Privacy policy
CB Belux (hereinafter: “CARRÉ BLANC BELUX” and “We”)
Avenue Louise 523, 1050 Brussels – Belgium
VAT BE1010710306
1. Why this Privacy Policy?
Any person (hereinafter referred to as the “Client”) visiting and/or using the website www.carreblanc.be (hereinafter referred to as the “Website”) or using our services discloses a certain amount of personal data. Personal data refers to information that enables us to identify you directly or indirectly as a natural person.
We collect and process your personal data in accordance with the Belgian Law of 30 July 2018 on the protection of privacy with regard to the processing of personal data (the “Privacy Law”) and the European Regulation of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (“Regulation” or “GDPR”).
By using the Website or our services, the User acknowledges having read this Privacy Policy and expressly accepts the collection and processing of their personal data as described in this document.
We reserve the right to make changes to this Privacy Policy at any time.
2. Who processes your personal data?
2.1. Data Controller
Carré Blanc Belux (hereinafter “CARRÉ BLANC BELUX” or “We”)
Avenue Louise 523, 1050 Brussels – Belgium
VAT BE1010710306
Email: info@carreblanc.be
Carré Blanc Belux is the data controller and determines which personal data are collected, the purposes and means of processing.
2.2. Processor(s)
Carré Blanc Belux is free to engage data processors. A processor is a natural or legal person that processes your personal data on behalf of the controller. The processor is required to ensure the security and confidentiality of your data and always acts under the instructions of the controller.
Carré Blanc Belux uses the following categories of processors:
-
Website, cookies and hosting: Shopify
-
Analytics plugin: GA4
-
Online payments: Google Pay, Apple Pay, Bancontact, Credit Card (Visa, Mastercard, Amex, Maestro), PayPal
-
Delivery: DPD, Mondial Relay
3. On what legal bases are my data processed?
In accordance with the Privacy Law and the GDPR, we process your personal data on the following legal grounds:
-
Based on the performance of a contract to which you are a party, or pre-contractual measures taken at your request for the use of our Website and the provision of our products and/or services.
-
Based on our legal obligations for all matters relating to the management of the contractual relationship, including invoicing.
-
Based on our legitimate interest for sending information and newsletters to our customers.
-
Based on your explicit consent for the sending of promotional offers (direct marketing).
4. What personal data are collected?
The processing of your personal data is limited to what is strictly necessary to achieve the purposes pursued by Carré Blanc Belux. The following categories of data are collected:
-
Personal identification data (name, first name, address, login details)
-
Contact details (telephone number, email address)
-
Financial identification data (bank details)
-
Electronic identification data (IP address, location, cookies)
We also use cookies to recognise the User and provide a personalised browsing experience, to remember technical choices (e.g. language or shopping cart) and to detect and correct potential errors on the Website.
For more information on the use of cookies, please refer to our Cookie Policy.
5. What are the purposes of the processing?
Carré Blanc Belux collects your personal data solely to provide you with an optimal, personalised, and secure user experience.
The processing of your data is essential to the proper operation of the Website and to the provision of our services. If certain data are missing, incorrect, or incomplete, Carré Blanc Belux reserves the right to suspend or cancel certain operations.
Carré Blanc Belux undertakes to process your data exclusively for the following purposes:
-
Customer management: administration, order processing, delivery, invoicing, credit follow-up, customer support, complaint handling, and newsletter communication.
-
Dispute management.
-
Protection against fraud and offences.
-
Personalised marketing and advertising, if you have given explicit consent (which may be withdrawn at any time).
When you visit our Website, certain data are collected for statistical purposes (IP address, geographical area, date and time of access, pages visited).
By visiting the Website, you expressly consent to this statistical data collection.
6. Who receives your personal data?
Your personal data are intended solely for internal use.
They will not be sold, transferred, or communicated to third parties without your prior consent, unless required by law or justified by a legitimate interest.
7. How long are your data retained?
Your data are kept only as long as necessary to fulfil the purposes pursued.
They will be deleted from our database once they are no longer needed for those purposes or if you validly exercise your right to erasure.
8. What are your rights?
8.1. Guarantee of fair and lawful processing
Your personal data are always processed fairly and lawfully, for legitimate purposes as specified above. They are collected and processed in a relevant and non-excessive way and are not kept longer than necessary.
8.2. Right of access
If you can prove your identity, you have the right to obtain information about the processing of your data: the purposes, the categories of data concerned, the recipients, the storage period, and your rights.
8.3. Right to rectification
Inaccurate or incomplete data can be corrected, either directly by the User or upon written request to us.
8.4. Right to erasure (“right to be forgotten”)
You have the right to request deletion of your personal data in the following cases:
-
Your data are no longer necessary for the purposes for which they were collected.
-
You withdraw your consent and there is no other legal ground for processing.
-
You validly exercise your right to object.
-
Your data have been unlawfully processed.
-
Deletion is required to comply with a legal obligation.
8.5. Right to restriction of processing
You may request limitation of processing, particularly if the accuracy of your data is contested, if they are needed for legal claims, or while Carré Blanc Belux verifies whether your right to erasure applies.
8.6. Right to object
You have the right to object at any time to the processing of your personal data for direct marketing, profiling, or legitimate interest purposes.
Carré Blanc Belux will cease processing unless it demonstrates compelling legitimate grounds that override your rights.
8.7. Right to data portability
You have the right to receive the personal data you provided in a structured, commonly used, machine-readable format, and to have them transferred to another controller if technically feasible.
8.8. Right to withdraw consent
You can withdraw your consent at any time, for example regarding direct marketing communications.
9. How to exercise your rights?
To exercise your rights, you must send us a written request together with proof of identity, either by registered mail to:
Carré Blanc Belux, Avenue Louise 523, 1050 Brussels,
or by email to info@carreblanc.be.
We will respond as soon as possible, and no later than one (1) month after receiving the request.
10. Possibility to lodge a complaint
If you are not satisfied with how Carré Blanc Belux processes your personal data, you have the right to lodge a complaint with the Data Protection Authority:
https://www.autoriteprotectiondonnees.be/