privacy policy

1. This privacy policy (“Privacy Policy”) regulates the processing of your personal data as a part of your use of our Website (the “Website”) and the related services (jointly referred to hereinafter as the “Services”). Said processing is performed by CARFIL QUALITY as controller, which has its registered office at Beyntellus 3, 2360 Oud-Turnhout (also referred to hereinafter as “we” and “us”), registered with the CBE under number 0420.681.872, in accordance with the applicable legislation on the protection of personal data.
2. By using our Website and/or our Services, you agree that you have carefully read this Privacy Policy and that you agree with it unreservedly. We reserve the right to regularly amend the Privacy Policy as we deem fit. Such amendment shall be communicated via the Website.
3. “Cookies” or similar technology can be used as a component of the Website or services. Cookies are text files that are put on the hard disk of a device and that contain certain information, sometimes including personal data. You can find more information regarding the use of cookies in our cookie policy.
4. This Privacy Policy was last updated on 18 April 2018.

What data we process and why

1. We process personal data relating to you when you use the Website and/or Services:
   
• When? Use of Services or use the Website
• Which? Identity particulars
• Why (aim)? To process a request
• On what legal grounds? Legitimate interest
• When? To contact us, request a price quotation or when you register for a newsletter
• Which? Identity particulars
• Why (aim)? To later send related information and supplements
• On what legal grounds? Permission
2. In principle, we obtain the above-mentioned personal data directly from you. We can also process your personal data in addition to the list above:
1. to provide you with information on products and services that you request in a personalised and efficient manner, either via the Website, by email, by telephone or through social media channels;
2. to process your personal data so that we can provide you with the correct service provision;
3. for direct marketing purposes, i.e. to be able to provide you with targeted communication, promotions, offers and other advertisements that we or our selected partners would like to make available to you. We will ask your permission for this;
4. to perform statistical analyses to improve our Website and/or Services, or to develop new products or services;
5. to provide to a financial institution or payment service provider, to enable your bank and the payment service provider to fulfil their obligations;
6. to transmit to the police or judicial authorities as proof of possible crimes or, if there are any founded suspicious grounds of an unlawful act or crime committed by means of your registration with, or use of, the Website or Services;
7. within the scope of a possible merger with, acquisition of/by means of or demerger by a third party, even if such third party is located outside the EEA;
3. if and when your registration on the Website or use of the Website or services can be regarded as (a) a breach of the conditions or the property rights, (b) a threat to the security or integrity of our service provision, (c) a danger for the Website, Services or systems belonging to us or to our subcontractors as a result of viruses, Trojan horses, spyware, malware or any other form of malicious code, or (d) being in any manner whatsoever illegal or unlawful, discriminatory or insulting, we may process your data in our own interests and in the interests of our partners or third persons.

We share your data

1. We can engage external processors to provide you with a Website that is as good as possible. We ensure that third-party processors may only process your personal data in our name and pursuant to our written instructions.
2. We do not send your personal data in an identifiable manner to third persons if this is not necessary to provide the services without your express permission to do so.
3. We can transmit anonymised data to other organisations that can use these data to improve products and services and to provide tailored organisation of marketing, presentation and the sale of products and services.

Where we process data

1. We personally and our external processors will only process your identifiable personal data in the European Area.
2. We can transmit your anonymised data to organisations outside the European Area. If such transmission is made, we shall ensure that there are appropriate warranties to guarantee the security and integrity of your personal data, and that all the rights that you could enjoy under the applicable law relating to personal data are guaranteed.
3. The following legal protection mechanism will be implemented if there is a transmission of the personal data and/or anonymised data:
   

Which? MAILCHIMP

Country outside EEA? USA

Lawful transmission system? US - EU Privacy Shield

How we process data

1. We will do our utmost to process only your personal data that are necessary to achieve the aims stated in this policy. We will process your personal data lawfully and transparently. We will also do our very best to keep your personal data accurate and up to date.
2. Your personal data will only be processed until the moment at which you withdraw your permission for the processing. Such permission withdrawal can imply that you are no longer able to use all or part of the Website services. If you have registered on our Website, we will remove your personal data if you remove your profile, unless a statutory or regulatory obligation or judicial or administrative order prevents that.
3. We will take the appropriate technical and organisational measures to keep your personal data secured against unlawful access or theft and against unintentional loss, manipulation or destruction. Access by our personnel or personnel of our external processors shall only be possible on a need-to-know basis and is subject to strict obligations of confidentiality.

Your rights regarding personal data

1. You have the right to request access to any personal data that we process about you. Requests that are clearly submitted with a view to causing us inconvenience or damage will not be dealt with, however.
2. You have the right to request that any incorrect or inaccurate personal data about you are corrected free of charge. If you have registered on our Website, you can actually correct many of these data through your profile. If such a request is submitted, you must also include with the request the proof that the personal data for which the correction is requested are incorrect.
3. You have the right to withdraw permission previously granted for the processing of your personal data. This can be done be sending an email to admin@carfil.be.
4. Instead of withdrawing, you can also request us to limit the processing of your personal data if (a) you dispute the correctness of such data, (b) the processing is unlawful or (c) the data are no longer needed for the purposes stated but you need them to defend yourself in judicial proceedings.
5. You have the right to object to the data processing if you can show that there are serious and legitimate reasons relating to special circumstances and that these justify such objection. However, if the intended processing is regarded as direct marketing, you have the right to object to such processing free of charge and without any justification.
6. You can receive the personal data you provided in a structured format if they are processed on the grounds of permission or a contract and they are processed by automatic resources.
7. Send an email to admin@carfil.be if you want to submit a request to exercise one or more of the above-mentioned rights. It must be clearly stated in such request what right you wish to exercise and why. This must also be dated, signed, and accompanied by a digitally scanned copy of your identity card. If it appears that the request is founded, we will grant it as quickly as is reasonably possible and no later than thirty (30) days after we have received it.
8. You can always contact us if you have a problem with our processing of your personal data. You can file a complaint with the competent Data Protection Authority, i.e. the Belgian Privacy Commission, if you are still dissatisfied with our response.