1. This Privacy Policy (“Privacy Policy”) governs the processing of your personal data as part of your use of our Website (the “Website”) and the services related thereto (collectively, the “Services”). This processing is carried out by Toon De Somer The Office Interiors NV, the data controller, with its registered office at Bredastraat 125, 2060 Antwerp (“we”, “us”), registered with the Crossroads Bank for Enterprises under number 0701.855.871, in accordance with applicable data protection legislation.
2. By using our Website or Services, you agree that you have read this Privacy Policy carefully and accept its terms without reservation. We reserve the right to update or modify this Privacy Policy at our discretion, with any such changes communicated via the Website.
3. Cookies or similar technologies may be used as part of the Website or Services. Cookies are text files stored on a device that contain certain information, which may include personal data. For more information on the use of cookies, please refer to our Cookie Policy.
4. This Privacy Policy was last updated on 01/12/2023.
What & why we process data
1. When you use the Website and/or Services, we process personal data relating to you:
- When? Use of Services, use of Website
- Which Data? Identification data
- Why (Purpose)? Processing requests
- Legal Basis? Legitimate interest
- When? Contacting us, requesting a quote
- Which Data? Identification data
- Why (Purpose)? Sending related information and follow-ups
- Legal Basis? Consent
- When? Creating an account
- Which Data? Identification data
- Why (Purpose)? Order processing
- Legal Basis? Consent
2. In principle, we obtain the above-mentioned personal data directly from you. In addition to the data listed above, we may also process your personal data for the following purposes:
- To provide you in a personalized and efficient manner with information about products and services you request, whether via the Website, email, phone, or social media channels.
- To process your personal data so that we can provide proper service.
- For direct marketing purposes, i.e., to provide you with targeted communications, promotions, offers, and other advertisements from us or our selected partners. We will request your consent for this.
- To perform statistical analyses to improve our Website and/or Services or to develop new products or services.
- To provide information to a financial institution or payment service provider, enabling your bank and the payment service provider to meet their obligations.
- To disclose to the police or judicial authorities as evidence of possible offenses or if there are reasonable suspicions of unlawful acts or crimes committed through your registration or use of the Website or Services.
- In the context of a potential merger, acquisition by/from, or split by a third party, even if that third party is located outside the EEA.
3. If and when your registration on the Website or use of the Website or Services is considered (a) a violation of the terms or property rights, (b) a threat to the security or integrity of our services, (c) a risk to the Website, Services, or systems of us or our subcontractors due to viruses, Trojans, spyware, malware, or any other form of malicious code, or (d) in any way illegal, unlawful, discriminatory, or offensive, we may process your data in the interest of ourselves, our partners, or third parties.
Do we share your data
1. We may engage external processors to provide you with the best possible Website experience. We ensure that third-party processors may only process your personal data on our behalf and under our written instructions.
2. We do not share your personal data in an identifiable manner with third parties unless necessary for providing the Services or unless you have given explicit consent.
3. We may transfer anonymized data to other organizations, which can use it to improve products and services, and to organize marketing, presentation, and sales of tailored products and services.
Where we process data
1. We and our external processors will process your identifiable personal data only within the European Economic Area (EEA).
2. We may transfer your anonymized data to organizations outside the European Economic Area. In such cases, we will ensure appropriate safeguards are in place to guarantee the security and integrity of your personal data, and that all data protection rights you are entitled to under applicable law are upheld.
How we process data
1. We will make every effort to process only the personal data necessary to achieve the purposes outlined in this Policy. We will process your personal data in a lawful and transparent manner and will also take all reasonable steps to ensure that the data is accurate and up-to-date.
2. Your personal data will be processed only until you withdraw your consent. Withdrawing consent may mean that you can no longer fully or partially use the Website or Services. If you have registered on our Website, we will delete your personal data when you remove your profile, unless a legal, regulatory, or judicial obligation prevents this.
3. We will implement appropriate technical and organizational measures to keep your personal data safe from unauthorized access or theft, and from accidental loss, manipulation, or destruction. Access by our staff or the staff of our external processors is granted only on a need-to-know basis and is subject to strict confidentiality obligations.
Your rights regarding personal data
1. You have the right to request access to all personal data we process about you. Requests for access that are clearly made to cause inconvenience or harm will not be processed.
2. You have the right to request that any personal data about you that is inaccurate or incorrect be corrected free of charge. If you are registered on our Website, you can correct much of this data yourself via your profile. Any such request should include proof that the personal data to be corrected is inaccurate.
3. You have the right to withdraw your previously given consent for the processing of your personal data. This can be done by sending an email to [email protected]
4. IInstead of deletion, you may request that we restrict the processing of your personal data if (a) you dispute the accuracy of the data, (b) the processing is unlawful, or (c) the data is no longer needed for the stated purposes but is required to defend yourself in legal proceedings.
5. You have the right to object to the processing of your data if you can demonstrate compelling and legitimate reasons related to your particular circumstances. However, if the processing concerns direct marketing, you have the right to object at any time, free of charge and without justification.
6. If your personal data is processed based on consent or a contract and processed by automated means, you may receive the personal data you provided in a structured format.
7. To exercise one or more of the rights listed above, please send an email to [email protected]. Your request must clearly specify which right you wish to exercise and why, be dated and signed, and include a scanned copy of your ID. If the request is valid, we will respond as soon as reasonably possible, and at the latest within thirty (30) days of receipt.
8. If you have any concerns regarding the processing of your personal data by us, you may always contact us. If you remain dissatisfied with our response, you can file a complaint with the competent data protection authority, the Belgian Privacy Commission.