Privacy policy and protection of personal data

Protecting and respecting your personal data is our priority.

For several years we have used an algorithm that encrypts and secures the data you send us, both in transmission (https) and in storage (encrypted data). Rest assured, in principle it is entirely unreadable by anyone with bad intentions.

We will never pass your data on to unauthorised third parties. As a credit and insurance broker, our reputation rests on the trust you place in us.

Our role is solely to help you carry out the project you have in mind, by collecting and passing on the data our partners need (banks, credit and insurance companies and so on) so that they can assess your application and, where appropriate, make you a suitable offer.

To that end, we collect a number of items of personal data.

PROXIF SRL, established at 20 rue Beau Séjour, B-6750 MUSSON, is the controller of your personal data.

The purpose of this text is to explain the scope of our role as controller.

The types of personal data we collect

Personal data is any information that makes it possible to identify a natural person. As a financial intermediary, we collect certain personal data about natural persons. It is necessary for us to carry out our role (requesting a credit offer, applying for insurance or a financial investment and so on): it includes, for example, your national register number, surname and first name.

Certain other data is also collected through us so that we can improve our IT and commercial tools: it includes, for example, cookie data, your IP address and your browsing habits on our website.

On the credit-24.lu website, measuring visits (Google Analytics) and measuring how well our adverts perform (Meta Pixel, Google Ads) only take place with your consent, given or refused in the cookie banner and changeable at any time with the "Manage cookies" link at the bottom of the page. They receive neither your name nor your contact details.

Please see our cookie policy for this website to find out more.

The processing of your personal data

Depending on the financial product requested, we collect different personal data according to the pre-contractual obligations needed to arrange it.

This data is provided by the client when entering their application on our website or through our online or offline applications, by email, during a meeting at our offices, or by telephone:

• Identifying data: email address, telephone number, surname, first name, address, national register number (for residents of Belgium only), social security number, date of birth, place of birth and so on.
• Socio-demographic data: marital status, matrimonial register, family situation, number of dependent children and so on.
• Professional data: name of the employer, the pension body, the health insurance fund, the unemployment fund and so on.
• Financial data: amount of income, outgoings, details of current credit agreements and so on.

When you browse our websites or use our mobile applications, the following data may be collected:

IP address, data held in cookies, GPS position, the way you browse our site and so on.

When we consult our financial partners, they send us data concerning you:

• The history of any previous applications made in your name.
• The nature of any such applications made in your name.
• Summary information on your credit agreements registered with the National Bank of Belgium (central credit register).

When we consult our own information systems, we look at the following data:

• The list of any previous applications made in your name through our company.
• The nature of any previous applications made in your name through our company.

How we process your data

We process personal data in the following situations:

• When performing an agreement, in a pre-contractual context and when you request our services (asking whether credit is feasible, applying for insurance and so on), we pass your data to the bodies concerned (banks, credit companies, insurance companies and so on).
• When we contact you by email, by telephone or by any other means after you have submitted, given or sent us your contact details.
• During commercial activity (by email, by telephone or by post).
• When a legal obligation requires it (court proceedings, sector measures and so on).
• When we guard against the risk of fraud by carrying out targeted checks on certain information with third-party companies or individuals (financial partner, pension body, health insurance fund, employer, unemployment body, municipal administration and so on), where the legal framework allows it and within the limits of respect for privacy.
• When you accept it, to measure visits to our website and how well our adverts perform. This processing is based on your consent, which you can withdraw at any time with the "Manage cookies" link at the bottom of every page.
• When we use artificial intelligence tools to examine the documents you send us, in order to speed up the handling of your application and to spot any inconsistencies or attempted fraud. This analysis supports our teams and never constitutes a fully automated decision within the meaning of Article 22 of the GDPR.

Who do we pass your data to?

We have never sold your personal data to third parties and we undertake never to do so.

In carrying out our role as a financial intermediary, for instance following a credit application you have submitted on our site, your personal data is passed to the authorised bodies (lending company, insurance company, notary, property valuer and so on). We pass them only the data needed to carry out the request (credit, insurance, investment, preparation of notarial deeds, property valuation and so on). For example, for an insurance application, the insurer will receive only the data that allows it to make a proposal.

The bodies we work with act as controllers and each carries out its own processing.

For example, in the case of a credit application, the credit institutions themselves consult the central individual credit register of the National Bank of Belgium (both regulated and non-regulated records) and their own databases, and may also pass personal data to their parent group and/or to the credit insurer Atradius (78 avenue Prince de Liège, B-5100 Namur) in order to decide whether the loan can be granted.

For more information on how these companies process your personal data, please contact them:

Credit companies:

• RECORD CREDITS: 24 Avenue Marnix B-1000 Bruxelles
• ELANTIS: 38 Rue des Clarisses B-4000 Liège
• ALPHA CRÉDIT: 60 Rue Ravenstein B-1000 Bruxelles
• EUROPA BANK: 170 Burgstraat B-9000 GENT
• CREDIMO: 6-10 Weversstraat B-1730 Asse

Insurance companies:

• NN Insurance: 38 Avenue Fonsny B-1060 Bruxelles
• AFI ESCA: 81 Chaussée de Nivelles B-1420 Braine-l'Alleud
• CARDIF: 1424 Chaussée de Mons B-1070 Anderlecht

As regards the artificial intelligence analysis mentioned above, we use specialist providers who act as processors and are bound by strict contractual undertakings of confidentiality and security. Where those providers are established outside the European Union, the corresponding transfers rely on standard contractual clauses compliant with the GDPR.

To run the credit-24.lu website, we also use technical service providers acting as processors: website hosting (Vercel), sending the messages from the contact form (Resend) and protecting that form against robots (Cloudflare). Only with your consent, Google Ireland Limited (Google Analytics, Google Ads) and Meta Platforms Ireland Limited (Meta Pixel) receive the browsing data described in our cookie policy. Some of these providers may process data in the United States: these transfers rely on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.

Our company's staff and processors, all of whom are bound to respect the privacy of our clients and prospective clients, may access your personal data only where their tasks justify it.

Your rights and how to exercise them

Objecting to direct marketing

You may object at any time to the use of your personal data for direct marketing. So that we no longer contact you for that purpose, please send an email to info@credit-24.lu, attaching a copy of both sides of your identity card and stating the purpose of your request.

Rectification, erasure and portability of data

You have the right at any time to access, amend and erase your personal data: we will amend, add to or erase your personal data accordingly, within legal and contractual limits. You may also contact us to ask what personal information we hold and to obtain a copy of it. You may also be told about the processing we have carried out using that data and which entities it has been passed to.

To do so, please write to us at info@credit-24.lu, attaching a copy of both sides of your identity card and stating the purpose of your request.

How long we keep your personal data

Save for legal, contractual or operational obligations requiring a longer retention period, our company keeps your personal data for up to 10 years after the end of the contractual relationship (the end of the credit agreement, for example).

Who to contact with questions or comments

Our DPO (Data Protection Officer) can be reached by post at:

PROXIF SRL, for the attention of the DPO

20 rue Beau séjour

B-6750 MUSSON

I have a complaint or a dispute about the use of my personal data

You may write to the data protection authority at:

35 rue de la Presse

B-1000 Bruxelles

If you live in Luxembourg, you may also contact the National Commission for Data Protection (CNPD):

15 boulevard du Jazz

L-4370 Belvaux