. The principle of transparency also applies when personal data is shared.
2. Processes only the data relevant to carrying out its tasks. Any task in which personal data is processed is lawful. This means, among other things, that the processing complies with FULLMARK’s legal and statutory objectives. This assessment is carried out each time for a new processing purpose.
3. Processes only the personal data strictly necessary to carry out its activities
4. Oversees the integrity of personal data throughout the entire processing cycle
5. Does not retain data longer than necessary. Necessity is assessed against legal obligations and the data subject’s rights and freedoms.
6. Prevents breaches resulting from the processing of personal data. Information security, data protection by design, and privacy-friendly default settings are tools for this. When a breach occurs, it is reported in accordance with the relevant regulations
7. Is able to fulfil all applicable rights of a data subject, such as the right of access, a copy and, where necessary, erasure. FULLMARK hereby monitors any restrictions that may apply to these rights
8. Actively ensures that processing of personal data for specific purposes, and the data subject’s rights and freedoms (e.g., the right to data portability), remain safeguarded.
9. Processes data in compliance with the rights and freedoms applicable in the European Economic Area and monitors compliance when data is shared outside it. FULLMARK therefore complies with all legal and regulatory frameworks (namely Flemish, federal and European rules) in the processing of personal data and has demonstrated, to that end, its accountability with regard to personal data and that of others. FULLMARK also monitors and applies the applicable codes of conduct in the sector.
10. Can demonstrate that it complies with all policy objectives, in accordance with legal provisions. This accountability obligation is monitored through internal supervision and control and is enforceable in accordance with legal principles.