Already have an account? Log in now

Privacy Notice

Merchants - Customers - Partners - Suppliers

Privacy Policy

For merchants, customers, partners and suppliers, you will find our privacy policy here.

Users

Privacy Policy

Version 3.4., date of publication October 3, 2023

Edenred Belgium attaches great importance to the protection of the personal data that it has to process as controller in the course of its activities.

The processing covers all operations applied to the data that directly or indirectly helps identify a natural person, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

This document is intended to provide the data subjects with the information required by the applicable regulations and in particular by Regulation (EU)2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation or “GDPR”).

IDENTITY AND CONTACT DETAILS OF THE CONTROLLER

CONTACT DETAILS OF THE DATA PROTECTION OFFICER

Processing for which Edenred Belgium acts as controller

Edenred Belgium, a limited liability company whose registered office is located at 1160 Brussels, Boulevard du Souverain, 165, bte 9 and registered with the Crossroads Bank for Enterprises under number BE 0407.034.269 (hereinafter “Edenred Belgium”), represented by its Chief Executive Officer, Mr Olivier Bouquet, is responsible for the processing of personal data as part of its activities.

The data processing operations are as follows :

  • The management of Edenred Meal ;
  • The management of Edenred Eco ;
  • The management of Edenred Gift ;
  • The management of Edenred Consumption ;
  • The management of Edenred Sport & Culture ;
  • The management of the services Mobility Edenred (hereinafter ‘the Mobility Edenred Services’);
  • The use of the website https://www.myedenred.be (hereinafter the ‘the MyEdenred Website’) and/or the application My Edenred Belgium (hereinafter ‘the MyEdenred Application’) ;
  • The use of the platform accessible online and the application offering, under the Edenred Engagement brand, advantages in the form of price reductions to the staff members of the employers granting access to this platform and the related applications (hereinafter collectively referred to as ‘the Edenred Engagement Platform’ and ‘the Edenred Engagement Application’);
  • The use of the online shop accessible via the site https://eshop.edenred.be allowing beneficiaries of electronic Edenred Gift to make online purchases using them (hereinafter ‘the Online Shop’);
  • The promotion of Edenred Belgium’s products and services ;
  • The promotion of the products and services of third-party partners by Edenred Belgium ;
  • The use of the website https://www.edenred.be (hereinafter collectively referred to as ‘the Edenred Website’), of social networks, and contact not covered by other data processing operations ;
  • Security ;
  • Statistics.

The persons whose personal data are processed by Edenred Belgium in its capacity as controller are hereinafter referred to individually as ‘the User’ or collectively as ‘the Users’.

Processing for which Edenred Belgium acts as processor

Edenred Belgium also processes personal data in the context of:

  • The management of the ALE paper voucher system in the Walloon Region for the FOREM (more information on www.ale-wallonie.be);
  • The management of the ALE paper voucher system in the Brussels-Capital Region for ACTIRIS (more information on www.ale-bruxelles.be);
  • The management of the ALE paper voucher system in the German-speaking Community for ADG (more information on www.adg.be/Iba);
  • The management of the Wijk-werkcheques electronic and paper voucher system in the Flemish Region for the VDAB (more information on vdab.be/wijk- werken);
  • The management of the Opleidingscheques paper voucher system in the Flemish Region for the VDAB (more information on https://www.vdab.be/opleidingscheques/werknemers.shtml);
  • The management of the Loopbaancheques electronic voucher system in the Flemish Region for the VDAB (more information on https://www.vdab.be/loopbaanbegeleiding);
  • The management of the Chèques Taxi paper voucher system for the Brussels- Capital Region (more information on https://mobilite-mobiliteit.brussels/en/getting-around-in-brussels/taxi/taxis-for-everyone);
  • The management of the Chèques Propreté paper voucher system for various municipal administrations.

In this context, Edenred Belgium acts as processor of these authorities, who remain responsible for the processing carried out on their behalf by Edenred Belgium.

Contact details of the Data Protection Officer

Boulevard du Souverain, 165 Box 9 1160 Brussels
Email: dpo.belgium@edenred.com
Tel.: 02/678 28 11 – Fax: 02/678 28 28

Contact

Contact

For any request relating to personal data, and in particular to exercise the rights referred to in Article V below, the User may contact:

Edenred Belgium
Privacy team
Boulevard du Souverain 165, box 9
1160 Brussels
Online form
Tel.: 02/678 28 11 – Fax: 02/678 28 28

Contact forms are also made available to Users via the Help Centre accessible on the Edenred Website, the MyEdenred Website, and the Mobility Edenred Website.

PROCESSING

1. Management of Edenred Meal

  • 1.1. Purpose

    Edenred Belgium processes personal data for purposes relating to the management of electronic meal vouchers published by it, as an authorised publisher, under the brand Edenred Meal (hereinafter ‘Edenred Meal’).

    The management of Edenred meal covers the following:

    • The management of Edenred Meal orders;
    • The publishing of Edenred Meal vouchers and their provision to the beneficiaries of Edenred Meal (hereinafter ‘the Beneficiaries of Edenred Meal’);
    • The provision and activation of the card support allowing beneficiaries to use the Edenred Meal vouchers (hereinafter ‘the Edenred Card’);
    • The notification to the Beneficiaries of Edenred Meal every time the Edenred Meal is loaded, and about the approaching expiry date, the available balance and the transactions made using Edenred Meal;
    • The provision of information regarding the use of the Edenred Meal vouchers to the Beneficiaries of Edenred Meal in electronic form;
    • The secure use of Edenred Meal vouchers including the provision of various means to block the Edenred Card in case of loss or theft;
    • The processing of transactions made using Edenred Meal vouchers following the “first in, first out” principle and reimbursement of merchants affiliated to the Edenred Belgium network who have accepted them as payment.

  • 1.2 Legal basis of the processing

    The processing is necessary to fulfil the obligations undertaken by Edenred Belgium in its capacity as an authorised publisher under:

    • the Royal Decree of 28 November 1969 implementing the Act of 27 June 1969 revising the Decree-Law of 28 December 1944 concerning the social security of workers (Article 19bis) ;
    • the law of 30 December 2009 containing various provisions (Articles 183 to 185) ;
    • the Royal Decree of 12 October 2010 laying down the approval conditions and procedure for publishers of electronic meal vouchers or eco-cheques, implementing Articles 183 to 185 of the law of 30 December 2009 on various provisions.

  • 1.3. Data source

    The personal data concerned are communicated by:

    • the employer when ordering Edenred Meal vouchers for Beneficiaries of Edenred Meal ;
    • the Beneficiaries of Edenred Meal themselves when using the Edenred Meal voucher ;
    • the individuals authorised by the employers to use their Employer Space on the MyEdenred Website or to communicate with Edenred Belgium as part of the management of Edenred Meal vouchers ;
    • the individuals authorised by the merchants affiliated to the Edenred Meal network to use their Merchant Space on the MyEdenred Website or to communicate with Edenred Belgium as part of the management of Edenred Meal vouchers.

  • 1.4. Categories of data processed

    The personal data communicated by the employer concerning Beneficiaries of Edenred Meal include:

    • identification data:
    • necessary data: last name, first name, address, national register number;
    • complementary data: landline and/or mobile phone number, email address ;
    • personal characteristics:
    • necessary data: birth date, birthplace, language ;
    • complementary data: title ;
    • data relating to Edenred Meal vouchers associated with a Beneficiary of Edenred Meal: quantity, face value, validity period, point of distribution/delivery.

    The personal data communicated by the Beneficiaries of Edenred Meal concerning the use of Edenred Meal include :

    • data relating to transactions made using Edenred Meal ;
    • data relating to incidents that may occur while using the Edenred Meal.

  • 1.5. Data recipients

    The personal data are exclusively intended for:

    • the individuals and organisations in direct contact with Edenred Belgium requiring the data as part of the management of Edenred Meal;
    • the employers of the Beneficiaries of Edenred Meal as part of the management of Edenred Meal for members of their staff;
    • the Beneficiaries of Edenred Meal as part of the management of their Edenred Meal vouchers;
    • the authorities that require such data, including the National Social Security Office.

    They are not shared with third parties.

    The processors of Edenred Belgium include:

    • For application development, maintenance and support: EDENRED SE, a company incorporated under French law ;
    • For the hosting of information systems: DXC TECHNOLOGY FRANCE SAS, MICROSOFT FRANCE SAS, two companies incorporated under French law as well as NSI IT SOFTWARE & SERVICES, a company incorporated under Belgian law ;
    • For authorisation of transactions: PREPAY TECHNOLOGIES Ltd, a company incorporated under the laws of the UK ;
    • For manufacturing Edenred Cards: GEMALTO BV, a company incorporated under Dutch law ;
    • For the Card Stop service: WORLDLINE SA, a company incorporated under Belgian law ;
    • For the Customer Service: WENGAGE NV, a company incorporated under Belgian law ;
    • For services communications : SELLIGENT BENELUX SA, a company incorporated under Belgian law.

  • 1.6. Data transfer

    Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

  • 1.7. Decision based exclusively on automated processing, including profiling

    The processing does not involve any decision based exclusively on automated processing, including profiling.

  • 1.8. Retention period

    Personal data are archived, and access is limited as soon as they are no longer required for the management of Edenred Meal.

    Personal data are kept as an intermediate archive for a period of 10 years after the closure of the employer’s file and, in the event of legal proceedings brought during this period, until all legal remedies have been exhausted.

2. Management of Edenred Eco

  • 2.1. Purpose

    Edenred Belgium processes personal data for purposes relating to the management of electronic eco-vouchers published by it, as an authorised publisher, under the brand Edenred Eco (hereinafter ‘Edenred Eco’).

    The management of Edenred Eco eco-vouchers covers the following:

    • The management of Edenred Eco orders ;
    • Publishing Edenred Eco eco-vouchers and providing them to the beneficiaries of Edenred Eco(hereinafter ‘the Beneficiaries of Edenred Eco’) ;
    • The provision and activation of the card support allowing beneficiaries to use the Edenred Eco eco-vouchers (hereinafter ‘the Edenred Card’) ;
    • The notification to the Beneficiaries of Edenred Eco every time the Edenred Eco is loaded, and about the approaching expiry date, the available balance and the transactions made using Edenred Eco ;
    • The provision of information regarding the use of the Edenred Eco vouchers to the Beneficiaries of Edenred Eco in electronic form ;
    • The secure use of Edenred Eco eco-vouchers including the provision of various means to block the Edenred Card in case of loss or theft ;
    • The processing of transactions made using Edenred Eco eco-vouchers following the “first in, first out” principle and reimbursement of merchants affiliated to the Edenred Belgium network who have accepted them as payment.

  • 2.2. Legal basis of the processing

    The processing is necessary to fulfil the obligations undertaken by Edenred Belgium in its capacity as an authorised publisher under:

    • the Royal Decree of 28 November 1969 implementing the Act of 27 June 1969 revising the Decree-Law of 28 December 1944 concerning the social security of workers (Article 19quater);

    and regarding the Edenred Eco electronic eco-vouchers:

    • the law of 30 December 2009 containing various provisions (Articles 183 to 185);
    • the Royal Decree of 12 October 2010 laying down the approval conditions and procedure for publishers of electronic meal vouchers or eco-cheques, implementing Articles 183 to 185 of the law of 30 December 2009 on various provisions.

  • 2.3. Data source

    The personal data concerned are communicated by:

    • The employer when ordering Edenred Eco eco-vouchers for Beneficiaries of Edenred Eco;
    • The Beneficiaries of Edenred Eco themselves when using the Edenred Eco eco-voucher;
    • The individuals authorised by the employers to use their Employer Space on the MyEdenred Website or to communicate with Edenred Belgium as part of the management of Edenred Eco eco-vouchers;
    • The individuals authorised by the merchants affiliated to the Edenred Eco network to use their Merchant Space on the MyEdenred Website or to communicate with Edenred Belgium as part of the management of Edenred Eco eco-vouchers.

  • 2.4. Categories of data processed

    The personal data communicated by the employer concerning Beneficiaries of Edenred Eco include:

    • identification data:
    • necessary data: last name, first name, address, national register number;
    • complementary data: landline and/or mobile phone number, email address;
    • personal characteristics:
    • necessary data: birth date, birthplace, language ;
    • complementary data: title ;
    • data relating to Edenred Eco eco-vouchers associated with a Beneficiary of Edenred Eco: quantity, face value, validity period, point of distribution/delivery.

    The personal data communicated by the Beneficiaries of Edenred Eco concerning the use of Edenred Eco include:

    • data relating to transactions made using Edenred Eco;
    • data relating to incidents that may occur while using the Edenred Eco.

  • 2.5. Data recipients

    The personal data are exclusively intended for:

    • the individuals and organisations in direct contact with Edenred Belgium requiring the data as part of the management of Edenred Eco;
    • the employers of the Beneficiaries of Edenred Eco as part of the management of Edenred Eco for members of their staff;
    • the Beneficiaries of Edenred Eco as part of the management of their Edenred Eco eco-vouchers;
    • the authorities that require such data, including the National Social Security Office.

    They are not shared with third parties.

    The processors of Edenred Belgium include, where appropriate:

    • For application development, maintenance and support: EDENRED SE, a company incorporated under French law ;
    • For the hosting of information systems: DXC TECHNOLOGY FRANCE SAS, MICROSOFT FRANCE SAS, two companies incorporated under French law as well as NSI IT SOFTWARE & SERVICES, a company incorporated under Belgian law ;
    • For authorisation of transactions: PREPAY TECHNOLOGIES Ltd, a company incorporated under the laws of the UK ;
    • For manufacturing Edenred Cards: GEMALTO BV, a company incorporated under Dutch law ;
    • For the Card Stop service: WORLDLINE SA, a company incorporated under Belgian law ;
    • For the Customer Service: WENGAGE NV, a company incorporated under Belgian law ;
    • For services communications : SELLIGENT BENELUX SA, a company incorporated under Belgian law.

  • 2.6. Data transfer

    Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

  • 2.7. Decision based exclusively on automated processing, including profiling

    The processing does not involve any decision based exclusively on automated processing, including profiling.

  • 2.8. Retention period

    Personal data are archived, and access is limited as soon as they are no longer required for the management of Edenred Eco.

    Personal data are kept as an intermediate archive for a period of 10 years after the closure of the employer’s file and, in the event of legal proceedings brought during this period, until all legal remedies have been exhausted.

3. Management of Edenred Gift

  • 3.1. Purpose

    Edenred Belgium processes personal data for purposes relating to the management of electronic vouchers published by it, as an authorised publisher, under the brand Edenred Gift (hereinafter ‘Edenred Gift’).

    The management of Edenred Vouchers covers the following:

    • The management of Edenred Gift orders;
    • Publishing Edenred Gift vouchers and providing them to the beneficiaries of Edenred Gift(hereinafter ‘the Beneficiaries of Edenred Gift’) ;
    • The provision and activation of the card support allowing beneficiaries to use the Edenred Gift vouchers (hereinafter ‘the Edenred Card’) ;
    • The notification to the Beneficiaries of Edenred Gift every time the Edenred Gift is loaded, and about the approaching expiry date, the available balance and the transactions made using Edenred Gift;
    • The provision of information regarding the use of the Edenred Gift vouchers to the Beneficiaries of Edenred Gift in electronic form ;
    • The secure use of Edenred Gift vouchers including the provision of various means to block the Edenred Card in case of loss or theft ;
    • The processing of transactions made using Edenred Vouchers following the “first in, first out” principle and reimbursement of merchants affiliated to the Edenred Belgium network who have accepted them as payment.

  • 3.2. Legal basis of the processing

    The processing is required for the performance of a contract to which the Beneficiaries of electronic Edenred Vouchers , the companies granting them the affiliates of the Edenred Gift and Edenred Belgium are respectively parties or for the execution of pre-contractual measures taken at their request.

  • 3.3. Data source

    The personal data concerned are communicated by:

    • the employer when ordering Edenred Gift voucher for the Beneficiaries of Edenred Gift;
    • the Beneficiaries of Edenred Gift themselves when using the Edenred Gift voucher ;
    • the individuals authorised by the companies granting the Edenred Vouchers to use their Employer Space on the MyEdenred Website or to communicate with Edenred Belgium as part of the management of Edenred Vouchers ;
    • the individuals authorised by the merchants affiliated to the Edenred Gift network to use their Merchant Space or to communicate with Edenred Belgium as part of the management of Edenred Vouchers .

  • 3.4. Categories of data processed

    The personal data communicated by the employer concerning Beneficiaries of Edenred Gift include:

    • identification data:
    • necessary data: last name, first name, address, national register number ;
    • complementary data: landline and/or mobile phone number, email address ;
    • personal characteristics:
    • necessary data: birth date, birthplace, language ;
    • complementary data: title ;
    • data relating to the Edenred Vouchers associated with a Beneficiary of Edenred Gift: quantity, face value, validity period, point of distribution/delivery.

    The personal data communicated by the Beneficiaries of Edenred Gift concerning the use of Edenred Gift include:

    • data relating to transactions made using Edenred Gift;
    • data relating to incidents that may occur while using the Edenred Gift.

  • 3.5. Data recipients

    The personal data are exclusively intended for:

    • the individuals and organisations in direct contact with Edenred Belgium requiring the data as part of the management of electronic Edenred Vouchers ;
    • the companies offering Edenred Vouchers as part of the management of Edenred Gift for members of their staff or their business relations ;
    • the Beneficiaries of electronic Edenred Vouchers as part of the management of their Edenred Vouchers ;
    • the authorities that require such data, including the National Social Security Office.

    They are not shared with third parties.

    The processors of Edenred Belgium include:

    • For application development, maintenance and support: EDENRED SE, a company incorporated under French law ;
    • For the hosting of information systems: DXC TECHNOLOGY FRANCE SAS, MICROSOFT FRANCE SAS, two companies incorporated under French law as well as NSI IT SOFTWARE & SERVICES, a company incorporated under Belgian law ;
    • For authorisation of transactions: PREPAY TECHNOLOGIES Ltd, a company incorporated under the laws of the UK ;
    • For manufacturing Edenred Cards: GEMALTO BV, a company incorporated under Dutch law ;
    • For the Card Stop service: WORLDLINE SA, a company incorporated under Belgian law ;
    • For the Customer Service: WENGAGE NV, a company incorporated under Belgian law ;
    • For services communications : SELLIGENT BENELUX SA, a company incorporated under Belgian law.

  • 3.6. Data transfer

    Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

  • 3.7. Decision based exclusively on automated processing, including profiling

    The processing does not involve any decision based exclusively on automated processing, including profiling.

  • 3.8. Retention period

    Personal data are archived, and access is limited as soon as they are no longer necessary for the management of Edenred Gift. Personal data are kept as an intermediate archive for a period of 10 years after the closure of the employer’s granting Edenred Gift’s file and, in the event of legal proceedings brought during this period, until all legal remedies have been exhausted.

4. Management of Edenred Consumption

  • 4.1. Purpose

    Edenred Belgium processes personal data for purposes relating to the management of consumption vouchers published by it, as an authorised publisher, under the brand Edenred Consumption (hereinafter ‘Edenred Consumption’).

    The management of Edenred Consumption vouchers covers the following:

    • The management of Edenred Consumption orders;
    • Publishing Edenred Consumption vouchers and providing them to the beneficiaries of Edenred Consumption (hereinafter ‘the Beneficiaries of Edenred Consumption’) ;
    • The provision and activation of the card support allowing beneficiaries to use the Edenred Consumption vouchers (hereinafter ‘the Edenred Card’) ;
    • The notification to the Beneficiaries of Edenred Consumption every time the Edenred Consumption is loaded, and about the approaching expiry date, the available balance and the transactions made using Edenred Consumption;
    • The provision of information regarding the use of the Edenred Consumption vouchers to the Beneficiaries of Edenred Consumption in electronic form ;
    • The secure use of Edenred Consumption including the provision of various means to block the Edenred Card in case of loss or theft ;
    • The processing of transactions made using Edenred Consumption vouchers following the “first in, first out” principle and the reimbursement of merchants affiliated to the Edenred Belgium network who have accepted them as payment.

  • 4.2. Legal basis of the processing

    The processing is required for the performance of a contract to which the Beneficiaries of Edenred Consumption vouchers, the companies granting them the affiliates of the Edenred Consumption and Edenred Belgium are respectively parties or for the execution of pre-contractual measures taken at their request.

  • 4.3. Data source

    The personal data concerned are communicated by:

    • the employer when ordering Edenred Consumption voucher for the Beneficiaries of Edenred Consumption;
    • the Beneficiaries of Edenred Consumption themselves when using the Edenred Consumption voucher ;
    • the individuals authorised by the companies granting the Edenred Consumption vouchers to use their Employer Space on the MyEdenred Website or to communicate with Edenred Belgium as part of the management of Edenred Consumption vouchers ;
    • the individuals authorised by the merchants affiliated to the Edenred Consumption network to use their Merchant Space or to communicate with Edenred Belgium as part of the management of Edenred Consumption vouchers.

  • 4.4. Categories of data processed

    The personal data communicated by the employer concerning Beneficiaries of Edenred Consumption include:

    • identification data:
    • necessary data: last name, first name, address, national register number;
    • complementary data: landline and/or mobile phone number, email address;
    • personal characteristics:
    • necessary data: birth date, birthplace, language ;
    • complementary data: title ;
    • data relating to the Edenred Consumption vouchers associated with a Beneficiary of Edenred Consumption: quantity, face value, validity period, point of distribution/delivery.

    The personal data communicated by the Beneficiaries of Edenred Consumption concerning the use of Edenred Consumption include:

    • data relating to transactions made using Edenred Consumption;
    • data relating to incidents that may occur while using the Edenred Consumption.

  • 4.5. Data recipients

    The personal data are exclusively intended for:

    • the individuals and organisations in direct contact with Edenred Belgium requiring the data as part of the management of Edenred Consumption vouchers ;
    • the companies offering Edenred Consumption vouchers as part of the management of Edenred Consumption for members of their staff or their business relations ;
    • the Beneficiaries of electronic Edenred Consumption vouchers as part of the management of their Edenred Consumption vouchers ;
    • the authorities that require such data, including the National Social Security Office.

    They are not shared with third parties.

    The processors of Edenred Belgium include:

    • For application development, maintenance and support: EDENRED SE, a company incorporated under French law ;
    • For the hosting of information systems: DXC TECHNOLOGY FRANCE SAS, MICROSOFT FRANCE SAS, two companies incorporated under French law as well as NSI IT SOFTWARE & SERVICES, a company incorporated under Belgian law ;
    • For authorisation of transactions: PREPAY TECHNOLOGIES Ltd, a company incorporated under the laws of the UK ;
    • For manufacturing Edenred Cards: GEMALTO BV, a company incorporated under Dutch law ;
    • For the Card Stop service: WORLDLINE SA, a company incorporated under Belgian law ;
    • For the Customer Service: WENGAGE NV, a company incorporated under Belgian law ;
    • For services communications : SELLIGENT BENELUX SA, a company incorporated under Belgian law.

  • 4.6. Data transfer

    Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

  • 4.7. Decision based exclusively on automated processing, including profiling

    The processing does not involve any decision based exclusively on automated processing, including profiling.

  • 4.8. Retention period

    Personal data are archived, and access is limited as soon as they are no longer necessary for the management of Edenred Consumption.

    Personal data are kept as an intermediate archive for a period of 10 years after the closure of the employer’s granting Edenred Consumption’s file and, in the event of legal proceedings brought during this period, until all legal remedies have been exhausted.

5. Management of Edenred Sport & Culture

  • 5.1. Purpose

    Edenred Belgium processes personal data for purposes relating to the management of electronic vouchers published by it, as an authorised publisher, under the brand Edenred Sport & Culture (hereinafter ‘Edenred Sport & Culture ’).

    The management of Edenred Sport & Culture vouchers covers the following:

    • The management of Edenred Sport & Culture orders;
    • Publishing Edenred Sport & Culture vouchers and providing them to the beneficiaries of Edenred Sport & Culture (hereinafter ‘the Beneficiaries of Edenred Sport & Culture ’) ;
    • The provision and activation of the card support allowing beneficiaries to use the Edenred Sport & Culture vouchers (hereinafter ‘the Edenred Card’) ;
    • The notification to the Beneficiaries of Edenred Sport & Culture every time the Edenred Sport & Culture is loaded, and about the approaching expiry date, the available balance and the transactions made using Edenred Sport & Culture ;
    • The provision of information regarding the use of the Edenred Sport & Culture vouchers to the Beneficiaries of Edenred Sport & Culture in electronic form ;
    • The secure use of Edenred Sport & Culture vouchers including the provision of various means to block the Edenred Card in case of loss or theft ;
    • The processing of transactions made using Edenred Sport & Culture vouchers following the “first in, first out” principle and reimbursement of merchants affiliated to the Edenred Belgium network who have accepted them as payment.

  • 5.2. Legal basis of the processing

    The processing is required for the performance of a contract to which the Beneficiaries of electronic Edenred Sport & Culture vouchers , the companies granting them the affiliates of the Edenred Sport & Culture and Edenred Belgium are respectively parties or for the execution of pre-contractual measures taken at their request.

  • 5.3. Data source

    The personal data concerned are communicated by:

    • the employer when ordering Edenred Sport & Culture gift voucher for the Beneficiaries of Edenred Sport & Culture ;
    • the Beneficiaries of Edenred Sport & Culture themselves when using the Edenred Sport & Culture voucher ;
    • the individuals authorised by the companies granting the Edenred Sport & Culture vouchers to use their Employer Space on the MyEdenred Website or to communicate with Edenred Belgium as part of the management of Edenred Sport & Culture vouchers ;
    • the individuals authorised by the merchants affiliated to the Edenred Sport & Culture network to use their Merchant Space or to communicate with Edenred Belgium as part of the management of Edenred Sport & Culture vouchers .

  • 5.4. Categories of data processed

    The personal data communicated by the employer concerning Beneficiaries of Edenred Sport & Culture include:

    • identification data:
    • necessary data: last name, first name, address, national register number ;
    • complementary data: landline and/or mobile phone number, email address ;
    • personal characteristics:
    • necessary data: birth date, birthplace, language ;
    • complementary data: title ;
    • data relating to the Edenred Sport & Culture vouchers associated with a Beneficiary of Edenred Sport & Culture : quantity, face value, validity period, point of distribution/delivery.

    The personal data communicated by the Beneficiaries of Edenred Sport & Culture concerning the use of Edenred Sport & Culture include:

    • data relating to transactions made using Edenred Sport & Culture ;
    • data relating to incidents that may occur while using the Edenred Sport & Culture .

  • 5.5. Data recipients

    The personal data are exclusively intended for:

    • the individuals and organisations in direct contact with Edenred Belgium requiring the data as part of the management of electronic Edenred Sport & Culture vouchers ;
    • the companies offering Edenred Sport & Culture vouchers as part of the management of Edenred Sport & Culture for members of their staff ;
    • the Beneficiaries of electronic Edenred Sport & Culture vouchers as part of the management of their Edenred Sport & Culture vouchers ;
    • the authorities that require such data, including the National Social Security Office.

    They are not shared with third parties.

    The processors of Edenred Belgium include:

    • For application development, maintenance and support: EDENRED SE, a company incorporated under French law ;
    • For the hosting of information systems: DXC TECHNOLOGY FRANCE SAS, MICROSOFT FRANCE SAS, two companies incorporated under French law as well as NSI IT SOFTWARE & SERVICES, a company incorporated under Belgian law ;
    • For authorisation of transactions: PREPAY TECHNOLOGIES Ltd, a company incorporated under the laws of the UK ;
    • For manufacturing Edenred Cards: GEMALTO BV, a company incorporated under Dutch law ;
    • For the Card Stop service: WORLDLINE SA, a company incorporated under Belgian law ;
    • For the Customer Service: WENGAGE NV, a company incorporated under Belgian law ;
    • For services communications : SELLIGENT BENELUX SA, a company incorporated under Belgian law.

  • 5.6. Data transfer

    Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

  • 5.7. Decision based exclusively on automated processing, including profiling

    The processing does not involve any decision based exclusively on automated processing, including profiling.

  • 5.8. Retention period

    Personal data are archived, and access is limited as soon as they are no longer necessary for the management of Edenred Sport & Culture .

    Personal data are kept as an intermediate archive for a period of 10 years after the closure of the employer’s granting Edenred Sport & Culture ’s file and, in the event of legal proceedings brought during this period, until all legal remedies have been exhausted.

6. The use of MyEdenred Website and/or MyEdenred App

  • 6.1. Purpose

    Edenred Belgium processes the personal data of Users of the MyEdenred Website and/or the MyEdenred Application in order to enable the User to create a personal account that gives him access to the balance of Edenred Meal and/or Edenred Eco and/or Edenred Gift from which he benefits as well as to the history of transactions made using his Edenred Card (hereinafter ‘the MyEdenred Personal Account’). The User can manage his Edenred Card there and in particular block it in the event of loss or theft as well as manage his profile and rectify, if necessary, his personal data.

    The MyEdenred Website and the MyEdenred Application also allow Users to locate affiliates accepting the Edenred Card as payment and to benefit from the promotional offers displayed on it.

    In addition, the MyEdenred Website allows the User, if he/she consents, to receive promotional communications.

  • 6.2. Legal basis of the processing

    This processing is based on the User’s prior consent given by registering on the MyEdenred Website and/or through the MyEdenred Application.

    The use of the MyEdenred Website and/or the MyEdenred Application is in no way subject to the acceptance of any form of promotional communication.

    The User has the right to unsubscribe and therefore delete his MyEdenred Personal Account at any time, by contacting Edenred Belgium.

    The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Prior to giving consent, the data subject shall be informed thereof.

  • 6.3. Data source

    The personal data concerned are communicated by the Users of the MyEdenred Website and/or the MyEdenred Application when registering and using the MyEdenred Website and/or the MyEdenred Application.

  • 6.3.1. Categories of data processed

    The personal data communicated by the Users of the MyEdenred Website and/or the MyEdenred Application include, as the case may be:

    • identification data: last name, first name, address, landline and/or mobile number, email address, username, password;
    • personal characteristics: birth date, title, language;
    • electronic identification data: IP addresses, cookies;
    • data relating to the behaviour and habits of Users when using the MyEdenred Website and/or the MyEdenred Application;
    • data relating to incidents that may occur while using the MyEdenred Website and/or the MyEdenred Application.

  • 6.4. Data recipients

    The personal data are exclusively intended for:

    • the individuals and organisations in direct contact with Edenred Belgium requiring the data to manage the MyEdenred Website and/or the MyEdenred Application;
    • the Users of the MyEdenred Website and/or the MyEdenred Application;
    • the authorities that require such data, including the National Social Security Office.

    They are not shared with third parties.

    The processors of Edenred Belgium include:

    • For application development, maintenance and support: EDENRED SE, a company incorporated under French law ;
    • For the hosting of information systems: DXC TECHNOLOGY FRANCE SAS, MICROSOFT FRANCE SAS, two companies incorporated under French law as well as NSI IT SOFTWARE & SERVICES, a company incorporated under Belgian law ;
    • For the Help Centre: PREMIUM PLUS SPRL, a company incorporated under Belgian law ;
    • For the Customer Service: WENGAGE NV, a company incorporated under Belgian law ;
    • For services communications : SELLIGENT BENELUX SA, a company incorporated under Belgian law.

  • 6.5. Data transfer

    Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

  • 6.6. Decision based exclusively on automated processing, including profiling

    The processing does not involve any decision based exclusively on automated processing, including profiling.

  • 6.7. Retention period

    Personal data are archived, and access is limited as soon as the User unsubscribes.

    Personal data are kept as an intermediate archive for a period of 10 years after the closure of the employer’s and, in the event of legal proceedings brought during this period, until all legal remedies have been exhausted.

7. The use of the Edenred Engagement Platform and/or Application

  • 7.1. Purpose

    Edenred Belgium processes the personal data of the Users of the Edenred Engagement Platform (hereinafter ‘the Edenred Engagement Platform’)and/or the Edenred Engagement Applications (hereinafter ‘the Edenred Engagement Applications’) for purposes relating to the management of the Edenred Engagement Platform and/or the Edenred Engagement Applications, accessible online and allowing the Users of the Edenred Engagement Platform and/or Applications to create a personal account that gives them access to benefits in the form of price reductions offered by the Edenred Engagement Platform.

    Registration allows the User to manage his profile and to access the history of transactions carried out using his account on the Edenred Engagement Platform (hereinafter ‘the Edenred Engagement Personal Account’).

    In addition, the Edenred Engagement Platform and/or the Edenred Engagement Applications allows the User, to receive benefits in the form of price reductions, promotional communications from Edenred Belgium and/or merchants affiliated to the Edenred Engagement network and to participate in competitions via the Edenred Engagement Platform and/or the Edenred Engagement Applications.

  • 7.2 Legal basis of the processing

    Purpose Legal basis
    To manage the Edenred Engagement Platform and/or the Applications, and in particular, to manage its access and display benefits in the form of price reductions. The processing is necessary for the performance of a contract to which the Users of the Edenred Engagement Platform and/or Applications, the companies granting access to it, the affiliates of the Edenred Engagement network and Edenred Belgium are respectively parties or for the performance of pre-contractual measures taken at their request.
    To manage your Edenred Engagement Personal Account. The processing is necessary for the performance of a contract to which the Users of the Edenred Engagement Platform and/or Applications, the companies granting access to it, the affiliates of the Edenred Engagement network and Edenred Belgium are respectively parties or for the performance of pre-contractual measures taken at their request.
    To execute the contracts to which you are a party whose object is the purchase of products and/or services such as vouchers and/or admission tickets, which may be personalised on the basis of the data provided. The processing is necessary for the performance of a contract to which the Users of the Edenred Engagement Platform and/or Applications, the companies granting access to it, the affiliates of the Edenred Engagement network and Edenred Belgium are respectively parties or for the performance of pre-contractual measures taken at their request.
    To receive information regarding the use of the Edenred Engagement Platform and/or Applications. The processing is necessary for the performance of a contract to which the Users of the Edenred Engagement Platform and/or Applications, the companies granting access to it, the affiliates of the Edenred Engagement network and Edenred Belgium are respectively parties or for the performance of pre-contractual measures taken at their request.
    To manage the related discount program. The processing is necessary for the performance of a contract to which the Users of the Edenred Engagement Platform and/or Applications, the companies granting access to it, the affiliates of the Edenred Engagement network and Edenred Belgium are respectively parties or for the performance of pre-contractual measures taken at their request.
    To receive promotional communications from Edenred Belgium regarding the affiliates of the Edenred Engagement network such as newsletters, where appropriate. Your prior consent is required for processing. You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of the processing based on the consent performed prior to such withdrawal.
    To participate in contests offered by the Edenred Engagement network affiliates on the Edenred Engagement Platform and/or Application. Your prior consent is required for processing. You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of the processing based on the consent performed prior to such withdrawal.

  • 7.3. Data source

    The concerned personal data shall be communicated by :

    • the employer when he grants members of his staff access to the Edenred Engagement Platform;
    • the User of the Edenred Engagement Platform and/or the Edenred Engagement Applications when registering and when using the Edenred Engagement Platform and/or the Edenred Engagement Application.

  • 7.4. Categories of data processed

    The personal data communicated by the employer regarding the Users having access to the Edenred Engagement Platform are, where applicable :

    • identification data: last name, first name ;
    • personal characteristics: title;
    • characteristics related to the granting of the benefit: date of entry, date of exit, language, professional email address, activation code.

    The personal data communicated by the Users of the Edenred Engagement Platform and/or the Edenred Engagement Application are, where applicable :

    • identification data: address, phone number (landline or mobile), personal email address, login, password ;
    • personal characteristics: date of birth ;
    • electronic identification data: IP addresses, cookies;
    • data relating to transactions carried out on the Edenred Engagement Platform ;
    • data relating to the behaviour and habits of the Users when using the Edenred Engagement Platform and/or the Edenred Engagement Applications ;
    • data relating to incidents that may occur during their use of the Edenred Engagement Platform and/or the Edenred Engagement Applications.

  • 7.5. Data recipients

    The personal data are exclusively intended for:

    • the individuals and organisations in direct contact with Edenred Belgium requiring these data within the framework of the management of the orders placed on the Edenred Engagement Platform and/or the Edenred Engagement Application ;
    • the Users of the Edenred Engagement Platform and/or the Edenred Engagement Application within the framework of the management of their orders and/or their participation in competitions ;
    • the authorities that require such data.

    The data are not shared with third parties. The processors of Edenred Belgium are :

    • For application development and support, including archiving purposes, Encima BV, a company incorporated under Belgian law ;
    • For the hosting of the information systems : Level27 BV, a company incorporated under Belgian law ;
    • For contest management Qualifio SA, a company incorporated under Belgian law ;
    • For Edenred Belgium’s communications : SELLIGENT BENELUX SA company incorporated under Belgian law.

  • 7.6. Data transfer

    Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

  • 7.7. Decision based exclusively on automated processing, including profiling

    The processing does not involve any decision based exclusively on automated processing, including profiling.

  • 7.8. Retention period

    Personal data are archived, and their access is restricted as soon as the User of the Edenred Engagement Platform and/or the Edenred Engagement Applications unsubscribes from the Edenred Engagement Platform and, where applicable, from the Edenred Engagement Applications.

    The concerned personal data are archived and access to it is limited, when they are not necessary for the management of the Edenred EngagementPlatform and/or the Edenred Engagement Applications, as soon as the User withdraws his consent when the processing is based on consent.

    Personal data are kept as an intermediate archive for a period of 10 years after the closure of the employer’s file and, in the event of legal proceedings brought during this period, until all legal remedies have been exhausted.

    For the marketing purposes, personal data are stored for a period of 2 years after the last interaction from the User. At the end of the 2 years period, the data will be deleted.

8. The use of the Online Shop

  • 8.1. Purpose

    Edenred Belgium processes personal data for purposes relating to the management of orders made in its Online Shop accessible via the https://eshop.edenred.be website enabling beneficiaries of electronic Edenred Gift to make online purchases using them (hereinafter ‘the Online Shop’).

    The management of orders covers in particular the following aspects:

    • The sending of a confirmation e-mail, summary of the order ;
    • The sending of an e-mail informing the User of the possible unavailability of a product ordered and the option offered to him to choose a similar product or to cancel his order and obtain a refund of the corresponding price ;
    • The processing of the transactions carried out and the possible refund of the Users, including in case of withdrawal ;
    • The delivery of the ordered products ;
    • The management related to the exercise by the User of his possible right of retraction ;
    • The after-sales service, and in particular the management of the guarantee of conformity, if necessary, offered to the User ;
    • The archiving of purchase orders and invoices ;
    • The optimisation of navigation in the Online Shop.

  • 8.2. Legal basis of the processing

    The processing is necessary for the performance of a contract to which the User of the Online Shop and Edenred Belgium are respectively parties or for the performance of pre-contractual measures taken at the User’s request.

  • 8.3. Data source

    The personal data concerned are communicated by the Users of the Online Shop.

  • 8.4. Categories of data processed

    • The personal data communicated by the User of the Online Shop are, where applicable :
    • identification data: last name, first name, phone number (landline or mobile), email address ;
    • personal characteristics: title ;
    • electronic identification data: IP addresses, cookies ;
    • data relating to transactions carried out on the Online Shop and in particular the delivery address (street, number and box, company, postcode and town) and the billing address (title, first name, surname, street, number and box, postcode and town) ;
    • data relating to the behaviour and habits of the Users when using the Online Shop ;
    • data relating to incidents that may occur during their use of the Online Shop or the ordered products.

  • 8.5. Data recipients

    The personal data are exclusively intended for:

    • the individuals and organisations in direct contact with Edenred Belgium requiring these data within the framework of the management of the orders placed on the Online Shop ;
    • the Users of the Online Shop within the framework of the management of their orders ;
    • the authorities that require such data.

    The data are not shared with third parties. The processors of Edenred Belgium are :

    • For application development, maintenance and support: EDENRED SE, a company incorporated under French law ;
    • For the hosting of information systems: DXC TECHNOLOGY FRANCE SAS, MICROSOFT FRANCE SAS, two companies incorporated under French law as well as NSI IT SOFTWARE & SERVICES, a company incorporated under Belgian law.

  • 8.6. Data transfer

    Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

  • 8.7. Decision based exclusively on automated processing, including profiling

    The processing does not involve any decision based exclusively on automated processing, including profiling.

  • 8.8. Retention period

    Personal data are kept as an intermediate archive for a period of 10 years after the User’s order and, in the event of legal proceedings brought during this period, until all legal remedies have been exhausted. The personal data are archived, and their access is restricted as soon as it is no longer necessary for the execution of the User’s order.

9. The promotion of Edenred Belgium's products and services

  • 9.1. Purpose

    Edenred Belgium processes the personal data of Users of the MyEdenred Website and/or the MyEdenred Application and/or the Edenred Engagement Platform and/or the Edenred Engagement Applications to promote its own products and/or services.

  • 9.2. Legal basis of the processing

    This processing is based on the User’s consent that he gives in advance by checking the opt-in box specifically dedicated to such processing.

    The use of the Edenred Meal, the Edenred Eco, the Edenred Gift, the Edenred Sport & Culture, the MyEdenred Website, the MyEdenred Application, the Edenred Engagement Platform, the Edenred Engagement Applications is in no way subject to the acceptance of any form of promotional communication.

    The User has the right to withdraw his consent at any time.

    The process to withdraw consent is similar as giving consent, ensuring an easy and direct access to the user. To withdraw his consent, the User may simply uncheck (opt-out) the checkbox used to confirm his consent. This checkbox is in his/her MyEdenred/Edenred Engagement Personal Account provided for customers on the MyEdenred/Edenred Engagement Website where a User can manage his/her account.

    The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Prior to giving consent, the data subject shall be informed thereof.

    An unsubscribe link is included in each electronic communication sent to the User.

  • 9.3. Data source

    The personal data concerned are communicated by the Users of the MyEdenred Website and/or the MyEdenred Application and/or the Edenred Engagement Platform and/or the Edenred Engagement Application when registering and using the MyEdenred Website and/or the MyEdenred Application and/or the Edenred Engagement Platform and/or the Edenred Engagement Applications.

  • 9.4. Categories of data processed

    The personal data communicated by the Users of the MyEdenred Website and/or the MyEdenred Application and/or the Edenred Engagement Platform and/or the Edenred Engagement Applications includes, as the case may be:

    • identification data: last name, first name, address, landline and/or mobile number, email address, username, password ;
    • personal characteristics: birth date, title, language ;
    • electronic identification data: IP addresses, cookies ;
    • data relating to the behaviour and habits of Users when using the MyEdenred Website and/or the MyEdenred Application and/or the Edenred Engagement Platform and/or the Edenred Engagement Application ;
    • data relating to incidents that may occur while using the MyEdenred Website and/or the MyEdenred Application and/or the Edenred Engagement Platform and/or the Edenred Engagement Application.

    These information are available for the management of the Edenred Engagement benefit but won’t be processed in the activity of promotion of Edenred’s products and services. Data that will be processed in this specific activity :

    • identification data: last name, first name, email address;
    • data related to consent : marketing preferences ;

  • 9.5. Data recipients

    The personal data are exclusively intended for:

    • the individuals and organisations in direct contact with Edenred Belgium requiring the data to promote the products and/or services of Edenred Belgium ;
    • the Users of the MyEdenred Website and/or the MyEdenred Application and/or the Edenred Engagement Platform and/or the Edenred Engagement Application ;
    • the authorities that require such data.

    They are not shared with third parties.

    The processors of Edenred Belgium include:

    • For application development, maintenance and support: EDENRED SE, a company incorporated under French law ;
    • For the hosting of information systems: DXC TECHNOLOGY FRANCE SAS, MICROSOFT FRANCE SAS, two companies incorporated under French law as well as NSI IT SOFTWARE & SERVICES, a company incorporated under Belgian law ;
    • For the Help Centre: PREMIUM PLUS SPRL, a company incorporated under Belgian law ;
    • For the Customer Service: WENGAGE NV, a company incorporated under Belgian law ;
    • For promotional communications : SELLIGENT BENELUX SA, a company incorporated under Belgian law.

  • 9.6. Data transfer

    Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

  • 9.7. Decision based exclusively on automated processing, including profiling

    The processing does not involve any decision based exclusively on automated processing, including profiling.

  • 9.8. Retention period

    Personal data are deleted, and access is limited as soon as the User withdraws his consent to the processing by Edenred Belgium of his personal data to promote the products and/or services.

    In other cases, personal data are stored for a period of 2 years after the last interaction from the User. At the end of the 2 years period, the data will be deleted.

10. The promotion of the products and services of third-party partners by Edenred Belgium

  • 10.1. Purpose

    Edenred Belgium processes the personal data of Users of the MyEdenred Website and/or the MyEdenred Application and/or the Online Shop to promote the products and/or services of third-party partners.

  • 10.2. Legal basis of the processing

    This processing is based on the User’s consent that he gives in advance by checking the opt-in box specifically dedicated to such processing.

    The use of the Edenred Meal, the Edenred Eco, the Edenred Gift, the Edenred Sport & Culture , the MyEdenred Website, the MyEdenred Application and the Online Shop is in no way subject to the acceptance of any form of promotional communication.

    The User has the right to withdraw his consent at any time.

    It is as easy for the User to withdraw as to give consent. To withdraw his consent, the User may simply uncheck the box used to confirm his opt-in. This box is in the MyEdenred Personal Account provided for customers on the MyEdenred Website where the User can manage his/her account. The User may also contact Edenred Belgium for this purpose.

    The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Prior to giving consent, the data subject shall be informed thereof.

    An unsubscribe link is included in each electronic communication sent to the User.

  • 10.3. Data source

    The personal data concerned are communicated by the Users when registering and using the MyEdenred Website and/or the MyEdenred Application and/or the Online Shop.

  • 10.4. Categories of data processed

    The personal data communicated by the Users of the MyEdenred Website and/or the MyEdenred Application and/or the Online Shop include, as the case may be:

    • identification data: last name, first name, address, landline and/or mobile number, email address, username, password ;
    • personal characteristics: birth date, title, language ;
    • electronic identification data: IP addresses, cookies ;
    • data relating to the behaviour and habits of Users when using the MyEdenred Website and/or the MyEdenred Application and/or the Online Shop ;
    • data relating to incidents that may occur while using the MyEdenred Website and/or the MyEdenred Application and/or the Online Shop.

  • 10.5. Data recipients

    The personal data are exclusively intended for:

    • the individuals and organisations in direct contact with Edenred Belgium requiring the data to promote the products and/or services of third-party partners ;
    • the Users of the MyEdenred Website and/or the MyEdenred Application and/or the Online Shop ;
    • the authorities that require such data.

    They are not communicated to third parties, including third-party partners. The processors of Edenred Belgium include, as the case may be:

    • For application development, maintenance and support: EDENRED SE, a company incorporated under French law ;
    • For the hosting of information systems: DXC TECHNOLOGY FRANCE SAS, MICROSOFT FRANCE SAS, two companies incorporated under French law as well as NSI IT SOFTWARE & SERVICES, a company incorporated under Belgian law ;
    • For the Help Centre: PREMIUM PLUS SPRL, a company incorporated under Belgian law ;
    • For the Customer Service: WENGAGE NV, a company incorporated under Belgian law ;
    • For promotional communications : SELLIGENT BENELUX SA, a company incorporated under Belgian law.

  • 10.6. Data transfer

    Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

  • 10.7. Decision based exclusively on automated processing, including profiling

    The processing does not involve any decision based exclusively on automated processing, including profiling.

  • 10.8. Retention period

    Personal data are deleted, and access is limited as soon as the User withdraws his consent to the processing by Edenred Belgium of his personal data to promote the products and/or services.

    In other cases, personal data are stored for a period of 2 years after the last interaction from the User. At the end of the 2 years period, the data will be deleted.

11. The use of the Edenred Website, social networks and contact that is not part of the other processing

  • 11.1. Purpose

    Edenred Belgium processes the personal data of the Users of the Edenred Website as well as any User who deals with the company through any of the offered channels to optimise browsing on the Edenred Website or to best meet the requests of the persons contacting it for processing activities other than those specified above.

    Edenred Belgium processes the personal data of Users of social networks who follow the pages of Edenred Belgium and who publish personal data designated as public or who come into contact with Edenred Belgium through these social networks.

  • 11.2. Legal basis of the processing

    This processing is necessary for the legitimate interests pursued by Edenred Belgium, whose legitimate interest is to meet the expectations of Users as effectively as possible.

  • 11.3. Data source

    The personal data concerned are communicated by the Users of the Edenred Website and/or communication channels offered by Edenred Belgium and/or the Edenred Belgium’s pages on social networks.

  • 11.4. Categories of data processed

    The personal data communicated by the Users of the Edenred Website and/or the channels offered by Edenred Belgium and/or Edenred Belgium’s pages on social networks, are, as the case may be:

    • identification data : last name, first name, address, landline and/or mobile number, email address, function, employer ;
    • personal characteristics: title, language ;
    • electronic identification data: IP addresses, cookies ;
    • data relating to the behaviour and habits of Users when using the Edenred Website ;
    • personal data designated as public on social networks ;
    • data relating to incidents that may occur while using the Edenred Website and/or the communication channels offered by Edenred Belgium.

  • 11.5. Data recipients

    • The personal data are exclusively intended for:
    • the individuals and organisations in direct contact with Edenred Belgium requiring the data for the management of the Edenred Website and/or the communication channels offered by Edenred Belgium and/or Edenred Belgium’s pages on social networks, and to respond to the requests made ;
    • the Users of the Edenred Website and/or communication channels offered by ;
    • Edenred Belgium and/or Edenred Belgium’s pages on social networks ;
    • the authorities that require such data.

    They are not shared with third parties.

    The processors of Edenred Belgium include, as the case may be:

    • For application development, maintenance and support: EDENRED SE, a company incorporated under French law ;
    • For the hosting of information systems: DXC TECHNOLOGY FRANCE SAS, MICROSOFT FRANCE SAS, two companies incorporated under French law as well as NSI IT SOFTWARE & SERVICES, a company incorporated under Belgian law ;
    • For the Help Centre: PREMIUM PLUS SPRL, a company incorporated under Belgian law ;
    • For the Customer Service: WENGAGE NV, a company incorporated under Belgian law ;

  • 11.6. Data transfer

    Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

  • 11.7. Decision based exclusively on automated processing, including profiling

    The processing does not involve any decision based exclusively on automated processing, including profiling.

  • 11.8. Retention period

    The personal data of Users with whom Edenred Belgium has no contractual relationship are kept as an intermediate archive, and access to these data is limited, for a period of 5 years from the last contact.

    The personal data of Users with whom Edenred Belgium has a contractual relationship are kept as an intermediate archive, and access to these data is limited, for a period of 10 years and, in the event of legal proceedings brought during this period, until all legal remedies have been exhausted.

12. Security

  • 12.1. Purpose

    Edenred Belgium processes personal data of Users in order to guarantee the security of their personal data and in particular for the purpose of prevention, detection and circumvention of faults and fraud.

  • 12.2. Legal basis of the processing

    This processing is necessary for the legitimate interests pursued by Edenred Belgium, whose legitimate interest is to guarantee the security of the personal data for which it is responsible.

  • 12.3. Data source

    The personal data concerned are communicated by the Users.

  • 12.4. Categories of data processed

    The personal data communicated by the companies granting Edenred Meal and/or Edenred Eco and/or Edenred Gift and/or Edenred Sport & Culture concerning the beneficiaries thereof and/or access to the Edenred Engagement Platform, as the case may be:

    • identification data:
    • necessary data: last name, first name, address, national register number ;
    • complementary data: landline and/or mobile phone number, email address ;
    • personal characteristics: birth date, birthplace, title, language ;
    • data relating to Edenred Meal and/or aux Edenred Eco and/or aux Edenred Gift and/or Edenred Consumption and/or Edenred Sport & Culture associated with a Beneficiary of these Vouchers and/or Services: quantity, face value, validity period, point of distribution/delivery ;
    • characteristics related to the granting of the benefit: date of entry, date of exit, language, professional email address, activation code.

    The personal data communicated directly by the Users, that is, as the case may be:

    • identification data : last name, first name, address, landline and/or mobile number, email address, username, password ;
    • personal characteristics: birth date, title, language ;
    • electronic identification data: IP addresses, cookies ;
    • data relating to transactions made using Edenred Meal and/or Edenred Eco and/or Edenred Gift end/or Edenred Consumption and/or the Edenred Sport & Culture and/or the Edenred Engagement Platform and/or the Online Webshop;
    • data relating to the behaviour and habits of Users when using the Edenred
    • Belgium’s websites, platforms and applications;
    • data relating to incidents that may occur while using the Edenred Belgium’s Edenred Belgium’s cards, websites, platforms and applications.

  • 12.5. Data recipients

    The personal data are exclusively intended for:

    • the individuals and organisations in direct contact with Edenred Belgium requiring the data to guarantee the security of the personal data of Users ;
    • the Users ;
    • the authorities that require such data.

    They are not shared with third parties.

    The processors of Edenred Belgium include as the case may be:

    • For application development, maintenance and support: EDENRED SE, a company incorporated under French law ;
    • For the hosting of information systems: DXC TECHNOLOGY FRANCE SAS, MICROSOFT FRANCE SAS, two companies incorporated under French law as well as NSI IT SOFTWARE & SERVICES, a company incorporated under Belgian law ;
    • For authorisation of transactions: PREPAY TECHNOLOGIES Ltd, a company incorporated under the laws of the UK ;
    • For manufacturing Edenred Cards: GEMALTO BV, a company incorporated under Dutch law ;
    • For the Card Stop service: WORLDLINE SA, a company incorporated under Belgian law ;
    • For the Customer Service: WENGAGE NV, a company incorporated under Belgian law ;
    • For the Help Centre: PREMIUM PLUS SPRL, a company incorporated under Belgian law;
    • For services communications : SELLIGENT BENELUX SA, a company incorporated under Belgian law.

  • 12.6. Data transfer

    Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

  • 12.7. Decision based exclusively on automated processing, including profiling

    The processing does not involve any decision based exclusively on automated processing, including profiling.

  • 12.8. Retention period

    Personal data are kept as an intermediate archive, and access to these data is limited, for a period of 2, 5 or 10 years, depending on the applicable limitation period and, in the event of legal proceedings brought during this period, until all legal remedies have been exhausted.

13. Statistics

  • 13.1. Purpose

    Edenred Belgium processes the personal data of Users for research and statistical purposes, including marketing.

  • 13.2. Legal basis of the processing

    This processing is necessary for the legitimate interests pursued by Edenred Belgium, whose legitimate interest is to improve the quality of its services to Users.

  • 13.3. Data source

    The personal data concerned are communicated by the Users.

  • 13.4. Categories of data processed

    The personal data communicated by the companies granting Edenred Meal and/or Edenred Eco and/or Edenred Gift and/or Edenred Sport & Culture concerning the beneficiaries thereof and/or access to the Edenred Engagement Platform, as the case may be:

    • Identification data:
    • Necessary data: last name, first name, address, national register number ;
    • Complementary data: landline and/or mobile phone number, email address ;
    • Personal characteristics: birth date, birthplace, title, language ;
    • Data relating to Edenred Meal and/or Edenred Eco and/or Edenred Gift and/or edenred consumption and/or edenred sport & culture associated with a beneficiary of these vouchers and/or services: quantity, face value, validity period, point of distribution/delivery ;
    • Characteristics related to the granting of the benefit: date of entry, date of exit, language, professional email address, activation code.

    The personal data communicated directly by the Users, that is, as the case may be:

    • Identification data : last name, first name, address, landline and/or mobile number, email address, username, password ;
    • Personal characteristics: birth date, title, language ;
    • Electronic identification data: IP addresses, cookies ;
    • Data relating to transactions made using Edenred meal and/or Edenred eco and/or Edenred Gift and/or Edenred Consumption and/or Edenred Sport & Culture and/or the Edenred Engagement Platform and/or the online webshop ;
    • Data relating to the behaviour and habits of users when using the Edenred Belgium’s websites, platforms and applications ;
    • Data relating to incidents that may occur while using the Edenred Belgium’s Edenred Belgium’s cards, websites, platforms and applications.

  • 13.5. Data recipients

    The personal data are exclusively intended for:

    • the individuals and organisations in direct contact with Edenred Belgium requiring the data for research and statistical purposes ;
    • the Users ;
    • the authorities that require such data.

    They are not shared with third parties.

    The processors of Edenred Belgium include as the case may be:

    • For application development, maintenance and support: EDENRED SE, a company incorporated under French law ;
    • For the hosting of information systems: DXC TECHNOLOGY FRANCE SAS, MICROSOFT FRANCE SAS, two companies incorporated under French law as well as NSI IT SOFTWARE & SERVICES, a company incorporated under Belgian law ;
    • For authorisation of transactions: PREPAY TECHNOLOGIES Ltd, a company incorporated under the laws of the UK ;
    • For manufacturing Edenred Cards: GEMALTO BV, a company incorporated under Dutch law ;
    • For the Card Stop service: WORLDLINE SA, a company incorporated under Belgian law ;
    • For the Customer Service: WENGAGE NV, a company incorporated under Belgian law ;
    • For the hosting of the information systems of the Edenred Engagement Platform: Fredhopper, a company incorporated under Dutch law;
    • For the Help Centre: PREMIUM PLUS SPRL, a company incorporated under Belgian law;
    • For services communications : SELLIGENT BENELUX SA, a company incorporated under Belgian law.

  • 13.6. Data transfer

    Edenred Belgium ensures that your personal data collected for the previously stated purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (article 45 of the GDPR) or the establishment of appropriate and adequate safeguards ensuring the security and protection of your personal data, in this case, standard contractual clauses (article 46 of the GDPR).

  • 13.7. Decision based exclusively on automated processing, including profiling

    The processing does not involve any decision based exclusively on automated processing, including profiling.

  • 13.8. Retention period

    Personal data are kept as an intermediate archive, and access to these data is limited, for a period of 2, 5 to 10 years, depending on the applicable period of limitation and, in the event of legal proceedings brought during this period, until all legal remedies have been exhausted.

RIGHTS OF USERS

1. Preamble

Edenred Belgium may not refuse to comply with Users’ requests under this Article V unless it can demonstrate that it is unable to identify the User concerned. The identification of the User may in particular be carried out by means of a copy of his identity document.

As soon as possible and at the latest within one month from the receipt of the request, Edenred Belgium provides the User exercising one or more of the rights referred to below, with information on the measures taken following the request. The one-month period can be extended by two months, given the complexity and the number of requests. In the latter case, Edenred Belgium informs the User of the extension and the reasons justifying it.

When the User makes his request in electronic form, the information is provided by Edenred Belgium electronically where possible and unless the User requests otherwise. The request can be made through this link.

If Edenred Belgium does not respond to the User’s request, it shall promptly inform the User, at the latest within one month from receipt of the request for reasons of this refusal and the possibility for the User to lodge a complaint with the Data Protection Authority and to file a judicial recourse.

The requests under this Article V shall be free of charge except where a User’s requests are manifestly unfounded or excessive, in particular because of their repetitive nature. In the latter case, Edenred Belgium may require the payment of reasonable fees that take into account the administrative costs related to these requests or refuse to act on them.

Where Edenred Belgium has reasonable doubts concerning the identity of the User making the request, it may request the provision of additional information necessary to confirm the identity of the data subject.

The User has the right to lodge a complaint with the Data Protection Authority (DPA) (Art. 77 GDPR). A form is available on the DPA website: https://www.autoriteprotectiondonnees.be. The complaint must then be sent either by email: contact@apd-gba.be, or by post to the DPA address: Rue de la Presse 35 at 1000 Brussels.

2. Access

The User has the right to obtain from Edenred Belgium confirmation as to whether or not the personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:

  • the purposes of the processing ;
  • the categories of personal data concerned ;
  • the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients outside the European Economic Area or in international organisations ;
  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period ;
  • the existence of the right to request from Edenred Belgium rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing ;
  • the right to lodge a complaint with the Data Protection Authority ;
  • where the personal data are not collected from the data subject, any available information as to their source ;
  • the existence, as the case may be, of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the User.

Where the personal data are transferred to a country outside the European Economic Area or to an international organisation, the User shall have the right to be informed of the appropriate safeguards relating to the transfer.

The User has the right to obtain, free of charge, from Edenred Belgium a copy of the personal data being processed. This right, however, may not affect the rights and freedoms of others, including the trade secrets of Edenred Belgium or its intellectual property rights.

Where the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic form. Edenred Belgium may require the payment of reasonable fees based on the administrative costs, fixed at EUR 25.00, for any additional copies requested by the data subject.

3. Rectification

The User shall have the right to obtain, free of charge, from Edenred Belgium the rectification of inaccurate personal data concerning him or her, without any undue delay.

Taking into account the purposes of the processing, the User shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

4. Erasure

The User shall have the right to obtain from Edenred Belgium the erasure of personal data concerning him or her without undue delay and Edenred Belgium shall have the obligation to erase personal data without undue delay where one of the following grounds applies:

  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed ;
  • the User withdraws consent on which the processing is based and where there is no other legal ground for the processing ;
  • the User objects to the processing pursuant hereto ;
  • the personal data have been unlawfully processed ;
  • the personal data have to be erased for compliance with a legal obligation to which Edenred Belgium is subject ;
  • the personal data have been collected in relation to the offer of information society services to children.

Where Edenred Belgium has made the personal data public and is obliged pursuant to paragraph 1 to erase the personal data, Edenred Belgium, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the User has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

Paragraphs 1 and 2 shall not apply to the extent that processing is necessary:

  • for exercising the right of freedom of expression and information ;
  • for compliance with a legal obligation which requires processing to which Edenred Belgium is subject ;
  • establishment, exercise or defence of legal claims ;
  • for statistical purposes in so far as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing.

5. Right to restriction of processing

The User shall have the right to obtain from Edenred Belgium restriction of processing where one of the following applies:

  • the accuracy of the personal data is contested by the User, for a period enabling Edenred Belgium to verify the accuracy of the personal data ;
  • the processing is unlawful, and the User opposes the erasure of the personal data and requests the restriction of their use instead ;
  • Edenred Belgium no longer needs the personal data for the purposes of processing, but they are required by the User for the establishment, exercise or defence of legal claims ;
  • the User has objected to processing based on Edenred Belgium’s legitimate interests pending the verification whether these interests override those of the User.

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with the User’s consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest.

A User who has obtained restriction of processing shall be informed by Edenred Belgium before the restriction of processing is lifted.

6. Notification obligation regarding rectification or erasure of personal data or restriction of processing

Edenred Belgium shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance herewith to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. Edenred Belgium shall inform the data subject about those recipients if the data subject requests it.

7. Right to data portability

Subject to the rights and freedoms of third parties, the Users shall have the right to receive the personal data concerning them, which they have provided to Edenred Belgium, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from Edenred Belgium, where:

  • the processing is based on consent, or on a contract; and
  • the processing is performed using automated means.

In exercising his or her right to data portability, the User shall have the right to have the personal data transmitted directly from Edenred Belgium to another controller, where technically feasible.

The exercise of the right to portability of personal data is without prejudice to the provisions on the right to erasure. This right shall not apply to processing necessary for the performance of a task carried out in the public interest.

8. Right to object

Where personal data are processed for direct marketing purposes, the User shall have the right to object at any time to processing of personal data concerning him for such marketing, which includes profiling to the extent that it is related to such direct marketing.

When the User objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.

The User shall have the right to object, on grounds relating to his particular situation, at any time to processing of personal data concerning him which is based on legitimate interests pursued by Edenred Belgium.

Edenred Belgium shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the User or for the establishment, exercise or defence of legal claims.

9. Automated individual decision-making, including profiling

The User shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or similarly significantly affects him, except when the decision: is authorised by the regulations to which Edenred Belgium is subject and which also lays down suitable measures to safeguard the User’s rights and freedoms and legitimate interests; or

is necessary for entering into, or performance of, a contract between the User and Edenred Belgium; or

is based on the explicit consent of the User.

In the last two cases, Edenred Belgium shall implement suitable measures to safeguard the User’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of Edenred Belgium, to express his point of view and to dispute the decision.