Privacy Statement

Privacy Policy

Pastel guarantees the protection of your personal data. Please contact info@boutique-pastel.be for any questions regarding the use of your personal data.

By using this website, boutique-pastel.be, you consent to the processing of personal data as described in the privacy policy below.

 

SECURITY AND PROTECTION OF PERSONAL DATA

Warnings

This tool is provided to you free of charge. The tool is based on information founded on the firm's professional analysis regarding GDPR compliance. However, since compliance is a dynamic process and every situation is unique, the information provided must be adapted and cannot under any circumstances be considered exhaustive or accurate.

Unless you request a review and validation by the Firm, the generated document is considered mere information. Consequently, you are solely responsible for the interpretations made of the information provided, the advice you deduce from it, and the adaptations made for your own commercial activity. The use and operation of the tool is therefore at your sole responsibility and risk.

 

Definitions:

The Publisher : The person, natural or legal, who publishes online public communication services.

The Website : All websites, internet pages, and online services offered by the Publisher.

The User : The person using the Website and services.

 

NATURE OF DATA COLLECTED

In the context of using the Websites, the Publisher may collect the following categories of data concerning its Users:

Civil status, identity, identification data, etc.

 

COMMUNICATION OF PERSONAL DATA TO THIRD PARTIES

No communication to third parties

Your data is not communicated to third parties. However, you are informed that it may be disclosed pursuant to a law, regulation, or by virtue of a decision by a competent regulatory or judicial authority.

 

PRIOR INFORMATION FOR THE COMMUNICATION OF PERSONAL DATA TO THIRD PARTIES IN THE EVENT OF MERGER / ACQUISITION

Prior information and opt-out possibility before and after merger / acquisition

In the event that we take part in a merger, acquisition, or any other form of asset transfer, we commit to guaranteeing the confidentiality of your personal data and to informing you before it is transferred or subject to new confidentiality rules.

PURPOSE OF THE REUSE OF COLLECTED PERSONAL DATA

Perform operations related to customer management concerning

• contracts; orders; deliveries; invoices; accounting and in particular customer account management
• a loyalty program within one or more legal entities;
• customer relationship monitoring such as conducting satisfaction surveys, managing complaints and after-sales service
• customer selection for studies, surveys, and product tests (unless the consent of the individuals concerned is collected under the conditions provided for in article 6, these operations must not lead to the establishment of profiles likely to reveal sensitive data - racial or ethnic origins, philosophical, political, trade union, religious opinions, sexual life or health of individuals)

 

DATA AGGREGATION

Aggregation with non-personal data

We may publish, disclose, and use aggregated information (information relating to all our Users or to specific groups or categories of Users that we combine in such a way that an individual User can no longer be identified or referenced) and non-personal information for industry and market analysis, demographic profiling, promotional and advertising purposes, and other commercial purposes.

 

Aggregation with personal data available on the User's social accounts

If you connect your account to an account of another service for cross-posting, that service may provide us with your profile information, connection information, and any other information you have authorized for disclosure. We may aggregate information about all our other Users, groups, accounts, with personal data available about the User.

 

COLLECTION OF IDENTITY DATA

Free consultation

Consulting the Site does not require prior registration or identification. It can be done without you providing any personal data concerning you (name, first name, address, etc.). We do not record any personal data for the simple consultation of the Site.

 

COLLECTION OF IDENTIFICATION DATA

Use of the user ID only for access to services

We use your electronic identifiers only for and during the execution of the contract.

 

COLLECTION OF DEVICE DATA

Collection of profiling data and technical data for service provision purposes

Some technical data from your device is automatically collected by the Site. This information includes your IP address, Internet service provider, hardware configuration, software configuration, browser type and language... The collection of this data is necessary for the provision of services.

Collection of technical data for advertising, commercial and statistical purposes

The technical data of your device is automatically collected and recorded by the Site for advertising, commercial and statistical purposes. This information helps us to personalize and continuously improve your experience on our Site. We do not collect or store any nominative data (name, first name, address, etc.) that may be attached to technical data. The collected data may be resold to third parties.

 

COOKIES

Cookie retention period

In accordance with the recommendations of the CNIL, the maximum retention period for cookies is 13 months after their first deposit in the User's terminal, as is the validity period of the User's consent to the use of these cookies. The lifespan of cookies is not extended with each visit. The User's consent must therefore be renewed after this period.

Purpose of cookies

Cookies may be used for statistical purposes, particularly to optimize the services provided to the User, based on the processing of information concerning access frequency, page personalization, as well as operations performed and information consulted.

You are informed that the Publisher may place cookies on your device. The cookie records information relating to navigation on the service (pages you have consulted, date and time of consultation, etc.) which we may read during your subsequent visits.

Cookie used (not mandatory) – Google Analytics – Statistics – Google has its own privacy policy which you can find here

Cookie used (not mandatory) – WordPress – Login&Session

User's right to refuse cookies

You acknowledge that you have been informed that the Publisher may use cookies. If you do not wish cookies to be used on your device, most browsers allow you to disable cookies through the settings options.

 

RETENTION OF TECHNICAL DATA

Technical data retention period

Technical data is kept for the period strictly necessary to achieve the purposes mentioned above.

 

PERSONAL DATA RETENTION PERIOD AND ANONYMIZATION

Data retention during the contractual relationship

In accordance with Article 6-5° of Law no. 78-17 of January 6, 1978, relating to information technology, files, and freedoms, personal data subject to processing is not kept beyond the time necessary to fulfill the obligations defined at the conclusion of the contract or the predefined duration of the contractual relationship.

Retention of anonymized data beyond the contractual relationship / after account deletion

We retain personal data for the period strictly necessary to achieve the purposes described in these GTC. Beyond this period, they will be anonymized and stored for exclusively statistical purposes and will not be used in any way whatsoever.

Data deletion after account deletion

Data purging mechanisms are put in place to ensure their effective deletion once the retention or archiving period necessary for the accomplishment of the determined or imposed purposes has been reached. In accordance with Law no. 78-17 of January 6, 1978, relating to information technology, files, and freedoms, you also have a right to delete your data, which you can exercise at any time by contacting the Publisher.

Data deletion after 3 years of inactivity

For security reasons, if you have not authenticated yourself on the Website for a period of three years, you will receive an email inviting you to log in as soon as possible, failing which your data will be deleted from our databases.

 

ACCOUNT DELETION

Account deletion upon request

The User has the possibility to delete their Account at any time, by simple request to the Publisher OR via the Account deletion menu found in the Account settings, if applicable.

Account deletion in case of violation of the GTC

In the event of a violation of one or more provisions of the GTC or any other document incorporated herein by reference, the Publisher reserves the right to terminate or restrict your use and access to the services, your account, and all Sites, without prior notice and at its sole discretion.

 

INDICATIONS IN CASE OF A SECURITY BREACH DETECTED BY THE PUBLISHER

User notification in case of a security breach

We undertake to implement all appropriate technical and organizational measures to ensure a level of security adapted to the risks of accidental, unauthorized, or unlawful access, disclosure, alteration, loss, or destruction of your personal data. In the event that we become aware of illegal access to your personal data stored on our servers or those of our service providers, or unauthorized access resulting in the realization of the risks identified above, we undertake to:

• Notify you of the incident as soon as possible;
• Examine the causes of the incident and inform you;
• Take reasonable measures to mitigate the negative effects and damage that may result from the said incident.

 

LIMITATION OF LIABILITY

Under no circumstances can the commitments defined in the above point relating to notification in case of a security breach be considered an acknowledgment of fault or responsibility for the occurrence of the incident in question.

 

TRANSFER OF PERSONAL DATA ABROAD

No transfer outside the European Union

The Publisher undertakes not to transfer the personal data of its Users outside the European Union.

 

MODIFICATION OF THE GTC AND THE PRIVACY POLICY

In case of modification of these GTC, commitment not to substantially lower the level of confidentiality without prior information of the concerned persons

We commit to informing you in the event of a substantial modification of these GTC, and not to substantially lower the level of confidentiality of your data without informing you and obtaining your consent.

 

APPLICABLE LAW AND RECOURSE PROCEDURES

Arbitration clause

You expressly agree that any dispute that may arise from these GTC, particularly concerning their interpretation or execution, shall be subject to an arbitration procedure governed by the rules of the arbitration platform chosen by mutual agreement, to which you will adhere without reservation.

 

DATA PORTABILITY

Data portability

The Publisher undertakes to offer you the possibility of having all your data returned to you upon simple request. The User is thus guaranteed better control over their data and retains the possibility of reusing it. This data must be provided in an open and easily reusable format.

CONTACT INFORMATION –

Belgian authority for the processing of personal data

Website: http://www.privacycommission.be/
Email: commission@privacycommission.be
Phone: +32 2 274 48 00

We reserve the right to adapt this privacy policy.

Last modified on April 19, 2021