Privacy policy
Privacy Policy of www.guldendraak.be
T... Privacy Policy regulates the processing of your Personal Data as part of your use of our Website and the Services associated with it.
This processing is carried out by Brouwerij Van Steenberge as the responsible person for the processing, with registered office in Lindenlaan 25, 9940 Ertvelde in accordance with applicable legislation on the protection of Personal Data.
By using our Website and/or our Services, you acknowledge that you have read this Privacy Policy carefully and that you agree to it without reservation. We reserve the right to regularly change the Privacy Policy according to our own understanding. Such a change will be communicated via the Website.
By clicking on the checkbox stating: "I declare that I have completely read and understood the Privacy Policy and that I agree to it without reservation. I give permission to process my Personal Data as set out in this Privacy Policy", you declare that you have indeed read and consent to this Privacy Policy. You declare that you understand for what purposes your Personal Data is processed. You also agree that your continued use is understood as a continuing consent. You can withdraw your consent at any time by sending an email to info@vansteenberge.com with as subject 'Change of personal data', containing further information.
Please note that we can use so-called 'cookies' or similar technology as part of the Website and/or the Services. Cookies are small text files placed on a device's hard drive and contain certain information, including sometimes Personal Data. For more information regarding our use of cookies, please read our Cookie Policy.
This application collects some Personal Information from its Users.
This page was last changed on 3 February 2020.
This Privacy Policy applies to the Services of Brouwerij Van Steenberge, more specifically the Gulden Draak Website. You should be aware that Brouwerij Van Steenberge is not responsible for the privacy policies of other sites and sources. By using this website, you agree to this Privacy Policy.
Brouwerij Van Steenberge respects the privacy of all Users of its site and ensures that the Personal Information you provide to us is treated confidentially.
1. PROTECTION OF PERSONAL INFORMATION
1.1. GDPR LEGISLATION 2018
Brouwerij Van Steenberge is striving to evolve to 100% conformity in accordance with GDPR legislation in 2020.
GDPR legislation - General Data Processing Regulation - is a new European legislative framework directly applicable in Belgium and the rest of the EU. This legislation replaces the Privacy Act of 1992.
This new legislation means new rights for parties concerned and obligations for processors and controllers.
This Privacy Policy is just one of the many steps we take for this purpose. We are happy to show our documentation, with steps taken, if requested.
1.2 POLICY OVERVIEW
PERSONAL DATA COLLECTED FOR THE FOLLOWING PURPOSES AND USE OF THE FOLLOWING SERVICES
ANALYTICS:
GOOGLE ANALYTICS
Personal data: Cookies and user data
CONTACT THE USER:
CONTACT FORM
Personal data: Address, City, Company Name, Email Address, First Name and Surname
Processing ground used: Consent
SALE OF GOODS:
ORDER FORM
Personal data: Address, First Name and Surname, Payment method
Processing ground used: Need for the implementation of the agreement and legal obligation
2. TYPES OF DATA COLLECTED
Among the types of Personal Data that this application collects itself or through third parties are: cookies, usage data, first name, last name, company name, address, email address and city.
Full details of each type of Personal Data collected can be found in the specific parts of this Privacy Policy or in specific explanations that are displayed prior to the data collection.
Personal Data can be freely provided by the User or, in the case of usage data, automatically collected when this application is used.
Unless otherwise stated, all information requested by this application is mandatory and failure to provide this Data may make it impossible for this application to provide its Services. In cases where this application expressly specifies that some data is not mandatory, Users are free not to communicate this Data without affecting the availability or operation of the Service.
Users who are not sure what Personal Information is required can contact Brouwerij Van Steenberge.
Any use of Cookies or other tracking tools by this application or by the owners of third-party services used by this application, serves the purpose of delivering the Service required by the User, in addition to all other purposes described in this document and in the Cookie policy, if available.
Users are responsible for the Personal Data obtained from third parties, published or shared through this application and confirm that they have the permission of third parties to provide the Data to the Owner.
2.1 MANNER AND PLACE OF PROCESSING OF THE DATA
Methods of processing
The Owner shall take appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of the Data.
The data processing is carried out using computers and/or IT tools, according to organizational procedures and modes strictly related to the stated purposes. In addition to the Owner, data may in some cases be accessible to certain responsible persons involved in the operation of this Application (administration, sales, marketing, legal, system administration) or external parties (such as third parties), technical service providers, postal carriers, hosting providers, IT companies and communication agencies. If necessary, they act as Data Processors or Owner. The updated list of these parties may be requested from the Owner at any time via info@vansteenberge.com or via the postal address.
Legal basis for processing
The Owner can process Personal Information relating to Users if one of the following situations applies:
Users have given their consent for one or more specified purposes. Note: Under some legislation, the Owner may process Personal Data until the User objects to such processing (opt-in and opt-out), without this being dependent on consent or any of the following legal bases. However, this does not apply where the processing of Personal Data is subject to European data protection legislation;
The provision of Data is necessary for the implementation of an agreement with the User and/or for any precontractual obligations thereof;
Processing is necessary to comply with a legal obligation to which the Owner is subject;
Processing is related to a task carried out in the public interest or in the exercise of public authority by the Owner;
Processing is necessary for the legitimate interests of the Owner or a third party.
In all cases, the Owner will be happy to help clarify the specific legal basis applicable to processing and in particular, whether the provision of Personal Data is a legal or contractual requirement or a requirement necessary for concluding a contract.
Location
The Data shall be processed in the Owner's business offices and in other places where the parties involved in processing are located.
Depending on the User's location, the transfer of User data to a country other than their own country can take place. To learn more about the location of processing such transferred Data, Users can check the section with details about the processing of Personal Information.
Users are also entitled to information about the legal basis of data transfers to a country outside the European Union or to an international organisation falling under international public law or set up by two or more countries, such as the UN, and about the security measures taken by the Owner to protect their Data.
If such a transfer takes place, Users may find more information by checking the relevant sections of this document or making enquiries with the Owner using the information in the contact section.
Retention period
Personal data will be processed and stored for so long as necessary for the purpose for which they have been collected.
Therefore:
Personal data collected for purposes related to the performance of a contract between the Owner and the User shall be retained until such a contract is fully performed.
Personal data collected for the benefit of the legitimate interests of the Owner will be kept for so long as necessary to achieve such purposes. Users can find specific information about the legitimate interests of the Owner within the relevant parts of this document or by contacting the Owner.
The Owner may be allowed to retain Personal Data for a longer period of time each time the User has given permission for such processing, for so long as this consent is not revoked. In addition, the Owner may be required to retain Personal Data for a longer period of time when required for the implementation of a legal obligation or on the orders of an authority.
Once the retention period has expired, the Personal Information will be deleted. Therefore, the right to access, the right to erase, the right to rectification and the right to data portability cannot be enforced after the expiry of the retention period.
The purpose of the processing
The User Data is collected to enable the Owner to provide its Services, as well as for the following purposes: Analysis, Contacting the User, enabling an online sale/purchase to the consumer.
Users can find more detailed information about such processing purposes and the specific Personal Information used for each purpose in the respective sections of this document.
Detailed information on the processing of Personal Data
Personal Data will be collected for the following purposes and the use of the following Services:
ANALYTICS
With the services in this section, the Web Traffic Owner can monitor and analyse web traffic and it can be used to track user behaviour.
GOOGLE ANALYTICS (GOOGLE INC.)
Google Analytics is a web analytics service offered by Google Inc. Google uses the collected Data to track and investigate the use of this app, prepare and share reports about its activities with other Google services.
Google can use the collected Data to place in context and personalize the advertisements of its own advertisement network. Collected Personal Data: cookies and usage data. Processing point: United States.
TO CONTACT THE USER
CONTACT FORM (THIS APPLICATION)
By filling out the contact form with their Data, the User authorizes this application to use this Data to respond to requests for information, quotes, or other types of requests as indicated by the heading on the form. Collected Personal Data: address, city, company name, email address, first name and last name.
ORGANIZING AN ONLINE SALE
The modalities include checking the operationality of the web shop, as well as checking age when purchasing alcoholic beverages.
Who we share data with
We do not send your Personal Data to third parties in an identifiable manner if that is not required to provide the Services, without your explicit consent.
We can call on external processors to offer you the Website and/or Services. We ensure that third party processors can process your Personal Data only on our behalf, and on written instruction from us. We guarantee that all external processors are selected with due care so that we can count on the safety and integrity of your Personal Data.
We can transfer anonymized and/or aggregated Data to other organizations that can use this Data to improve Products and Services and organize the marketing, presentation and sale of customized Products and Services.
2.2 RIGHTS OF USERS
Users may exercise certain rights relating to their Data processed by the Owner.
Users have the right to do the following:
Withdraw their consent at any time. Users have the right to withdraw consent if they have previously given their consent to the processing of their Personal Data.
Access to their Data. Users have the right to find out whether the Owner processes the Data, obtain information about certain aspects of the processing, and to obtain a copy of the Data that is being processed.
Check and ask for rectification. Users have the right to verify their Data and to request that it is brought up to date or corrected.
To receive their Data and have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used and machine-readable format and, if technically feasible, to have it sent to another controller without any hindrance. This provision shall apply provided that the Data is processed in an automated manner and that processing is based on the User's consent, a contract to which the User is a party, or in relation to pre-contractual obligations.
To make a complaint. Users have the right to submit a claim to their competent data protection authority. This can be done via contact(at)apd-gba.be.
Details regarding the right to object to processing
Where Personal Data is processed for a public interest, in the exercise of an official authority invested in the Owner or for the purposes of the legitimate Interests of the Owner, Users can object to that processing by providing a reason related to their specific situation.
However, users should know that if their Personal Data is processed for direct marketing purposes, they can object to that processing at any time without giving any justification. To find out whether the Personal Data Owner processes personal data for direct marketing purposes, Users can refer to the relevant sections of this document.
How to exercise these rights
Any requests to exercise user rights can be addressed to the Owner via the contact details in this document.
These requests can be exercised free of charge and will be dealt with by the Owner as soon as possible and always within one month.
3. PROCESSING AGREEMENT OF PERSONAL DATA: PASSWORDS
If necessary, we will pass on passwords from systems to external partners over the telephone but never via email.
When creating new passwords, we will make sure that they are strong enough.
When an employee leaves our company, we will make sure that they no longer have access to the various systems.
If you have further questions, you can always contact Brouwerij Van Steenberge.
Info@vansteenberge.com
09 344 50 71
