SHYFTER SA, hereinafter referred to as SHYFTER, is a company operating in the HR and scheduling management sector that offers a service involving the processing of personal data on behalf of another organization (company, enterprise, and/or firm). Our services are used to collect information for commercial and marketing purposes by the organization itself and/or by SHYFTER at that organization’s request, in accordance with the General Terms and Conditions of Sale (GTC) contained in the commercial contract that binds us with that organization. The data is indispensable and directly related to our services. However, our most valuable asset is the trust of our customers.
Protecting our customers’ data and ensuring its use aligns with their expectations is our highest priority. For this reason, the following notes on data protection have been drafted to inform you about the processing of your personal data and your rights regarding that processing, in accordance with the applicable data processing regulations, and in particular, the General Data Protection Regulation (“GDPR”) and the law on the protection of natural persons with regard to the processing of personal data of July 30, 2018.
You share personal data with us—directly or indirectly, explicitly or automatically.
SHYFTER, whose registered office is located at Boulevard de Waterloo 30, 1000 Brussels (Belgium) and registered in the Crossroads Bank for Enterprises under number (BE) 0720.922.212, acts as:
When SHYFTER acts as a data processor, the Client is the Data Controller for all data processing entrusted to SHYFTER. In such cases, please also refer to the Privacy Policy of each of our Clients for more information on these data processing activities.
This refers to the data you provide us through various channels, such as our website forms, our SHYFTER application or web platform, cookies, or via email.
We use this data solely for the processing purposes described below and only collect the data that is strictly necessary for those purposes.
These are processing activities for which SHYFTER acts as the Data Controller.
You may use the contact form on our website (https://shyfter.be/fr/contact/) to get in touch with us regarding any questions. The personal data you enter in the contact form will be processed only for the purpose of responding to your inquiry.
This processing is based on the execution of a pre-contractual measure.
In this regard, we collect your company name, your first and last name, your email address, your phone number, and a free-text message.
We retain your data for as long as necessary to respond to the inquiry.
You may use the demo request form on our website (https://shyfter.be/fr/demo-shyfter/) to request a tailored online demo to present the features of Shyfter for your business. The personal data you enter in this form will be processed only for the purpose of responding to your inquiry.
This processing is based on the execution of a pre-contractual measure.
In this regard, we collect your first and last name, your email address, your phone number, your country, your job title, company-related information (company name, number of employees, industry, any software already in use, if applicable), your needs regarding Shyfter, and a free-text comment.
We retain your data for as long as necessary to respond to the inquiry.
You may use the registration form on our website (https://try.shyfter.co/fr) to create an account to use our services. The personal data you enter in this form will be processed solely for the purpose of account creation.
This processing is based on the execution of the contract that binds us.
In this regard, we collect your first and last name, your email address, your phone number, your job title, your address, company-related information (company name, number of employees, industry, any software already in use, if applicable), your needs regarding Shyfter, and your login data (username, password, IP address, browser, recent visits, log data such as date and time of connection, etc.).
We retain your data for as long as you use our services.
We collect your data in order to process applications submitted, notably through the form available on the website. The personal data will be processed only for the purpose of handling your application.
This processing is based on the execution of a pre-contractual measure.
In this regard, we collect your first and last name, your email address, your CV, and cover letter.
We retain your data for 6 months from the receipt of the application.
We process your data to create a recruitment pool and potentially contact you in the event of new opportunities. The personal data will be processed only for the purpose of this activity.
This processing is based on your consent.
In this regard, we process your first and last name, your email address, your CV, and cover letter.
We retain your data for 2 years from our last contact.
The website SHYFTER.CO uses cookies.
A cookie is a small file transmitted with the pages of a website and stored by your browser on the hard drive of your computer, tablet, or phone. The information it contains may be sent back to the website’s servers during a subsequent visit, thereby enabling the site owner to track the user’s activity.
These are processing activities for which SHYFTER acts as the Data Controller.
We process your data to manage the purchase of licenses granted to users. The personal data will be processed only for this purpose.
This processing is based on the execution of the contract that binds us.
In this regard, we process your first and last name, your email address, your phone number, your job title, your address, company-related information (company name, company number, number of employees, industry, any software already in use, if applicable), the Shyfter features used, and your billing information (bank account number, VAT number, payment methods, billing address, etc.).
We retain your data for 7 years from the end of the contract’s execution.
We process your data to manage invoices and payments related to the use of the Service. The personal data will be processed only for this purpose.
This processing is based on the execution of the contract that binds us.
In this regard, we process your first and last name, your email address, your phone number, your job title, your address, company-related information (company name, number of employees, industry, any software already in use, if applicable), the Shyfter features used, and your billing information (bank account number, VAT number, payment methods, billing address, etc.).
We retain your data for 7 years from the end of the contract’s execution.
We process your data to comply with the legal accounting or tax obligations to which we are subject. The personal data will be processed only for this purpose.
This processing is based on our legal obligations.
In this regard, we process your first and last name, your email address, your phone number, your job title, your address, company-related information (company name, number of employees, industry, any software already in use, if applicable), the Shyfter features used, your billing information (bank account number, payment method, etc.), and your billing address.
We retain your data for 7 years from the end of the contract’s execution.
We process your data to manage user accounts, ensure security, prevent fraud and abuse of our services, etc. The personal data will be processed only for this purpose.
This processing is based on our legitimate interest.
In this processing, the data involved includes your first and last name, your address, your phone number, your email address, your National Register identification number, your date and place of birth, your marital status, your gender, your country of birth, your language, your financial identification data (IBAN, BIC), the access level granted to you, a profile picture, and all information related to your user account.
We retain your data for as long as your registration is active.
We process all information related to your user account as well as the content and date of your inquiry in order to provide support related to our services, answer your questions, and handle your requests. The personal data will be processed only for this purpose.
This processing is based on our legitimate interest.
We retain your data for as long as necessary to respond to your inquiry.
We process your data in order to customize your use of the service according to your needs when you set up your account preferences. The personal data will be processed only for this purpose.
This processing is based on our legitimate interest.
In this processing, the data involved includes your first and last name, your address, your phone number, your email address, your National Register identification number, your date and place of birth, your marital status, your gender, your country of birth, your language, your financial identification data (IBAN, BIC), the access level granted to you, a profile picture, and all information related to your user account.
We retain your data for as long as you use our services.
SHYFTER processes, on behalf of the Client, the data necessary for providing the services subscribed to under the Contract.
The purposes of the processing are determined by the Client, who is the Data Controller. As a data processor, SHYFTER undertakes to process the data only to the extent necessary, in accordance with the processing purposes determined by the Client and according to the documented instructions of the Client, except as required by any overriding legal provisions. SHYFTER commits to respecting the obligations incumbent upon it, as described in Appendix 1 of the General Terms and Conditions of Sale.
For further information on the implementation of these processing activities, and particularly regarding the retention period of the data, please refer to our Clients’ Privacy Policies as well as the service contracts that bind us to them.
The categories of processing for which we act as a data processor are as follows:
The personal data involved in these processing activities includes:
The categories of individuals concerned by these data processing activities are: Clients and users of the services.
For processing activities carried out by SHYFTER as a data processor, the data is retained for as long as necessary to provide the Services.
The Client, as the Data Controller, determines the applicable retention period for the data on its own systems, in accordance with the applicable regulations. Please consult the Privacy Policy of each Client for more information regarding these retention periods.
At the end of the service relationship, the data is made available to the Client on the Web Platform or, where applicable, on the Application for a period of two years from the end of the contractual relationship. After this period, the data is anonymized in SHYFTER’s IT systems, unless European Union law or Belgian law requires the retention of personal data.
Accordingly, SHYFTER will confirm in writing to the Client that the activities outlined in this section have been carried out, also mentioning any possible retention of the relevant personal data, as required by applicable law.
It is then the responsibility of the Client to take all necessary measures to ensure the integrity and backup of the data that SHYFTER provided during the execution of the Contract and after its termination.
Through its services, SHYFTER collects information on behalf of another organization (company, enterprise, and/or firm). In accordance with the GTC – “7. Database: The database generated by SHYFTER and its services will be made exclusively available to the signatory of the contract, who shall be solely responsible for it.”
We share the personal data that you have explicitly provided to us—and other non-automated data—only with other parties if we have obtained your explicit consent to do so, except where we are required by law, a request from a public authority, or a court decision.
As part of the execution of our services, we may also subcontract, in whole or in part, certain tasks to technical subcontractors who are bound to us by contract.
SHYFTER requires that its subcontractors comply with data protection legislation and provide sufficient guarantees regarding the implementation of appropriate technical and organizational measures so that the processing meets the requirements of applicable data protection legislation and ensures the protection of your rights.
We do not sell or disclose, in any way, the data we collect about you to third parties.
As a data subject, you have the following rights under the GDPR:
You may contact our Data Protection Officer at any time by email at rgpd@shyfter.co or by mail at:
SHYFTER
Boulevard de Waterloo 30
1000 Brussels
Belgium
If you believe that we have failed to meet any of our legal and/or contractual obligations, please contact us at the above-mentioned email address. We will make every effort to follow up with you as promptly as possible.
Any complaint, claim, or grievance should be addressed to SHYFTER’s registered office.
If our response does not satisfy you, you have the right to file a complaint with a supervisory authority.
The Belgian supervisory authority is:
DATA PROTECTION AUTHORITY
Rue de la Presse 35
1000 Brussels
Email: CONTACT@APD-GBA.BE
Taking into account the state of the art, SHYFTER commits, under the conditions of Article 32 of the GDPR, to implement all appropriate Technical and Organizational Measures to secure Personal Data and maintain their adequate security—including protection against any form of imprudent, unskilled, or unlawful use and/or processing, as well as protection against loss, destruction, or damage—and to ensure the confidentiality and integrity of the data.
These provisions shall be governed by, interpreted, and enforced in accordance with Belgian law, which shall be the sole applicable law. In the event of any dispute that cannot be resolved amicably within one month of its occurrence (this period may be extended by mutual agreement), the matter may be brought before the French-speaking Courts of the Judicial District of Brussels, which shall have exclusive jurisdiction.
This policy was created and entered into force on December 1, 2022. We reserve the right, at our sole discretion, to change, modify, add, or remove parts of this policy at any time.
