Privacy statement — Equitom Foundation SON  

1 Introduction

This privacy statement describes how Equitom Foundation ("we", "us", "our" or "Equitom Foundation") collects and processes your personal data through its Webshop at www.equitomfoundation.com.

You typically are a visitor of our Webshop or a customer of Equitom Foundation purchasing products through our Webshop.

We respect your privacy, and we will treat your personal data with all due care in accordance with the Belgian and European data protection legislation (including the General Data Protection Regulation ("GDPR")).

Please read this statement carefully. It not only describes your rights, but also how to exercise them.

By visiting our Webshop or by sharing your personal data with us via the Webshop, you acknowledge that you have read this statement and are aware of the way we collect and process your personal data.

2 Who we are and how to contact us

Equitom Foundation is a private limited company and acts as a data controller with respect to the personal data collected through the Webshop.

Offices	Venusbergstraat 1, 3560 Lummen, Belgium
Company number	1019.854.040

If you have any questions about this privacy statement or the processing of your personal data, please contact us using the following e-mail address.

Contact

info@equitomfoundation.com

 

3 Which categories of personal data do we process?

Depending on how you use our Webshop and which data you choose to share with us, we collect and process different categories of personal data.

In general, when we process your personal data, the data involved include:

·       Identification and contact data (such as your name, first name, e-mail address, telephone number, (delivery) address etc.);

·       Login details (such as your username and password);

·       Account details (such as information about your order history and other information you have uploaded to your account);

·       Technical data (such as data about your computer, mobile or other devices (such as your IP address, user ID, operating system, browser type etc.));

·       Website user data (such as information regarding your use of the Webshop (including history, logs, date, time, location, how frequently and how long you visit any pages, your consent preferences)); and

·       Financial data (such as your bank details, method of payment etc.).

More detail on which personal data we use for which processing activity can be found in Article 4.

4 For which purposes do we process your personal data, on which legal BASIS, and how long do we keep them for?

4.1        General

Equitom Foundation processes personal data as a data controller. A data controller is the (legal) entity that determines the purpose and means of the processing activity. This article 4 describes the purposes for which we process your personal data, the categories of personal data we process for these purposes, our legal grounds for doing so, and the period for which we keep your personal data.

Depending on your use of the Webshop, our services, the information you share with us and our relationship, Equitom Foundation processes personal data for the purposes specified in this article 4 (if and to the extent applicable to your situation). Please note that our Webshop and our services may evolve and more functionalities may be added to our Webshop and our services from time to time. When this happens, we will update the table below where necessary in accordance with article 16, and your additional consent will be requested (if and to the extent required).

For certain processing purposes, Equitom Foundation requires your consent. You are always free to decide whether or not to give your consent, and you have the right to withdraw your consent at any time. You can withdraw your consent by sending an email to: info@equitomfoundation.com. When you withdraw your consent, this does not affect the processing of personal data prior to such withdrawal or our processing activities based on any other legal basis.

4.2        Processing activities

We process your personal data for the purposes specified below.

Purpose	Categories of personal data	Legal basis	Retention period
To provide you with a better user experience when you visit the Webshop, and to enable us to optimise the Webshop by collecting technical, analytical and statistical insights.	Technical data Website user data	Consent   You are always free to decide whether or not to give your consent. You have the right to withdraw your consent free of charge at any time by sending an e-mail to info@equitomfoundation.com	The retention period varies from the duration of a visit to our Webshop to until such time you withdraw your consent (if applicable). See our cookie statement for more information.
To create your user account and enable you to log in and order products in our Webshop	Identification and contact data Login data Account data	Performance of the agreement	As long as necessary for the performance of the agreement.   In any case, your personal data will be deleted one (1) year after your last visit to our Webshop.
To deliver the products you ordered and to deal with the invoicing and communication related to your order or payment.	Identification and contact data Account data Financial data;	Performance of the agreement	As long as necessary for the performance of the agreement.   In any case, your personal data will be deleted one (1) year after your last visit to our Webshop.
For direct marketing purposes (such as sending newsletters about our products)	Identification and contact data  Technical data	Our legitimate interest if you have ordered products on our Webshop in the past Consent   You are always free to decide whether or not to give your consent. You have the right to withdraw your consent free of charge at any time by sending an e-mail to info@equitomfoundation.com.	Until you tell us you no longer wish to receive newsletters and withdraw your consent. After that point, your data may be retained for the other purposes specified in this statement (in accordance with the retention periods specified for those purposes).
To answer any questions via the contact form.	Identification and contact data Any other personal data you decide to share with us	Legitimate interest or performance of the agreement (depending the individual case)	As long as necessary to contact you in relation to your question. After that point, your data may be retained for the other purposes specified in this statement (in accordance with the retention periods specified for those purposes).
To review your feedback and improve your customer experience.	Identification and contact data Any other personal data you decide to share with us	Legitimate interest	Feedback (and any related personal data) will be kept for two (2) years.
To conduct our business administration (such as managing our customer relationship and/or managing certain complaints).	Identification and contact data Account data Any additional data you share with us in the context of our agreement	Legitimate interest	As long as necessary for our legitimate interest. In any case, your personal data will be deleted within ten (10) years from the end of our agreement.
To comply with our legal obligations (such as responding to requests from data subjects, to respect your consent preferences etc.).	Identification and contact data Website user data Technical data Any other personal data you decide to share with us	Legal obligation	The retention period varies from as long as the duration of a visit to our Webshop to as long as required by the law. In any case, your personal data will be deleted within ten (10) years from the end of our agreement.
To share your customer experience and reviews on our Webshop in order to promote our services to potential customers and visitors to our Webshop.	Identification data   Any other personal data you decide to share with us in your review.	Consent   You are always free to decide whether or not to give your consent. You have the right to withdraw your consent free of charge at any time by sending an e-mail to info@equitomfoundation.com	Until such time you withdraw your consent.

 

5 Personal data of third parties

If you share any personal data of third parties with us, you guarantee that you have notified those third parties and obtained their consent to share these data with us. 

6 Cookies

Our Webshop uses cookies and similar technologies. For more information, please refer to our cookie statement.

7 Who do we share your personal data with? 

If and to the extent necessary for the purposes described in article 4, your personal data may be shared with:

-        external service providers (such as IT service providers (including hosting and/or payment services) and suppliers);

-        professional advisers (such as accountants, lawyers or auditors); and

-        third parties with whom we intend to merge or to whom we intend to sell or transfer (parts of) our business.

In any case, your personal data will only be shared with employees or third parties to the extent strictly necessary for the purposes described above, and we will take appropriate measures to protect the integrity and confidentiality of your personal data.

If we contract processors or sub-processors, these will always act under our responsibility and in accordance with an agreement that complies with the requirements of the GDPR. We require our processors and sub-processors to take appropriate technical and organisational measures to protect your personal data, and we do not allow them to use these data for their own purposes.

Please contact us if you would like more information on which processors and sub-processors we work with to process your personal data.

In addition, we may disclose your personal data if required to do so by law, or if we believe in good faith that such disclosure is necessary to comply with a judicial investigation, court order or to protect our rights.

8  Transfer of personal data

In principle, your personal data will not be processed in third countries outside the European Economic Area ("EEA"). However, it is possible that we may transfer your personal data to a third country outside the EEA through our processors or sub-processors. In such case, we will only do so in accordance with the applicable data protection legislation, and we will take additional measures where necessary.

Please contact us if you would like more information on whether we transfer your personal data outside of the EEA and/or on the specific mechanisms we use when transferring personal data to countries outside the EEA.

9 Direct marketing

If you give us your consent to do so, we may use your personal data for direct marketing purposes (including any profiling). This enables us to keep you informed about our services, products and events.

You are always free to decide whether or not to consent to these purposes, and you have the right to withdraw your consent (free of charge) at any time. You can do so by sending an e-mail to info@equitomfoundation.com.

10 HOW DO WE SECURE YOUR PERSONAL DATA?

We make every effort to ensure that your personal data is kept secure, and we have taken appropriate technical and organisational measures in accordance with the GDPR to protect your personal data against loss, misuse and unauthorised alteration or deletion.

If you would like additional information on the specific measures we are taking, please contact us at info@equitomfoundation.com. 

Despite the measures we have taken, you should be aware that sharing personal data over the internet always involves risks. The security of your personal data can never be fully guaranteed, nor can we guarantee that unauthorised third parties will never be able to circumvent these measures or use your personal data for improper purposes.

11 HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We only keep your personal data for as long as reasonably necessary to fulfil the purposes in article 4 of this privacy statement, as well as to comply with any legal, tax or accounting requirements. We may also keep your personal data for a longer period in the event of a complaint or if we reasonably believe that there is or may be or a lawsuit pending in relation to our relationship with you.

After that, your personal data may remain available in our backups or archives, but will no longer be actively processed on file.

The applicable retention periods are set out in the table in article 4.

12 Your rights and how to exercise them

If and to the extent provided for by the applicable data protection legislation, you have the following rights:

-        Right to access: you have the right to receive confirmation as to whether we process your personal data and, if so, to access this personal data. Please note that we may anonymise (parts of) some files to protect the privacy of third parties.

-        Right to rectification: you have the right to have your personal data corrected or ask that we complete your personal data if you notice that we are processing incorrect or incomplete information about you.

-        Right to be forgotten: in specific cases, you have the right to have your personal data deleted.

-        Right to restriction: in specific cases, you have the right to ask us to restrict the processing of your personal data.

-        Right to portability: in certain cases, you have the right to obtain your personal data in a structured, commonly used and machine-readable form, and to transfer it (or have it transferred) to another data controller.

-        Right to object: you have the right to object to our processing of your personal data based on our legitimate interest. 

You can exercise your rights by sending an e-mail to info@equitomfoundation.com.

Please specify exactly which right you wish to exercise in your request, so that we can help you as efficiently as possible. In some cases, we may ask you to provide more information about yourself so we can make sure we are communicating with the correct person.

In principle, exercising these rights is free of charge. Only in case of unreasonable or repeated requests may we charge a reasonable administrative fee. We will always notify you of the applicable fee before charging it.

If you contact us to exercise one of your rights, we will reply within one (1) month. In exceptional cases, this may take longer (up to three (3) months), but we let you know the reasons why within one (1) month.

13 Your right to lodge a complaint with the competent supervisory authority

If you believe that the processing of your personal data does not comply with the applicable legislation, you have the right to file a complaint with a competent supervisory authority, in particular in the member state where you usually reside, have your place of work or where the alleged breach of the applicable data protection legislation occurred. In Belgium, the Data Protection Authority is the competent supervisory authority:

www.gegevensbeschermingsautoriteit.be

Rue de la Presse/Drukpersstraat 35, 1000 Brussels, Belgium

+32 (0)2 274 48 00

contact@apd-gba.be.

Even so, we would welcome the opportunity to resolve your concerns before you contact the Data Protection Authority. As such, we kindly ask you to reach out to us first.

14 Third-party links

Our Webshop may contain hyperlinks to third-party websites or applications. We accept no liability for the content of these websites or applications, and we are not responsible for the data protection standards that such third parties may maintain. We encourage you to review the applicable privacy statements of these websites and applications before visiting or using them.

15 Liability

If Equitom Foundation has lawfully transferred personal data to a third party (that is not a (sub)processor of ours), Equitom Foundation accepts no liability for any unlawful processing or unlawful use by that third party.

In any case, we are only liable for the losses caused by any processing of personal data if we failed to act in accordance with our specific obligations under the GDPR. We also accept no liability for indirect, incidental or consequential losses.

The above limitation of our liability applies only to the maximum permitted under the applicable legislation.

16 Amendments to this privacy statement

We may amend this privacy statement from time to time. Such changes will always be announced on our Webshop. The date of the most recent version can always be found at the top or bottom of this statement. Please check this statement regularly to stay up to date with any changes that may apply to you.

Any amended versions of this statement will enter into force ten (10) days after their publication on the Webshop, and will always be submitted for approval if necessary. Any amendments that are required to comply with a legal requirement will take effect immediately.

17 APPLICABLE LAW AND JURISDICTION

This privacy statement will be governed, interpreted and implemented in accordance with the laws of Belgium.

The courts of Antwerp (division Hasselt) are exclusively competent to adjudicate in any dispute that may arise from the interpretation or implementation of this privacy statement, without prejudice to the consumer's right to submit a dispute to a court of competent jurisdiction based on a mandatory legal provision.

Most recent update: November 2024