General

This privacy statement (the "Statement") sets out in detail how NOMA, as the data controller, handles your personal data. By using our website and sharing your personal data, you expressly agree to the way NOMA collects and processes your personal data, as described in this Statement. All capitalized terms that are not defined in this Statement have the meaning defined in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the "General Data Protection Regulation" or "GDPR").

Identity and contact details of the data controller

Your personal data will be processed by: Marlex CV, Dirk Martensstraat 23, 8200 Brugge, enterprise number: 0543.374.105 and Novius BV, Victor Nonnemanstraat 158, 1600 Sint-Pieters-Leeuw, enterprise number 0894.798.472, hereinafter jointly NOMA.

NOMA has internally appointed a data protection officer, whom you can always contact for questions about your privacy and the processing of your personal data. You can reach the data protection officer via info@noma.law.

What personal data is processed?

NOMA processes your personal data. This means that we use information that identifies you or can identify you. Depending on the specific situation, the personal data that we process may vary. This may include your personal identification and contact details, your financial situation, your family situation, your criminal or judicial history, your companies and your professional activities. The term "processing" must be understood very broadly and may refer to the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, ... of your personal information.

NOMA also processes image material during the Information Session. This image material includes:

• General atmosphere photos on which participants can be recognised.
• Targeted photos of individual participants.
• Video recordings.

(hereinafter: 'Image Material')

The processing of the Image Material involves the following:

The capture and storage of the Image Material with a camera, smartphone, video camera, ..., for which we ask your consent.

The reuse of the Image Material, such as by publication on the NOMA website, by distribution via social media, by implementation in our marketing content such as company brochures and newsletters, ..., for which we ask your consent.

(hereinafter: 'Processing')

NOMA processes the Image Material only to inform its commercial network about the organisation and progress of the Information Session.

Retention of personal data

Your personal data will only be retained for as long as necessary to achieve the purposes for which these data are used. We provide some examples of retention periods below: Client information is kept for as long as necessary, taking into account the specific situation of the client and the files handled by NOMA for him/her, or as long as required by our legal and ethical obligations. If you are only subscribed to our newsletters, we will store your personal data until you unsubscribe.

Purpose and legal basis of processing personal data

The processing of your personal data must have a lawful purpose and a legal basis. The processing of your personal data is done for, among other things, the following purposes:

• Legal services;
• Implementation of our advice;
• Legal assistance/defence;
• General and financial administration;
• General customer and supplier management, including invoicing;
• Sending our newsletters (direct marketing);
• Sending satisfaction surveys.

Our newsletters are sent via HubSpot. HubSpot will never use your name and email address for its own purposes. At the bottom of every email that is automated via our website, you will see the link to unsubscribe. You will then no longer receive our newsletter. HubSpot uses cookies and other internet technologies that show whether emails are opened and read. HubSpot reserves the right to use your data to further improve the service and to share information with third parties in this context.

We process your personal data on the basis of the following grounds:

• You rely on us pursuant to an agreement (legal services);
• We collect your data in execution of legal obligations such as in the context of anti-money laundering legislation;
• Client or prospect data are collected on the basis of legitimate interest (direct marketing) to keep them informed (new legislation, seminars, new team members...). If desired, clients can unsubscribe via the unsubscribe link.
• For some data, which do not fall under the above grounds, we may ask for your explicit consent.

What rights do I have?

If and to the extent provided for in the applicable Belgian and European regulations, you have the right:

• To access your personal data that we process;
• To correct inaccurate or incomplete personal data;
• To request us to erase your personal data for which there is no longer a valid reason to process it. This right is, however, not absolute;
• To withdraw your consent to process your personal data insofar as the processing of your personal data is based on your consent, provided that this does not affect the lawfulness of the processing of your personal data prior to such withdrawal;
• To obtain, in certain cases, a restriction of the processing of your personal data;
• To receive your personal data in a structured, commonly used and machine-readable format;
• To object to the processing of your personal data and to the use of your personal data for direct marketing purposes; and
• Not to be subject to automated decision-making.

You can exercise the aforementioned rights by mailing us your request, together with a copy of your identity card, to info@noma.law.

Sharing and accessing personal data

Your personal data will initially be used by lawyers affiliated with NOMA or NOMA employees to handle your file. However, in the context of your file, it will sometimes be required to share your personal data with third parties (e.g. court, auditor, notary, ...). In addition, we sometimes have to provide personal data to third parties in the performance of our ethical or legal obligations, or to protect our legitimate interests. We use HubSpot to send our newsletters. If you have subscribed to this, we will pass on your email address via HubSpot to the United States in accordance with the terms of GDPR. In no other case do we pass on your personal data to countries located outside the European Economic Area.

How are your personal data protected?

NOMA has developed appropriate technical and organizational measures, protection measures and safeguards to process your personal data in accordance with applicable Belgian and European regulations, and in particular, without being limited to, to protect your personal data against loss, misuse or unauthorized changes.

Modifications to this Statement

NOMA has the right to modify this Statement at any time. The date of the last modified version is at the top right of the Statement. Modifications are published on our website so that you are always aware of the personal data processed by NOMA. Modified versions of this Statement enter into force ten (10) days after their publication on our website.