Summary Privacy Statement PLF
The Federal Public Service Health, Food Chain Safety and Environment (FPS Public Health) protects the personal data you provide to us in any possible processing. The FPS Public Health respects the Belgian and European legislation in this respect.
This brief summary of our Privacy Statement for visitors to the web pages of the FPS Public Health and those who complete the electronic Passenger Locator Form (hereinafter the 'PLF') will bring you up to speed in no time on how the FPS Public Health processes your personal data as part of your visit or completion of the PLF. Would you like further information? In that case, we invite you to read our full Privacy Statement, which explains everything in detail.
Which personal data do we collect about you?
- Your identification and contact details (such as first name, surname, address, email address and phone number), and those of your fellow travellers;
- Your itinerary;
- Place(s) of stay within a specified period prior to your arrival on Belgian territory;
- Means of transportation used and seat(s) occupied in those means of transportation;
- The reason for your stay in Belgium;
- The length of stay and place(s) of stay in Belgium within a specified period of time after arrival;
- Information that allows to assess the risk of infection;
- IP address
Why do we collect and process your personal data?
We collect and process your personal data in order to:
- Make a risk analysis regarding your place(s) of stay abroad upon your arrival in Belgium;
- Be able to contact you in the event of a potential health risk and communicate follow-up measures if applicable.
- Find out who you have had contact with, in the context of contact tracing;
- answer your questions;
- for statistical and quality purposes, in order to improve our services.
What legal basis do we use to process your personal data?
We process your personal data on the following legal basis:
- Public interest in the context of public health (taking into account the COVID-19 pandemic)
- Legal obligation
- General interest in the context of the competences of the FPS Public Health
On what infrastructure and how long do we store your personal data?
Your personal data is stored electronically (in protected databases on secure European servers).
Who has access to your personal data?
In the context of contact tracing, we may transfer your personal data to the health authorities of the Belgian Regions and Communities and to Sciensano.
As part of the contact tracing done by the Early Warning and Response System of the European Union (EWRS), your personal data might be transferred to an EU Member State in the interest of public health.
Under the 'Cooperation Agreement of 24 March 2021 between the Federal State, the Flemish Community, the Walloon Region, the German-speaking Community and the Joint Community Commission on data transmission to federated entities, local authorities or police services of necessary data for the purpose of maintaining the compulsory quarantine or testing of travellers arriving from foreign zones subject to compulsory quarantine or testing on arrival in Belgium' your personal data may be passed on to the federated entities, local authorities or police services.
As part of contact tracing, your personal data might be transferred to the National Focal Point (NFP) of a country outside of the EU in order to protect public health, in accordance with the International Health Regulation of 2005.
What rights do you have?
As a deliberation between the exercise of various fundamental rights is necessary in this processing of personal data, we will assess on a case-by-case basis whether these rights can be exercised by you. Where appropriate, you may request us, amongs other things to review or correct your personal data. These requests will then be evaluated in an individual basis. You can find more information in our full Privacy Statement.
How long do we store your personal data?
We do not keep your personal data longer than necessary to fulfil the purpose for which it was collected. For example, data related to the PLF is kept for 28 days. When you visit the web pages of the FPS Public Health, your IP address is kept for 12 months.
How to exercise your rights ?
Regarding any processing of your personal data, where appropriate after due consideration of the fundamental rights guaranteed, you may exercise the following rights by sending an email to DPO.PHA@health.fgov.be:
- Right of access: you have the right to request a copy of your personal data that the federal public service holds and processes;
- Right to rectification (correction): you have the right to have your data corrected if it turns out to be incorrect;
- Right to object to processing: you can ask us, for example, to stop marketing communications at any time;
- Right to withdraw consent: you have the right to withdraw a previously granted consent to processing;
- Right to lodge a complaint with the Data Protection Authority (DPA): you have the right to lodge a complaint here if you suspect that your data is not being handled correctly by the federal public service.
You may also exercise the following rights with limited consent depending on the legal basis of processing and the legal retention periods:
- Right to erasure: you may request the federal public service to delete your personal data, but it will not always be possible to do so, given the legal grounds on which the data was obtained;
- Right to restrict processing: you may ask to restrict the processing of your personal data, but it will not always be possible to do so, given the legal grounds on which the data was obtained;
- Right to data portability: you have the right to request your personal data in a structured and machine-readable format, or in another standard format so that it is readable by another data controller