Privacy & Cookie Policy

Oscart Group NV attaches great importance to the protection of your personal data and to having your privacy respected. In this privacy statement, we want to provide clear and transparent information about what data we collect and how we handle personal data. We do everything we can to safeguard your privacy and handle personal data with care. Oscart Group NV is in all cases subject to applicable laws and regulations, including the General Data Protection Regulation (EU 2016/679 Regulation).

• We process your personal data in accordance with the purpose for which they were provided; these purposes and the type of personal data are described in this privacy statement.
• We only process the minimum personal data required for their intended purposes.
• If we need your explicit consent to process your personal data, we will always ask for it.
• We have taken appropriate technical and organisational measures to ensure the security of your personal data.
• We do not pass on personal data to other parties unless this is necessary for carrying out the purposes for which the data were provided, or if legally required.
• We want to inform you that we are aware of your rights regarding your personal data and that we respect them.

At Oscart Group NV we are responsible for the way in which your personal data are processed. If you have any questions after reading our privacy statement, you will find our contact details below.

Oscart Group NV
Politieke Gevangenenstraat 28
8530 Harelbeke, België
info@oscart.eu

Who is this privacy statement intended for?

This privacy statement is intended for all our current and former members, activity participants, suppliers, clients, prospects, employees and persons interested in our activities, services or products.

For what purposes do we process your personal data?

For users of the oscart.eu platform

Personal data (e.g. name, first name, email address, language, photo, password, two-factor authentication, user rights, company name, IP address, …) are processed by Oscart Group NV for the following purposes and legal grounds:

• Logging in to oscart.be (contract)
• Providing additional security for your account (consent)
• Sending a new password by email if you have forgotten your old password (consent)
• Personal communication via email (legitimate interest)
• Displaying content specific to your company (contract)
• Blocking accounts after X failed login attempts (legitimate interest)
• Tracing users when unwanted actions have been performed on a company account (legitimate interest)
• Providing training (contract)
• Tracking who has attended a training (legitimate interest)
• Communicating in the appropriate language (legitimate interest)
• Determining what type of actions you are entitled to (contract)
• Enabling faster user recognition (consent)
• Sending commercial information about our products, newsletters and invitations (consent)
• Sending emails with an offer (directly linked to a recent visit) (consent)

For persons in (in)direct contact with employees of Oscart Group NV

Personal data (e.g. name, first name, address, email address, company name, phone number, job title, …) are processed for:

• Responding to incoming enquiries (consent)
• Prospecting (legitimate interest)
• Drawing up quotes and/or invoices (consent and contract)
• Sending quotes (legitimate interest)
• Managing files (contract)

Since the processing of personal data is based on consent, you always have the right to withdraw the consent given. For (former) employees we refer to the internal regulations.

We only collect personal data provided by you or your company via registration, entry and contact forms on our website, in person, by phone or by email. We do not collect personal data through third parties, with the exception of trade fair organisations in which we have participated.

Sharing personal data with third parties

We may share your information with third parties if this is necessary for the purposes described or legally required. We rely on external service providers for:

• Storing and processing data in the cloud (via a Cloud Service Provider)
• Improving the internet environment (web hosting, mail hosting, …)
• Providing IT infrastructure (including IT network, servers, …)
• Handling (financial) administration
• Offering and distributing newsletters and invitations
• Using government services
• Participating in external training courses
• Organising collaborative activities

We never pass on personal data to external service providers with whom we have not concluded a data processing agreement. We never sell or rent your personal data to third parties and never pass on your contact details for commercial purposes.

Your personal data may be transferred to countries outside the European Economic Area. In that case, they are protected by specific contractual obligations in accordance with European privacy regulations.

Retention period

Oscart Group NV does not store personal data for longer than necessary to achieve the purposes for which the data were provided, taking into account the period required to comply with legal requirements (including in the area of accounting). Retention periods may vary per purpose.

Security of data

Our partners and we ourselves have taken appropriate technical and organisational measures to protect your personal data against unauthorised access, use, loss or disclosure. If an incident occurs involving your data, you will be personally informed in the circumstances provided for by law.

Your rights and obligations regarding your privacy

You have the right to view, copy, correct, have deleted or restrict the processing of the personal data relating to you. You can also object to or ask us to no longer process certain data.

You have the right to object to the use of your personal data for direct marketing purposes. You can also ask us to provide your personal data to yourself or another party.

Use the address at the top of this privacy statement to contact us. We may ask you to identify yourself (e.g. via a copy of your identity card — make your passport photo invisible and indicate that it is a copy). No category of persons listed above is subject to automated decision-making or profiling.

Liability

Oscart: Oscart's liability is limited to remedying foreseeable and direct damage suffered by the client.

The client: The client is liable for the legal and contractually lawful use of the services and products and is liable for all damage caused to Oscart or to third parties. The content of communications drawn up by the client remains the client's own responsibility.

To access the services and products, the client receives one or more personal usernames and passwords. The client is responsible for their confidentiality, security and appropriate use.

Complaints

If you have a complaint about the way in which your personal data are processed, we ask you to contact us directly. You always have the right to file a complaint with the supervisory authority:

Data Protection Authority (GBA)
Drukpersstraat 35, 1000 Brussels
commission@privacycommission.be

Changes to our privacy statement

Oscart Group NV may update its privacy statement at any time. Changes will always be announced on our website. The statement was last modified on 7 June 2018.