As a client of COEUR CATERING, with registered office at 9030 Ghent, Molenwalstraat 25, RPR Ghent division Gent, you are entitled to the most comprehensive protection, including of your personal data.
This general privacy statement (hereinafter the “Privacy Statement”) aims to provide you with complete information regarding the processing of your personal data. It explains how we collect, use and store your personal data.
We may ask you to share certain personal data with us, including but not limited to your first name, surname and e-mail address (identification data). Certain specific obligations may require you to provide us with additional data, such as payment and billing information.
We collect only the personal data necessary to inform you about our products and services, to execute an agreement with you and to contact you. We base this on the processing grounds of the agreement, legal obligation, our legitimate interest and, in some cases, your consent.
The processing of your personal data is subject to this privacy statement. By providing your personal data, you are deemed to have acknowledged the use of your personal data in accordance with this privacy statement.
We invite you to take the time to read this Privacy Statement to familiarise yourself with our practices in that regard. You will also find information on the website of the Data Protection Authority (www.gegevensbeschermingsautoriteit.be).
“COEUR” means COEUR CATERING, having its registered office at 9030 Ghent, Molenwalstraat 25, RPR Ghent Department, with enterprise number 0870.623.597.
“Personal data” has the meaning defined in the General Data Protection Regulation 2016/679, which includes any information by which a natural person (also known as “data subject” or “data subject”) is identified or can be identified such as, for example, a person's name, a photograph, a telephone number, a code, a password, a contract number, an e-mail address, etc....
“Controller” has the meaning defined in the General Data Protection Regulation 2016/679. COEUR will be qualified as the Controller who determines the purposes and means of processing your Personal Data.
“Affiliated Company” means a company affiliated to COEUR to the extent it meets the conditions of a “affiliated company” within the meaning of Article 1:20 of the Belgian Companies and Associations Code.
“Processor” has the meaning as defined in the General Data Protection Regulation 2016/679, which processes Personal Data on behalf/on the instructions of the Controller.
“Website” means COEUR's website: www.coeurcatering.be.
‘Processing’ is any operation involving a Personal Data. Processing includes, inter alia, all aspects related to the collection, recording, organisation, structuring, storage, updating or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction of that data.
Our company is the Controller of your Personal Data in our possession. This means that we determine the purposes and means for which that data is processed and that we are your point of contact and that of the supervisory authorities for all questions relating to the use of your data.
Our company does not have a Data Protection Officer (DPO). For all your questions regarding this privacy policy and the GDPR, please contact Ms Valeria De Leeuw within our company at the following e-mail address: valeria@coeurcatering.be.
3.1. Customer data
As part of our services and operations, we collect and process the identity and contact data of our customers and clients. The purposes for this processing are the performance of agreements with our clients, customer management, accounting and direct marketing activities such as sending promotional or commercial information. The legal grounds are the performance of the agreement, the fulfilment of legal and regulatory obligations (including, but not limited to, Belgian accounting legislation), our legitimate interest and, in some cases, your consent.
3.2. Details of suppliers and subcontractors
We collect and process the identity and contact details of our suppliers and subcontractors, as well as their subcontractor(s), if any, their staff and employees. The purposes of this processing are the performance of the agreement, management of the suppliers/subcontractors and accounting. The legal grounds are the performance of the agreement, the fulfilment of legal and regulatory obligations and/or our legitimate interest.
3.3. Staff data
We process the Personal Data of our employees in the context of our personnel management and payroll administration. The legal grounds are the performance of the contract and the fulfilment of legal and regulatory obligations.
3.4. Data of applicants
We process identity and contact details as well as work history and other data commonly indicated on applicants' CVs when they provide us with this information. The Personal Data is processed to examine whether you qualify for a job with us based on our legitimate interest. If we wish to retain your Personal Data longer after the relevant vacancy has been filled, we will notify you and request your consent to do so.
3.5. Other data
Besides data of customers, suppliers/subcontractors, staff and job applicants, we also process Personal Data of others, such as potential new customers/prospects, useful contacts within our industry, network contacts, etc. This is done through our Website or through other channels. The purposes of this processing are in the interest of our operations, direct marketing and public relations. The legal basis is our legitimate interest, the performance of a contract and, in some cases, your consent.
Very specifically, we may use the Personal Data we collect for the following purposes:
In any processing, only those Personal Data necessary to achieve the intended purpose will be processed.
As a general rule and by way of example, we use your personal data either:
Whenever you provide Personal Data to us, we will treat that information in accordance with the provisions of this Privacy Statement and legal obligations in the context of processing Personal Data, including the General Data Protection Regulation (GDPR) 2016/679.
In order to prevent, as far as possible, unauthorised access to the Personal Data collected in this context, we have established security and organisational procedures, which concern both the collection of this data and its storage.
Therefore, we implement appropriate measures and procedures to secure and protect the Personal Data we collect through the Website or through electronic correspondence. In this way, we are committed, as far as can reasonably be expected, to preventing unlawful processing of Personal Data and accidental loss or destruction of your Personal Data.
These procedures also apply to all Processors we use.
Access to your Personal Data is only allowed to persons with a need-to-know basis (for example: only COEUR and its employees, associates, Affiliates or subcontractors who need your Personal Data for the purposes described in Article 3 will be granted access to the data).
Our company may collect some of your personal data including:
When we request your Personal Data, you have the right not to do so. However, such refusal could prevent the establishment of contractual relationships, change their nature or affect their management.
6.1. General
In accordance with the foregoing, and except to the extent that the communication of Personal Data to organisations or entities whose intervention as third service providers on behalf of and under the control of the Controller is required to fulfil the aforementioned purposes, we will not communicate, sell, rent or exchange the Personal Data collected in this context with any other organisation or entity, unless you have been informed and expressly consented to this in advance.
We call on third-party service providers, such as:
We may take all measures necessary to ensure proper management of the Website and its computer system.
We may transmit Personal Data at the request of any legally competent authority, or even on our own initiative if it considers in good faith that the transmission of such information is necessary to comply with laws and regulations, or to defend and/or protect the rights or property of our company, our customers, our website and/or You.
6.2. No data transfer for commercial use
As a trustee, we do not share your Personal Data with third parties for commercial use.
6.3. Data transfers outside the European Economic Area (EEA)
We will not transfer Personal Data to third parties located outside the European Economic Area, except to subcontractors or associates who have undertaken to comply with the European Commission's Standard Contractual Clauses and thereby provide an adequate level of security for the processing of Personal Data.
The Personal Data will be kept and processed by us for a period necessary in function of the purposes of the processing.
Customer data and data of suppliers or subcontractors will in any case be deleted from our systems after a period of 7 years after the termination of the agreement, except with regard to Personal Data that we are required to keep for a longer period on the basis of specific legislation or in case of an ongoing dispute for which the Personal Data is still necessary.
Personal data of staff are deleted after a period of 5 years from the termination of the employment contract.
Personal data of job applicants are deleted after the relevant vacancy has been filled or after a period of 2 years after consent has been obtained to notify applicants about future job opportunities.
Other data will not be kept beyond a period of 2 years after the last time a meaningful contact with you took place, except in case of a consent to keep this data longer.
8.1. Right of inspection
After verifying your identity, you are entitled to access the personal data we process about you.
8.2. Right of rectification
If you find that, despite all our efforts, your personal data is incorrect or incomplete, you can ask us to correct it.
8.3. Right to data erasure (‘right to oblivion’)
In well-defined cases, legislation gives you the option to have your Personal Data erased.
However, your right to oblivion is not absolute. We have the right to continue to retain your Personal Data when necessary e.g. for compliance with a legal obligation or the establishment, exercise or substantiation of legal claims.
8.4. Right to restriction of processing
You may exercise your right to restrict the processing of Personal Data when it is unclear whether and when Personal Data will need to be deleted.
8.5. Right to portability
In certain cases, you have the right that the Personal Data you have provided to us:
are transferred to you; or
transferred by our company directly to another controller, provided this is technically possible.
8.6. Right of objection
Where the processing of your Personal Data is based on a legitimate or public interest on our side, you have the right to object to it at any time for reasons relating to your particular situation.
However, your request will not be taken into account if our legitimate interest outweighs yours or if the processing of your Personal Data remains necessary to establish, exercise or substantiate a legal claim.
8.7. Right not to be the subject of a decision based solely on automated processing, including profiling, which may produce legal effects concerning you or may have a significant similar impact on you.
Our company guarantees that you will not be the subject of a decision based solely on automated processing, including profiling, which may produce legal effects concerning you or may have a significant similar impact on you.
8.8. Right to withdraw your consent
Where the processing of your Personal Data is based on your consent, you may withdraw your consent at any time and at any time.
In that case, our company may find itself unable to continue working for you.
Any withdrawal will not affect the lawfulness of the processing of your Personal Data carried out during the period prior to the withdrawal of your consent.
8.9. Who can you address?
To exercise your rights, simply send a dated and signed request together with a two-sided copy of your (partially anonymised) identity card by post or e-mail to:
COEUR CATERING
Attn: Mrs Valeria De Leeuw
Molenwalstraat 25
9030 Ghent
Email valeria@coeurcatering.be
If you believe that the processing of your Personal Data violates privacy legislation and we cannot reach an amicable settlement, you also have the right to lodge a complaint with the Data Protection Authority:
Data protection authority
Printing Press Street 35
1000 Brussels
https://www.gegevensbeschermingsautoriteit.be/burger/acties/klacht-indienen
9.1. General
On our Website, Personal Data is collected through the contact form. Here, it is mandatory to ask for the name (surname and first name), telephone number, e-mail address and the reason for contacting us (message).
9.2. Use of cookies
Cookies are small computer files sent by our servers and placed on your computer's hard drive. These cookies contain information that can only be deciphered by us and only when you visit the Website. Therefore, when you visit our Website, we may store information on your computer. These cookies are there so that you can easily navigate our site.
You are always free to refuse the installation of these cookies by changing the options of your navigation software on the web. Your internet browser allows you to delete cookies from your hard disk, block them, or be warned before a cookie is stored. For more information on these functions, please refer to our cookie policy.
9.3. Links
On the COEUR Website you will find links to websites of other parties. COEUR is not liable for the content of those sites and/or the way in which those sites handle your (personal) data.
COEUR has the right to make changes to the privacy policy and agreement related to cookies. Changes will be published on our Website. We never use your data without consent for purposes other than those mentioned above.
It is therefore advisable to consult this Privacy Statement regularly so that you are aware of these changes. Therefore, please check this document regularly.