This processing is carried out by Brouwerij Van Steenberge as the responsible person for the processing, with registered office in Lindenlaan 25, 9940 Ertvelde in accordance with applicable legislation on the protection of Personal Data.
This application collects some Personal Information from its Users.
This page was last changed on 3 February 2020.
Brouwerij Van Steenberge respects the privacy of all Users of its site and ensures that the Personal Information you provide to us is treated confidentially.
1. PROTECTION OF PERSONAL INFORMATION
1.1. GDPR LEGISLATION 2018
Brouwerij Van Steenberge is striving to evolve to 100% conformity in accordance with GDPR legislation in 2020.
GDPR legislation - General Data Processing Regulation - is a new European legislative framework directly applicable in Belgium and the rest of the EU. This legislation replaces the Privacy Act of 1992.
This new legislation means new rights for parties concerned and obligations for processors and controllers.
1.2 POLICY OVERVIEW
PERSONAL DATA COLLECTED FOR THE FOLLOWING PURPOSES AND USE OF THE FOLLOWING SERVICES
Personal data: Cookies and user data
CONTACT THE USER:
Personal data: Address, City, Company Name, Email Address, First Name and Surname
Processing ground used: Consent
SALE OF GOODS:
Personal data: Address, First Name and Surname, Payment method
Processing ground used: Need for the implementation of the agreement and legal obligation
2. TYPES OF DATA COLLECTED
Among the types of Personal Data that this application collects itself or through third parties are: cookies, usage data, first name, last name, company name, address, email address and city.
Personal Data can be freely provided by the User or, in the case of usage data, automatically collected when this application is used.
Unless otherwise stated, all information requested by this application is mandatory and failure to provide this Data may make it impossible for this application to provide its Services. In cases where this application expressly specifies that some data is not mandatory, Users are free not to communicate this Data without affecting the availability or operation of the Service.
Users who are not sure what Personal Information is required can contact Brouwerij Van Steenberge.
Users are responsible for the Personal Data obtained from third parties, published or shared through this application and confirm that they have the permission of third parties to provide the Data to the Owner.
2.1 MANNER AND PLACE OF PROCESSING OF THE DATA
Methods of processing
The Owner shall take appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of the Data.
The data processing is carried out using computers and/or IT tools, according to organizational procedures and modes strictly related to the stated purposes. In addition to the Owner, data may in some cases be accessible to certain responsible persons involved in the operation of this Application (administration, sales, marketing, legal, system administration) or external parties (such as third parties), technical service providers, postal carriers, hosting providers, IT companies and communication agencies. If necessary, they act as Data Processors or Owner. The updated list of these parties may be requested from the Owner at any time via firstname.lastname@example.org or via the postal address.
Legal basis for processing
The Owner can process Personal Information relating to Users if one of the following situations applies:
Users have given their consent for one or more specified purposes. Note: Under some legislation, the Owner may process Personal Data until the User objects to such processing (opt-in and opt-out), without this being dependent on consent or any of the following legal bases. However, this does not apply where the processing of Personal Data is subject to European data protection legislation;
The provision of Data is necessary for the implementation of an agreement with the User and/or for any precontractual obligations thereof;
Processing is necessary to comply with a legal obligation to which the Owner is subject;
Processing is related to a task carried out in the public interest or in the exercise of public authority by the Owner;
Processing is necessary for the legitimate interests of the Owner or a third party.
In all cases, the Owner will be happy to help clarify the specific legal basis applicable to processing and in particular, whether the provision of Personal Data is a legal or contractual requirement or a requirement necessary for concluding a contract.
The Data shall be processed in the Owner's business offices and in other places where the parties involved in processing are located.
Depending on the User's location, the transfer of User data to a country other than their own country can take place. To learn more about the location of processing such transferred Data, Users can check the section with details about the processing of Personal Information.
Users are also entitled to information about the legal basis of data transfers to a country outside the European Union or to an international organisation falling under international public law or set up by two or more countries, such as the UN, and about the security measures taken by the Owner to protect their Data.
If such a transfer takes place, Users may find more information by checking the relevant sections of this document or making enquiries with the Owner using the information in the contact section.
Personal data will be processed and stored for so long as necessary for the purpose for which they have been collected.
Personal data collected for purposes related to the performance of a contract between the Owner and the User shall be retained until such a contract is fully performed.
Personal data collected for the benefit of the legitimate interests of the Owner will be kept for so long as necessary to achieve such purposes. Users can find specific information about the legitimate interests of the Owner within the relevant parts of this document or by contacting the Owner.
The Owner may be allowed to retain Personal Data for a longer period of time each time the User has given permission for such processing, for so long as this consent is not revoked. In addition, the Owner may be required to retain Personal Data for a longer period of time when required for the implementation of a legal obligation or on the orders of an authority.
Once the retention period has expired, the Personal Information will be deleted. Therefore, the right to access, the right to erase, the right to rectification and the right to data portability cannot be enforced after the expiry of the retention period.
The purpose of the processing
The User Data is collected to enable the Owner to provide its Services, as well as for the following purposes: Analysis, Contacting the User, enabling an online sale/purchase to the consumer.
Users can find more detailed information about such processing purposes and the specific Personal Information used for each purpose in the respective sections of this document.
Detailed information on the processing of Personal Data
Personal Data will be collected for the following purposes and the use of the following Services:
With the services in this section, the Web Traffic Owner can monitor and analyse web traffic and it can be used to track user behaviour.
GOOGLE ANALYTICS (GOOGLE INC.)
Google Analytics is a web analytics service offered by Google Inc. Google uses the collected Data to track and investigate the use of this app, prepare and share reports about its activities with other Google services.
Google can use the collected Data to place in context and personalize the advertisements of its own advertisement network. Collected Personal Data: cookies and usage data. Processing point: United States.
TO CONTACT THE USER
CONTACT FORM (THIS APPLICATION)
By filling out the contact form with their Data, the User authorizes this application to use this Data to respond to requests for information, quotes, or other types of requests as indicated by the heading on the form. Collected Personal Data: address, city, company name, email address, first name and last name.
ORGANIZING AN ONLINE SALE
The modalities include checking the operationality of the web shop, as well as checking age when purchasing alcoholic beverages.
Who we share data with
We do not send your Personal Data to third parties in an identifiable manner if that is not required to provide the Services, without your explicit consent.
We can call on external processors to offer you the Website and/or Services. We ensure that third party processors can process your Personal Data only on our behalf, and on written instruction from us. We guarantee that all external processors are selected with due care so that we can count on the safety and integrity of your Personal Data.
We can transfer anonymized and/or aggregated Data to other organizations that can use this Data to improve Products and Services and organize the marketing, presentation and sale of customized Products and Services.
2.2 RIGHTS OF USERS
Users may exercise certain rights relating to their Data processed by the Owner.
Users have the right to do the following:
Withdraw their consent at any time. Users have the right to withdraw consent if they have previously given their consent to the processing of their Personal Data.
Access to their Data. Users have the right to find out whether the Owner processes the Data, obtain information about certain aspects of the processing, and to obtain a copy of the Data that is being processed.
Check and ask for rectification. Users have the right to verify their Data and to request that it is brought up to date or corrected.
To receive their Data and have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used and machine-readable format and, if technically feasible, to have it sent to another controller without any hindrance. This provision shall apply provided that the Data is processed in an automated manner and that processing is based on the User's consent, a contract to which the User is a party, or in relation to pre-contractual obligations.
To make a complaint. Users have the right to submit a claim to their competent data protection authority. This can be done via contact(at)apd-gba.be.
Details regarding the right to object to processing
Where Personal Data is processed for a public interest, in the exercise of an official authority invested in the Owner or for the purposes of the legitimate Interests of the Owner, Users can object to that processing by providing a reason related to their specific situation.
However, users should know that if their Personal Data is processed for direct marketing purposes, they can object to that processing at any time without giving any justification. To find out whether the Personal Data Owner processes personal data for direct marketing purposes, Users can refer to the relevant sections of this document.
How to exercise these rights
Any requests to exercise user rights can be addressed to the Owner via the contact details in this document.
These requests can be exercised free of charge and will be dealt with by the Owner as soon as possible and always within one month.
3. PROCESSING AGREEMENT OF PERSONAL DATA: PASSWORDS
If necessary, we will pass on passwords from systems to external partners over the telephone but never via email.
When creating new passwords, we will make sure that they are strong enough.
When an employee leaves our company, we will make sure that they no longer have access to the various systems.
If you have further questions, you can always contact Brouwerij Van Steenberge.
09 344 50 71