Our privacy statement

Hype­r­i­on Group NV is com­mit­ted to your pri­va­cy and prop­er han­dling of your per­son­al data. We there­fore put every effort to plain­ly and clear­ly explain which per­son­al data we col­lect, what pur­pose they will serve and what your rights are in this respect. 

The ver­sion of this pri­va­cy state­ment (ver­sion: 2025/01) dates from 14/08/2025

1 Who are ​‘we’?

“We” or ​“our” implies Hype­r­i­on Group NV with reg­is­tered office in Veld­kant 35C – 2550 Kon­tich, and with reg­is­tra­tion num­ber BE 0675.561.448.

If you have any ques­tions, com­ments or com­plaints regard­ing this pri­va­cy state­ment or the pro­cess­ing of your per­son­al data, or if you wish to exer­cise any of your rights, please con­tact us by email to dpo@​hyperion.​be.

2 Scope

This pri­va­cy state­ment applies to this web­site, our direct mar­ket­ing activ­i­ties, and the over­all organ­i­sa­tion of HYPE­R­I­ON GROUP NV. 

3 Why and how do we process your personal data?

If you vis­it our web­site and/​or are in con­tact with us, cer­tain per­son­al data may be processed. You will find more infor­ma­tion on the dif­fer­ent pro­cess­ing activ­i­ties that may apply to you below.

3.1 Use of our website

When you vis­it our web­site, we may process per­son­al data using online tech­niques such as cook­ies, track­ers, scripts, and sim­i­lar tech­nolo­gies (here­inafter referred to as ​‘cook­ies’). These may include (1) essen­tial cook­ies that are strict­ly nec­es­sary to send a mes­sage via an elec­tron­ic com­mu­ni­ca­tions net­work, to ensure the secu­ri­ty of our web­site or to store infor­ma­tion about the pro­vi­sion of a ser­vice that you express­ly request­ed; (2) func­tion­al cook­ies that fur­ther shape your use of our web­site; (3) ana­lyt­i­cal cook­ies to mea­sure and analyse your use of our web­site; (4) mar­ket­ing cook­ies to deliv­er (per­son­alised) adver­tise­ments; and (5) oth­er third-par­ty cook­ies that we allow on our website.

For addi­tion­al infor­ma­tion we refer to our cook­ie statement .

3.2 Contact via website

Con­sent — Con­tact forms are avail­able on our web­site to get in touch with us. You can also reach us by email or phone at any time. We process per­son­al data to process your con­tact request but have no vis­i­bil­i­ty or con­trol over any oth­er per­son­al data you may com­mu­ni­cate to us via the open fields. Please do not include any con­fi­den­tial or sen­si­tive data. 

The data are processed with your con­sent. Please know that you can revoke at any time. This revo­ca­tion does not affect the law­ful­ness of the pro­cess­ing that took place before the revo­ca­tion of your consent.

• Which per­son­al data do we process? 
  • Iden­ti­fi­ca­tion and con­tact data
  • Oth­er pos­si­ble vol­un­tar­i­ly shared data in the con­tact form: 
    • Work relat­ed data
    • Par­tic­u­lar per­son­al details
    • …
• How do we acquire the per­son­al data? At first hand when you com­plete our con­tact form.
• How long do we store the data? Up to 1 year after the con­tact request has been com­plet­ed plus the archiv­ing peri­od of relat­ed com­mu­ni­ca­tions (such as emails) 
• With whom do we share the per­son­al data (oth­er than affil­i­at­ed and asso­ci­at­ed com­pa­nies)? Data pro­cess­ing part­ners (cfr. our host­ing part­ner) to whom we appeal for our web­site, con­tact and cus­tomer relations. 
• Do these activ­i­ties include auto­mat­ed indi­vid­ual deci­sion-mak­ing? No
• Are data trans­ferred out­side the EEA? No

3.3 Customer relations management (prospective customers included)

Legit­i­mate inter­est – HYPE­R­I­ON GROUP NV is con­tin­u­al­ly look­ing for new cus­tomers, active­ly estab­lish­ing new con­tacts for this pur­pose and build­ing rela­tion­ships with exist­ing cus­tomers. In this respect, your per­son­al data will be processed (e.g. to invite you to oth­er forms of com­mu­ni­ca­tion, an event…).

The data pro­cess­ing is based on the legit­i­mate inter­est of HYPE­R­I­ON GROUP NV. You can always object to this accord­ing to the terms described under ​‘right to object’ in the sec­tion ​‘What are your rights and how to exer­cise them’. 

• Which per­son­al data do we process?
  • Iden­ti­fi­ca­tion and con­tact data
  • Oth­er pos­si­ble data shared dur­ing sub­se­quent contacts: 
    • Work relat­ed data
    • Leisure and interests
    • Par­tic­u­lar per­son­al details
    • …
• How do we acquire per­son­al data? At first hand from your data via cus­tomer rela­tions management
• How long do we store the data? Up to 7 years after ter­mi­na­tion of a final project or contact.
• With whom do we share the per­son­al data (oth­er than affil­i­at­ed and asso­ci­at­ed com­pa­nies)? Data pro­cess­ing part­ners (cfr. CRM-plat­form) to whom we appeal for our web­site, con­tact or cus­tomer relations.
• Do these activ­i­ties include auto­mat­ed indi­vid­ual deci­sion-mak­ing? No
• Are data trans­ferred out­side the EEA? No

3.4 Newsletter mailing

Con­sent — You can sub­scribe to our newslet­ter via our web­site. We process the col­lect­ed per­son­al data to con­tact you when a new newslet­ter is available.

The data are processed with your con­sent. You can revoke your con­sent any time. This revo­ca­tion does not affect the law­ful­ness of the pro­cess­ing that took place before the revo­ca­tion of your con­sent. This means that your con­sent applies to all pre­vi­ous­ly received newslet­ters but not to future mailings.

• Which per­son­al data do we process? Iden­ti­fi­ca­tion and con­tact data
• How do we acquire per­son­al data? At first hand upon subscription
• How long do we store the data? As long as the con­sent is not revoked
• With whom do we share the per­son­al data (oth­er than affil­i­at­ed and asso­ci­at­ed com­pa­nies)? Data pro­cess­ing part­ners (cfr. our e‑mail plat­form) to whom we appeal for our web­site or newslet­ter editions. 
• Do these activ­i­ties include auto­mat­ed indi­vid­ual deci­sion-mak­ing? No
• Are data trans­ferred out­side the EEA? No

3.5 Organisation of events

Con­sent – When you reg­is­ter for one of our events, per­son­al data are han­dled to process your reg­is­tra­tion and the organ­i­sa­tion of the event.

The data are processed with your con­sent. You can revoke the giv­en con­sent at any time with­out prej­u­dice to the law­ful­ness of the data pro­cess­ing up to the time the revo­ca­tion took place. This means that your con­sent applies for all pre­vi­ous events in which you have already par­tic­i­pat­ed, but you will no longer be invit­ed to events in the future. 

• Which per­son­al data do we process?
  • Iden­ti­fi­ca­tion and con­tact data
  • Oth­er pos­si­ble vol­un­tar­i­ly shared data: 
    • Work relat­ed data
    • Leisure and interests
    • Par­tic­u­lar per­son­al details
    • Dietary pref­er­ences or allergies
    • …
• How do we acquire the data? At first hand upon registration
• How long do we store them? We keep per­son­al data about your par­tic­i­pa­tion for up to 1 year after the event takes place.
• With whom do we share the per­son­al data (oth­er than sub­sidiaries and asso­ci­at­ed com­pa­nies)? Data pro­cess­ing part­ners (cfr. event organ­is­ers, cater­ing, etc.) to whom we appeal to organ­ise and shape our events. 
• Do these activ­i­ties include auto­mat­ed indi­vid­ual deci­sion-mak­ing? No
• Are data trans­ferred out­side the EEA? No

3.6 Recruitment and selection

Con­sent to (spon­ta­neous) appli­ca­tions and to build a recruit­ment pool. 

-Legit­i­mate inter­est for active recruitment – 

When you (spon­ta­neous­ly) apply for a posi­tion at HYPE­R­I­ON GROUP NV, HYPE­R­I­ON GROUP NV process­es your per­son­al data for recruit­ment and selec­tion of employ­ees for open or future vacan­cies. The data are processed (includ­ing build­ing a recruit­ment pool) with your con­sent. You can revoke the giv­en con­sent at any time with­out prej­u­dice to the law­ful­ness of the data pro­cess­ing up to the time the revo­ca­tion took place. 

When HYPE­R­I­ON GROUP NV active­ly recruits, HYPE­R­I­ON GROUP NV process­es your per­son­al data. This only includes the data that are pub­licly avail­able (e.g. LinkedIn and Google plat­forms) or data trans­ferred through third par­ties. This pro­cess­ing is based on the legit­i­mate inter­est of HYPE­R­I­ON GROUP NV. You can always object to this accord­ing to the con­di­tions described under ​“Right to object” in the sec­tion ​“What are your rights and how to exer­cise them”.

Final­ly, we refer to our legit­i­mate inter­est in shar­ing your per­son­al data with our affil­i­at­ed and asso­ci­at­ed com­pa­nies as part of our recruit­ment process. We always pro­ceed with a view to find­ing a suit­able assign­ment for you. You can always object to this accord­ing to the con­di­tions as described under ​‘Right to object’ in the chap­ter ​‘What are your rights and how can you exer­cise them’.

• Which per­son­al data do we process? 
  • Iden­ti­fi­ca­tion and con­tact data
  • Oth­er data pos­si­bly men­tioned on your CV:
    • Per­son­al characteristics
    • Social con­tacts
    • Psy­cho­log­i­cal data (cfr. Per­son­al­i­ty descrip­tion or character)
    • Fam­i­ly composition
    • Leisure activ­i­ties and per­son­al interests 
    • Aca­d­e­m­ic curriculum
    • Pro­fes­sion­al competence
    • Pro­fes­sion­al experience
    • Mem­ber­ship or active par­tic­i­pa­tion in pro­fes­sion­al organisations.
    • Cur­rent position
    • Car­reer
    • Busi­ness records (cfr. (par­tial) incapacity)
    • Cur­rent salary 
    • Cur­rent fringe
    • Social secu­ri­ty number
    • …
• How do we acquire the data? 
  • (Spon­ta­neous) appli­ca­tion: at first hand dur­ing the appli­ca­tion process 
  • Active recruit­ment: via third par­ties such as pub­lic plat­forms or intermediaries. 
• How long do we store them? 
  • Of non-retained appli­cants: we store your per­son­al appli­ca­tion data up to max­i­mum 1 year after your candidacy. 
  • Of recruit­ment pool appli­cants: as long as the con­sent is not revoked, up to 3 years after the candidacy.
• With whom do we share the per­son­al data (oth­er than affil­i­at­ed and asso­ci­at­ed companies)? 
• Data pro­cess­ing part­ners (such as recruit­ment agen­cies) to whom we appeal for recruit­ment and selection.
• Do these activ­i­ties include auto­mat­ed indi­vid­ual deci­sion-mak­ing? No
• Are data trans­ferred out­side the EEA? No

3.7 Supplier relations management (prospective suppliers included)

Legit­i­mate inter­est – HYPE­R­I­ON GROUP NV active­ly estab­lish­es con­tacts with poten­tial sup­pli­ers and solid­i­fies exist­ing part­ner­ships. To this end, our sup­pli­ers process data of co-work­ers (cfr. account managers)

The data pro­cess­ing is based on the legit­i­mate inter­est of HYPE­R­I­ON GROUP NV. You can always object to this accord­ing to the terms described under ​‘right to object’ in the sec­tion ​‘What are your rights and how to exer­cise them’. 

• Which per­son­al data do we process? 
  • Iden­ti­fi­ca­tion and con­tact data
  • Oth­er data pos­si­bly shared dur­ing sub­se­quent contacts:
    • Work relat­ed data
    • Leisure and interests
    • Par­tic­u­lar per­son­al details
    • …
• How do we acquire the data? At first hand via rela­tion management.
• How long do we store them? Up to 7 years after ter­mi­na­tion of a final con­tract or contact.
• With whom do we share the per­son­al data (oth­er than affil­i­at­ed and asso­ci­at­ed com­pa­nies)? Data pro­cess­ing sys­tems (cfr. our CRM-plat­form) which we use for our rela­tion management.
• Do these activ­i­ties include auto­mat­ed indi­vid­ual deci­sion-mak­ing? No
• Are data trans­ferred out­side the EEA? No

3.8 Booking of appointments

Con­sent — On our web­site, you can make appoint­ments through our online appoint­ment book­ing sys­tem. As a result, we process your per­son­al data to organ­ise and han­dle the appointment.

The data are processed with your con­sent. You can revoke the giv­en con­sent at any time with­out prej­u­dice to the law­ful­ness of the data pro­cess­ing up to the time the revo­ca­tion took place. This implies that your con­sent applies to all pre­vi­ous­ly booked appoint­ments and no longer for future appointments. 

• Which data do we process? 
  • Iden­ti­fi­ca­tion and con­tact data
  • Work relat­ed data 
• How do we acquire per­son­al data? At first hand upon sched­ul­ing an appointment. 
• How long do we store them? Tot Up to 1 year after han­dling the con­tact request plus the archiv­ing peri­od of relat­ed com­mu­ni­ca­tion (e.g. emails).
• With whom do we share the per­son­al data (oth­er than affil­i­at­ed and asso­ci­at­ed com­pa­nies)? Data pro­cess­ing part­ners (cfr. our host­ing part­ner) to whom we appeal for the arrange­ment of appointments.
• Do these activ­i­ties include auto­mat­ed indi­vid­ual deci­sion-mak­ing? No
• Are data trans­ferred out­side the EEA? No

3.9 Chatbot

Con­sent – You can inquire and chat with our chat­bot on our web­site. To this end, we process your data to enable communication. 

The data are processed with your con­sent. You can revoke the giv­en con­sent at any time with­out prej­u­dice to the law­ful­ness of the data pro­cess­ing up to the time the revo­ca­tion took place. This implies that your con­sent applies to all pre­vi­ous chats but not to future chats. 

• Which data do we process? 
  • Iden­ti­fi­ca­tion and con­tact data
  • Oth­er data pos­si­bly shared dur­ing the conversation. 
• How do we acquire the per­son­al data? At first hand from your con­ver­sa­tion with the chatbot. 
• How long do we store them? Up to the moment you close your chat plus the archiv­ing peri­od of relat­ed com­mu­ni­ca­tion (e.g. emails).
• With whom do we share the per­son­al data (oth­er than affil­i­at­ed and asso­ci­at­ed com­pa­nies)? Data pro­cess­ing part­ners (cfr. our host­ing part­ner) to whom we appeal to keep our chat­bot available.
• Do these activ­i­ties include auto­mat­ed indi­vid­ual deci­sion-mak­ing? No
• Are data trans­ferred out­side the EEA? No

3.10 Purchasing from our webshop 

Exe­cu­tion of an agree­ment – You can pur­chase dig­i­tal­ly on our web­site. We process your per­son­al data to han­dle your pur­chase (pay­ment includ­ed) and to deliv­er the product/​service. 

The data pro­cess­ing is essen­tial for the exe­cu­tion of the agreement.

• Which per­son­al data do we process?
  • Iden­ti­fi­ca­tion and con­tact data 
  • Finan­cial iden­ti­fi­ca­tion data
  • Finan­cial transactions
• How do we acquire the per­son­al data? First hand dur­ing the pur­chas­ing process.
• How long do we store them? We store per­son­al data for the dura­tion of the pro­cess­ing and ful­fil­ment of your order. Data which we are oblig­ed to store in accor­dance with legal oblig­a­tions, statutes or con­trac­tu­al reten­tion require­ments will be restrict­ed rather than delet­ed to avoid being used for oth­er purposes.
• With whom do we share the per­son­al data (oth­er than affil­i­at­ed and asso­ci­at­ed com­pa­nies)? Data pro­cess­ing part­ners to whom we appeal to han­dle the pur­chase and deliv­ery of your prod­uct / service. 
• Do these activ­i­ties include auto­mat­ed indi­vid­ual deci­sion-mak­ing? No
• Are data trans­ferred out­side the EEA? No

4 Sharing personal data with third parties

When you vis­it our web­site or use our prod­ucts and ser­vices as a cus­tomer, we may use third par­ties, such as part­ners, affil­i­at­ed and asso­ci­at­ed com­pa­nies and sup­pli­ers to whom we trans­fer your per­son­al data as part of this process. The third par­ties help us pro­vide, sup­port, devel­op and under­stand the use of our prod­ucts and ser­vices and pro­vide ser­vices such as host­ing, cus­tomer and tech­ni­cal sup­port, mar­ket­ing, ana­lyt­ics, con­tent deliv­ery and/​or exe­cu­tion of online payment(s), among others.

In addi­tion, we may also share data (includ­ing per­son­al data) with third par­ties as part of a reor­gan­i­sa­tion, restruc­tur­ing, merg­er, sale, or oth­er trans­fer of busi­ness assets. We share infor­ma­tion pro­vid­ed by you, auto­mat­i­cal­ly col­lect­ed infor­ma­tion and infor­ma­tion from oth­ers with the third par­ties to the extent nec­es­sary to enable them to pro­vide their ser­vices or sup­port. In the activ­i­ties described above, we indi­cate for each activ­i­ty the cat­e­gories of third par­ties, oth­er than affil­i­at­ed and asso­ci­at­ed com­pa­nies, with which we share your per­son­al data.

Fur­ther­more, we may have to pro­vide access to your data or trans­fer your data because of a legal oblig­a­tion. This can imply author­i­ties, gov­ern­ment agen­cies or oth­er third parties.

Final­ly, we may share your data if this proves nec­es­sary to your vital interest.

5 Transfer of personal data outside the EEA 

HYPE­R­I­ON GROUP NV always tries to lim­it the trans­fer of per­son­al data to third par­ties out­side the Euro­pean Eco­nom­ic Area (“EEA”). 

Should this nev­er­the­less occur, we will ensure as soon as pos­si­ble that this trans­fer is brought into line with the GDPR (by, among oth­er things, the pres­ence of an ade­qua­cy deci­sion in the coun­try con­cerned or the estab­lish­ment of an appro­pri­ate alter­na­tive, addi­tion­al mea­sures, if nec­es­sary, etc.).

We refer to the sec­tion ​“Why and how do we process your per­son­al data?”) for spe­cif­ic transfers.

6 How Long do We store your Personal Data?

We will not retain your per­son­al data for longer than strict­ly nec­es­sary to ful­fil the pur­pos­es for which the per­son­al data were col­lect­ed or accord­ing to the legal oblig­a­tion imposed on us. We refer to the sec­tion ​“Why and how do we process your per­son­al data?”) for the spe­cif­ic reten­tion period.

7 Automated individual decision-making

Euro­pean data pro­tec­tion leg­is­la­tion (GDPR) impos­es cer­tain con­di­tions on organ­i­sa­tions when they make deci­sions about indi­vid­u­als sole­ly on the basis of pro­cess­ing oper­a­tions that are ful­ly auto­mat­ed, includ­ing pro­fil­ing, and when these deci­sions have legal effects or oth­er sig­nif­i­cant con­se­quences. HYPE­R­I­ON GROUP NV does not engage in this type of decision-making.

8 What are your rights and how to exercise them? 

HYPE­R­I­ON GROUP NV con­sid­ers it impor­tant that you always retain con­trol over the pro­cess­ing of your per­son­al data. Below you will find more infor­ma­tion on the var­i­ous rights you have and can invoke in rela­tion to the pro­cess­ing of your per­son­al data:

Depend­ing on the pro­cess­ing and its legal ground, cer­tain con­di­tions or restric­tions may be attached to the exer­cise of the rights below. 

To exer­cise the afore­men­tioned rights, or infor­ma­tion about them, please con­tact dpo@​hyperion.​be . We will pro­vide more infor­ma­tion if there are cer­tain modal­i­ties asso­ci­at­ed with your request. Fur­ther­more, we may request addi­tion­al infor­ma­tion to ver­i­fy your iden­ti­ty so that your per­son­al data are not erro­neous­ly delet­ed or shared with some­one who is not enti­tled to them. We will endeav­our to respond to your request with­out unrea­son­able delay, but in any event with­in a peri­od of one month from receipt of your request. If we can­not respond with­in one month and wish to extend the dead­line, or if we will not act on the request, we will noti­fy you.

8.1 Right to information and right of access: 

When we process your per­son­al data, you have the right to access your per­son­al data, as well as cer­tain addi­tion­al infor­ma­tion as described in this pri­va­cy state­ment. You have the right to receive from us a copy of the per­son­al data we hold, pro­vid­ed this does not adverse­ly affect the rights and free­doms of oth­ers. The first copy will be pro­vid­ed to you free of charge, but upon repeat­ed request we reserve the right to charge a rea­son­able fee.

8.2 Right to rectification:

If the personal data we hold about you are inaccurate or incomplete, you have the right to have this information corrected or, given the purposes of the processing — completed.

8.3 Right to restriction of processing: 

You have the right to have the pro­cess­ing of your per­son­al data restrict­ed. This means that the per­son­al data may only be stored by us and used only for lim­it­ed pur­pos­es. This right applies if any of the fol­low­ing sit­u­a­tions occur: 

• You dis­pute the accu­ra­cy of the per­son­al data, for a peri­od that allows us to ver­i­fy the accu­ra­cy of the per­son­al data; 
• The pro­cess­ing is unlaw­ful, but you oppose the dele­tion of the per­son­al data and request instead that its use be restricted; 
• We no longer need your per­son­al data for the pro­cess­ing pur­pos­es described above but you need it for the estab­lish­ment, exer­cise, or defence of legal claims; or, 
• You have object­ed to a pro­cess­ing oper­a­tion and request to restrict the pro­cess­ing pend­ing the answer to whether our inter­ests out­weigh yours. 

In addi­tion to our right to store your per­son­al data, we can still process them, but only: 

• With your consent; 
• For insti­tut­ing, exer­cis­ing, or defend­ing legal action; 
• To pro­tect the rights of anoth­er nat­ur­al or legal per­son; or 
• For rea­sons of pub­lic interest. 

Before we lift the restric­tion on pro­cess­ing your per­son­al data, you will be informed about it. 

8.4 Right to data portability:

If the pro­cess­ing of your per­son­al data is based on your con­sent, and the pro­cess­ing is car­ried out through auto­mat­ed process­es, you have the right to receive a copy of your per­son­al data in a struc­tured, com­mon, and machine-read­able form. You also have the right, where tech­ni­cal­ly pos­si­ble, to have your per­son­al data trans­mit­ted direct­ly by us to a third par­ty. This right does not apply where this would infringe the rights and free­doms of others.

8.5 Right to object: 

You have the right to object to the pro­cess­ing of your per­son­al data in the activ­i­ties described above. In the lat­ter case, this is only pos­si­ble if the activ­i­ty is relat­ed to (1) the per­for­mance of a task in the pub­lic inter­est or in the exer­cise of a task in the exer­cise of pub­lic author­i­ty con­ferred on us or (2) the pro­tec­tion of our legit­i­mate inter­ests or those of a third party. 

If you object to the pro­cess­ing of your per­son­al data, we will no longer process the per­son­al data unless we can demon­strate legit­i­mate inter­ests for pro­cess­ing that out­weigh your inter­ests, fun­da­men­tal rights, and freedoms. 

If your per­son­al data are processed for direct mar­ket­ing pur­pos­es, regard­less of whether this is ini­tial or fur­ther pro­cess­ing, you have the right to object to this pro­cess­ing at any time and free of charge, includ­ing in the case of pro­fil­ing inso­far as it relates to direct mar­ket­ing. If you raise such an objec­tion, we will cease to process your per­son­al data for this purpose.

8.6 Right to data erasure (‘right to be forgotten’): 

You have the right to request us to delete your per­son­al data. This means that the per­son­al data must be delet­ed by us with­out unrea­son­able delay. This right applies if any of the fol­low­ing sit­u­a­tions occur: 

• The per­son­al data are no longer nec­es­sary for the pur­pos­es for which they were col­lect­ed or oth­er­wise processed; 
• You with­draw your con­sent on which the pro­cess­ing is based, and there is no oth­er legal basis for pro­cess­ing your per­son­al data; 
• Your per­son­al data have been processed unlawfully; 
• Era­sure of your per­son­al data is nec­es­sary to com­ply with Euro­pean or Bel­gian law; 

If you request to delete your per­son­al data, we will delete the per­son­al data unless any of the fol­low­ing sit­u­a­tions (excep­tions) occur: 

• The pro­cess­ing is part of exer­cis­ing the right to free­dom of expres­sion and information; 
• Dele­tion is not applic­a­ble for the rea­son of gen­er­al inter­est in the domain of pub­lic health; 
• Dele­tion is not applic­a­ble giv­en the need for archiv­ing in the pub­lic inter­est, or sta­tis­ti­cal purposes; 

A legal oblig­a­tion to retain the data applies; or, 

• Dele­tion is not applic­a­ble giv­en the insti­tu­tion, exer­cise, or sub­stan­ti­a­tion of a legal claim. 

8.7 Right to revoke your consent: 

If you have con­sent­ed to cer­tain pro­cess­ing of your per­son­al data, you can with­draw your con­sent at any time. We try to make with­draw­al of con­sent as sim­ple as giv­ing your con­sent pos­si­ble, wher­ev­er possible.

8.8 Right to object to the processing of your personal data in automated individual decision-making:

When your per­son­al data are used in the con­text of auto­mat­ed indi­vid­ual deci­sion-mak­ing and when these deci­sions have legal effects or oth­er sig­nif­i­cant con­se­quences, you can ask us to stop using your data. If you oppose such pro­cess­ing, we will stop or restrict pro­cess­ing unless there are com­pelling rea­sons to do so.

9 Whom to address questions or possible complaints about privacy?

If after read­ing this pri­va­cy state­ment you have fur­ther ques­tions or com­ments regard­ing the col­lec­tion and pro­cess­ing of your per­son­al data, you can always con­tact us at the fol­low­ing e‑mail address: dpo@​hyperion.​be 

In addi­tion, you have the right to sub­mit any com­ments and obser­va­tions or com­plaints to the super­vi­so­ry author­i­ty respon­si­ble for data pro­tec­tion. You can do this in the EU Mem­ber State where you reside, the place where you work or the place where the alleged breach took place. In Bel­gium, you can file a com­plaint with the Data Pro­tec­tion Authority:

Gegevens­bescher­mingsautoriteit (Data Pro­tec­tion Author­i­ty)
Drukpersstraat 35, 1000 Brus­sel
+32 (0)2 274 48 00
https://​www​.dat​apro​tec​tio​nau​thor​i​ty​.be/​c​i​t​i​z​e​n​/​a​c​t​i​o​n​s​/​l​o​d​g​e​-​a​-​c​o​m​p​laint
www.gegevens​bescher​mingsautoriteit​.be

As we are com­mit­ted to our mutu­al rela­tion­ship, we ask you to always con­tact us first so that we can work out a solu­tion to what lies at the root of your complaint.

10 Amendments to the Privacy Statement

Our organ­i­sa­tion and our web­site are a dynam­ic and inno­v­a­tive envi­ron­ment. This pri­va­cy state­ment may be mod­i­fied if our ser­vices or applic­a­ble leg­is­la­tion so require. This means that we are con­stant­ly look­ing to pro­vide a bet­ter ser­vice tai­lored to your needs. It is pos­si­ble that there will be new appli­ca­tions where we will col­lect or process your per­son­al data in a dif­fer­ent way. As a mat­ter of course, we will inform you when there are impor­tant changes to this pri­va­cy state­ment, and we will ask your per­mis­sion if necessary.