1. Main information

2. Security and confidentiality of the data

3. What are personal data? 

4. Who is the controller and the data protection officer?

The FPS Finance, located at the following address: boulevard Albert II 33,1030 Brussels and represented by the President of the Steering Committee, is in charge of the processing of personal data within the framework of the execution of its legal objectives.  This implies that it determines, alone or with others, the purposes of and the means of processing these personal data.

The data protection officer is Mrs Frédérique Malherbe, General Advisor, Department of Information Security and Privacy Protection, FPS Finance (dataprotection@minfin.fed.be). The representative for the data protection is the person in charge of answering every question as regards the processing of your personal data as well as the exercise of your rights mentioned in the General Data Protection Regulation. 

5. Which personal data are processed by the FPS Finance and for which purposes are they processed?

• Identification data (for instance, name, first name, birth date);
• Contact information (for instance, address, phone number);
• Bank information (for instance, bank account number);
• Financial and proprietary data (for instance, income, real estate, leases);
• Legal data (for instance, administrative sanctions);

• Tax assessment, control, collection and recovery (personal income tax, value added tax, registration and estate duties,...)
• Land register;
• Registration;
• Management of the State’s own real estate and movable assets, including the acquisition, the sale and the expropriation;
• Collection, recovery and transfer to the person(s) entitled of the non-fiscal claims of the public authorities and the tax reimbursements (legal and administrative fines, unpaid invoices issued by public services, personal income tax, value added tax,...) and private individuals (maintenance claims).
• Management of the contentious matters;
• Follow-up of authorizations and administrative controls in Customs and Excise matters - Administrative police missions;
• Follow-up of security measures in Customs and Excise matters - Public security;
• Generic service in charge of the management of mandates for the citizens and enterprises on the basis of an independent electronic application e-government for the self-service mandate creation;
• Management of the persons entitled by the General Administration of the Treasury;
• eHR – electronic human resources management;
• Staff management;
• Suppliers’ management.

6. Who are the recipients of your personal data?

• Yourself;
• Other recipients according to the obligations and legal authorizations as regards information and information exchange, notably:
  • Other services of the FPS Finance,
  • Other Federal Public services, including Justice, police services, the Financial Intelligence Processing Unit and social security departments;
  • The State’s administrative services, including the public prosecutor's offices, the registries of the Courts of Justice and every jurisdiction, the administrations of the Communities, the Regions, the provinces, the municipal conglomerations, the federations of municipalities, the municipalities and public institutions and organisations; 
  • The states with whom Belgian authorities have concluded international conventions or agreements as regards administrative cooperation or information exchange; 
  • The FPS Finance’s servants, who, pursuant to Article 5 of the aforementioned law of August 3rd 2012, carry out the processing of data in order to carry out on one hand targeted controls on the basis of risk indicators and on the other hand analyses on relational data in order to for instance assess a given tax policy, to inform a category of taxpayers of a legitimate tax advantage or to prepare a change in the taxable base, taxes, royalties and other duties. 

7. Transfers to a third country or an international organisation

8. Keeping your personal data

9. What are your rights as regards personal data processed by the FPS Finance?

• You have the right to access to your personal data processed by the FPS Finance.
• You have the right to see as soon as possible your personal data, which would be inaccurate, being rectified.  Taking into account the processing’s purposes, you have the right to see your personal data, which would be incomplete, being completed.
• In some cases provided for in the General Data Protection Regulation[4], you have the right to require that the processing of your personal data will be restricted.
• In some cases provided for in the General Data Protection Regulation[5] you have the right to oppose at any time to the processing of your personal data for reasons related to your specific situation.
• You have the right not to be subject to a decision on the sole basis of an automated processing, including the profiling, which would result in legal consequences for you, unless this decision is necessary for the conclusion or the execution of an agreement, is legally authorised or is based on your consent.
• In some cases provided for in the General Data Protection Regulation[6], you have the right to see your personal data being deleted as soon as possible. 

10. How can you exercise your rights?

When you notice on MyMinfin that some of your personal data are wrong or incomplete or if you wish to exercise your rights, you can submit your request or a form for giving you access ( Word (DOCX, 16.31 KB)or  PDF (PDF, 101.45 KB)format, dated and signed): 

• By mail for the attention of the FPS Finance, President’s Services, Department of Information Security and Privacy Protection, North Galaxy, boulevard du Roi Albert II 33 PO Box 10, 1030 Brussels.
• By e-mail, electronically signed if possible, to:  dataprotection@minfin.fed.be  

11. Appeal 

Without prejudice to any other administrative or legal appeal, you have the right to file a complaint to the Data Protection Authority and to file a legal appeal if you consider that your rights have not been respected or that a processing of your personal data constitutes a breach of the General Data Protection Regulation[8].

To file a complaint, send your request to: 

Data Protection Authority
Rue de la Presse 35
1000 Brussels
E-mail address: contact@apd-gba.be
 

12. Update of the policy as regards the privacy protection 

The present policy may be subject to possible updates.  Therefore, it is recommended to read it again regularly in order to be properly informed. The updated policy will always be in accordance with the General Data Protection Regulation.