Privacy Statement

Introduction

As a customer of ROOFTOP GASTON BV , with registered office at 9000 Ghent, Hurstweg 8 A, RPR Ghent Department, you are entitled to the most comprehensive protection, including of your personal data.

This general privacy statement (hereinafter referred to as the "Privacy Statement") aims to provide you with complete information regarding the processing of your personal data. It explains how we collect, use and store your personal data.

We may ask you to share certain personal data with us, including but not limited to your first name, last name and e-mail address (identification data). Certain specific obligations may require you to provide us with additional data, such as payment and billing information.

We collect only the personal data necessary to inform you about our products and services, to execute an agreement with you and to contact you. We base this on the processing grounds of the agreement, legal obligation, our legitimate interest and, in some cases, your consent.

The processing of your personal data is subject to this privacy statement.

By providing your personal data, you are deemed to have acknowledged the use of your personal data in accordance with this Privacy Statement.

We invite you to take the time to read this Privacy Statement to become familiar with our practices in that regard. You will also find information on the Data Protection Authority website (www.gegevensbeschermingsautoriteit.be).

Article 1 - Definitions.

"GASTON" means ROOFTOP GASTON BV, having its registered office at 9030 Ghent, Hurstweg 8, RPR Ghent Department, with enterprise number 0644.458.102.

"Personal data" has the meaning defined in the General Data Protection Regulation 2016/679, which includes any information by which a natural person (also known as "data subject" or "data subject") is identified or can be identified such as, for example, a person's name, a photograph, a telephone number, a code, a password, a contract number, an email address, etc....

"Controller" has the meaning defined in the General Data Protection Regulation 2016/679. GASTON will be qualified as the Controller who determines the purposes and means of processing your Personal Data.

"Affiliated Company" means a company affiliated with GASTON to the extent it meets the conditions of an "affiliated company" within the meaning of Article 1:20 of the Belgian Companies and Associations Code.

"Processor" has the meaning as defined in the General Data Protection Regulation 2016/679, which processes Personal Data on behalf/on the instructions of the Controller.

"Website" means GASTON's website: www.gaston-gent.be.

Article 2 - Controller of Personal Data Processing.

'Processing' is any operation involving a Personal Data. Processing includes, inter alia, all aspects related to the collection, recording, organization, structuring, storage, updating or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction of that data.

Our company is the Controller of your Personal Data in our possession. This means that we determine the purposes and means for which that data is processed and that we are your point of contact and that of the supervisory authorities for all questions regarding the use of your data.

Our company does not have a Data Protection Officer (DPO). For all your questions regarding this privacy policy and the GDPR, please contact Ms. Valeria De Leeuw within our company at the following email address: valeria@coeurcatering.be.

Article 3 - Purposes of processing personal data./h2>

3.1. Customer data

As part of our services and operations, we collect and process the identity and contact data of our customers and clients. The purposes for this processing are the performance of agreements with our clients, client management, accounting and direct marketing activities such as sending promotional or commercial information. The legal grounds are the performance of the agreement, the fulfillment of legal and regulatory obligations (including, but not limited to, Belgian accounting legislation), our legitimate interest and, in some cases, your consent.

3.2. Data from suppliers and subcontractors

We collect and process the identity and contact data of our suppliers and subcontractors, as well as their subcontractor(s), if any, their staff and employees. The purposes of this processing are the performance of the agreement, management of the suppliers/subcontractors and accounting. The legal grounds are the performance of the agreement, the fulfillment of legal and regulatory obligations and/or our legitimate interest.

3.3. Staff data

We process the Personal Data of our employees in the context of our personnel management and payroll administration. The legal grounds are the performance of the contract and the fulfillment of legal and regulatory obligations.

3.4. Applicant data.

We process identity and contact information as well as work history and other data commonly indicated on a curriculum vitae of job applicants when they provide us with this information. The Personal Data are processed to investigate your eligibility for a job with us based on our legitimate interest.

If we wish to retain your Personal Data longer after the relevant vacancy has been filled, we will notify you and request your consent to do so.

3.5. Other data

Besides the data of customers, suppliers/subcontractors, staff and job applicants, we also process Personal Data of others, such as potential new customers/prospects, useful contacts within our industry, network contacts, etc. This is done through our Website or through other channels. The purposes of this processing are in the interest of our operations, direct marketing and public relations. The legal basis is our legitimate interest, the performance of a contract and, in some cases, your consent.

Very specifically, we may use the Personal Data we collect for the following purposes:

• To provide you with our products and services and to perform any agreements;
• To process and handle possible complaints or requests;
• For direct marketing purposes;
• for internal reasons, including corporate records and archival purposes

In any processing, only those Personal Data necessary to achieve the intended purpose are processed. As a general rule and by way of example, we use your Personal Data either:

• When we have obtained your express consent. In that case, we will process your personal data for the specific purposes for which you have given your consent;
• As part of the performance of the contract or to take pre-contractual measures at your request;
• To comply with all legal, regulatory and administrative obligations.
• For reasons that concern our legitimate interests. In this case, we strive to maintain a fair balance between our legitimate interests and respecting your privacy. These are situations in which we process your personal data in order to function as well as possible and provide you with the best service. For example, we process your data for the following purposes:
  • protection of the company's assets;
  • security of goods and people, as well as information networks and systems;

Article 4 - The confidentiality of your Personal Data and security measures

Whenever you provide Personal Data to us, we will treat that information in accordance with the provisions of this Privacy Statement and legal obligations in the context of processing Personal Data, including the General Data Protection Regulation (GDPR) 2016/679.

In order to prevent, as far as possible, unauthorized access to the Personal Data collected in this context, we have established security and organizational procedures, which concern both the collection of this data and its storage.

Therefore, we implement appropriate measures and procedures to secure and protect the Personal Data we collect through the Website or through electronic correspondence. In this way, we are committed, to the extent reasonably expected, to preventing unlawful processing of Personal Data and accidental loss or destruction of your Personal Data.

These procedures also apply to all Processors we use.

Access to your Personal Data is permitted only to persons with a "need-to-know" basis (e.g., only GASTON and its employees, associates, Affiliates or subcontractors who need your Personal Data for the purposes described in Section 3 will have access to the data).

Article 5. Where and how are your personal data collected?

Our company may collect some of your personal information including:

• When you become a customer;
• When you complete the forms, order forms and agreements we submit to you;
• When you use our services;
• When you contact us through the various channels made available to you;
• When you enter into an (employment) agreement with us;
• When you call, email or correspond with us in any way other than through the Website.

When we request your Personal Data, you have the right to refuse to do so. However, such refusal could prevent the establishment of contractual relationships, change their nature or affect their management.

Article 6 - Recipient of data

6.1. General

In accordance with the foregoing, and except to the extent that the communication of Personal Data to organizations or entities whose intervention as third party service providers on behalf of and under the control of the Responsible Party is required to accomplish the aforementioned purposes, we will not disclose, sell, rent or exchange the Personal Data collected in this context with any other organization or entity, unless you have been informed and expressly consented to it in advance.

We call on third-party service providers, such as:

• External staff to perform certain tasks or specific assignments;
• Social secretariats;
• For our administration, billing and project follow-up
• Taking care of the Internet environment (web hosting, e-mail management,...)
• Providing (and distributing) newsletters and invitations
• Printing of corporate stationery etc.

We may take all measures necessary to ensure proper management of the Website and its computer system.

We may transmit Personal Data at the request of any legally authorized authority, or even on our own initiative if it believes in good faith that the transmission of such information is necessary to comply with laws and regulations, or to defend and/or protect the rights or property of our company, our customers, our website and/or You.

6.2. No data transfer for commercial use

As a trustee, we do not share your Personal Data with third parties for commercial use.

6.3. Data transfers outside the European Economic Area (EEA).

We will not transfer Personal Data to third parties located outside the European Economic Area, except to subcontractors or associates who have undertaken to comply with the European Commission's Standard Contractual Clauses and thereby provide an adequate level of security for the processing of Personal Data.

Article 7 - Retention period

The Personal Data will be kept and processed by us for a period necessary in function of the purposes of the processing.

Customer data and data of suppliers or subcontractors will in any case be deleted from our systems after a period of 7 years after the termination of the agreement, except with regard to Personal Data that we are required to keep longer under specific legislation or in case of an ongoing dispute for which the Personal Data is still necessary.

Personal data of personnel are deleted after a period of 5 years after the termination of the employment contract.

Personal data of job applicants will be deleted after the relevant vacancy has been filled or after a period of 2 years after consent has been obtained to notify applicants about future job opportunities.

Other data will not be kept longer than a period of 2 years after the last time a meaningful contact took place with you, except in case of a consent to keep this data longer.

Article 8 - Rights of access, rectification, oblivion, data portability, objection, non-profiling and concerning security breach notification

8.1. Right of access

After verifying your identity, you have the right to access the personal data we process about you.

8.2. Right of rectification

If you find that, despite all our efforts, your personal data is incorrect or incomplete, you may ask us to correct it.

8.3. Right to data erasure ("right to oblivion").

In well-defined cases, legislation gives you the option to have your Personal Data erased.

However, your right to oblivion is not absolute. We have the right to continue to retain your Personal Data when necessary for e.g. compliance with a legal obligation or the establishment, exercise or support of a legal claim.

8.4. Right to restriction of processing.

You may exercise your right to limit processing of Personal Data when it is unclear whether and when Personal Data will need to be deleted.

8.5. Right to portability

In certain cases, you have the right that the Personal Data you have provided to us:

• Be transferred to you; or
• transferred by our company directly to another processing controller, provided this is technically possible.

8.6. Right of objection

Where the processing of your Personal Data is based on a legitimate or public interest on our part, you have the right to object to it at any time for reasons relating to your particular situation.

However, your request will not be considered if our legitimate interest outweighs yours or if the processing of your Personal Data remains necessary to establish, exercise or substantiate a legal claim.

8.7. Right not to be subject to a decision that is based solely on automated processing, including profiling, and may produce legal effects that concern you or may have a substantially similar impact on you.

Our company guarantees that you will not be the subject of a decision based solely on automated processing, including profiling, and may produce legal effects that relate to you or may have a substantially similar impact on you.

8.8. Right to withdraw your consent

Where processing of your Personal Data is based on your consent, you may withdraw your consent at any time and at any time.

In that case, our company may find itself unable to continue working for you.

Any withdrawal will not affect the lawfulness of the processing of your Personal Data carried out during the period prior to the withdrawal of your consent.

8.8. Who can you turn to?

To exercise your rights, simply send a dated and signed request along with a two-sided copy of your (partially anonymized) identity card by mail or e-mail to:

ROOFTOP GASTON BV

Attn: Ms. Valeria De Leeuw

Hurst Road 8

9000 Ghent

E-mail: valeria@coeurcatering.be

If you believe that the processing of your Personal Data violates privacy laws and we cannot reach an amicable settlement, you also have the right to file a complaint with the Data Protection Authority:

Data Protection Authority

Printing Press Street 35

1000 Brussels

https://www.gegevensbeschermingsautoriteit.be/burger/acties/klacht-indienen

Article 9 - Website

9.1. General

On our Website, Personal Data is collected through the contact form.Here, it is mandatory to ask for the name (surname and first name), phone number, e-mail address and the reason for contact (message).

9.2. Use of cookies

Cookies are small computer files sent by our servers that are placed on your computer's hard drive. These cookies contain information that can only be deciphered by us and only when you visit the Website. Thus, when you visit our Website, we may store information on your computer. These cookies are there so that you can easily navigate our site.

You are always free to refuse the installation of these cookies by changing the options of your web navigation software. Your Internet browser allows you to delete cookies from your hard drive, block them, or be warned before a cookie is stored. For more information on these features, please refer to our cookie policy.

9.3. Links

On the GASTON Website you will find links to websites of other parties. GASTON is not liable for the content of those sites and/or the way those sites handle your (personal) data.

Article 10 - Changes to the Privacy Policy.

GASTON has the right to make changes to the privacy policy and agreement related to cookies. Changes will be published on our Website. We never use your data without consent for purposes other than those mentioned above.

It is therefore advisable to consult this Privacy Statement regularly so that you are aware of these changes. Therefore, please check this document regularly.

Last modified: 03/10/2023