Privacy policy
English
Français
English
Effective date: October 27, 2023
Section I - About us and how to contact us.
Purpose of the privacy policy.
Hello and welcome,
Please take the time to read our privacy policy before deciding whether or not to provide us with your personal data. Personal data is information that can be used to directly or indirectly identify you.
This document explains who we are, the way we collect and use your personal data, your individual rights under the GDPR (General Data Protection Regulation) and the legislation adopted pursuant to this regulation.
This privacy policy is an integral part of our general conditions of sale available on our website: www.aurelieatelier.com
The data subjects under this privacy policy are:
- Our current or past customers.
- Our prospects.
- Users of our website.
- Aurélie Atelier www.aurelieatelier.com
- Our suppliers.
About us.
We are responsible, as controller, for processing your personal data:
La Frénésie d'Aurélie SRL
rue du page 83
1050 Ixelles
Belgium
Identification number: BE0599943317
How to contact us.
If you have any questions about this privacy policy and how we use your personal data or wish to exercise your rights, you may contact us:
By email: info@aurelieatelier.com
By post:
rue du page 83
1050 Ixelles
belge
By telephone: 0475218019
Update of the privacy policy.
This privacy policy may be updated on a regular basis. We will inform you of any significant changes through our regular communication channels. Otherwise, please check our website.
As a reminder, this privacy policy came into force on: October 27, 2023
Section II - What data do we collect and how?
Categories of data collected.
We collect the following categories of personal data:
- Data relating to cookies and other similar technologies.
- Data relating to the identity of individuals.
- Contact details of individuals.
- Video surveillance images.
- Login data.
- Data concerning customer relations.
- Data processed for the purpose of canvassing.
- Data relating to means of payment and/or transactions.
How is the data collected?
Direct collection: personal data is obtained from you directly in the following contexts.
- By becoming a customer.
- By signing up for our services (online).
- By subscribing to our newsletter (online).
- By using our products and services.
- By contacting us through one of our channels.
- By visiting our website.
- By visiting our premises.
Indirect collection: We may obtain the following categories of personal data through third parties.
- Data relating to cookies and other similar technologies.
What categories of third parties provide us with your personal data and in what context?
- One or more other data controllers:
We collect additional data via the Google Analytics platform on the profiles of visitors on our website. For example: men or women, age group etc ...
Section III - Why do we need your data?
Data processing purposes and lawful bases.
This section describes the purposes for which we use your personal data and the lawful basis used for processing the data.
On the basis of your consent.
- Prospecting and marketing activities.
- Organising competitions.
- Production of statistics on sales of goods and/or services.
- Production of statistics on the use of services.
Necessary for the performance of the contract or for taking steps prior to entering into a contract between us.
- Management of the customer records necessary for the supply of goods and/or services.
- Management of the relationship with our potential customers prior to entering into a contract with them.
- Communication with the customer in the context of providing goods and/or services.
- Management of the creation and use of an online user space (or customer space).
- Management of orders for goods and/or services.
- Management of deliveries of goods and/or services.
- Management of invoices and payments for goods and/or services.
- Selection of our suppliers.
- Management and monitoring of our suppliers.
- Management of supplier invoices and payments.
- To manage pre-litigation and litigation procedures: to establish proof of a right or a contract.
To meet our legal obligations.
- Keeping of general accounts and any sub ledger accounts that may be linked to them.
- Compliance with accounting, tax and other obligations.
Within the framework of pursuing our legitimate interests, as long as we do not violate your interests or your fundamental rights and freedoms.
- Management of corporate restructuring operations (mergers & acquisitions) and internal and external audits.
- Sending press releases to the media involving the processing of journalists' personal data.
- To ensure the safety and protection of property and people.
If your data is being processed on the basis of our legitimate interest, you have the right to obtain additional information on the way your rights are weighed against our interests by contacting us through our communication channels indicated in Section I "How to contact us".
Is it mandatory to provide the data?
What happens if you fail to provide the personal data required for the performance of the contract or for the steps to be taken prior to entering into a contract between us?
We would, unfortunately, be unable to provide you with the goods and services, and would be forced to refuse to establish a contractual relationship with you.
What happens if you fail to provide personal data required to meet one or more of our legal obligations?
Inability to meet one or more of our legal obligations and therefore to provide the goods and/or services.
Section IV - What do we do with your data?
Who are the recipients of your data?
In the context of the data processing purposes described in Section III "Why do we need your data?", in addition to our internal departments, we may share your personal data with the following categories of external recipients:
Our processors and suppliers.
- Providers of IT hosting and website services.
- Providers of web analytics and optimisation services.
- Providers of delivery service solutions.
- Providers of online payment management solutions.
- Providers of accounting and financial solutions.
- Providers of automated email and/or newsletter mailing solutions.
- Providers of solutions for optimising social network strategies.
- Providers of statistical analysis solutions.
Other external organisations.
Professional advisors including regulated professions.
Public authorities, to meet a legal obligation or comply with a court procedure.
In certain cases we may share your data with public or governmental authorities, supervisory authorities, third parties involved in legal proceedings, and judicial authorities. The data is shared only to the extent permitted by law, to meet a legal obligation or in the context of a court procedure or to enforce our terms and conditions, protect our rights, privacy, security, or others.
A new buyer and their advisors, in the event of the sale of our organisation.
In the event of the sale, merger, acquisition, or consolidation of our organisation, we reserve the right to disclose your personal data, which will be included in the assets and may be transferred to the new buyer/seller and its advisors (e.g. lawyers, auditors, banks, etc.).
How long do we keep your data?
We only keep your personal data for the amount of time required for the purposes for which it is processed in accordance with Section III "Why do we need your data?" and according to the following criteria:
Management of the customer records necessary for the supply of goods and/or services.
Throughout the term of the contractual relationship or while taking steps prior to entering into a contract and in accordance with statutory limitation periods defined by applicable domestic laws, for a period of:
7 years
Management of the relationship with our potential customers prior to entering into a contract with them.
In the event of non conclusion of the contrat, we keep the data for maximum of :
1 year
Communication with the customer in the context of providing goods and/or services.
Throughout the term of the contractual relationship or while taking steps prior to entering into a contract and in accordance with statutory limitation periods defined by applicable domestic laws, for a period of:
7 years
Management of the creation and use of an online user space (or customer space).
Following a period of inactivity or after the last contact with the data subject for:
2 years
Management of orders for goods and/or services.
Throughout the term of the contractual relationship or while taking steps prior to entering into a contract and in accordance with statutory limitation periods defined by applicable domestic laws, for a period of:
7 years
Management of deliveries of goods and/or services.
Throughout the term of the contractual relationship or while taking steps prior to entering into a contract and in accordance with statutory limitation periods defined by applicable domestic laws, for a period of:
7 years
Management of invoices and payments for goods and/or services.
Throughout the term of the contractual relationship or while taking steps prior to entering into a contract and in accordance with statutory limitation periods defined by applicable domestic laws, for a period of:
7 years
Selection of our suppliers.
Following a period of inactivity or after the last contact with the data subject for:
1 year
Management and monitoring of our suppliers.
Throughout the term of the contractual relationship or while taking steps prior to entering into a contract and in accordance with statutory limitation periods defined by applicable domestic laws, for a period of:
7 years
Management of supplier invoices and payments.
Throughout the term of the contractual relationship or while taking steps prior to entering into a contract and in accordance with statutory limitation periods defined by applicable domestic laws, for a period of:
7 years
Keeping of general accounts and any sub ledger accounts that may be linked to them.
Throughout the term of the contractual relationship or while taking steps prior to entering into a contract and in the context of compliance with our legal obligations during the storage period defined by law for a period of:
7 years
Compliance with accounting, tax and other obligations.
Throughout the term of the contractual relationship or while taking steps prior to entering into a contract and in the context of compliance with our legal obligations during the storage period defined by law for a period of:
7 years
Management of corporate restructuring operations (mergers & acquisitions) and internal and external audits.
For the time necessary to comply with our legal and regulatory obligations.
-
Prospecting and marketing activities.
Upon the withdrawal of consent or following a period of inactivity or lack of contact with the data subject for:
2 years
Organising competitions.
Upon the withdrawal of consent or following a period of inactivity or lack of contact with the data subject for:
2 years
Sending press releases to the media involving the processing of journalists' personal data.
Upon exercising the right to object or following a period of inactivity or lack of contact with the data subject for:
2 years
To ensure the safety and protection of property and people.
Upon exercising the right to object or for a maximum term after the collection of the data for:
1 month
Production of statistics on sales of goods and/or services.
Upon the withdrawal of consent or following a period of inactivity or lack of contact with the data subject for:
2 years
Production of statistics on the use of services.
Upon the withdrawal of consent or following a period of inactivity or lack of contact with the data subject for:
2 years
To manage pre-litigation and litigation procedures: to establish proof of a right or a contract.
Throughout the term of the contractual relationship or while taking steps prior to entering into a contract and in accordance with statutory limitation periods defined by applicable domestic laws, for a period of:
7 years
If you would like more information about our policy concerning the storage of your personal data for each data processing purpose, you can contact us via the communication channels indicated in Section I "How to contact us".
Is your data transferred outside the European Economic Area (EEA)?
In the context of the data processing purposes described in Section III ("Why do we need your data?"), your personal data may be transferred outside the European Economic Area (EEA).
In this case, we have taken the following protective measures to ensure the security of your personal data and your individual rights.
- Transfer to the United States on the basis of the EU-U.S. Data Privacy Framework.
- Transfer on the basis of the standard contractual clauses (SCCs) adopted by the European Commission (Art. 46-2(c) of the GDPR) or by supervisory authorities (Art. 46-2(d) of the GDPR).
You can obtain further information on the transfer of your personal data to third party countries by contacting us via our communication channels indicated in Section I "How to contact us".
Section V - What are your rights?
Introduction
You have rights concerning the use of your personal data. These rights vary depending on the lawful basis used to justify the processing of your personal data and certain data processing purposes.
When you exercise a right (e.g. the right of access, deletion, rectification, etc.), we may require you to attach a document to prove your identity if we have any reasonable doubt about it, for example to avoid identity theft and protect you against the risk of fraud.
You may exercise these rights via our various communication channels set out in Section I: "How to contact us".
Your rights may be exercised free of charge, except where the requests are repetitive or excessive, in which case we are entitled to charge a reasonable fee based on our administrative costs.
Right to be informed about the use of your personal data.
You have the right to receive clear information about the use of your personal data and the exercise of your rights.
Right of access and obtain a copy of your personal data.
You may obtain a copy of your personal data, as well as the following information:
- whether or not we process your personal data and which data;
- why your personal data is processed;
- the recipients it is disclosed to, and how we obtained your personal data;
- the data retention period or the criteria that determines this period.
This right is subject to exceptions and respecting the rights and freedoms of third parties (for example: we cannot provide you with information on other people).
You may make your request through the various communication channels we provide.
Right to rectification of your personal data.
Where your personal data is incomplete, inaccurate or simply no longer up to date, you have the right to request its rectification. This right allows us to avoid processing or distributing inaccurate information about you.
Right to erasure of your personal data.
You may request the erasure of your personal data when it is no longer necessary for the purposes it was processed for.
However, we may refuse to do this if we are required to continue processing your personal data, such as when we need it to meet our legal obligations or for evidentiary purposes.
Right to restrict the processing of your personal data.
You have the right to request a limitation on the processing of your personal data (i.e. "blocked", "locked") in certain specific cases. In this case, we must refrain from carrying out any further processing whatsoever of the personal data in question, for the time necessary to exercise your right.
Unless such notification proves impossible or requires disproportionate effort, we will notify each recipient to whom the personal data has been disclosed.
Right to object to the processing of your personal data.
You have a right to object to the processing of your personal data in certain cases.
You have the right to object to the processing of your personal data when it is based on our legitimate interest. It is worth noting that this right is not a right to the outright and permanent removal of all your personal data or the account linked to you. We may refuse this request if there are legitimate and compelling reasons or if the processing of personal data is necessary for the establishment, exercise or defence of legal claims.
You have the right to object to the processing of your personal data for direct marketing purposes. This right mainly applies to the processing of your personal data for the purpose of advertising (e.g. to stop receiving canvassing, online newsletters, etc.).
You have the right to object to profiling, a right which always applies when profiling is related to direct marketing.
Right to withdraw your consent at any time.
When the processing of your personal data is based on your consent, you may withdraw your consent to the processing of your data by ourselves or our processors at any time.
You may make your request through the various communication channels we provide. You may also change your mind through the same channels.
Right to data portability.
When we process your personal data via automated processes and on the basis of your consent or the existence of a contract, you have the right to receive the data you have provided to us free of charge (in a structured, commonly used and machine-readable format) and, as applicable, to transfer it to another data controller.
However, this right to data portability is not general. It only concerns data collected with your consent or in the context of a contract. The right to portability concerns information that you have actively and knowingly provided (e.g. by completing an online registration form) but also data collected through the use of our service or product. However, it does not apply to data derived or inferred from the information you have provided.
If it is technically impossible to directly transfer the data to another data controller, we will provide you with a copy of your personal data in a structured, commonly used and machine-readable format.
Right to lodge a complaint with a supervisory authority.
If you are not satisfied with the way we process your personal data, you have the right to lodge a complaint with the supervisory authority responsible for the protection of personal data in your country of residence or work.
The list of supervisory authorities in EU countries is available on the website of the EDPB (European Data Protection Board).
belge :
Autorité de la protection des données - Gegevensbeschermingsautoriteit (APD-GBA)
Rue de la Presse 35
1000 Bruxelles
© 2019 - 2024 Powered by Admeet. All rights reserved.