Privacy policy (GDPR)

Last updated: [À COMPLÉTER]

ODPH attaches great importance to the protection of your privacy. Your personal data is processed in accordance with the General Data Protection Regulation (GDPR — EU 2016/679) and the applicable Belgian legislation.

Data controller

The data controller is ODPH — Organisme du Prêt Hypothécaire, [À COMPLÉTER — adresse]. For any question relating to your data: info@odph.be.

Data collected

Depending on your interaction with us, we may process: your identification and contact data (name, address, e-mail, telephone), information relating to your project and your financial situation (income, charges, household composition), the documents you upload to your client area, as well as technical data (IP address, connection logs) for security purposes.

Purposes and legal bases

  • Handle your requests and provide you with credit or insurance advice (pre-contractual measures and performance of the contract);
  • Comply with our legal and regulatory obligations, in particular regarding anti-money laundering and the duty to advise (legal obligation);
  • Ensure the security of the site and prevent fraud (legitimate interest);
  • Send you, with your consent, communications relating to our services.

Recipients

Your data is only disclosed to the persons and bodies necessary to process your file: lenders and insurers approached, technical subcontractors acting on our behalf, and authorities where the law requires it. Your data is never sold.

Retention period

Your data is retained for as long as necessary for the purpose pursued and for the legal retention periods applicable to the sector (in particular regarding credit and anti-money laundering), then deleted or anonymised.

Your rights

You have a right of access, rectification, erasure, restriction and objection, as well as a right to portability and the right to withdraw your consent. To exercise them, write to info@odph.be (proof of identity may be requested).

Complaint

You may lodge a complaint with the Belgian Data Protection Authority (APD/GBA), rue de la Presse 35, 1000 Brussels — www.autoriteprotectiondonnees.be.

Security

We implement appropriate technical and organisational measures to protect your data against any unauthorised access, loss or disclosure.

The management of cookies is detailed in our cookie policy.