Privacy Policy
What do we do with your personal data?
This privacy policy (the “Privacy Policy”) governs any processing of your personal data as part of the provision of products and services by Brussels Watch Company SPRL, a company existing and operating under Belgian law, with statutory seat located at 115, rue Berthelot, 1190 Forest, Belgium and registered at the Crossroads Bank for Enterprises under company number 0673.821.881 (the “Company”).
Throughout this Privacy Policy, the terms “we”, “us” and “our” refer to the Company.
This Privacy Policy applies to any processing of personal data by our Company and related to you, the purchaser of our products or services (“you”, “your”).
Undertaking
We use our best efforts to bring our data processing activities into compliance with applicable data protection legislation, including Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”) and the Belgian Data Protection Act of 30 July 2018, each as applicable, and as amended, restated or replaced from time to time (the “Applicable Data Protection Law”).
Categories of personal data
We process the following categories of personal data:
Your personal identification data (surname, first name, address, etc.), processed mainly for processing your orders and delivering our products to you, for customer relationship management, customer support, IT support and invoicing purposes;
Your professional identification data (job title, company address, etc.), processed mainly for processing your orders and delivering our products to your company and for customer relationship management purposes;
Your credit card number and other credit card details, processed mainly for allowing us to facilitate payments and for invoicing purposes;
Your contact details (email address, phone number, etc.), processed for allowing us to contact you in relation to the provision of our products and services;
Your electronic identification data (IP addresses, electronic identifiers, etc.), processed mainly for allowing us to gather statistics about the use of our website;
Data related to your use of our website (the pages viewed, the links you clicked on, the time you stayed on a page, etc.), processed on an aggregated basis solely for the purpose of enhancing the user experience of our website.
In addition, we may use certain of your personal data above for debt recovery, business development, the activation, suspension and withdrawal of user accounts, customer satisfaction improvement, the detection and the prevention of fraud and information security breaches, the conduct of company reorganisations (e.g. mergers and acquisitions) and litigation management.
We use your email to contact you for direct marketing purposes.
Legal bases for processing
The provision of your personal data may be necessary for:
The performance of a contract to which you are a party (e.g. your purchase contract) or in order to take pre-contractual steps at your request (e.g. in the context of a request for information);
Compliance with a legal obligation applicable to us (e.g.. with regard to invoicing, fraud detection, taxation, etc.);
The legitimate interests pursued by us (or by a data recipient) provided that these interests prevail over your fundamental rights and freedoms (e.g. the detection and the prevention of fraud and information security breaches, the conduct of company reorganisations, etc.).
In some cases, we will ask for your free, prior and informed consent before processing some of your personal data (e.g. photographs portraying you for company communication purposes, your email address for direct marketing purposes if you are not yet a client with us, etc.).
We do not subject you to decisions based exclusively on automated processing that produce legal effects concerning you or similarly significantly affect you.
The provision of some of your personal data (e.g. your name, address, email address, etc.) is a condition to the conclusion of the purchase contract with us.
The possible consequences of not providing your personal data could include our inability to meet our obligations under the purchase contract (e.g. the delivery of our products to you) or a breach by us of one or more obligations under applicable laws (e.g. accounting or tax laws).
Source of the data
We collect your personal data as follows:
Directly from you through the online application process or through your interactions with our website; or
From publicly accessible information (on the Internet).
Recipients of your personal data
We may disclose your personal data to the following recipients:
The customer support team;
The directors of the Company;
Third party service providers related to the operation and maintenance of the information systems processing your personal data (these providers only have access to the personal data necessary to carry out their missions);
Government entities authorised to access and/or obtain your personal data in accordance with applicable law;
The courts and tribunals of the judicial order in the event of a dispute involving you;
Law enforcement authorities in the event of a finding or a suspicion of the occurrence of an offence involving you in accordance with or as required by applicable law.
In the event of company reorganisations (e.g. mergers or acquisitions), we may transfer your personal data to a third party involved in the transaction (for example, a buyer) in accordance with Applicable Data Protection Law.
Third-parties
We take appropriate measures to ensure that our third-party vendors process your personal data in accordance with Applicable Data Protection Law.
We also ensure that our processors undertake to, among other things, process your personal data only on our instructions, not hire subprocessors without our consent, take appropriate technical and organisational measures to ensure an adequate level of security of your personal data, ensure that persons authorised to access your personal data are subject to obligations of confidentiality, return and/or destroy your personal data at the end of their services, comply with audits and assist us in following up on your requests regarding the exercise of your data protection rights.
Once you leave our website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy.
When you click on links on our website, they may direct you away from our website. We are not responsible for the privacy practices of other websites and invite you to read their privacy statements.
Transfers outside of the European Economic Area
We transfer your personal data to countries located outside of the European Economic Area (“EEA”), such as the United States.
In case your personal data is transferred to countries located outside of the EEA, we will ensure that appropriate safeguards are taken, such as:
The country to which the personal data are transferred has benefited from an adequacy decision by the European Commission under Article 45 of the GDPR; or
Standard data protection contractual clauses as approved by the European Commission pursuant to Article 47 of the GDPR have been established; or
In case of a transfer of personal data to the United States, the transfer complies with the conditions imposed by the EU-US Privacy Shield under Article 45 of the GDPR.
For further information about transfers of personal data outside of the EEA, please consult the following link: https://edps.europa.eu/data-protection/data-protection/reference-library/international-transfers_en.
Retention
We ensure that your personal data are kept for no longer than is necessary for the purposes for which they are processed.
We use the following criteria to determine the retention periods of personal data according to the context and purposes of each processing operation:
The time elapsed since the end of your commercial relationship with us;
The sensitivity of personal data;
Security reasons (for example, the security of our information security systems);
Any current or potential dispute or litigation involving you (for example, a litigation involving the sale of a product to you);
Any legal or regulatory obligation to retain or delete personal data (for example, a retention obligation imposed by accounting or tax laws).
Your rights
Subject toApplicable Data Protection Law,youhave the rights toaccess,rectify and erase your personal data, the rights to object toor limit the processing of your personal data and the right to data portability.
Pleaseforward any request regarding your rights as data subject to our Privacy Coordinator byemail at privacy@armogan.be. Wewill try tocomplywithyour requestas soonas reasonablypracticable andalwaysunder thetimeframesset forthbyApplicable Data Protection Law.Pleasenote that we mayneedto retain certain of your personal datafor certain purposesasrequiredorauthorised by law.
Right to object to marketing
We process your email address for direct marketing purposes.
You have the right to object at any time to the processing of your personal data for direct marketing purposes by unsubscribing from our mailing list or by sending an email to our Privacy Coordinator at privacy@armogan.be.
Security
We implement adequate technical and organisational measures to ensure a level of security of your personal data that is appropriate to the risks.
We take appropriate measures to ensure that we report security incidents leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data.
Questions and complaints
If you have any questions or complaints about the way we process your personal data, please send them to our Privacy Coordinator by email at privacy@armogan.be or by post at 115, rue Berthelot, 1190 Forest, Belgium.
You have the right to lodge a complaint at the competent supervisory authority. The competent supervisory authority for Belgium can be contacted at:
Autorité de Protection des Données / Gegevensbeschermingsautoriteit
Rue de la Presse, 35, 1000 Bruxelles / Drukpersstraat 35, 1000 Brussel
+32 (0)2 274 48 00
commission@privacycommission.be
Miscellaneous
We reserve the right to modify this Privacy Policy at any time, so please review it frequently. We will inform you of changes we make to this Privacy Policy so that you are at any time aware of the way we process your personal data.
In the event of a conflict or inconsistency between a provision of this Privacy Policy and a provision of another policy or other document of the Company relating to the processing of personal data, the provision of this Privacy Policy shall prevail.