PRIVACY STATEMENT – WEES ORIGINEEL

Pursuant to Article 13 of the General Data Protection Regulation (EU) 2016/679 (GDPR), we hereby inform you about the processing of personal data carried out by Wees Origineel.

1. IDENTIFICATION OF THE DATA CONTROLLER

   Data Controller: Wees Origineel
   Legal form: Private Limited Liability Company (BVBA)
   Registered address: Motstraat 72 bus 2, 2800 Mechelen, Belgium
   Telephone: +32 (0)15 21 26 20
   E-mail: gdpr@weesorigineel.com
   Company registration number: BE0879.341.127

2. PURPOSES OF THE PROCESSING, LEGAL BASES AND CATEGORIES OF PERSONAL DATA

   WEBSITE USERS

   Purpose of processing:
   Management of customer registrations within the Wees Origineel environment, with the aim of offering products and/or services, processing orders, carrying out invoicing and ensuring delivery.

   Legal basis:
   Unambiguous consent of the data subject.
   Performance of a contract to which the data subject is a party.

   Categories of processed personal data:

   • Identification data: surname, first name, customer number (where applicable).
   • Contact data: telephone number, e-mail address, postal address.
   • Billing and delivery data.

   Purpose of processing:
   Management of questions and requests received via contact forms, e-mail or telephone.

   Legal basis:
   Pre-contractual measures taken at the request of the data subject.
   Performance of a contract.

   Categories of processed personal data:
   Contact and economic data: e-mail address, telephone number, content of the request, customer number (where applicable).

   CANDIDATES / PROSPECTIVE CLIENTS / CLIENTS / SUPPLIERS

   Purpose of processing:
   Processing of job applications (submitted via curriculum vitae, motivation letter or contact form) for the purpose of assessing a potential recruitment.

   Legal basis:
   Unambiguous consent of the data subject.

   Categories of processed personal data:
   Personal characteristics: date of birth, nationality, age.
   Professional data: education, professional experience, skills, references.

   Purpose of processing:
   Management of prospective clients for the purpose of offering products and services, including the preparation and submission of quotations.

   Legal basis:
   Unambiguous consent.
   Pre-contractual relationship.

   Categories of processed personal data:
   Identification data: surname, first name, company registration number (where applicable).
   Contact data: telephone number, e-mail address, postal address.

   Purpose of processing:
   Administrative management of clients for sales activities, invoicing and delivery of products and/or services.

   Legal basis:
   Performance of a contract.

   Categories of processed personal data:
   Contact and delivery data.
   Billing data and order history.
   Any additional information required for delivery or after-sales service.

   Purpose of processing:
   Administrative management of suppliers for procurement, planning and logistics.

   Legal basis:
   Pre-contractual measures.
   Contractual relationship.

   Categories of processed personal data:
   Business-related supplier data: contact persons, addresses, billing details, professional information.

   Purpose of processing:
   Sending commercial communications (newsletters, updates, promotional information).

   Legal basis:
   Contractual relationship (for existing clients).
   Consent (for new contacts).

   Categories of processed personal data:
   Contact data: e-mail address, telephone number.
   Professional data, where relevant for segmentation purposes.

3. SOURCE OF THE PERSONAL DATA AND RETENTION PERIODS

   Source of the personal data:
   Personal data are obtained directly from the data subject via the website, e-mail, telephone or direct personal communication.
   Data may also be obtained through job applications, contact forms or orders.

   Retention periods:
   Client and billing data: 7 years (statutory accounting obligation).
   Job application data: maximum of 12 months, unless the data subject provides consent for a longer retention period.
   Marketing data: until withdrawal of consent.
   Website data (log files): retained for a limited period in accordance with security and analytical purposes.

4. MANDATORY OR OPTIONAL PROVISION OF PERSONAL DATA

   For the provision of our services, the handling of requests or the conclusion of a contract, the provision of certain personal data is mandatory.
   If mandatory personal data are not provided, Wees Origineel will not be able to perform the requested services or properly execute the agreement.

5. RECIPIENTS OF THE PERSONAL DATA

   Personal data may be disclosed to the following recipients, where necessary:
   Logistics and distribution partners
   Financial institutions
   Payment service providers
   Accountants and tax advisors
   IT service providers and hosting providers
   Public authorities, where legally required
   Affiliated companies (where applicable)

   Where personal data are transferred outside the European Economic Area (EEA), appropriate safeguards are implemented, such as the use of EU Standard Contractual Clauses.

6. RIGHTS OF DATA SUBJECTS

   You have the right to:
   Access your personal data
   Rectify inaccurate or incomplete data
   Request erasure of your data
   Request restriction of processing
   Object to the processing of your data
   Receive your data in a structured, commonly used and machine-readable format (data portability)
   Withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal

   Contact point for exercising your rights:
   privacy@jouwbedrijf.be
   Address: Motstraat 72 bus 2, 2800 Mechelen, Belgium

   Identity verification:
   In order to prevent abuse, Wees Origineel may request appropriate proof of identity when you exercise your rights. This may include a partially redacted copy of an identity card, driving licence or another reasonable means of verification. No more data than strictly necessary will ever be requested.

   If you consider that your rights have been infringed, you may lodge a complaint with the Belgian Data Protection Authority:
   Belgian Data Protection Authority (DPA)
   Drukpersstraat 35, 1000 Brussels
   Belgium
   +32 (0)2 274 48 00
   contact@apd-gba.be
   www.gegevensbeschermingsautoriteit.be

7. AUTOMATED DECISION-MAKING

   No automated decision-making, including profiling, is carried out.

8. SECURITY MEASURES

   Wees Origineel implements appropriate technical and organisational measures, including but not limited to:
   Encrypted connections (SSL)
   Access control mechanisms
   Secure servers
   Role-based access restrictions
   Internal data management procedures

9. COOKIES AND TRACKING TECHNOLOGIES

   Our website uses cookies for the following purposes:
   Essential website functionality
   Preference settings
   Statistical analysis
   Marketing purposes (only after obtaining consent)

   For further details, please refer to our separate cookie policy.

10. AMENDMENTS TO THIS STATEMENT

    We reserve the right to amend this privacy statement at any time.
    The most recent version is always available on our website.