Page translated by robot translator.
COOKIES
Date of last modification 19.04.2021
When you visit websites, some of them place pieces of information on your computer. This information is called "cookies".
There are several types of cookies
- Strictly necessary (or mandatory) cookies
- Analytical cookies
- Functional cookies
- Advertising cookies
We use the mandatory cookie. It allows the site to function optimally. It keeps the connection anonymous and is destroyed when the visitor leaves the site.
Functional cookies: functional cookies are cookies that make our website work better and more pleasant for our visitors. They also ensure a more personalised browsing experience for you, such as cookies that remember your language preferences.
We do not use any other cookies.
However, we do have a banner allowing you to opt out of these mandatory and functional cookies. However, this may result in the site not functioning optimally.
There are several types of cookies
- Strictly necessary (or mandatory) cookies
- Analytical cookies
- Functional cookies
- Advertising cookies
We use the mandatory cookie. It allows the site to function optimally. It keeps the connection anonymous and is destroyed when the visitor leaves the site.
Functional cookies: functional cookies are cookies that make our website work better and more pleasant for our visitors. They also ensure a more personalised browsing experience for you, such as cookies that remember your language preferences.
We do not use any other cookies.
However, we do have a banner allowing you to opt out of these mandatory and functional cookies. However, this may result in the site not functioning optimally.
PRIVACY POLICY
Date of last modification : 03.05.2021
1. Why a Charter for the protection of Your personal data?
This Privacy Policy (hereinafter the "Policy") concerns personal data processed within the framework of the website accessible at the following address www.museumpromotion.be (hereinafter the "Site") and owned by Museum Promotion Asbl (referred to in this Policy as "We", also referred to as "Us", "Our", etc.; see Our contact details in Article 2 hereof).
We attach importance to respecting the personal data of persons who access the Site, visit it, place orders on it and generally use Our site. These persons are referred to in this Privacy Policy as "You", "Your", etc.
Our primary concern is to treat Your personal data with the utmost care and to ensure the highest level of protection in accordance with Regulation 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter "RGPD" - General Data Protection Regulation) and the national law applicable in this matter.
This Privacy Policy informs You about :
- the personal data We collect about You and the reasons for this collection;
- how We use Your personal data;
- the rights You have over Your personal data and how to exercise them.
A glossary of the main legal terms used in this Privacy Policy is available below.
2. Who is responsible for the use of Your data in the context of Your relationship with the services that We offer on the Site?
We are the controller of the processing of Your personal data described in this Privacy Policy.
Please find below Our full contact details:
Asbl Museum Promotion
Registered with the Crossroads Bank for Enterprises under number 0463.050.185
Parc du Cinquantenaire, 3, B-1000 Brussels, Belgium
Any question or request concerning the processing of Your personal data can be sent to the following email address: museumpromotionshop@gmail.com
3. Why do we collect Your personal data and on what basis?
We collect personal data about You for various reasons.
We may only collect and use Your personal data if such use is based on one of the legal grounds determined by the GDPR (for example, Your consent or the performance of a contract with Us).
The purposes for which Your personal data may be used and the corresponding legal basis are listed below.
Purpose 1: management of messages received
We have a legitimate interest in processing the personal data of people who contact Us in order to respond appropriately (Article 6.1.f) of the GDPR).
Purpose 2: management of pre-contractual relations with potential customers
We process Your personal data in order to respond to requests for prior information about our products and services that We offer on the Site and/or questions that You send to Us.
We have a legitimate interest in processing the personal data of potential customers insofar as it enables Us to respond to their requests and/or questions (see Article 6.1.f) of the GDPR). This may also include processing necessary for pre-contractual measures (see Article 6.1.b) of the GDPR).
Purpose 3: customer relationship and order management
This includes the processing of data necessary for the management in the broadest sense of the relationship with Our customers, and includes, among other things, the execution of the services that You request from Us, including the online ordering service of the Site, the creation of a user account, the management and collection of payments, etc.
We process personal data to carry out operations relating to customer management, including: contracts; orders; deliveries; invoices; accounting and in particular the management of customer accounts.
We have a legitimate interest in collecting and processing data relating to Our customers in order to ensure the proper performance of the contract (Article 6.1. f) GDPR). The processing of such data is also necessary for the performance of the contract to which Our customers are party (Article 6.1.b) of the GDPR).
Purpose 4: marketing to Our customers and non-customers
The sending of newsletters or other information, the management of Facebook pages or other is not applicable.
Purpose 5: Dispute management
We have a legitimate interest in collecting and processing data relating to Our customers for the purpose of managing disputes with them. This purpose is also based on the need to perform the disputed contract concluded with them (Article 6.1. f) and b) of the GDPR).
Purpose 6: statistics
Statistical purposes" means any collection and processing of personal data necessary for the production of statistical results. These statistical results may also be used for various purposes, including improving Our services.
We have a legitimate interest in processing the personal data of our Customers and online users of our Website in order to improve Our services and to have a better understanding of the target audiences and visitors (Article 6.1.f) of the GDPR).
Purpose 7: management of reviews and publication of testimonials
We have a legitimate interest in processing personal data relating to reviews that We may publish on Our Website, as these allow Us not only to identify the strengths and weaknesses of the services We offer but also to promote them (Article 6.1.f) of the GDPR).
4. What personal data do We collect about You?
We detail below the personal data that We collect during each of these interactions for each use that We make as well as the reason for the collection and the way it is collected.
Purpose 1: management of messages received
E-mail address and/or personal information sent by the person making contact.
For this purpose, data is collected directly from You.
Purpose 2: management of pre-contractual relations with potential customers
Personal identification data (surname, first name, e-mail address, company, telephone number, order number, etc.).
For this purpose, the data is collected directly from You.
Purpose 3: customer relationship and order management
• Personal identification data (surname, first name, postal address, e-mail address, telephone number, language);
• Data relating to the means of payment (postal or bank identity statement, bank card number, expiry date of the bank card, visual cryptogram, the latter not to be kept);
• Data relating to the transaction (the transaction number, details of the purchase of a product, etc.);
• Data relating to the follow-up of the commercial relationship (test requests, product purchased, service subscribed to, quantity, amount, periodicity, delivery address, purchase history, product returns, correspondence with the customer and after-sales service, customer exchanges and comments, person(s) in charge of customer relations, etc.);
• Data relating to the payment of invoices (terms of payment, discounts granted, receipts, balances and outstanding payments, etc.).
For this purpose, data is collected directly from You.
Purpose 4: marketing
Newsletters, satisfaction surveys, social networks: not used.
Purpose 5: dispute management
Identification data (email address, telephone number, etc.), financial data (bank account, etc.); any information relating to the contractual relationship; any information arising from the dispute or litigation surrounding it.
For this purpose, data is collected directly from You.
Purpose 6: statistics
Personal identification data (surname, first name, e-mail address, telephone number, etc.); financial and/or invoicing data; any information related to the order; any information that You have given Us voluntarily (for example in the context of information surveys or by communicating with Us by e-mail).
Concerning site traffic statistics: pages consulted; electronic identification data (IP address, connection records, etc.); etc.
For this purpose, data is collected directly from You.
Purpose 7: management of notices and publication of testimonials
Identification data; data related to contributions and testimonials of people who post opinions on Our services.
For this purpose, data is collected directly from You.
5. With whom do we share Your personal data?
5.1. With hosting service providers
• hosting services: Kingeshop (Canada)
• online payment solutions: Stripe (Europe and USA)
5.2. With public authorities
In response to legal requests, including to meet national security or law enforcement requirements (e.g. NSSO, tax authorities, etc.).
6. Do we use Your personal data in any other way?
We do not pass on Your information to any other organisation or company.
We do not have partnerships or special relationships with internet advertising agencies.
7. How long do we keep Your personal data?
We have determined specific rules regarding the length of time we retain Your personal data. This period varies according to the different purposes and must take into account possible legal obligations to keep certain data.
You will find below the list of purposes and the retention periods:
Purpose 1: management of messages received
The time necessary to respond to the request. It is then deleted.
Purpose 2: management of pre-contractual relations with potential customers
3 years from the last action/reaction by the data subject.
Purpose 3: management of customer relations and orders
The retention period is 10 years from the last order placed or, if You have created a user account, 10 years from the date of the final closure of this user account.
Purpose 4: marketing
Not applicable as not used
Purpose 5: Dispute management
10 years from the end of the dispute.
Purpose 6: statistics
3 to 10 years depending on the initial purpose for which the data was collected.
2 years for site traffic statistics.
Purpose 7: management of opinions and publication of testimonials
1 year
8. What rights do You have regarding Your personal data?
We wish to inform You in the clearest possible way of the rights that You have over Your personal data. We also want to make it as easy as possible for You to exercise these rights.
Below you will find a summary of Your rights with a description of how to exercise them.
8.1. The right of access
You may access all of the following information about:
• The categories of personal data that We collect about You;
• The purposes for which We use it;
• The categories of persons to whom Your personal data has been or will be disclosed and in particular those outside Europe;
• The length of time Your personal data is kept on our systems;
• Your right to ask Us to correct or delete Your personal data or to limit the use We make of Your personal data and the right to object to such use,
• Your right to lodge a complaint with a European Data Protection Authority;
• Information about its source where We do not collect Your personal data directly from You;
• How Your personal data is protected when it is transferred to countries outside Europe.
8.2. The right of rectification
You may ask Us to correct and/or update Your personal data.
8.3. The right to erasure
You may contact Us at any time to request that We delete the personal data that We process about You, if You find Yourself in one of the following situations:
• Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
• You have withdrawn your consent on which a processing of Your personal data by Us is based;
• You consider that one of the processing operations infringes Your privacy and causes You undue harm for a reason of Your own;
• Your personal data is not processed in accordance with the GDPR and Belgian law;
• Your personal data must be deleted to comply with a legal obligation under European Union law or under the national law to which We are subject.
However, We may not be able to comply with your request. Indeed, it should be borne in mind that this right is not absolute. We have to balance it with other important rights or values, such as freedom of expression, compliance with a legal obligation to which We are subject, or important public interest considerations.
8.4. The right to be forgotten
Our Site may contain personal data about You. If You no longer wish it to appear on our Site, You may ask Us to delete it if any of the following apply to You:
• Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
• You have withdrawn your consent on which a processing of Your personal data by Us is based;
• You consider that one of the processing operations in question infringes on your privacy and causes you undue hardship for a reason of your own;
• You no longer wish to receive commercial solicitations from us;
• Your personal data is not processed in accordance with the GDPR and Belgian law;
• Your personal data must be deleted in order to comply with a legal obligation under European Union law or under the national law to which We are subject.
However, We may not be able to comply with your request for the right to be forgotten. Indeed, it must be borne in mind that this right is not absolute. We have to balance it with other important rights or values, such as freedom of expression, compliance with a legal obligation to which We are subject or important public interest reasons.
8.5. The right to restrict processing
You have the right to ask Us to restrict Your data, i.e. to mark (e.g. temporarily move Your data to another processing system or lock Your data so that it is inaccessible) Your stored personal data, with a view to limiting its future processing.
You may exercise this right when:
• the accuracy of the data in question is disputed;
• Your personal data are not processed in accordance with the GDPR and the Belgian law;
• the data is no longer necessary to achieve the purposes originally intended but cannot yet be deleted for legal reasons (in particular for the establishment, exercise or defence of Your legal rights);
• the decision regarding Your objection to the processing is pending.
In case of limitation of the processing, Your personal data will no longer be processed without Your prior consent, except for their retention (storage).
However, Your personal data may still be processed for the establishment, exercise or defence of legal claims, or for the protection of the rights of another legal or natural person, or for important reasons of public interest within the Union or the Member State.
In the event of a restriction on the processing of some of Your personal data, We will keep You informed of when the measure will be lifted.
8.6. The right to object
You may object to the use of Your personal data for commercial solicitations, and in particular, for advertising purposes.
You have the right to object to Our processing of Your personal data if, for any reason whatsoever, You consider that such processing infringes Your privacy and causes You undue harm.
However, you may not prevent Us from processing Your data in any way:
• if the processing is necessary for the conclusion or performance of a contract;
• if the processing has been imposed by law or regulation;
• if the processing is necessary to establish, exercise or defend legal claims.
However, it may be that for other reasons We are unable to comply with your request. Of course, in this case We will ensure that We provide You with the clearest possible answer.
8.7. The right to portability
This right offers You the possibility to more easily control Your personal data Yourself and more precisely
• to retrieve Your personal data that is processed by Us, for Your personal use, and store it on a private device or cloud for example.
• to transfer Your personal data from Us to another company, either by You or directly by Us, provided that such direct transfer is "technically possible".
This right covers both Your actively and knowingly declared data such as data You provide (e.g. personal identification data) and information that We collect.
Conversely, personal data that is derived, calculated or inferred from data You have provided is excluded from the right to portability as it is created by Us.
However, You should be aware that We have the right to refuse Your request for portability. Indeed, this right only applies to personal data based on your consent or the performance of a contract concluded with You (to know precisely which personal data can be subject to the right to portability: see the purposes and grounds section). Likewise, this right must not affect the rights and freedoms of third parties whose data is contained in the data transmitted following a request for portability.
9. How to exercise Your rights?
For any request, You just have to send Us an email or a letter (see contact details above).
It is important to indicate the right that You wish to exercise, the reasons for your request, and to attach a copy of both sides of your identity card. The request should specify the address to which the reply should be sent.
We have a period of one (1) month to respond to your request, increased by two (2) additional months in the event of a request requiring in-depth research or in the event that We receive a large number of requests.
However, We may not be able to comply with your request. Of course, in this case We will ensure that We give You the clearest possible answer.
10. Is your personal data transmitted abroad?
For the purposes of certain processing, some data is transferred to Europe and the United States (see 5.1)
Within the European Economic Area, you should be aware that personal data is afforded the same level of protection. In the US, Stripe has the same level of protection (Strip is also implemented in Ireland and therefore complies with the GDPR).
11. How to contact us? Making a complaint to a data protection authority?
Do you have a question or a suggestion regarding this Policy? Do not hesitate to contact Us by email or by post (see contact details above). We will read You carefully and We will answer You as soon as possible.
You think that We do not protect Your personal data sufficiently? We invite You to contact Us directly. You also have the right to lodge a complaint with the Belgian Data Protection Authority:
• By post: Data Protection Authority, Rue de la Presse, 35, 1000 Brussels
• By e-mail: contact@apd-gba.be
12. How do I know if this Privacy Policy has been modified?
This Privacy Policy may be amended at any time, in particular to take account of any legislative or regulatory changes and the development of our services. The date of the last modification can be found under the main heading PRIVACY POLICY
We encourage you to periodically review this Privacy Policy to learn how we protect your personal information.
This Privacy Policy (hereinafter the "Policy") concerns personal data processed within the framework of the website accessible at the following address www.museumpromotion.be (hereinafter the "Site") and owned by Museum Promotion Asbl (referred to in this Policy as "We", also referred to as "Us", "Our", etc.; see Our contact details in Article 2 hereof).
We attach importance to respecting the personal data of persons who access the Site, visit it, place orders on it and generally use Our site. These persons are referred to in this Privacy Policy as "You", "Your", etc.
Our primary concern is to treat Your personal data with the utmost care and to ensure the highest level of protection in accordance with Regulation 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter "RGPD" - General Data Protection Regulation) and the national law applicable in this matter.
This Privacy Policy informs You about :
- the personal data We collect about You and the reasons for this collection;
- how We use Your personal data;
- the rights You have over Your personal data and how to exercise them.
A glossary of the main legal terms used in this Privacy Policy is available below.
2. Who is responsible for the use of Your data in the context of Your relationship with the services that We offer on the Site?
We are the controller of the processing of Your personal data described in this Privacy Policy.
Please find below Our full contact details:
Asbl Museum Promotion
Registered with the Crossroads Bank for Enterprises under number 0463.050.185
Parc du Cinquantenaire, 3, B-1000 Brussels, Belgium
Any question or request concerning the processing of Your personal data can be sent to the following email address: museumpromotionshop@gmail.com
3. Why do we collect Your personal data and on what basis?
We collect personal data about You for various reasons.
We may only collect and use Your personal data if such use is based on one of the legal grounds determined by the GDPR (for example, Your consent or the performance of a contract with Us).
The purposes for which Your personal data may be used and the corresponding legal basis are listed below.
Purpose 1: management of messages received
We have a legitimate interest in processing the personal data of people who contact Us in order to respond appropriately (Article 6.1.f) of the GDPR).
Purpose 2: management of pre-contractual relations with potential customers
We process Your personal data in order to respond to requests for prior information about our products and services that We offer on the Site and/or questions that You send to Us.
We have a legitimate interest in processing the personal data of potential customers insofar as it enables Us to respond to their requests and/or questions (see Article 6.1.f) of the GDPR). This may also include processing necessary for pre-contractual measures (see Article 6.1.b) of the GDPR).
Purpose 3: customer relationship and order management
This includes the processing of data necessary for the management in the broadest sense of the relationship with Our customers, and includes, among other things, the execution of the services that You request from Us, including the online ordering service of the Site, the creation of a user account, the management and collection of payments, etc.
We process personal data to carry out operations relating to customer management, including: contracts; orders; deliveries; invoices; accounting and in particular the management of customer accounts.
We have a legitimate interest in collecting and processing data relating to Our customers in order to ensure the proper performance of the contract (Article 6.1. f) GDPR). The processing of such data is also necessary for the performance of the contract to which Our customers are party (Article 6.1.b) of the GDPR).
Purpose 4: marketing to Our customers and non-customers
The sending of newsletters or other information, the management of Facebook pages or other is not applicable.
Purpose 5: Dispute management
We have a legitimate interest in collecting and processing data relating to Our customers for the purpose of managing disputes with them. This purpose is also based on the need to perform the disputed contract concluded with them (Article 6.1. f) and b) of the GDPR).
Purpose 6: statistics
Statistical purposes" means any collection and processing of personal data necessary for the production of statistical results. These statistical results may also be used for various purposes, including improving Our services.
We have a legitimate interest in processing the personal data of our Customers and online users of our Website in order to improve Our services and to have a better understanding of the target audiences and visitors (Article 6.1.f) of the GDPR).
Purpose 7: management of reviews and publication of testimonials
We have a legitimate interest in processing personal data relating to reviews that We may publish on Our Website, as these allow Us not only to identify the strengths and weaknesses of the services We offer but also to promote them (Article 6.1.f) of the GDPR).
4. What personal data do We collect about You?
We detail below the personal data that We collect during each of these interactions for each use that We make as well as the reason for the collection and the way it is collected.
Purpose 1: management of messages received
E-mail address and/or personal information sent by the person making contact.
For this purpose, data is collected directly from You.
Purpose 2: management of pre-contractual relations with potential customers
Personal identification data (surname, first name, e-mail address, company, telephone number, order number, etc.).
For this purpose, the data is collected directly from You.
Purpose 3: customer relationship and order management
• Personal identification data (surname, first name, postal address, e-mail address, telephone number, language);
• Data relating to the means of payment (postal or bank identity statement, bank card number, expiry date of the bank card, visual cryptogram, the latter not to be kept);
• Data relating to the transaction (the transaction number, details of the purchase of a product, etc.);
• Data relating to the follow-up of the commercial relationship (test requests, product purchased, service subscribed to, quantity, amount, periodicity, delivery address, purchase history, product returns, correspondence with the customer and after-sales service, customer exchanges and comments, person(s) in charge of customer relations, etc.);
• Data relating to the payment of invoices (terms of payment, discounts granted, receipts, balances and outstanding payments, etc.).
For this purpose, data is collected directly from You.
Purpose 4: marketing
Newsletters, satisfaction surveys, social networks: not used.
Purpose 5: dispute management
Identification data (email address, telephone number, etc.), financial data (bank account, etc.); any information relating to the contractual relationship; any information arising from the dispute or litigation surrounding it.
For this purpose, data is collected directly from You.
Purpose 6: statistics
Personal identification data (surname, first name, e-mail address, telephone number, etc.); financial and/or invoicing data; any information related to the order; any information that You have given Us voluntarily (for example in the context of information surveys or by communicating with Us by e-mail).
Concerning site traffic statistics: pages consulted; electronic identification data (IP address, connection records, etc.); etc.
For this purpose, data is collected directly from You.
Purpose 7: management of notices and publication of testimonials
Identification data; data related to contributions and testimonials of people who post opinions on Our services.
For this purpose, data is collected directly from You.
5. With whom do we share Your personal data?
5.1. With hosting service providers
• hosting services: Kingeshop (Canada)
• online payment solutions: Stripe (Europe and USA)
5.2. With public authorities
In response to legal requests, including to meet national security or law enforcement requirements (e.g. NSSO, tax authorities, etc.).
6. Do we use Your personal data in any other way?
We do not pass on Your information to any other organisation or company.
We do not have partnerships or special relationships with internet advertising agencies.
7. How long do we keep Your personal data?
We have determined specific rules regarding the length of time we retain Your personal data. This period varies according to the different purposes and must take into account possible legal obligations to keep certain data.
You will find below the list of purposes and the retention periods:
Purpose 1: management of messages received
The time necessary to respond to the request. It is then deleted.
Purpose 2: management of pre-contractual relations with potential customers
3 years from the last action/reaction by the data subject.
Purpose 3: management of customer relations and orders
The retention period is 10 years from the last order placed or, if You have created a user account, 10 years from the date of the final closure of this user account.
Purpose 4: marketing
Not applicable as not used
Purpose 5: Dispute management
10 years from the end of the dispute.
Purpose 6: statistics
3 to 10 years depending on the initial purpose for which the data was collected.
2 years for site traffic statistics.
Purpose 7: management of opinions and publication of testimonials
1 year
8. What rights do You have regarding Your personal data?
We wish to inform You in the clearest possible way of the rights that You have over Your personal data. We also want to make it as easy as possible for You to exercise these rights.
Below you will find a summary of Your rights with a description of how to exercise them.
8.1. The right of access
You may access all of the following information about:
• The categories of personal data that We collect about You;
• The purposes for which We use it;
• The categories of persons to whom Your personal data has been or will be disclosed and in particular those outside Europe;
• The length of time Your personal data is kept on our systems;
• Your right to ask Us to correct or delete Your personal data or to limit the use We make of Your personal data and the right to object to such use,
• Your right to lodge a complaint with a European Data Protection Authority;
• Information about its source where We do not collect Your personal data directly from You;
• How Your personal data is protected when it is transferred to countries outside Europe.
8.2. The right of rectification
You may ask Us to correct and/or update Your personal data.
8.3. The right to erasure
You may contact Us at any time to request that We delete the personal data that We process about You, if You find Yourself in one of the following situations:
• Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
• You have withdrawn your consent on which a processing of Your personal data by Us is based;
• You consider that one of the processing operations infringes Your privacy and causes You undue harm for a reason of Your own;
• Your personal data is not processed in accordance with the GDPR and Belgian law;
• Your personal data must be deleted to comply with a legal obligation under European Union law or under the national law to which We are subject.
However, We may not be able to comply with your request. Indeed, it should be borne in mind that this right is not absolute. We have to balance it with other important rights or values, such as freedom of expression, compliance with a legal obligation to which We are subject, or important public interest considerations.
8.4. The right to be forgotten
Our Site may contain personal data about You. If You no longer wish it to appear on our Site, You may ask Us to delete it if any of the following apply to You:
• Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
• You have withdrawn your consent on which a processing of Your personal data by Us is based;
• You consider that one of the processing operations in question infringes on your privacy and causes you undue hardship for a reason of your own;
• You no longer wish to receive commercial solicitations from us;
• Your personal data is not processed in accordance with the GDPR and Belgian law;
• Your personal data must be deleted in order to comply with a legal obligation under European Union law or under the national law to which We are subject.
However, We may not be able to comply with your request for the right to be forgotten. Indeed, it must be borne in mind that this right is not absolute. We have to balance it with other important rights or values, such as freedom of expression, compliance with a legal obligation to which We are subject or important public interest reasons.
8.5. The right to restrict processing
You have the right to ask Us to restrict Your data, i.e. to mark (e.g. temporarily move Your data to another processing system or lock Your data so that it is inaccessible) Your stored personal data, with a view to limiting its future processing.
You may exercise this right when:
• the accuracy of the data in question is disputed;
• Your personal data are not processed in accordance with the GDPR and the Belgian law;
• the data is no longer necessary to achieve the purposes originally intended but cannot yet be deleted for legal reasons (in particular for the establishment, exercise or defence of Your legal rights);
• the decision regarding Your objection to the processing is pending.
In case of limitation of the processing, Your personal data will no longer be processed without Your prior consent, except for their retention (storage).
However, Your personal data may still be processed for the establishment, exercise or defence of legal claims, or for the protection of the rights of another legal or natural person, or for important reasons of public interest within the Union or the Member State.
In the event of a restriction on the processing of some of Your personal data, We will keep You informed of when the measure will be lifted.
8.6. The right to object
You may object to the use of Your personal data for commercial solicitations, and in particular, for advertising purposes.
You have the right to object to Our processing of Your personal data if, for any reason whatsoever, You consider that such processing infringes Your privacy and causes You undue harm.
However, you may not prevent Us from processing Your data in any way:
• if the processing is necessary for the conclusion or performance of a contract;
• if the processing has been imposed by law or regulation;
• if the processing is necessary to establish, exercise or defend legal claims.
However, it may be that for other reasons We are unable to comply with your request. Of course, in this case We will ensure that We provide You with the clearest possible answer.
8.7. The right to portability
This right offers You the possibility to more easily control Your personal data Yourself and more precisely
• to retrieve Your personal data that is processed by Us, for Your personal use, and store it on a private device or cloud for example.
• to transfer Your personal data from Us to another company, either by You or directly by Us, provided that such direct transfer is "technically possible".
This right covers both Your actively and knowingly declared data such as data You provide (e.g. personal identification data) and information that We collect.
Conversely, personal data that is derived, calculated or inferred from data You have provided is excluded from the right to portability as it is created by Us.
However, You should be aware that We have the right to refuse Your request for portability. Indeed, this right only applies to personal data based on your consent or the performance of a contract concluded with You (to know precisely which personal data can be subject to the right to portability: see the purposes and grounds section). Likewise, this right must not affect the rights and freedoms of third parties whose data is contained in the data transmitted following a request for portability.
9. How to exercise Your rights?
For any request, You just have to send Us an email or a letter (see contact details above).
It is important to indicate the right that You wish to exercise, the reasons for your request, and to attach a copy of both sides of your identity card. The request should specify the address to which the reply should be sent.
We have a period of one (1) month to respond to your request, increased by two (2) additional months in the event of a request requiring in-depth research or in the event that We receive a large number of requests.
However, We may not be able to comply with your request. Of course, in this case We will ensure that We give You the clearest possible answer.
10. Is your personal data transmitted abroad?
For the purposes of certain processing, some data is transferred to Europe and the United States (see 5.1)
Within the European Economic Area, you should be aware that personal data is afforded the same level of protection. In the US, Stripe has the same level of protection (Strip is also implemented in Ireland and therefore complies with the GDPR).
11. How to contact us? Making a complaint to a data protection authority?
Do you have a question or a suggestion regarding this Policy? Do not hesitate to contact Us by email or by post (see contact details above). We will read You carefully and We will answer You as soon as possible.
You think that We do not protect Your personal data sufficiently? We invite You to contact Us directly. You also have the right to lodge a complaint with the Belgian Data Protection Authority:
• By post: Data Protection Authority, Rue de la Presse, 35, 1000 Brussels
• By e-mail: contact@apd-gba.be
12. How do I know if this Privacy Policy has been modified?
This Privacy Policy may be amended at any time, in particular to take account of any legislative or regulatory changes and the development of our services. The date of the last modification can be found under the main heading PRIVACY POLICY
We encourage you to periodically review this Privacy Policy to learn how we protect your personal information.
13. Glossary of key legal terms used in this Charter
Terms frequently used in this Charter
Definitions under the GDPR
Explanations of terms in common language
Personal data (in this Charter referred to as "personal data")
Any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); an "identifiable natural person" is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.
All types of information that relate to a natural person, i.e. an individual, identifiable directly or indirectly, as distinct from other persons.
For example: a name, a photo, a fingerprint, an e-mail address, a telephone number, a social security number, etc.
For example: a name, a photo, a fingerprint, an e-mail address, a telephone number, a social security number, etc.
Processing
Any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, limitation, erasure or destruction.
Any use of personal data, regardless of the process used (recording, organizing, storing, modifying, linking with other data, transmitting, etc. of personal data).
For example: the use of Your data for the purpose of contract execution, sending communications from the firm regarding news, legal information and invitations to events, etc.
For example: the use of Your data for the purpose of contract execution, sending communications from the firm regarding news, legal information and invitations to events, etc.
Data controller
The natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing.
The person, public authority, company or organisation that has control over Your data and decides on any use of it. He or she decides whether to create or delete a processing operation and determines why Your data will be processed and to whom it will be transmitted. He or she is primarily responsible for ensuring that Your data is protected.
Subcontractor
The natural or legal person, public authority, department or other body which processes personal data on behalf of the controller.
Any person, natural or legal, who carries out processing tasks on the instructions and under the responsibility of the controller.
Glossary of other terms used in this Charter:
Customer
A natural person with whom We have already had at least one contractual relationship (in particular the order of a good on our Site).
User
Any person who accesses the Site, visits and generally uses the Site.
Customer
A natural person with whom We have already had at least one contractual relationship (in particular the order of a good on our Site).
User
Any person who accesses the Site, visits and generally uses the Site.