2. HOW WE COLLECT YOUR INFORMATION
We collect your personal information when you interact with us or use our services, including when you use our Site to place an order. We also examine how our visitors use our Site to help us improve our services and optimise the customer experience.
We collect information:
- When you create an account with us or change your account settings;
- When you place an order and during the ordering process (including payment and delivery of the order);
- When you contact us directly by e-mail, telephone, letter, message or via the chat function; and
- When you enter information on browsing or using our Site.
3. INFORMATION WE COLLECT FROM YOU
- When you visit the Site or place an order through our Site, you are asked to provide information about yourself, including your full name, contact information, shipping address, e-mail address, order details and payment information such as your credit card details.
- We also collect information about your use of the Site and information about yourself from messages you post on the Site or when you contact us by e-mail, letter, telephone or via the chat function.
- We collect technical information about your mobile device or computer, such as the operating system, the type of connection and device you use and the IP address from which you access our Site.
4. USE OF YOUR DATA
- We will only process the data we collect about you if we have appropriate legal grounds: if we need to process your information in order to provide you with the service you have requested or to enter into a contract, if we have your consent, if we have a justifiable reason to process your data, or if we are legally required to do so.
- When we need to process your information to provide you with the service you have requested, or to enter into a contract with you, we use your information to:
- enable us to provide you with access to relevant parts of the Site;
- deliver the services you have requested;
- enable us to receive payment from you; and
- contact you regarding our services when necessary, in particular to solve a problem you may have with your order;
- We also process your data when we have a valid reason to do so – for example, customising our service, including the processing of data in order to make the ordering process simpler and faster. We have listed these reasons below:
- to improve the efficiency and quality of services that our customers might expect from us in the future;
- to adapt the content we present to you, for example, to ensure that we expose you to the most relevant advertising, based on the requirements we have defined;
- to allow our customer support team to assist you with any request or complaint in the most efficient way possible;
- to contact you to obtain your views and feedback concerning our services and to inform you of any significant changes or developments on our Site or concerning our services, including to let you know that our services are now available in a new area, where you have made a request to do so;
- to analyse your activity on our Site in order to manage, support, improve and develop our business, but also for statistical and analytical purposes and to help us prevent fraud;
- in order to implement our contractual terms and conditions or any other contract entered into with you;
- if you send us comments or feedback about the Site and services, we may use such comments and feedback on our Site and in any marketing or advertising material. If appropriate, we will identify you only by your first name and the city in which you live.
- We also analyse data on your use of our services using your location data to create profiles that are dedicated and tailored to you. This requires that we make certain assumptions about what interests you and may use them, for example, to send you more appropriate marketing communications, or to inform you about special offers or products that we believe may be of interest to you. This activity constitutes profiling. You are the rights holder in this type of processing. Please see the "Your Rights" section below for more information.
- When we are subject to a legal obligation, we may use your information:
- to keep a record of your order(s); and
- to comply with any legal obligations or regulatory requirements to which we are subject.
When you have given your consent or when we have a valid reason to do so (and are legally authorised to do so), we will use your information to inform you about our products and services that may be of interest to you and we may therefore contact you by e-mail or telephone. You can check your e-mail marketing preferences by:
- Visiting our website, aubonrepos.be;
- And by clicking on "My account".
- We will not keep your information for longer than we consider necessary.
- The information we collect will be retained as long as necessary to achieve the objectives described in the "Use of my information" section above, in keeping with our legitimate interests or for a period specifically required by applicable regulations or laws, such as storing information for regulatory reporting purposes.
- When determining the relevant retention periods, we will take into account factors such as:
- our contractual rights and obligations in relation to the information concerned;
- our legal obligation(s) under applicable law concerning data retention for a period of time;
- the limitation period provided for by the applicable law(s);
- (potential) disputes; and
- guidelines issued by the relevant data protection authorities.
- We securely delete your information when we no longer need it for the purposes for which it was collected.
- The information we collect from you will be transferred and stored on our servers located in Europe.
- Sharing your information with third parties:
We share your information with third party service providers. The types of third-party service providers with whom we share your information include:
- Payment providers (including online payment providers and fraud detection providers): in order to provide us with services when they process information such as credit card payments on our behalf, provide you with support services or perform fraud checks for us;
- IT service providers (including cloud computing providers): for data storage and analysis purposes;
- Deliverers: so that they can deliver your order to you;
- Marketing and advertising partners: so that they can ensure that you receive the advertising material most relevant to you and e-mail you marketing material on our behalf.
- If our company uses a joint venture, buys, is sold, or merges with another company, your information may be disclosed or transferred to the target company, our new business partners or owners or their advisors.
- We may also share your information:
- if we are required to disclose your information in order to meet (and/or where we believe we are required to meet) a legal obligation or at the request of a supervisory authority; this includes exchanging information with other companies and organisations for the purpose of fraud protection and prevention;
- to enforce our contractual obligations with you and any other agreements;
- to protect the rights of Au Bon Repos, deliverers, or others, including to prevent fraud; and
- with third parties whom we have good grounds to consider necessary in crime prevention or detection, such as the police.
- We adopt effective technologies and policies to ensure that the personal data we hold about you is properly protected.
- We take measures to protect your information against any unauthorised access, unlawful processing, accidental loss, destruction or damage.
- Once you have chosen a password that allows you to access certain parts of the Site, you are responsible for keeping this password secure and confidential. We advise you never to share your password.
- Unfortunately, the transmission of information over the Internet is not completely secure. While we take steps to protect your information, we cannot guarantee the security of your data transmitted via the Site; any transmission is at your own risk. Once we have received your information, we will use strict security procedures and measures to prevent unauthorised access.
- Under the Data Protection Act, you have a number of rights regarding the data we hold about you. If you wish to exercise any of these rights, please contact us using the contact details above.
- The right of access. You have the right to access your information (if we process it). This will allow you to, for example, verify that we are using your information in accordance with the Data Protection Act. If you wish to access the information we hold about you in this way, please contact us (see the "How to Contact Us" section).
- The right of rectification. You have the right to have your information corrected if it is inaccurate or incomplete. You can ask us to correct any errors in the information we hold by contacting us (see the "How to Contact Us" section). This right is not absolute and applies only in particular situations.
- The right to erasure. This right is also known as the "right to be forgotten" and, in simple terms, allows you to request the deletion or erasure of certain information we hold about you by contacting us (see the "How to contact us" section)
- The right to limitation of processing. You have the right to "block" or "phase out" the further use of your information. When processing is restricted, we can always keep your information, but we will no longer use it.
- The right to data portability. You have the right to obtain your personal data in a structured, commonly used format, in order that you may reuse it for your own purposes with different service providers. However, this is not a general right and there are exceptions. For more information, please contact us (see the "How to contact us" section).
- The right to file a complaint. You have the right to file a complaint about the way we manage or process your information with the relevant data protection authority.
- The right to withdraw your consent. If you have given your consent (i.e. we rely on consent as the legal basis for processing your information), you have the right to withdraw it at any time. You can do this by contacting us (see the section "How to contact us"). However, withdrawing consent will not make the use of your personal data unlawful where consent was clearly given.
- The right to object to processing. You have the right to object to certain types of processing, including processing for direct marketing and profiling purposes. You can prevent this by changing your marketing preferences or by disabling cookies as described in sections 5 and 6 above.
If you are not satisfied with our response to your complaint or if you believe our processing of your personal data fails to comply with the Data Protection Act, you can file a complaint with the Data Protection Authority (in Belgium):
- Address: Data Protection Authority, Rue de la Presse, 35, 1000 Brussels (Belgium)
- Telephone number: +32 (0) 2 274 48 00
- Website: https://www.privacycommission.be
AU BON REPOS – GABRIEL DEKOCK ET COMPAGNIE SA, Place de la Chapelle 10, 1000 Brussels