version – v 1.0 (date: 18/03/2022)
This “Privacy Statement” governs the processing of your personal data by the data controller: Oystershell nv, with registered office at Nijverheidsweg 10, 9820 Merelbeke and with the following CBE-number 0419.652.979. (hereinafter: “Oystershell”).
Please read this Privacy Statement carefully as it contains essential information about how we process your personal data on our website with the following URL: www.ultractive.com (hereinafter “the Website”).
By means of this Privacy Statement, we comply with the European Regulation 2016/679 of 27 April 2016 on the protection of personal data.
“Data processing” is understood to mean: any possible operation carried out on personal data, such as collection, use, organisation, storage, amendment, updating, retrieval, consultation, dissemination, archiving, erasure, management, destruction or communication.
If you contact us (e.g. by e-mail, telephone, contact form, …) we will process the personal data that you send us.
If you purchase products via the Website, we will process the following personal data: your name, contact details (e-mail address and telephone) and delivery address.
If you make an account on our website, we will process the following personal data: your name, contact details (e-mail address and telephone), delivery address, purchase history, birth date (optional), gender (optional).
We process your personal data in order:
You are not obliged to disclose your personal data, but you must understand that the provision of certain services may be impossible if you refuse the processing of certain personal data.
We have taken sufficient technical and organisational measures to guarantee the safe processing of your personal data, including but not limited to: securing access to our IT systems and applications with a strong password, making backups, anti-virus, etc.
These measures correspond to the nature of the personal data and are proportionate to the potential severity of the risk. The risk of accidental or unauthorised destruction, loss, alteration or access and any other unauthorised processing of the data is minimised.
Unfortunately, no risk can be completely avoided. If unauthorised access is gained to our IT systems, we will immediately take all possible measures to minimise the damage and/or theft of the data and inform the parties involved.
We will not sell, rent, distribute or make your personal data commercially available to third parties, except as described in this Privacy Statement, or on the basis of a legal obligation or in case of your prior and explicit consent.
In the event of full or partial reorganization or transfer of activities of Oystershell, your personal data processed by us may be transferred to new entities or third parties through which the business activities of Oystershell are wholly or partially carried out. Oystershell will reasonably attempt to inform you in advance of the fact that we will disclose the personal data to the said third parties, but you must also acknowledge that this is not always technically or commercially feasible under all circumstances.
In some cases, we may need to disclose your personal data on the basis of a court order or to comply with other mandatory laws or regulations. We will make reasonable efforts to inform you in advance, unless this would be subject to legal restrictions.
We keep your customer data for at least 10 years after the last contact we had.
We keep our accounting and invoicing data for at least 7 years.
All other personal data are kept and processed by us for a period that is necessary in function of the purposes of processing and in function of the relationship between you and us.
With regard to your personal data, you also have a number of rights:
Right of access and inspection.
You have the right to access the personal data we have collected about you. This means that you can request confirmation as to whether or not personal data concerning you are being processed, and, if that is the case, have access to information such as: categories of personal data, the purposes of processing,…
Right to rectification, deletion and restriction
You have the right to have your personal data that is incomplete, incorrect, outdated or inappropriate removed or amended.
We also ask you to actively report changes in your personal data yourself, so that we can keep your data up-to-date.
Right to object to the processing of your personal data for direct marketing purposes
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data based on legitimate interests including (automated) profiling based on legitimate interests.
In addition, you always have the right to oppose to the use of your personal data for direct marketing purposes.
Right of data portability
You have the right to obtain and/or transfer your personal data processed by us in a structured, common and machine-readable form and/or to ask Oystershell to transfer your personal data to other data controllers.
Right of withdrawal of consent
Insofar as the processing is based on your prior consent, you always have the right to withdraw such consent.
The processing of your personal data may include profiling. You can at any time withdraw your consent to profiling for direct marketing purposes.
Right to lodge a complaint
You have the right to lodge a complaint with the Data Protection Authority, Drukpersstraat 35, 1000 Brussels, Tel +32 (0)2 274 48 00, Fax +32 (0)2 274 48 35, email: firstname.lastname@example.org.
You can exercise all of the abovementioned rights by contacting Oystershell by e-mail email@example.com. We may request you to proof your identity.
Do you have questions about this Privacy Statement in general or about the processing of your personal data in particular? Please contact us for more information via firstname.lastname@example.org.