Data Protection Policy

Version 1 March 2022

Brussels Family handles your data with the utmost care

Brussels Family, pleased to meet you!

Your family can count on Brussels Family. We support you financially and legally, with quality and professionalism. You are at the heart of everything we do. No matter how much your expectations change, no matter how often your questions change, we will always find an answer that will help you. This allows your family to grow and develop continuously.

Brussels Family wants to give children – and the families who raise them – more chances to thrive and be happy in the world of tomorrow.

Brussels Family attaches great importance to your private life.

For this reason, we are committed to protecting your personal data and ensuring transparency in the processing of your data. The purpose of this Privacy Policy is to explain in detail how we process your personal data. It informs you about the categories of personal data we collect from you as a natural person, the purposes of the processing, the legal basis, the retention periods and the third parties to whom we transfer this data.

Your data is processed in accordance with the following texts:

  • Regulation EU N°2016/679 of the European Parliament and of the Council of 27 April 2016, also known as the General Data Protection Regulation or GDPR
  • The law on the protection of natural persons with regard to the processing of personal data of 30 July 2018
  • The law organising a national register of natural persons of 8 August 1983
  • The Organic Law of 15 January 1990 of the Crossroads Bank for Social Security
  • Article 135 of the Constitution.
  • Ordinance of 4 April 2019 establishing the payment circuit for Family Benefits
  • Ordinance of 25 April 2019 regulating the granting of Family Benefits.

We process your data

We collect and process your personal data as a beneficiary, future beneficiary, but also as a visitor to our website. We collect your data both online and offline. We limit ourselves to the processing and purposes described in this privacy policy.

Services offerings

When you register for one of our services, we ask you to provide personal data limited strictly to what we need to fulfil our legal duties: review your entitlement to child benefit, calculate and pay child benefit, birth allowance and adoption allowance. We cannot pursue any other purpose. These are legal provisions provided for by the ordinance of 4 April 2019 establishing the payment circuit for family benefits and by the ordinance of 25 April 2019 regulating the granting of family benefits.

Your personal details

Personal data is data that relates to you as a natural person or to your children or legal beneficiaries and that allows you to be directly identified.

For the purposes of processing family benefits in the event of:

  • From birth to birth:
    • The identity data of the beneficiary of the premium: surname, first name of the person listed in the National Register of Natural Persons as well as their date of birth, residence permit, nationality
    • The Home Page
    • Your bank details;
    • The identity of the co-parent;
    • Your N°NISS (social security identification number)
    • Data relating to the professional situation of the mother of the child and her spouse or partner.
  • From the application for the adoption bonus:
    • The identity data of the beneficiary of the premium: surname, first name of the person listed in the National Register of Natural Persons and their date of birth
    • The Home Page
    • Nationality and residence permit
    • Administrative and contact data
    • Data relating to your professional situation (employer’s name, retirement status)
    • Data relating to your spouse’s or partner’s professional situation
    • The identification of the child for whom the adoption allowance is requested
    • Documents justifying adoption
    • The designation of the adopter(s)
  • The application for Child Benefits
    • The identity data of the beneficiary of the allowance: Surname, first name, gender, date of birth
    • Residence permit, nationality
    • Related administrative and contact data (address, email, GSM N°, etc.)
    • Your professional situation: retired, disabled at least 66%, employee status or type of contract or social insurance fund
    • The spouse’s professional situation
    • Information on the identity of the child/children for whom the child benefit is paid: surname, first name, date of birth and relationship, disability situation, professional activity
    • Your bank details;
    • The identity of the co-parent;
    • Your NISS (social security identification number)
    • Children in the parent’s household
  • Treatments of the social supplement linked to household income or treatments linked to supplements to child benefit for the disabled parent, the person with long-term illness, the single parent family:
    • The beneficiary’s identity data
    • Data related to the beneficiary’s income
    • Data relating to the income of the spouse or partner with whom the beneficiary forms a de facto household.

Your data may come to us from different sources

  • You as the data source

You provide us with data when you fill out a contact form, request a simulation, initiate a request, send us an email, communicate with us, interact on social media, respond to surveys or call us. You must create an account to use certain Brussels Family services such as JobTeller. They also have their own privacy statement so that you are well informed about how we process this data, even in such situations.

  • Authorities as data source

As part of our legal mission, we also receive data via digital flows, but our employees may also be required to consult data strictly necessary for our missions in official sources via the Crossroads Bank for Social Security, such as the National Register of Individuals, the NSSO or the Family Allowances Registry maintained by the ORIINT.

Data is also transmitted to us by Investment Centres, Ministries, Courts,

the Youth Assistance Service, CPAS, foreign Family Allowance Funds. The collection, processing and use of this data is strictly regulated.

  • SiteWeb

We also receive personal data when you use our website, such as your IP address, browser, mouse clicks, pages and links viewed. You can find more information about the cookies used and how to disable them or opt out of the collection of this data by reading our “Privacy Cookies”.

  • Social media channels

If you log in to our online services via your account on a social network or use the social network functions on our website, you share various basic information about your profile on the social network and certain data about your behaviour on the social network, such as “likes”, via the social network. The shared data depends on your personal settings on the social network. If you do not wish this information to be shared, we recommend that you check your settings on the respective social network and adjust them as required.

Purposes of processing

The basis for the processing of your personal data in the context of family benefits is based on our legal mission, which is based on the following legal texts:

  • Article 135 of the Constitution.
  • Ordinance of 4 April 2019 establishing the payment circuit for Family Benefits
  • Ordinance of 25 April 2019 regulating the granting of Family Benefits.

Your personal data is therefore processed exclusively for the following purposes:

  • The request for family benefits (Article 26 of the Ordinance of 25 April 2019)
  • The needs of calculating and paying family benefits (Article 27 of the Ordinance of 25 April 2019
  • Family supplements
  • Recovery of undue payments (Article 28 of the Ordinance of 25 April 2019).

Other processing is based on:

  • On the legitimate interest in connection with the management and payment of family benefits. This legitimate interest may in particular be justified by security measures (e.g. performance of data backup…) or on control obligations based on our legal mission (Financial control by our supervisory authority) …etc.
  • With your consent
    • In connection with the cookies on our website
    • When you provide us with information to obtain information about family benefits.
    • To promote Brussels Family’s services. We sincerely believe that it may be useful for you as a (future) parent or student that we keep you informed about everything that is happening in the world of child benefit. You decide whether or not you want to use this service. You can object to this or withdraw your consent. You can find out how to do this in the section on your rights in this privacy notice.

Our marketing and your data

With the exception of personal social data, your data may be used to promote Brussels Family’s services. At the bottom of any direct marketing email, you have the option to unsubscribe and thus object to this type of processing. However, we sincerely believe that it may be useful for you as a (future) parent or student that we keep you informed about everything that is happening in the world of child benefit. It is up to you to decide whether or not you wish to use this service. You can find out how to do this in the section on your rights in this privacy notice.

Data retention regulations

  • Retention periods for files that have been closed and have NOT given rise to payment of child benefit (child benefit, birth allowance and adoption bonus) must be retained for five years from the last day of the quarter in which the adoption deed was signed or the child benefit application was submitted or the birth took place.
  • Data in closed files relating to applications for family benefits which have given rise to at least one payment, data in open files, accounting documents and similar documents must, insofar as the limitation period has not been interrupted by the parties concerned, be retained for seven years from 31 December of the year in which the accounts are transferred to the Court of Auditors.
  • However, the retention period may be longer for the exercise of your and our rights.
  • For accounts you create in our online services, we retain your registration data for as long as your account is active or as long as necessary to provide the services to you. With regard to
    the data we have and that is used for marketing purposes, you can simply request deletion. In some cases, you can easily unsubscribe.
  • Find out what your rights are and how you can exercise them in the section “Your rights” of this declaration.

We protect your personal data

Transfer of data to third parties

As part of our legal mission, we are obliged to forward certain information to official bodies such as (indicative list):

  • The Family Allowance Register;
  • To other child benefit funds in the event of transfer of funds by means of patents.
  • If you are a self-employed person and pregnant with your social insurance fund for self-employed persons on the basis of a legitimate interest based on the latter’s legal missions with a view to the granting of service vouchers for maternity support.

This makes it easier for you, as you do not have to retrieve the data and transmit it again yourself. In accordance with the Only-once principle, we want to avoid you having to refill or transmit information that you have provided and that Brussels Family already has.

Within the framework of a contract, your data is shared with our IT service providers for the storage and security of your data.

Our website uses cookies from third parties that may transmit data to them. Further information on the cookies used and how to deactivate or delete them can be found in the “Cookies” section.

In any case, your data will not be shared with third parties without your explicit consent or at your request.

Precautionary statements

The processing of your personal data meets the strict requirements set by the Crossroads Bank for Social Security through minimum security standards (MNM) that are checked and audited annually.

All data is stored on Brussels Family’s secure servers with a third party to whom the above rules apply and with whom Brussels Family has entered into a data processing agreement.

Not all Brussels Family employees have access to your data. Only persons authorised to do so have access to personal data in the context of their work. Our employees are subject to specific confidentiality clauses and rules imposed by the Crossroads Bank for Social Security. They are required to respect the confidentiality of your data and this obligation is a vital element of our employment contracts.

The Brussels Family Data Protection Officer is responsible for the application of the Crossroads Bank for Social Security Regulations and, in particular, for monitoring data security aspects, as well as the security rules imposed on employees.

Brussels Family attaches the utmost importance to the safe handling of your data. For this reason, we use various security technologies and take organisational measures to adequately protect your data against unauthorised access, misuse, loss or disclosure. We have these protective measures checked regularly.

Our website is secure and the data flow when you interact with us is encrypted.

With regard to our online services, Brussels Family ensures secure access for customers and registered users. To access it, the user must prove their identity by means of an identification procedure that only they can apply. The user undertakes to use the service with due care and to make every effort to prevent third parties from accessing identification data that are strictly personal. The user assumes full responsibility for compliance with this identification procedure and for any damage resulting from misuse of the identification procedure. The access codes are for personal use only and cannot be shared with others.

Sub-contractors

In order to be able to offer certain services, we use subcontractors. These are companies carrying out certain tasks on behalf of Brussels Family that directly or indirectly involve personal data. Among other things, we have subcontractors to support us in the areas of IT infrastructure and security, marketing and communication, (digital) archiving and shipping services.

We carefully select our subcontractors and impose strict rules on them in a data processing agreement. In this, we specify, among other things:

  • That they may only process the data in accordance with the task entrusted to them and on the basis of our instructions;
  • That they only have the data they need to complete this task;
  • That they have committed to us to treat this data in a secure and confidential manner.

European Economic Area (EEA)

Brussels Family has no establishment outside Belgium and the personal data that we process in connection with family benefits is subject to a national sovereignty clause that is imposed on our subcontractors.

With regard to the processing of data processed outside the framework of family benefits, if this data were to be processed outside the UK, it would be in accordance with the rules included in Regulation (EU) 2016/679 regarding any export of data outside the EU.

Our website uses cookies from third parties that can transmit data from your browsing. Further information on the cookies used and how to deactivate or delete them can be found in the Privacy Cookies.

Rights of User

As a natural person, the GDPR grants you numerous rights when we process your data.

The right to access your data

Certain data about you can be viewed in your account by accessing our online services. However, if you wish to view the data we process about you in more detail, you can exercise your right of access via the Brussels Family Data Protection Officer.

The right to rectify your data

If any of the information that Brussels Family has about you is incorrect or no longer correct, it is recommended that you correct it. If you have a Brussels Family account, you can change or complete certain personal data yourself. Alternatively, you can contact us to request that we correct or complete the data.

The right to erasure of your data

In some cases, you may have certain personal data deleted or have it deleted. Of course, you cannot delete data that is necessary for the fulfilment of our legal mission. Any request for the right to erasure must be addressed to the Brussels Family Data Protection Officer and the conditions under which this right can be exercised will be communicated to you by the latter.

The right to object to the processing of your data

When Brussels Family processes your personal data for which consent is the basis for the processing, you can withdraw your consent at any time. If you have a Brussels Family account, you can adjust or withdraw your consents yourself.

We carry out certain processing based on a legitimate interest. This means that we carefully weigh up the interests of the data subject against our own and decide that the processing takes place in the interests of the data subject. Brussels Family endeavours to make this assessment as objective as possible. However, if you do not agree to a specific use of certain data in the context of processing based on a legitimate interest, you have the right to object by sending an email to the Brussels Family Data Protection Officer.

The right to restriction of processing

You can request to restrict the use of your data:

  • Time to check the accuracy of the data you dispute,
  • If you object to the erasure of data processed unlawfully by Brussels Family,
  • If you object to the erasure of data that Brussels Family no longer needs but which you need for the establishment, exercise or defence of legal claims,
  • The time to check whether Brussels Family’s legitimate grounds outweigh yours in the event that you object to the processing of these data by invoking your particular situation.

The exercise of this right may not be possible in certain cases for the legal tasks that we perform. In all other cases, Brussels Family will be obliged to limit the processing of these personal data to their storage. Any other processing remains permitted with your consent, or for the establishment, exercise or defence of legal claims or to protect a third party, or for important reasons of public interest. If necessary, MC Brussels Family will inform you before lifting this restriction on processing.

The right to portability of your data

In certain cases, you have the right to request that we transfer the personal data you have provided to us in digital form. However, the regulation of family benefits imposes special forms and the legislation on the protection of privacy provides for several limitations to this right so that it does not apply to all data. If you wish to exercise this right, we will check whether it applies in this case. If you have any questions, you can contact the Brussels Family Data Protection Officer.

The right to object to your data being processedautomatically

Some data processing and procedures are fully automated, without human intervention. If you do not agree with the result of this fully automated procedure, you can contact us. In this way, you can ask one of our employees to intervene or let us know why you dispute this answer.

How to exercise your rights

Would you like to exercise your rights?

The Brussels Family Data Protection Officer is the contact person for Personal Data Protection. Only the Data Protection Officer has the authority to answer you.

  • You can send your request to them:
    • By email to the following address: DPO@brusselsfamily.be
    • Or by post to: Ms. the Data Protection Officer of Brussels Family Chaussée de 637 Marche – 5170 NAMUR-WIERDE
  • Please be specific in your request, so that we can process your request in a concrete and correct way.
  • When exercising a right, we may require you to prove your identity in order to prevent someone else from exercising your rights on your behalf. A copy of the identity card may therefore be requested.

Do you disagree with the position of Brussels Family?

If you do not agree with the response formulated by Brussels Family, you can consult the website of the Data Protection Authority:
https://www.dataprotectionauthority.be and, in this case, to exercise your rights with the said Authority. The address of the Data Protection Authority is: Rue de la Presse, 35, 1000 BRUSSELS