Updated January 5, 2019
1. Parties and object
New Goffin (hereinafter 'New Goffin' or the 'data controller')
Chaussée de Ghent 391b, 1080 Molenbeek-Saint-Jean.
BCE / VAT: BE 0460.269.552
Email: [email protected]
Telephone: +32 02 410 26 30
New Goffin establishes this confidentiality policy, the purpose of which is to inform in complete transparency the users of the website hosted at the following address: www.newgoffin.be (hereinafter the 'site') of the manner in which personal data is collected and processed by New Goffin.
The term 'User' refers to any user, whether natural or legal person, who visits or interacts in any way with the Site.
In this respect, New Goffin determines all the technical, legal and organizational means and purposes of processing users' personal data.
New Goffin undertakes to this end to take all necessary measures to guarantee the processing of personal data in accordance with the law of July 30, 2018, relating to the protection of individuals with regard to the processing of personal data (hereinafter, 'the Law') and the European regulation of April 26, 2016 relating to the protection of data of individuals with regard to the processing of personal data and the free movement of such data (hereinafter the 'regulation').
New Goffin is free to choose any natural or legal person who processes users' personal data at its request and on its behalf (hereinafter the 'processor').
Where applicable, New Goffin undertakes to select a Subcontractor offering sufficient guarantees regarding the technical and organizational security measures for the processing of personal data, with regard to the law and regulations.
2. Processing of personal data
Use of the site by users may result in the communication of personal data.
The processing of this data by New Goffin, in its capacity as data controller, or by service providers acting in the name and on behalf of New Goffin, will comply with the Law and the regulations.
Personal data will be processed by New Goffin, in accordance with the purposes mentioned below via:
- Automated procedure.
- Use of cookies.
3. Purpose of processing personal data
In accordance with Article 13 of the Regulation, the purposes of processing personal data are communicated to the user and are as follows:
- Ensure the execution of the services offered and agreed on the site.
- Ensure control of the execution of the services offered.
- Carry out marketing and promotional information activities after prior consent from the user and until the revocation of this consent, for example sending promotions on the products and services of the data controller.
4. Personal data that may be processed
The user consents, when visiting and using the site, to New Goffin collecting and processing, according to the methods and principles described in this privacy policy, the following personal data:
- User information that they provide for contractual purposes and to enable the proper performance of reciprocal obligations, namely surname, first name, address; IBAN number and bank details, and more generally, any information voluntarily given by the user.
- User information by filling in forms or by contacting us by phone, email or other means, for example, users' name, email address, phone number.
- With regard to user visits to the Site, the information automatically collected is: IP address, browser type, operating system, pages viewed on the Site, URL, browsing time, etc.
5. Consent
By accessing and using the site, the user declares that they have read and given their free, specific, informed and unequivocal consent to the processing of their personal data. This consent relates to the content of this Privacy Policy.
Consent is given by the positive act by which the user has checked the box offering the privacy policy in a hyperlink.
This consent is an essential condition for carrying out certain operations on the Site or for allowing the user to enter into a contractual relationship with New Goffin. Any contract between New Goffin and a user relating to the services and goods offered on the site is subject to the user's acceptance of the Privacy Policy.
The user consents to the data controller processing and collecting, in accordance with the terms and principles included in this privacy policy, his personal data that he communicates on the Site or during the services offered by New Goffin, for the purposes indicated above.
The user has the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent previously given.
6. Duration of retention of users' personal data
In accordance with Article 13§2 of the Regulation and the Law, the data controller only retains personal data for the time reasonably necessary to enable the accomplishment of the purposes for which they are processed.
This duration is, in all cases, less than: 2 years.
7. Recipients of data and disclosure to third parties
Personal data may be transmitted to New Goffin's employees, collaborators, subcontractors, or suppliers who offer adequate security guarantees and who collaborate with New Goffin in the context of marketing products or providing services. They act under the direct authority of New Goffin and are responsible for collecting, processing, or subcontracting this data.
In all cases, the recipients of the data and those to whom this data has been disclosed comply with the content of this privacy policy. New Goffin assures that they will process this data only for the intended purposes, in a discreet and secure manner.
In the event that the data is disclosed to third parties for direct marketing or prospecting purposes, the user will be informed in advance so that he can express his consent to the use of his personal data.
8. User Rights
At any time, the User may exercise his rights by sending a message by email to the following address: [email protected] , or a letter by post addressed, attaching a copy of his identity card to the following address: Chaussée de Gand 391b, 1080 Molenbeek-Saint-Jean.
has. Right of access
In accordance with Article 15 of the Regulation, New Goffin guarantees the user's right to their personal data. The user has the right to obtain access to said personal data as well as the following information:
- The purposes of the processing.
- The categories of personal data concerned.
- The recipients/categories of recipients to whom the personal data have been or will be communicated, in particular recipients who are established in third countries or international organizations.
- Where possible, the intended duration of the personal data storage or, where this is not possible, the criteria used to determine that duration.
- The existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the Regulation and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.
The controller may require payment of a reasonable fee based on administrative costs for any additional copies requested by the user.
When the user submits this request electronically, the information is provided in a commonly used electronic form, unless the user requests otherwise.
A copy of the user's data will be communicated to the user no later than one month after receipt of the request.
b. Right of rectification
New Goffin guarantees the user the right to rectify and erase personal data.
In accordance with Article 16 of the Regulation, incorrect, inaccurate or irrelevant data may be corrected or erased at any time.
The user first makes the necessary changes himself from his user account / other, unless these cannot be done independently, in which case the request can be made to New Goffin.
In accordance with Article 19 of the Regulation, the controller shall notify each recipient to whom the personal data are transferred, unless such communication proves impossible or involves disproportionate effort. The controller shall provide the data subject with information on these recipients upon request.
c. Right to erasure
The user has the right to obtain the erasure of his personal data as soon as possible in the cases listed in article 17 of the regulation.
Where the controller has made personal data public and is obliged to erase them pursuant to the preceding paragraph, the controller, taking into account available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers processing the personal data that the data subject has requested erasure by such controllers of any links to, or copies or replications of, those personal data.
The two preceding paragraphs do not apply to the extent that such processing is necessary:
- To the exercise of the right to freedom of expression and information.
- To comply with a legal obligation which requires processing by Union or Member State law to which the controller is subject, or to carry out a task carried out in the public interest or in the exercise of official authority vested in the controller
- To the establishment, exercise or defense of legal rights
In accordance with Article 19 of the Regulation, the controller shall notify each recipient to whom the personal data have been disclosed of any erasure of personal data or of any erasure that requires disproportionate effort. The controller shall provide the data subject with information on these recipients upon request.
d. Right to restriction of processing
The user has the right to obtain the limitation of the processing of his personal data in the cases referred to in article 19 of the regulation.
In accordance with Article 19 of the Regulation, the controller shall notify each recipient to whom the personal data have been disclosed of any restriction of the processing carried out, unless such communication proves impossible or requires disproportionate effort. The controller shall provide the data subject with information on these recipients upon request.
e. Right to data portability
In accordance with Article 20 of the Regulation, users have the right to receive from New Goffin their personal data in a structured, commonly used and machine-readable format. Users have the right to transmit this data to another controller without hindrance from New Goffin in the case provided for by the Regulation.
When the user exercises his or her right to data portability pursuant to the preceding paragraph, he or she has the right to have personal data transmitted directly from one data controller to another, where technically feasible.
The right to data portability does not affect the rights and freedoms of third parties.
f. Right to object and automated individual decision-making
The user has the right at any time to object to the processing of his personal data due to his particular situation, including the automation of data carried out by New Goffin.
In accordance with Article 21 of the Regulation, New Goffin will no longer process personal data unless there are compelling legitimate grounds for the processing which override the interests, rights and freedoms of the user, or for the establishment, exercise or defense of legal claims.
Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
g. Right to complain
The user has the right to lodge a complaint regarding the processing of his personal data by New Goffin with the Data Protection Authority, competent for the Belgian territory.
Further information can be found on the website:
https://www.autoriteprotectiondonnees.be
A complaint can be filed at the following addresses:
Data Protection Authority
Press Street 35, 1000 Brussels
Tel: +32 2 274 48 00
Fax: +32 2 274 48 35
Email : [email protected]
The user may also file a complaint with the court of first instance of his domicile.
9. Limitation of liability of the data controller
The website may contain links to other websites owned by third parties not related to New Goffin.
The content of these sites and their compliance with the law and regulations are not the responsibility of New Goffin.
The holder of parental authority must give express consent for a minor under 16 years of age to disclose personal information or data on the website.
New Goffin strongly advises those exercising parental authority over minors to promote responsible and secure internet use. The data controller cannot be held responsible for collecting and processing personal information and data from minors under the age of 16 whose consent is not effectively covered by that of their legal parents, or for incorrect data, particularly regarding age, entered by minors.
Under no circumstances will personal data be processed by the data controller if the user specifies that he or she is under 16 years of age.
New Goffin is not responsible for the loss, corruption or theft of personal data caused in particular by the presence of viruses or following computer attacks.
10. Applicable law and competent jurisdiction
This Privacy Policy is governed exclusively by Belgian law. Any dispute will be brought before the courts of the judicial district of the registered office of New Goffin.
11. Contact
For any questions or complaints regarding this Privacy Policy, the user can contact the data controller via the following address: [email protected]