This “Privacy Policy” governs the processing of your personal data by Het Huis van de Geuze, Panneels & Partners BV, Nellekenstraat 42A, 1750 Lennik, CBE 0872.527.668 (hereinafter: Het Huis van de Geuze). Please read this Privacy Policy carefully. It contains essential information about how your personal data is processed and what cookies are used. By sharing your personal data on our website www.huisvandegeuze.be, by contacting us by e-mail or by submitting a question or complaint, you declare that you have read this Privacy Policy.
Article 1 – What personal data do we process?
1.1. Het Huis van de Geuze processes your Personal Data within the scope of its activities. This includes:
- Category 1, based on cookies: your IP address and details of your visit to our website, surfing habits, origin and search terms;
- Category 2, upon registration or via one of the forms on our Website: your surname and first name, possibly the name of your company and VAT number, address details, e-mail and any other details you provide us with in the free input field;
- Category 3, if you call us or send us an e-mail: your e-mail address and/or telephone number, as well as the data you provide yourself;
- Category 4, when subscribing to our newsletter: your e-mail address;
- Category 5, when placing an order: your name and first name, possibly the name of your company and VAT number, address details and e-mail.
1.2. Het Huis van de Geuze can collect your Personal Data in various ways:
- Through your registration and use of the website;
- Our website uses cookies and similar techniques to collect some personal data. For more information on the use of cookies, see Article 7.
Article 2 – What do we use your personal data for?
Het Huis van de Geuze will use your Personal Data exclusively for:
- Category 1: The maintenance and improvement of our website and the inclusion of Personal Data in anonymous statistics, with the legal basis of your explicit, prior consent at the time of your first visit to our website.
- Category 2 en 3: Answering questions and requests for information, with the legal basis of performing a service that you have requested;
- Category 2, 3 en 4: Direct marketing, newsletters, actions and promotions by Het Huis van de Geuze itself, with the legal basis being our legitimate interest in respect of existing customers or your explicit, prior consent if you are not yet a customer of Het Huis van de Geuze. You can indicate at any time that you no longer wish to receive our newsletters by using the opt-out option in our newsletters or by contacting us directly by e-mail;
- Category 5: The delivery and invoicing of products or services ordered by you, with the legal basis of fulfilling a contract that you have requested and for which the processing of your Personal Data is necessary or because it is required by law or because Het Huis van de Geuze has a legitimate interest in doing so.
Article 3 – How we share your data with third parties
If we ever cease to operate or transfer our business to anyone else, for example if we go bankrupt or sell our business, this may involve transferring your Personal Data to third parties who will take over all or part of our business. To the extent possible, Het Huis van de Geuze will always inform you in advance, but you understand that this may not be technically or commercially feasible in all circumstances.
In rare cases, we may be required to disclose Personal Data pursuant to a court order or to comply with other mandatory laws or regulations. We will try to inform you in advance to the best of our ability, unless we cannot do so for legal reasons.
We may share your data with third parties whose services we use in connection with your order process and order. Your data may be passed on to and processed by software and cloud suppliers, financial partners, logistics partners or any other third party who is a party to or plays a role in your order. The current list can be obtained upon simple request by e-mail. For each transfer to a third party, we ensure the appropriate security measures regarding your personal data, including the conclusion of processing agreements where necessary.
We always try to make maximum use of European suppliers and try to keep your data within Europe wherever possible. If we do have to rely on non-European third parties, we ensure that your data is as safe outside Europe as it is here. Thus, where necessary, we conclude Standard Contractual Clauses with these partners and provide additional safeguards.
Below you can read how we process your data, where we store it (or have it stored), which security techniques we use and who has access to the data.
Webshop software
Our webshop has been developed with software from WooCommerce. Personal data that you make available to us for the purpose of our services will be shared with this party. WooCommerce has access to your data to provide us with (technical) support, they will never use your data for any other purpose. WooCommerce is obliged to take appropriate security measures based on the agreement we have concluded with them. These security measures consist of the application of SSL encryption and a strong password policy. WooCommerce uses cookies to collect technical information regarding your use of the software, no personal data is collected and/or stored. WooCommerce reserves the right to share collected data within its own group to further improve the service.
Hosting
We have chosen BNS HybrIT for our web hosting. Personal data that you make available to us for the purpose of our services will be shared with this party. BNS HybrIT has access to your data to provide us with (technical) support, they will never use your data for any other purpose. BNS HybrIT is obliged to take appropriate security measures based on the agreement we have concluded with them. These security measures consist of the application of SSL encryption and a strong password policy. Regular backups are made to prevent data loss.
We purchase web hosting and e-mail services from BNS HybrIT. BNS HybrIT processes personal data on our behalf and does not use your data for its own purposes. However, this party can collect metadata about the use of the services. These are not personal data. BNS HybrIT has taken appropriate technical and organizational measures to prevent the loss and unauthorized use of your personal data. BNS HybrIT is obliged to maintain confidentiality based on the agreement.
E-mail campaigns
Our website uses Reloadify, a third party that handles the e-mail traffic from our website and the sending of any newsletters. All confirmation emails that you receive from our website and web forms are sent via the servers of Reloadify. Reloadify will never use your name and email address for its own purposes. At the bottom of every email that is automatically sent via our website you will see the ‘unsubscribe’ link. If you click on this, you will no longer receive emails from our website. This can seriously reduce the functionality of our website! Your personal data is stored securely by Reloadify. Reloadify uses cookies and other internet technologies that provide insight into whether emails are opened and read. Reloadify reserves the right to use your data to further improve the service and to share information with third parties in this context.
Regular business email traffic
We use the services of BNS HybrIT for our regular business email traffic. This party has taken appropriate technical and organizational measures to prevent misuse, loss and corruption of your and our data as much as possible. BNS HybrIT does not have access to our mailbox, and we treat all our e-mail traffic confidentially.
Payment traffic
We use the Pay.nl platform to process (part of) the payments in our webshop. Pay.nl processes your name, address and place of residence details and your payment details such as your bank account or credit card number. Pay.nl has taken appropriate technical and organizational measures to protect your personal data. Pay.nl reserves the right to use your data to further improve the service and to share (anonymized) data with third parties in this context. All the above-mentioned guarantees regarding the protection of your personal data also apply to the parts of Pay.nl’s service for which they engage third parties. Pay.nl does not store your data for longer than is permitted under the statutory terms.
Shipping and logistics
When you place an order with us, it is our job to have your package delivered to you. We use the services of DPD, PostNL, BPost or Sendmyparcel to carry out deliveries. For this purpose, it is necessary that we share your name, address and place of residence with the parcel service. The parcel service only uses this information for the purpose of executing the agreement. If the parcel service uses subcontractors, the parcel service will also make your information available to these parties.
Invoicing and accounting
We use the services of Multifisk to process invoices and do the accounting. Multifisk has taken appropriate technical and organizational measures to prevent the loss and unauthorized use of your personal data. Multifisk is obliged to maintain confidentiality based on the agreement.
Article 4 – How long do we keep your personal data?
We will retain your Personal Data for as long as it is necessary for the purposes of any processing.
- Customer profile: if you do not place an order for 7 years, we will delete your customer profile;
- Invoicing data: for legal reasons, we must keep your invoicing data for at least 7 years from the calendar year following the last invoice date;
- Newsletters: if you are an existing customer we will keep your data for newsletters for 7 years after your last order. If you are not an existing customer and you have given your consent for the newsletters, then we will keep your data until you withdraw your consent.
Article 5 – Your rights
You have the right to consult your personal data and the use we make of them or to request a copy of them at any time and free of charge. You also have the right to request the correction or (in some cases) deletion of your data. You may also request that the processing of your Personal Data be restricted in a number of cases listed in the GDPR. You have the right to oppose the processing of your Personal Data if you have serious and legitimate reasons for doing so that exceed our need to process your data or to withdraw a previously given consent. You also have the right to object at any time to the use of personal data for direct marketing purposes, even without having to provide a reason for doing so. You have the right to request your Personal Data in digital and readable form and/or to have them transferred to another service provider of your choice.
You can exercise your rights by e-mail to webshop@huisvandegeuze.be], or by post to Nellekenstraat 42A, 1750 Lennik.
Finally, you have the right to lodge a complaint with the Belgian Data Protection Authority if it appears that we have not adequately responded to a request based on one of the above rights within 30 days:
GBA/APD
Drukpersstraat 35
1000 Brussels
Tel : +32 (0)2 274 48 00
contact@apd-gba.be
If necessary, you can also go to the civil court to claim damages.
Article 6 – How do we protect your personal data?
We have taken appropriate technical and organisational security measures to guarantee the safety of your Personal Data. In no event shall Het Huis van de Geuze be held liable for any direct or indirect damage resulting from the incorrect or illegal use by a third party of the Personal Data.
Article 7 – Special provisions
Only the privacy policy statement in the Dutch language is legally valid. The French and English translations of the privacy policy statement are for information purposes only and cannot be used in legal proceedings or in mediation procedures.
If you have any further questions or comments about the processing of your Personal Data, please contact us by e-mail at webshop@huisvandegeuze.be, or by post at Nellekenstraat 42A, 1750 Lennik.