As a client of COEUR CATERING, with registered office at 9030 Ghent, Molenwalstraat 25, RPR Ghent division Gent, you are entitled to the most comprehensive protection, including of your personal data.<\/p>\n
This general privacy statement (hereinafter the \u201cPrivacy Statement\u201d) aims to provide you with complete information regarding the processing of your personal data. It explains how we collect, use and store your personal data.<\/p>\n
We may ask you to share certain personal data with us, including but not limited to your first name, surname and e-mail address (identification data). Certain specific obligations may require you to provide us with additional data, such as payment and billing information.<\/p>\n
We collect only the personal data necessary to inform you about our products and services, to execute an agreement with you and to contact you. We base this on the processing grounds of the agreement, legal obligation, our legitimate interest and, in some cases, your consent.<\/p>\n
The processing of your personal data is subject to this privacy statement. By providing your personal data, you are deemed to have acknowledged the use of your personal data in accordance with this privacy statement.<\/p>\n
We invite you to take the time to read this Privacy Statement to familiarise yourself with our practices in that regard. You will also find information on the website of the Data Protection Authority (www.gegevensbeschermingsautoriteit.be<\/a>).<\/p>\n \u201cCOEUR\u201d means COEUR CATERING, having its registered office at 9030 Ghent, Molenwalstraat 25, RPR Ghent Department, with enterprise number 0870.623.597.<\/p>\n \u201cPersonal data\u201d has the meaning defined in the General Data Protection Regulation 2016\/679, which includes any information by which a natural person (also known as \u201cdata subject\u201d or \u201cdata subject\u201d) is identified or can be identified such as, for example, a person's name, a photograph, a telephone number, a code, a password, a contract number, an e-mail address, etc....<\/p>\n \u201cController\u201d has the meaning defined in the General Data Protection Regulation 2016\/679. COEUR will be qualified as the Controller who determines the purposes and means of processing your Personal Data.<\/p>\n \u201cAffiliated Company\u201d means a company affiliated to COEUR to the extent it meets the conditions of a \u201caffiliated company\u201d within the meaning of Article 1:20 of the Belgian Companies and Associations Code.<\/p>\n \u201cProcessor\u201d has the meaning as defined in the General Data Protection Regulation 2016\/679, which processes Personal Data on behalf\/on the instructions of the Controller.<\/p>\n \u201cWebsite\u201d means COEUR's website: www.coeurcatering.be<\/a>.<\/p>\n \u2018Processing\u2019 is any operation involving a Personal Data. Processing includes, inter alia, all aspects related to the collection, recording, organisation, structuring, storage, updating or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction of that data.<\/p>\n Our company is the Controller of your Personal Data in our possession. This means that we determine the purposes and means for which that data is processed and that we are your point of contact and that of the supervisory authorities for all questions relating to the use of your data.<\/p>\n Our company does not have a Data Protection Officer (DPO). For all your questions regarding this privacy policy and the GDPR, please contact Ms Valeria De Leeuw within our company at the following e-mail address: valeria@coeurcatering.be<\/a>.<\/p>\n 3.1. Customer data<\/strong> 3.2. Details of suppliers and subcontractors<\/strong> 3.3. Staff data<\/strong> 3.4. Data of applicants<\/strong> 3.5. Other data<\/strong> Very specifically, we may use the Personal Data we collect for the following purposes:<\/p>\n In any processing, only those Personal Data necessary to achieve the intended purpose will be processed.<\/p>\n As a general rule and by way of example, we use your personal data either:<\/p>\n Whenever you provide Personal Data to us, we will treat that information in accordance with the provisions of this Privacy Statement and legal obligations in the context of processing Personal Data, including the General Data Protection Regulation (GDPR) 2016\/679.<\/p>\n In order to prevent, as far as possible, unauthorised access to the Personal Data collected in this context, we have established security and organisational procedures, which concern both the collection of this data and its storage.<\/p>\n Therefore, we implement appropriate measures and procedures to secure and protect the Personal Data we collect through the Website or through electronic correspondence. In this way, we are committed, as far as can reasonably be expected, to preventing unlawful processing of Personal Data and accidental loss or destruction of your Personal Data.<\/p>\n These procedures also apply to all Processors we use.<\/p>\n Access to your Personal Data is only allowed to persons with a need-to-know basis (for example: only COEUR and its employees, associates, Affiliates or subcontractors who need your Personal Data for the purposes described in Article 3 will be granted access to the data).<\/p>\n Our company may collect some of your personal data including:<\/p>\n When we request your Personal Data, you have the right not to do so. However, such refusal could prevent the establishment of contractual relationships, change their nature or affect their management.<\/p>\n 6.1. General<\/strong> We call on third-party service providers, such as:<\/p>\n We may take all measures necessary to ensure proper management of the Website and its computer system.<\/p>\n We may transmit Personal Data at the request of any legally competent authority, or even on our own initiative if it considers in good faith that the transmission of such information is necessary to comply with laws and regulations, or to defend and\/or protect the rights or property of our company, our customers, our website and\/or You.<\/p>\n 6.2. No data transfer for commercial use<\/strong> 6.3. Data transfers outside the European Economic Area (EEA)<\/strong> The Personal Data will be kept and processed by us for a period necessary in function of the purposes of the processing.<\/p>\n Customer data and data of suppliers or subcontractors will in any case be deleted from our systems after a period of 7 years after the termination of the agreement, except with regard to Personal Data that we are required to keep for a longer period on the basis of specific legislation or in case of an ongoing dispute for which the Personal Data is still necessary.<\/p>\n Personal data of staff are deleted after a period of 5 years from the termination of the employment contract.<\/p>\n Personal data of job applicants are deleted after the relevant vacancy has been filled or after a period of 2 years after consent has been obtained to notify applicants about future job opportunities.<\/p>\n Other data will not be kept beyond a period of 2 years after the last time a meaningful contact with you took place, except in case of a consent to keep this data longer.<\/p>\n 8.1. Right of inspection<\/strong> 8.2. Right of rectification<\/strong> 8.3. Right to data erasure (\u2018right to oblivion\u2019)<\/strong> 8.4. Right to restriction of processing<\/strong> 8.5. Right to portability<\/strong> 8.6. Right of objection<\/strong> 8.7. Right not to be the subject of a decision based solely on automated processing, including profiling, which may produce legal effects concerning you or may have a significant similar impact on you.<\/strong> 8.8. Right to withdraw your consent<\/strong> 8.9. Who can you address?<\/strong> COEUR CATERING<\/strong> If you believe that the processing of your Personal Data violates privacy legislation and we cannot reach an amicable settlement, you also have the right to lodge a complaint with the Data Protection Authority:<\/p>\nArticle 1 - Definitions<\/h2>\n
Article 2 - Controller of personal data processing<\/h2>\n
Article 3 - Purposes of processing personal data<\/h2>\n
\nAs part of our services and operations, we collect and process the identity and contact data of our customers and clients. The purposes for this processing are the performance of agreements with our clients, customer management, accounting and direct marketing activities such as sending promotional or commercial information. The legal grounds are the performance of the agreement, the fulfilment of legal and regulatory obligations (including, but not limited to, Belgian accounting legislation), our legitimate interest and, in some cases, your consent.<\/p>\n
\nWe collect and process the identity and contact details of our suppliers and subcontractors, as well as their subcontractor(s), if any, their staff and employees. The purposes of this processing are the performance of the agreement, management of the suppliers\/subcontractors and accounting. The legal grounds are the performance of the agreement, the fulfilment of legal and regulatory obligations and\/or our legitimate interest.<\/p>\n
\nWe process the Personal Data of our employees in the context of our personnel management and payroll administration. The legal grounds are the performance of the contract and the fulfilment of legal and regulatory obligations.<\/p>\n
\nWe process identity and contact details as well as work history and other data commonly indicated on applicants' CVs when they provide us with this information. The Personal Data is processed to examine whether you qualify for a job with us based on our legitimate interest. If we wish to retain your Personal Data longer after the relevant vacancy has been filled, we will notify you and request your consent to do so.<\/p>\n
\nBesides data of customers, suppliers\/subcontractors, staff and job applicants, we also process Personal Data of others, such as potential new customers\/prospects, useful contacts within our industry, network contacts, etc. This is done through our Website or through other channels. The purposes of this processing are in the interest of our operations, direct marketing and public relations. The legal basis is our legitimate interest, the performance of a contract and, in some cases, your consent.<\/p>\n\n
\n
\n
Article 4 - The confidentiality of your Personal Data and security measures<\/h2>\n
Article 5 - Where and how are your personal data collected?<\/h2>\n
\n
Article 6 - Recipient of data<\/h2>\n
\nIn accordance with the foregoing, and except to the extent that the communication of Personal Data to organisations or entities whose intervention as third service providers on behalf of and under the control of the Controller is required to fulfil the aforementioned purposes, we will not communicate, sell, rent or exchange the Personal Data collected in this context with any other organisation or entity, unless you have been informed and expressly consented to this in advance.<\/p>\n\n
\nAs a trustee, we do not share your Personal Data with third parties for commercial use.<\/p>\n
\nWe will not transfer Personal Data to third parties located outside the European Economic Area, except to subcontractors or associates who have undertaken to comply with the European Commission's Standard Contractual Clauses and thereby provide an adequate level of security for the processing of Personal Data.<\/p>\nArticle 7 - Retention period<\/h2>\n
Article 8 - Rights of access, rectification, oblivion, data portability, objection, non-profiling and concerning security breach notification<\/h2>\n
\nAfter verifying your identity, you are entitled to access the personal data we process about you.<\/p>\n
\nIf you find that, despite all our efforts, your personal data is incorrect or incomplete, you can ask us to correct it.<\/p>\n
\nIn well-defined cases, legislation gives you the option to have your Personal Data erased.
\nHowever, your right to oblivion is not absolute. We have the right to continue to retain your Personal Data when necessary e.g. for compliance with a legal obligation or the establishment, exercise or substantiation of legal claims.<\/p>\n
\nYou may exercise your right to restrict the processing of Personal Data when it is unclear whether and when Personal Data will need to be deleted.<\/p>\n
\nIn certain cases, you have the right that the Personal Data you have provided to us:
\n
are transferred to you; or
\n
transferred by our company directly to another controller, provided this is technically possible.<\/p>\n
\nWhere the processing of your Personal Data is based on a legitimate or public interest on our side, you have the right to object to it at any time for reasons relating to your particular situation.
\nHowever, your request will not be taken into account if our legitimate interest outweighs yours or if the processing of your Personal Data remains necessary to establish, exercise or substantiate a legal claim.<\/p>\n
\nOur company guarantees that you will not be the subject of a decision based solely on automated processing, including profiling, which may produce legal effects concerning you or may have a significant similar impact on you.<\/p>\n
\nWhere the processing of your Personal Data is based on your consent, you may withdraw your consent at any time and at any time.
\nIn that case, our company may find itself unable to continue working for you.
\nAny withdrawal will not affect the lawfulness of the processing of your Personal Data carried out during the period prior to the withdrawal of your consent.<\/p>\n
\nTo exercise your rights, simply send a dated and signed request together with a two-sided copy of your (partially anonymised) identity card by post or e-mail to:<\/p>\n
\nAttn: Mrs Valeria De Leeuw
\nMolenwalstraat 25
\n9030 Ghent
\nEmail valeria@coeurcatering.be<\/a><\/p>\n