Déclaration de confidentialité: CovidSafe App - COVID Certificates
COVIDSAFE.BE APP
v.4 – 3th of March 2022
CovidSafe.be is an application specifically designed in the context of controlling the COVID-19 pandemic. This app uses your personal and confidential data exclusively for the purpose of controlling the COVID-19 pandemic. In this privacy statement, you will find all the information concerning the processing of your personal data by this app within the framework of the EU digital COVID Certificate. In particular, it will clarify how your data are collected, processed and used. This document is divided into two parts:
General: this section explains some key concepts, clarifies your rights when it comes to the processing of personal data and how you can exercise them;
EU digital COVID certificate : this section provides information regarding the processing of personal data in the context of obtaining the various certificates.
“Personal data”: any information relating to an identified or identifiable natural person (‘data subject’, i.e. not a company for instance); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“Processing”: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
“Controller”: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
“Processor”: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
You can always verify which data are processed and, if necessary, have them corrected. You also have the right to object to any processing that is based on the public interest. If you believe that your data are no longer relevant and should therefore be deleted, you also have the right to request this. Finally, if a processing operation is based on your consent, you have the right to withdraw your consent at any time.If you have any questions regarding the processing of your personal data or if you wish to exercise any of the above rights, you may contact the controller or his data protection officer. For additional information about the processing of your data by the app, contact dpo@ehealth.fgov.be.
You can also contact the controller or his data protection officer if you do not agree with the way your data are being processed. In addition, you can always lodge a complaint with the supervisory authority concerned.
Data Protection Authority
Drukpersstraat 35, 1000 Brussel
+32 (0)2 274 48 00
+32 (0)2 274 48 35
contact@apd-gba.be
This app is provided to the user by the federal government and the federated entities as intended in the cooperation agreement of 27 September 2021. The app is only available to persons whose certificates are managed by the institutions responsible for creating the vaccination certificate, test certificate or recovery certificate.
The controller for the processing performed by the app is the user who has installed the app on his device.
The EU Digital COVID Certificate will facilitate safe free movement of citizens in the EU during the COVID-19 pandemic. The certificate will allow you to prove that you have been vaccinated against COVID-19, that you have received a negative test result or that you have recovered from COVID-19. The certificate can be used in all EU Member States and in Iceland, Liechtenstein and Norway. Discussions are underway with Switzerland to ensure that this certificate can also be used in that country.The purpose of this app is to retrieve the EU digital COVID certificate of the user and of the persons for whom the user is empowered to process the data, and to store these certificates on the user's device.The use of this app is completely voluntary. This means there is no obligation to install it. By installing the app and entering his identification data, the user consents to the processing of his data by the app.
To obtain a EU digital COVID certificate, the following data are processed:
Identity data : the identity data necessary to identify the user and the identity data of the persons for whom the user is empowered to process the data.
Data concerning the certificates obtained : depending on the applicability to the user and the persons for whom the user is empowered to process the data, content data concerning the vaccination certificate, test certificate or recovery certificate will be processed.
The list of processed data can be found in the publications of the European Commission. (https://ec.europa.eu/health/si...)
The EU digital COVID certificate includes three different types of certificates:
the vaccination certificate,
the test certificate
and the recovery certificate.
The vaccination certificate is issued by the controllers below, each for his own area of responsibility, and can be retrieved by the app:
Vlaams Agentschap Zorg en Gezondheid, registered at the Crossroads Bank for Enterprises under the number 0316.380.841, whose offices are located at Avenue du Roi Albert II 35, box 33 in 1030 Brussels;
Agence Wallonne pour une Vie de Qualité, registered at the Crossroads Bank for Enterprises under the number 0646.877.855, whose offices are located at Rue de la Rivelaine 21, 6061 Charleroi;
Office de la Naissance et de l’Enfance, registered at the Crossroads Bank for Enterprises under the number 0231.907.895, whose offices are located at Chaussée de Charleroi 95, 1060 Saint-Gilles;
Common Community Commission, registered at the Crossroads Bank for Enterprises under the number 0240.682.833, whose offices are located at rue Belliard 71, box 1, 1040 Brussels;
French Community Commission, registered at the Crossroads Bank for Enterprises under the number 0240.682.437, whose offices are located at Rue des Palais 42, 1030 Brussels;
Ministerium der Deutschsprachigen Gemeinschaft, registered at the Crossroads Bank for Enterprises under the number 0332.582.613 whose offices are located at Gospertstrasse 1, 4700 Eupen.The EU digital COVID test and recovery certificates are issued by Sciensano, registered at the Crossroads Bank for Enterprises under the number 0693.876.830, whose offices are located at Juliette Wytsmanstraat 14, 1050 Elsene. These certificates can also be retrieved by the app.
The user can decide to show the QR code of the application to third parties. By doing this, the user will communicate identity and content data of the certificates to this third party.
The app may transfer data relating to the use of the app and the device to the supplier of the app who uses Crashlytics. The transfer is subject to the following privacy policy. No data related to the content of the certificates will be transmitted. More information about the use of Crashlytics can be found in the following document.
The CovidSafe.be app does not use the camera of your device.
The certificates are stored on the user’s device as long as they are valid and are deleted when the user deletes the app from his device.