Policies

Privacy Policy

COMPASS GROUP attaches particular importance to privacy rights and the protection of your privacy.
The General Data Protection Regulation (GDPR) came into force on 25 May 2018.
This regulation is universally applicable within Europe and provides additional protection for one of the most important fundamental freedoms: the respect of privacy.
COMPASS GROUP’s privacy policy is intended to provide the necessary clarification in terms of the GDPR’s effective implementation, more specifically in relation to the website’s use.

Personal data

Personal data include all information relating to a person on the basis of which the person in question could be directly or indirectly identified.

COMPASS GROUP’s commitment

COMPASS GROUP ensures the utmost protection of your personal data, taking the following principles into account:

  1. Your personal data are processed in a lawful, appropriate and transparent manner.
  2. Your personal data are collected for specific, expressly defined and justified purposes.
  3. Your personal data are adequate, relevant and limited to what is necessary for the purposes for which they are being processed.
  4. Your personal data are accurate and updated where necessary.
  5. Your personal data will not be stored longer than is required to accomplish the purposes for which they are being processed.
  6. Appropriate technical and organisational measures have been taken to guarantee the protection of your personal data.

Website use

You can use the COMPASS GROUP website without disclosing your identity.
The website uses cookies, which allow us to obtain information solely relating to the use of the website. You can find more information about the use of cookies in our separate cookie policy.

Which categories of personal data are processed by COMPASS GROUP and for what purposes?

When you use the contact form on the website or for an e-tool, you will be asked to provide a number of personal data to COMPASS GROUP.
By using these services you consent to the processing of the data which your provided.
More information on the type of data requested and for what purpose they are processed may be found in our separate privacy policy regarding the contact form and the use of an e-tool.
However, COMPASS GROUP will not use your personal data for direct marketing or profiling.

Storage of personal data

The personal data obtained will be stored for the time required to meet the objectives for which they were collected.
COMPASS GROUP also has a specific retention policy in this regard, which varies depending on the type and nature of the data acquired.

Transfer of data to third parties

COMPASS may transfer or share personal data with other companies should this be required to satisfy the purpose of processing or should it be required by law or regulations.
To the extent that these data are shared with third parties or suppliers, steps will be taken to ensure sufficient safeguarding of your personal data.
Cooperation with third-party companies or suppliers only takes place to the extent that these parties operate in accordance with the legal provisions relating to privacy and data protection.

Your rights

  • You are at all times entitled to obtain information from COMPASS GROUP on the personal data that have been or are being processed.
  • You may request access to specific information regarding the processing of your data at any time.
  • You are entitled to have your data corrected where your personal data has been shown to be incorrect or incomplete.
  • You may also request that your data be transferred.
  • You are also always entitled to request the deletion of your personal data or that restricted processing of your data be applied.
  • Finally, you are entitled at all times to request that data processing be terminated.

Security of personal data and data breaches

COMPASS GROUP is responsible for the processing of your personal data and has therefore taken the necessary measures as regards security and confidentiality.
Appropriate technical and organisational measures have been taken to ensure security and confidentiality.
In addition, we only work with processors which are able to provide sufficient guarantees in terms of technical and organisational security measures.
COMPASS GROUP regularly conducts internal and external audits on effective compliance with these measures.

Data Protection Officer (DPO)

As the data controller for personal data COMPASS GROUP is responsible for processing your personal data in accordance with the applicable laws and regulations on personal data protection.

Should you have any questions regarding the processing of your personal data, please contact the Data Protection Officer at COMPASS GROUP:

  • by e-mail: GDPR@compass-group.be
  • telephone: +32 2 243 22 11 Attn: DPO
  • by post: Haachtsesteenweg 1179 – 1130 Brussels

Cookie Policy

You can use the COMPASS GROUP website without disclosing your identity.

When you visit the COMPASS GROUP website, your web browser is configured to send data to our web server, which we store in log files, i.e. so-called cookies.

Cookies are pieces of information sent along with the pages of our website that are stored on your computer’s hard drive as small text files.

When our website is visited again, this information is relayed back to our servers for analysis.

The COMPASS GROUP website uses cookies that are safe for your PC, laptop, telephone or tablet.

We are not able to identify you based on the cookies used by COMPASS GROUP.

Cookies provide data on the website’s use so that it can be improved and adjusted to website visitor preferences. They ensure, among other things that:

  • you can safely use the website without any disruption;
  • the website responds quickly;
  • detection of website errors and inconveniences is possible;
  • site improvements can be tested;
  • products can be shared through social media.

Data use and user profile

Cookies are necessary to optimise the website’s functioning.

The log data are analysed for purely statistical purposes to improve the website and its underlying functions.

Records of data usage and the creation of a user profile are based on the principle of anonymity, and the storage of said data and creation of said profile are also carried out in an anonymised format.

These data are not linked to a name or other personal data that could reveal your identity.

Cookies cannot be used to run programs or to transfer viruses to your computer.

Most cookies disappear as soon as the browser is closed, but as an internet user you can always delete or disable cookies via the browser settings.

Types of cookie

COMPASS GROUP uses persistent cookies to make it possible to identify new visits to the website, so that the website settings can be customised to individual preferences.

This means that the user is not repeatedly required to enter his or her preferences, thereby saving time and making use of our website a more pleasant experience.

Session cookies can be used to determine which parts of the website have been visited.

These cookies make it possible for our services and the website itself to be adapted to the visitor’s browsing behaviour.

Google Analytics are also used to obtain information on the website’s use.

Google ensures an appropriate level of protection for the processing of any personal data.

Finally, buttons have also been included on the website to share web pages on social networks such as Facebook, Instagram and LinkedIn.

These share buttons operate based on bits of code that originate with the social networking sites themselves, meaning that COMPASS GROUP has no influence on the use of these cookies.

These social networking sites provide their own guarantees in terms of providing appropriate levels of protection for the processing of any personal data.

Data Protection Officer (DPO)

As the data controller for personal data COMPASS GROUP is responsible for processing your personal data.

Should you have any questions regarding the processing of your personal data, please contact the Data Protection

Officer at COMPASS GROUP:

  • by e-mail: GDPR@compass-group.be
  • telephone: +32 2 243 22 11 Attn: DPO
  • by post: Haachtsesteenweg 1179 – 1130 Brussels

Rights of data subjects

The General Data Protection Regulation (GDPR) sets out a number of specific requirements that protect the processing of your personal data – these are your “privacy rights”.

Your GDPR privacy rights

  • Portability of personal data
    You may at any time request that your digital personal data be transferred in a form that makes it possible to reuse these data or transmit them to another organisation.
  • Right to be forgotten
    You may request the deletion of your personal data (or that of your child) in the following cases: if these are no longer necessary, if you withdraw your consent to use, if your personal data are unlawfully processed, because your data have been stored for longer than necessary and if your child is younger than 16 years of age.
  • Access
    You have the right to ask what data we have about you and can ask to see these data.
  • Rectification and completion
    You have the right to have incorrect personal data corrected or to complete your personal data.
  • Restriction of processing
    You have the right to request that the use of your personal data be limited in certain situations: in the case of potentially incorrect data, unlawful processing, unnecessary data and where an objection to processing has been expressed.
  • Objection to automated decision-making and profiling
    You always have the right to object to so-called direct marketing and profiling for marketing purposes.
  • Objection to data processing
    You have the right to object to the processing of your personal data.

Data Protection Officer (DPO)

As the data controller for personal data COMPASS GROUP is responsible for processing your personal data in accordance with the applicable laws and regulations on personal data protection.

For all your requests, questions and complaints regarding the processing of your data or your rights, please contact the Data Protection Officer (DPO) at COMPASS GROUP.

  • by e-mail: GDPR@compass-group.be
  • telephone: +32 (0)2 243 22 11 – ask for the DPO
  • by post: Haachtsesteenweg 1179 – 1130 Brussels

You will receive a response within one month, subject to exceptional circumstances.

Barring exceptions allowed under the law, no costs are charged for any of these services or interventions.

Complaint to the Data Protection Authority (DPA)

As a data subject, you can always lodge a complaint with the relevant privacy supervisory authority.

In Belgium, this is the Data Protection Authority (DPA).

More information can be found on its website:
https://www.dataprotectionauthority.be/general-data-protection-regulation-citizen