Purpose of the privacy policy
Debomat attaches great importance to the right to privacy and makes every effort to ensure that all personal data is obtained, processed and used in a safe, reliable, ethical and transparent manner. Your privacy is important to us. We are pleased that you are confident that we will use your personal information carefully and wisely, in accordance with the principles of this Privacy Policy, which is in effect when you use our services.
This privacy policy wants to make clear what personal information we collect about you, why we collect it and what we do with it. References to personal data in this Privacy Policy contain all information that you identify directly or indirectly, such as your first name, name, customer number, online identifiers, e-mail address, billing and delivery address or previous purchases.
Note that this policy applies together with other policies and procedures. It does not impose contractual or statutory rights on anybody, but it is intended to ensure compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to processing of personal data and on the free movement of these data (hereinafter referred to as the 'General Data Protection Regulation' or 'GDPR').
As your controller (data controller) we determine why and how we process your personal data. This privacy policy outlines the personal data we collect about you (Chapter 3.1), the legal grounds on which we base ourselves to collect your personal data (Chapter 3.2), how we protect your personal data (Chapter 4), to whom we disclose your personal data (Chapter 5), if necessary outside the European Union (Chapter 6). Moreover, we also determine how long we need to keep your personal data (Chapter 7) and what measures we take to ensure that your personal data is safely and definitively removed at the right time (Chapter 8).
Who controls your personal data?
Debomat nv is the controller of the personal data you provide us and is responsible for the processing of your personal data in accordance with the applicable data protection legislation. Our office is located in Industriezone De Zaat, Frank van Dyckelaan 12, B-9140 Temse, Belgium. Debomat is registered in Belgium under enterprise number BE 00429.999.317.
How we collect and process your personal data
Personal data that we collect about you
Because we consider data privacy so important, we want to remain open and transparent about the way we use your personal data. Debomat will only collect your personal data when necessary in the context of our services.
Depending on your use of our services and our websites, we may then collect, use and disclose the following types of personal data about you: your contact details, such as your first name, name, e-mail address, IP address and telephone number. We can also collect information about payments, credits and orders. If you already have a Debomat account, we also collect and process other information that you identify or that can be used to identify you for the delivery of our services and of Debomat products. This can be your Debomat customer number, your date of birth, your previous purchases and store preferences and your surfing behavior on our websites. We invite you to read the following chapters for more information about how we process your personal data.
Even though we are technically seen as 'data controllers', the ultimate control over your personal data is always in your hands. If you provide us with proof of your true identity, you have the right to request access to a copy of the personal data we currently hold about you in a structured, widely used and machine-readable format and to obtain information about the processing, also about whether we process your personal data for profiling purposes. If you notice a mistake in your personal data, you can also ask us to correct the incorrect personal data or to complete your personal data. We will then notify all third parties to whom we have disclosed your personal data so that they can ensure that your personal data is also entirely accurate for them. If technically feasible, you have the right to request that Debomat transfer your personal data to another company of your choice.
Legal grounds for processing
According to the applicable data protection legislation, personal data may only be collected and processed on the basis of a limited number of legal grounds. At Debomat we base ourselves on one of the following legal grounds to process your personal data:
1. need for the execution of a contract with you (e.g. when you purchase products from us);
2. legal obligation to which Debomat is subject (e.g. when we handle your payment details);
3. legitimate interests of Debomat (e.g. when we send you marketing emails about products similar to the products you have already purchased from us);
4. your explicit and informed consent (e.g. when you register for our newsletters).
Marketing mails en newsletters
Some of our customers really enjoy getting newsletters about our latest products and services. We understand, however, that this is not the case for everyone.
Therefore, the processing of your personal data for marketing purposes is based solely on your explicit prior consent. This means that we will never send you marketing communication if you do not wish to receive it, unless you have already purchased products from us.
If you wish to receive newsletters about our latest products and services, you can subscribe to our newsletters by e-mail via our website. In that case, we will process your e-mail address.
Once you are registered, you may at all times object to the use of your personal data for profiling by Debomat or by one of the external recipients with whom we have shared your personal data, provided that we process your personal data on the basis of our legitimate interests. If we process your personal data for direct marketing purposes, for example to send you newsletters, you have the right to object at any time to the use of your personal data for that purpose by contacting our data protection officers. Their contact details can be found below. This does not involve extra costs.
Information which we collect
When you purchase products, we may process personal data such as your name, contact details and limited payment details, because this information is necessary for the execution of the contract with you.
If you already have an account, we can use information about your previous purchases. This information helps us to make purchases easier, to process payments and also for marketing purposes. We process personal data for these purposes because it is in our legitimate interest to obtain insights about our customers who purchase our products.
Since we process your personal data on the basis of our legitimate interests, you may at all times file an objection to the use of your personal data for profiling by Debomat or by one of the receiving third parties with whom we have shared your personal data. To do this, please contact our data protection officer at the e-mail address stated at the bottom of this policy.
Customer service
We have a legitimate interest in ensuring that rapid and effective technical support is provided and that complaints and requests relating to product warranties are dealt with quickly and effectively. To this end we can process data such as your name, contact details, customer number, gender, bank account number (eg for refunds), purchase history and browsing activities.
You have the right to request Debomat access to a copy of the personal data that we currently hold about you in a structured, widely used and machine-readable format and to obtain information about the processing, also about whether we process your personal data for profiling purposes. If you notice a mistake in your personal data, you can ask us to correct the incorrect personal data or to complete your personal data. In that case, we will inform all third parties to whom we have disclosed your personal data, so that they can ensure that your personal data is also entirely accurate with them.
Cookies
Cookies are used which are technically required. They do not collect personal data or websurf behavior.
How do we protect your personal data
Debomat makes every effort to ensure the legal, fair and transparent processing of your personal data. Consequently, we will only use your personal data if we have a valid reason for this and on condition that you were informed in advance about the processing purposes, in particular when we collected your personal data.
In addition, Debomat guarantees that any processing of your personal data will remain limited to what is necessary, appropriate and relevant for achieving the purposes for which the personal data were collected. If this is possible and technically feasible, Debomat will use anonymized or pseudonymised data, e.g. for purposes related to our internal statistics and financial reporting.
Because we consider the protection of your personal data of the utmost importance, Debomat also pays a lot of attention to the protection of your personal data and the systems in which they are stored. We have established and implemented appropriate technical and organizational measures against unauthorized access, illegal use, unintentional loss, damage or destruction. Debomat thus has every confidence that your personal data will be processed on a strict need-to-know basis, wherever and whenever appropriate and necessary.
We are fully aware that threats are evolving and diversifying and we want to keep your trust for a long time. That is why we are reviewing and updating our safety measures and infrastructure so that we can reduce operational risks and keep our safety programs at the level of the latest industry standards and best practices.
External parties with whom we can share your personal data
Where relevant and necessary for the purpose of the processing activity, it may sometimes be necessary for us to disclose your personal data to other relevant organizations that have to take note of it (the so-called 'receiving third parties'), based on our legitimate interest.
In order to gain more insight into your interests and preferences and to be able to send you more relevant advertising messages, we can, for example, share your personal data with companies specialized in data analysis and with advertisers, based on our legitimate interest. In addition, we may share certain of your personal data with external parties when you give us feedback and reviews about our products.
Every time your personal data are shared with third parties, this falls under strict data processing agreements, whereby Debomat remains the controller and the third parties involved act as processors. Debomat limits the access and transfer of your personal data to reliable receiving third parties who can demonstrate an appropriate level of data protection. In addition, these receiving third parties must destroy all personal data or return them to Debomat after the end of the processing services and they must destroy existing copies, unless it is legally obliged to keep the personal data.
International transfer of your personal data
To the extent that your personal data must be transferred from the European Economic Area to a country outside the EEA that does not provide adequate data protection, appropriate measures will be taken to protect personal data in accordance with standards that are equivalent to the standards of this privacy policy. In other words, Debomat remains liable for the processing of your personal data and will take the necessary measures to protect its processing by relying, for example, on the EU-US Privacy Shield.
How long do we keep your personal data
As a general rule, Debomat will only keep your personal data for as long as necessary to meet the purpose for which we originally collected it. However, these needs may vary for different data types in the context of different products. Therefore, the actual retention periods can vary considerably. In addition, laws and regulations apply that also specify minimum retention periods for personal data.
Debomat will always ensure that you are informed of the criteria used to determine the actual storage period and the underlying reasons for it. These depend on whether we process your personal data in the context of a contractual relationship with you or on the basis of your explicit consent, whether we process the personal data for your own legitimate interest and whether Debomat is legally obliged to process the personal data during a period of time. to maintain a certain period to comply with specific legal obligations.
How do we delete your personal data
In certain circumstances and on condition that you give us proof of your true identity, you may exercise your right to request that your personal data be erased and that we inform receiving third parties to whom we have provided your personal information about this. request. Please note that this is only possible to the extent that the personal data is no longer required for the original purpose (i), if the processing was based on your consent and you withdrew it (ii) or if you already object registered against the processing on the basis of our legitimate interest (iii).
Except when we have to keep a copy of your personal data for statistical purposes, to initiate, exercise or defend legal claims (e.g. in connection with the warranty period that applies to products sold by Debomat) or to the extent that we legally required to keep a copy of your personal data, you can trust that Debomat will either delete your personal data safely or anonymize it for good once we have met the original processing purpose and when it is no longer necessary to keep your personal data.
Your rights as a data subject
If you would like more information or would like to exercise one of your above rights, please contact us at info@debomat.be . We will do our best to answer your e-mail as soon as possible, and in worst case within one month.
When it takes us more time to comply with your request, we will inform you about this and we will contact you again within two extra months. Debomat does not charge you for that unless we have provided you with the requested information before or unless it is unreasonably difficult for us to obtain this information. In that case we will let you know the administrative costs in advance.
If you are not satisfied with the way we have handled your request, you have the right to request that our use of your personal data be restricted and to file a complaint with the supervisory authority responsible for the protection of personal data your country of residence. Although we sincerely hope that this will not be necessary, we have listed the contact details of the relevant data protection authorities below.
Belgium
Data Protection Authority
Rue de la Presse 35
1000 Brussels
Tel. +32 2 274 48 00
Fax +32 2 274 48 35
E-mail: commission@privacycommission.be
Website: http://www.privacycommission.be/