The law firm Srl “Alain CAPRASSE, Denis CAPRASSE & Paul-Xavier NOLLET, Notaries in Partnership,” hereinafter referred to as “ACTIS,” processes personal data in the course of its business activities.
ACTIS, with its headquarters at 1 Rue de Bierset, 4460 Grace-Hollogne (and a branch office at 24/1 Rue Joseph Wettinck, Jemeppe), with company registration number RPM 0760.304.806, acts as the data controller for the processing of personal data carried out within the firm (hereinafter “the firm”). The data controller is the natural or legal person who determines the purposes and means of processing personal data.
The firm is committed to protecting your privacy. It is committed to protecting and processing your personal data with particular care and in a fully transparent manner, in strict compliance with privacy protection legislation, in particular the General Data Protection Regulation (EU) 2016/679 (hereinafter “GDPR”) and the Code of Conduct of the National Chamber of Notaries dated January 28, 2021, specifying certain procedures for the application of the General Data Protection Regulation (EU) 2016/679 (GDPR) for notaries (hereinafter the “Code of Conduct”)
In accordance with the GDPR and the Code of Conduct, the firm has appointed a Data Protection Officer, namely Privanot ASBL. The Data Protection Officer can be contacted at the following email address: info@privanot.be, or by mail at the following address: Privanot asbl, Rue de la Montagne 30, 1000 Brussels.
Through this personal data protection policy, we aim to provide you with further details on how we process the personal data we hold.In this policy, you will find answers to the following questions:
Who is the data controller and who is the data protection officer?
Why is your personal data processed?
What is the legal basis for processing your personal data?
What personal data does the firm process?
What are the sources of information?
To whom may your personal data be disclosed?
Who are the firm’s data processors?
Will your personal data be transferred outside the European Economic Area (EEA)?
How long will your personal data be retained?
How are the security and confidentiality of your personal data ensured?
What are your rights?
Please note that information regarding the processing of personal data of internal employees carried out in the context of human resources is included in the firm’s employment regulations. Information regarding the processing of personal data of external collaborators in the context of human resources is set forth in specific documents, such as service agreements or the firm’s general policy documents.
Purposes —The firm collects and processes personal data primarily to ensure the legal validity of transactions for which the notary certifies authenticity, as well as to manage the cases entrusted to the notary.
In addition, processing operations are necessary to carry out other important tasks and objectives, namely:
managing the firm’s files, including processing carried out before and after the execution of an authentic instrument, such as necessary research and verifications, as well as any other processing required to fulfill the notary’s duties as a public official and the tasks entrusted to the notary by citizens;
the administrative management and tracking of citizens’ files, including billing and accounting;
conducting the necessary verifications and checks under anti-money laundering legislation;
optimizing website navigation through the use of cookies;
improving user-friendliness and services by utilizing citizen feedback and statistical analysis of the office’s operations and services using software;
improve the quality of the firm’s operations in preparing the deeds and documents necessary for notaries to perform their duties as public officials through the use of low-risk artificial intelligence systems.
Lawfulness —The processing of personal data by the notary is considered lawful provided that, in most cases, it is necessary to comply with a legal obligation to which the notary is subject or necessary for the performance of a public interest mission entrusted to the notary handling the case within the firm.
The processing of personal data is carried out by the firm based on, among other things, but not limited to, the following laws:
The Law of 25 Ventôse, Year XI, governing the organization of the notarial profession;
The Law of September 18, 2017, on the prevention of money laundering and terrorist financing and on the restriction of the use of cash.
In addition, the lawfulness of the processing may also be based on the legitimate interests of the data controller, such asimproving customer satisfaction or securing the firm’s premises through the use of surveillance cameras.
Finally, the lawfulness of processing may be based on the data subject’s consent, for example when non-functional cookies are used on the firm’s website.
Depending on the services you use, the firm may process the following personal data:
identification data (last name, first name, marital status, national ID number, place and date of birth, etc.);
contact information (mailing address, email address, phone number, etc.);
economic and financial data (bank account number, etc.);
data relating to legal capacity;
data relating to professional activity;
data regarding transactions conducted at the notary’s office;
data regarding family, social, tax, or other matters that the notary is required to collect from official sources and government agencies concerning you;
CCTV footage;
data regarding the quality and satisfaction with the services provided;
data resulting from AML due diligence obligations, such as national and international financial sanctions lists, PEP status, and adverse information from public sources regarding predicate offenses to money laundering, countries posing a high AML risk or considered tax havens, and judicial data).
As a public official, in the course of performing their duties, notaries are required to collect and use personal data about you.
Your personal data comes from:
from you or your legal representative;
from authentic data sources strictly regulated by specific legislation, such as the National Registry, the Social Security Cross-Reference Database, the Central Probate Registry, the Central Registry of Cohabitation and Marriage Contracts, etc.;
official bodies authorized to provide data to notaries in the course of their public duties;
from footage recorded by one or more video surveillance cameras;
The AML screening tool of the National Chamber of Notaries.
The personal data processed by the firm may be disclosed to third parties (“recipients”), depending on the context of the processing, and, in particular:
to legally authorized partners, such as public authorities and notarial institutions, for the storage of deed transcriptions and their metadata as part of electronic registration and for the entry of your data into the notarial profession’s central registers (e.g., the Central Register of Marriage Contracts, the Central Register of Power-of-Attorney Agreements, the Central Register of Declarations Regarding the Appointment of an Administrator or a Trusted Person, etc.);
to the Royal Federation of the Belgian Notariat (asbl), with regard to data relating to real estate, for entry into a notarial database intended to generate statistics and enable notaries to estimate the value of real estate in the course of their duties;
to the Provincial Chamber of Notaries responsible for your case and/or the National Chamber of Notaries (e.g., in connection with their accounting oversight functions or in the context of preventing and combating money laundering);
to other notaries involved in your case (e.g., in connection with a real estate sale);
to the State Archives for the preservation of files, notarial records, and wills;
to banks involved in your case;
to theaccountant/tax specialist who handles the firm’s accounting;
to the contractors for the firm’s management and continuity, such as software providers for the preparation of legal documents.
to the Financial Information Processing Unit (CTIF), for example in the context of preventing and combating money laundering;
to judicial authorities, for example in connection with the prevention and combating of money laundering;
to authorities involved in national and international cooperation in the context of preventing and combating money laundering.
A subcontractor is a natural or legal person, a public authority, an agency, or another entity that processes personal data on behalf of the study.
The firm uses the following categories of subcontractors, among others:
hardware suppliers;
software providers, for example for file management and accounting;
server/backup providers;
paper document destruction service providers;
video surveillance camera providers;
Consultants or external contractors;
etc.
In principle, your personal data will not be transferred outside the European Economic Area (hereinafter “EEA”).
However, in the event that your personal data is nevertheless transferred to countries outside the EEA and the European Commission has determined that the country to which the data is transferred does not provide an adequate level of protection, the firm will strive to protect your personal data by providing additional safeguards (for example, by entering into standard contractual clauses approved by the European Commission, by adopting binding corporate rules, etc.).
In accordance with the principle of data minimization, the aforementioned data may only be retained for as long as necessary to fulfill the intended purpose, in accordance with the applicable laws and the statutes of limitations for commercial and personal claims. The retention periods listed below correspond to those specified in the firm’s record of processing activities.
Retention periods vary depending on the nature of the documents in question, namely:
client files for citizens will be retained as long as the citizen has not chosen to change notaries, and will be retained for a maximum of the citizen’s lifetime to enable the provision of advisory services (in accordance with Article 9 of the Law of Ventôse, Year XI, governing the organization of the notarial profession);
files are retained for 30 years following their closure for evidentiary purposes (in accordance withArticle 3.27 of the New Civil Code);
Notarial records are retained for 50 or 75 years after the signing of the deed and are then transferred to the National Archives (in accordance with Article 62 of the Law of Ventôse, Year XI, on the Organization of the Notarial Profession);
the ledgers (accounts) are retained for 30 years after the close of the fiscal year (in accordance with Article 33 of the Law of Ventôse, Year XI, concerning the organization of the notarial profession);
account statements are retained for 30 years after the close of the relevant fiscal year (in accordance with Article 33 of the Law of Ventôse, Year XI, on the Organization of the Notarial Profession);
personal data subject to the Anti-Money Laundering Act is deleted at the end of a 10-year retention period (in accordance with Articles 60 and 62(1) of the Law of September 18, 2017, on the Prevention of Money Laundering and Terrorist Financing and the Limitation of Cash Use);
camera footage will be retained for a maximum period of one month (in accordance with Article 6 of the Law of March 21, 2007, regulating the installation and use of surveillance cameras);
Personal data processed for the management of the website will be retained for as long as necessary to achieve the intended purpose;
Personal data processed using artificial intelligence software will no longer be processed by these technologies once your case has been closed by the firm.
The firm takes appropriate technical and organizational measures to ensure a level of security commensurate with the risk. In addition, the firm ensures that it adopts the security measures for the processing of personal data set forth in the Code of Conduct of the National Chamber of Notaries dated January 28, 2021.
Security measures are taken to prevent the loss, destruction, alteration, or unauthorized disclosure of personal data that is transmitted, stored, or otherwise processed, as well as unauthorized access to such data.
In particular, the notary’s office ensures that:
access to the premises containing data storage media is restricted to authorized persons;
the server environment is properly secured;
personal data is stored and destroyed securely;
secure access to the data necessary to achieve the intended purpose is provided to employees and subcontractors;
a procedure for reporting any personal data breaches, applicable to all members of the firm, is established;
a procedure for managing the rights of data subjects, applicable to all members of the firm, is established;
an information security policy accessible to all members of the firm is implemented;
a GDPR awareness policy for firm members is in place;
technical security measures, such as firewalls, antivirus software, and regular security updates, are implemented.
These measures are regularly monitored and reviewed by the aforementioned DPO following an audit.
In accordance with Article 28 of the GDPR and Article 2 of the Code of Ethics of the National Chamber of Notaries dated January 28, 2021, the firm has signed a data processing agreement with the various processors it engages.
Under the GDPR, as a data subject whose personal data is processed by the firm, you have several rights.
Thus, depending on the circumstances and subject to the data controller’s compliance with its legal obligations and the fulfillment of its public interest missions, you have the following rights:
Right to information: You have the right to know, among other things, what personal data the firm processes about you, the purposes of such processing, how long this data will be retained, etc.;
Right of access: You have the right to view and obtain a copy of the personal data concerning you that the firm holds and processes;
Right to rectification: You have the right to have any inaccurate or incomplete personal data concerning you corrected;
Right to erasure: You have the right to request the deletion of your personal data processed by the firm;
Right to restriction of processing: You have the right to restrict the processing of your personal data, for example, if you contest the accuracy of the data;
Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to a third party;
Right to object: You have the right to object to the processing of your personal data by the notary’s office.
You may exercise your rights directly with the notary’s office by email info@actis-notaires.be or by mail to 4460 Grace Hollogne, rue de Bierset 1, or by contacting the Data Protection Officer via email info@privanot.be
Finally, if you believe that your rights are not being respected in accordance with the GDPR, you are entitled to file a complaint with the Data Protection Authority (rue de la Presse 35, 1000 Brussels or via their website https://www.autoriteprotectiondonnees.be/).
Follow us and don't miss any of our news
