WISOGIS – Privacy Statement
WISOGIS PRIVACY POLICY
Last updated: 23rd June 2022
Wisogis is a solution aiming at assisting renewable energy business developers in the prefeasibility phase of their projects. This web application is designed to help identify the most suitable location for a solar, a wind or a hybrid project worldwide.
In the context of Wisogis services, your personal data will be collected in order to allow you to access the online application, for basic communications and for invoicing purposes. You will find below all the necessary details regarding this processing of your personal data.
1. Who collects your data?
Tractebel Engineering SA, whose registered office is located at Boulevard Simon Bolivar 34-36, 1000 Brussels, and registered at the BCE under number 0412.639.681, collects your data as controller (i.e. it itself determines the purposes and means of processing the personal data collected).
2. What data is collected?
The personal data collected is: name, surname, professional email address, phone number, job title (optional), job level (optional).
3. What is the purpose(s) for which this data is collected?
Functional Purpose The processing of personal data is necessary to link each subscription with the user, (“You”). Personal coordinates will be used for functional purposes such as retrieving a new password. It will also be used for invoicing purposes in the case of subscriptions payments and to inform you when your subscription comes close to its end. Technical communications about Wisogis will also be sent by email. Direct marketing Would you accept that we use your personal data for direct marketing purposes, it will be used to inform you about commercial opportunities related to Wisogis and Tractebel’s activities. This channel will also be used to keep you informed about new functionalities available on Wisogis.
4. On what lawful ground is this processing based ?
Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (“General Data Protection Regulation” or “GDPR”) requires that any processing be based on one of the six bases of legitimacy it lists: the consent of the data subject, the need for the performance of a contract concluded with the data subject or pre-contractual measures at the latter’s request, a legal obligation, the safeguarding of the vital interests of a natural person, a public interest mission or the legitimate interest of the controller. In this case, the processing is based on the performance of the contract
5. To whom is the data transferred?
The personal data are only transferred to:
• OKTA – Wisogis uses OKTA as authentication service as an additional layer of security to access the application (European servers located in Ireland and Germany)
• Salesforce – Would the user have agreed to it, Wisogis uses Salesforce for marketing purposes and to keep track of the users consent. Salesforce servers are located in the USA.
• Amazon Web Services (AWS) – Wisogis is built using AWS cloud solutions. All data related to Wisogis is stored on AWS (European servers located in Ireland), including the professional email address (login).
• Tomorrow Studio – As a Belgium based sub-contractor, Tomorrow Studio is in charge of O&M services related to Wisogis. In that context, the qualified personnel has access to the data stored on AWS.
6. How long is the data kept?
The personal data will only be kept for the time necessary to achieve the purpose set out above, i.e. 12 months after the latest login in case of a free access and 12 months after the ending of the license in case of a paying access.
7. What are your rights?
As a data subject, you are granted different rights in connection with your Personal data. However, Tractebel can take reasonable steps to verify your identity before proceeding with your request. Your rights are the following:
• Right to be informed Tractebel is transparent by providing you any information relating to the processing of your Personal data via this privacy statement.
• Right to access You have the right to request access to and receive details on the personal data Tractebel holds about you and to obtain a copy thereof.
• Right to rectification If the personal data that Tractebel holds about you is inaccurate or incomplete, you have the right to ask us to update or rectify it.
• Right to be forgotten Under certain circumstances (e.g. when the personal data are no longer necessary in relation to the purposes for which they were collected), employees have the right to request Tractebel to erase their personal data.
• Right to restrict processing In some specific cases, you have the right to ask Tractebel to restrict how we process your personal data (e.g. when you contest the accuracy of the personal data, Tractebel will have to restrict the processing while verifying the accuracy of the personal data). This means Tractebel is only permitted to store the data but not further process it.
• Right to data portability This right only applies to personal data that you have provided to Tractebel and when the processing is based on your consent or on the performance of a contract when the processing is carried out by automated means. Tractebel will provide your personal data in a structured, commonly used and machine-readable format to be able to transmit it to another controller, or have it directly transmitted by Tractebel if technically feasible.
• Right to object Furthermore, you have the right to object to the processing of your personal data, on grounds relating to your particular situation, if the processing is based on legitimate interests of Tractebel or on a public interest. Tractebel will discontinue the processing of your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests or rights, or for the establishment, exercise or defence of legal claims.
• Right to withdraw consent Where your consent was required for the collection or use of your personal data, you have the right to withdraw your consent at any time. However, this withdrawal does not affect any processing operations previously carried out on the basis of your consent.
• Right to lodge a complaint You have the right to lodge a complaint with a supervisory authority (in Belgium: “Gegevensbeschermingsautoriteit or Autorité de Protection des Données”) if you consider that the processing of your personal data infringes this Privacy Statement or the GDPR. For more information, please contact your local data protection authority (contact details for data protection authorities in the European Economic Area, Switzerland and certain non-European countries are available here).
8. For any additional questions
For any additional questions or to exercise your rights, you can contact privacy@tractebel.engie.com