Privacy statement RMOB CM Brussels

Which personal data does RMOB CM Brussels process about you and how?

Categories of personal data

Depending on the data you provide and in function of the different objectives as a national association and health insurance fund, RMOB CM Brussels processes the following categories depending on the type of persons involved:

Ordinary personal data:

• identification data: name, first name, address, telephone number, e-mail address, ...
• electronic identification data: IP addresses, cookies, connection times, etc.
• personal characteristics: age, gender, date of birth, place of birth, marital status, nationality
• family composition
• financial details: account number, payments, etc.
• memberships
• profession and employment
• video recordings: camera surveillance, photos, videos
• sound recording: call centers

Special personal data:

• Data from the National Register and the national register number of RMOB CM Brussels members; surname, first name, official main residence, date and place of birth, death, gender, marital status, nationality, family composition;
• Social data: data from the Crossroads Bank for Social Security or that are necessary for the implementation of social security (pension, affiliation, insurability, RIZIV number of healthcare providers, etc.);
• Personal data relating to health is data that provides information about a person's health status. Medical reports and diagnoses, hospital data, degree of need for care, reimbursement of healthcare services, etc.
• In the context of disputes, RMOB CM Brussels will also process criminal and administrative convictions and offenses: recoveries of health care and benefits caused by a liable third party, fraud.
• In the context of scientific research, RMOB CM Brussels can indirectly derive sensitive data from the data it processes, such as race, ethnic origin, political opinions, religious or philosophical beliefs, sexual behavior or sexual orientation.

From whom or from what source does RMOB CM Brussels receive information about you?

This mainly concerns data that comes from:

• from yourself, your legal representative, or someone who has received a mandate or your approval for this;
• from the healthcare providers (hospitals, doctors, nurses, etc.) that you have consulted, including via the third-party payment system;
• of the Crossroads Bank for Social Security of social security institutions and government services (Federal Public Service Finance, etc.);
• of the actors of integrated comprehensive care (autonomous centers for general social assistance, OCMWs);
• from SMR MC WALLONIE;
• of MC, CM and LCM (The members affiliated with the MC or CM are de facto members of the SMR MC WALLONIE, the SMR CM Brussels and the National Association of Christian Mutualities (LCM).);
• from CM-Zorgkas.

Which employee processes your personal data?

Your personal data is processed carefully and confidentially by the authorized employees to perform their tasks in the context of the described activities.

The employees are bound by professional secrecy and must comply with the duty of discretion. This is imposed legally (Crossroads Bank Act, National Register Act, Article 458 of the Criminal Code, Labor Act) and deontologically.

In addition, RMOB CM Brussels requires its employees to sign a confidentiality agreement.

Automated decision making

Certain data processing is carried out in a fully automated manner without the intervention of an employee, but on the basis of the criteria provided for in the context of the Brussels social protection insurance (e.g. pricing of benefits, payment of the allowance for assistance to the elderly, etc.)

To whom does RMOB CM Brussels pass on your personal data?

Your personal data may be passed on to:

• You, your legal representative (administrator, mediator, etc.), your representative (professional counselor, lawyer, etc.) or someone who has received a mandate or your agreement for this, directly or through the intervention of the healthcare professional of your choice ;
• An authorized third party (person, institution, government) solely on the basis of a law, contract, existing authorization from a Sectoral Committee (Social Security, and Health, National Register);
• Your healthcare providers (hospitals, doctors, nurses, ...): at your request or in the context of our legal assignments (insurability, global medical file, third-party payment system, etc.) via secure channels (eHealth platform, MyCarenet, IrisCarenet, WalCarenet, Refac... );
• CM and MC, to the extent that the exchange of data is necessary to comply with legal obligations;
• If applicable, to the CM Care Fund for Flemish Social Protection;
• If applicable, to the SMR MC WALLONIE, for Walloon Social Protection;
• To social security institutions via the National Intermutualist College (NIC) and the Crossroads Bank for Social Security:
  • National Social Security Office (RSZ),
  • National Social Insurance Agency for the Self-Employed (RSVZ),
  • National Employment Office (RVA),
  • National Institute for Health and Disability Insurance (RIZIV),
  • National Office for Annual Holidays (RJV),
  • National Pension Service,
  • FEDRIS (Federal Agency for Occupational Risks).
    The National Intermutualistic College works as a filter so that third parties do not know which health insurance fund you are affiliated with. For more information about the operation of the Crossroads Bank for Social Security : what does the CBSS do and how does it do it ?
• Federal public services, in particular the FPS Finance;
• Regional agencies designated for specific tasks, for example VAZG, AVIQ, Iriscare, DSL, ... ;
• Our auditors who are bound by a duty of confidentiality;
• Opposing parties, their lawyers, bailiffs, experts and to the Ministry of Justice in the event of disputes;
• All institutions to grant you a benefit based on a privileged status (increased compensation, etc.);
• Your creditors and their bailiffs in the context of an enforcement procedure (seizure, transfer, etc.);
• An heir or a notary in the event of death if the personal data are necessary for the settlement and distribution of the estate and insofar as the conditions for this transfer are met;
• Our processors;
  RMOB CM Brussels mainly uses the following processors:
  • CM, MC and LCM (National Association of Christian Mutualities) in the context of the support provided by their employees;
  • ICT processors;
  • Mailing companies;
  • Our lawyers and bailiffs, experts;
  • Carefully selected suppliers who need to process your personal data in the context and performance of their assigned tasks.

RMOB CM Brussels can also process data from you in the following cases:

Visit CM or MC website:

• When completing a form on the website, the data communicated will be processed depending on the context-specific purposes for which it was requested (for example, a request for information, registration for an activity, information about volunteer work, etc.).
• You can log in to My CM (or some other CM applications) with your eID via CSAM or Itsme, in which case personal data (national register number) is also processed to identify you, authenticate you and to retrieve your data from our systems . Your eID may also be requested and read (with your permission) during a visit to one of our offices.
• What RMOB CM Brussels processes that the user does not see (for example your IP address, browser type, operating system of your computer and the number of visits and pages visited). More information about this can be found in the Cookie Policy .

You want to work for RMOB CM Brussels.

• See separate privacy statement .

You are a healthcare provider

• In that case, RMOB CM Brussels only processes personal data relating to your activities as a healthcare provider and this in the context of the objectives described above. We are particularly authorized to publish your name and address that we receive from RIZIV and Iriscare to inform our members about your convention. If you wish to correct this data: www.cm.be/zorgproviders .

Transfer of data outside the European Economic Area

Your data may be transferred outside the European Economic Area (= European Union + Norway, Liechtenstein and Iceland) if:

• is provided in the context of Brussels social protection;
• is necessary for the implementation of measures that must be taken before concluding the contract and at your request;
• and if you have expressly consented.