Introduction
Galerie Greta Meert recognizes that your privacy is very important and that it is your right to control your personal information. We know that providing personal information is an act of trust. We treat this personal data in accordance with the provisions of GDPR regarding data protection law.
Most of the information we offer on our site is available without any personal data being required. In certain cases, however, you will be asked for personal information.
GDPR
GDPR stands for General Data Protection Regulation, the new European legislation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
The GDPR will become effective in all European Member States, as from 25thMay 2018. The GDPR applies to Data Controllers (who own the customer relationship) and Data Processors (who handle data on the controller’s behalf) for data relating to EU citizens across all industries. We will process Personal Data both as a Controller and as a Processor, as defined in the GDPR.
How do we use your personal data?
In this Section we set out: the general categories of personal data that we may process; the purposes for which we may process personal data; and the legal bases of the processing.
- When visiting our Website and Webshop, we will process data about your use of our website and services (“usage data“). The source of the usage data is our analytics tracking system. The usage data include [your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use]. This usage data are processed for the purposes of analysing the use of the website and services. The legal basis for this processing is our legitimate interests, namely monitoring and improving our website and services.
- When purchasing Products from our Webshop, we will process information relating to transactions, including purchases of goods, that you enter into with us and/or through our website (“transaction data“). The transaction data include [your contact details, your card details and the transaction details.] The transaction data are processed for the purpose of supplying the purchased goods and keeping proper records of those transactions. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract and our legitimate interests, namely our interest in the proper administration of our website and business.
- When subscribing to our newsletter, we will process information that you provide to us for the purpose of subscribing to our newsletters (“notification data“). The transaction data include [your name and e-mail address]. The notification data are processed for the purposes of sending you the relevant newsletters. The legal basis for this processing is your consent, given freely, specific, informed and unambiguous.
In addition to the specific purposes for which we may process your personal data set out in this Section, we may also process any of your personal data where such processing is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
Retaining and deleting personal data
Personal data that we process for any purpose shall not be kept for longer than is necessary for that purpose.
Notwithstanding the other provisions of this Section, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
Your rights
We hereby summarize the rights that you have under data protection law. Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights. Your principal rights under data protection law are:
- the right to access to a copy of the information comprised in their personal data;
- the right to rectification;
- the right to erasure;
- the right to restrict processing;
- the right to object to processing;
- the right to data portability;
- the right to complain to a supervisory authority; and
- the right to withdraw consent.
You may exercise any of your rights in relation to your personal data by written notice to us.
Who has access to your personal data
Only our employees and accountant will have. Your transaction data will be communicated to our suppliers in case of a direct home delivery. We will not disclose your personally identifiable information to third parties without your consent except in case of disclosure for legal reasons. Your data will not be enclosed out of the European Union.
Our duties
We need to implement measures to ensure a level of security of the personal data, appropriate to the risk.
In the case of a personal data breach, we must without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify the personal data breach to the competent supervisory authority, unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons.
Our contact details
This website is owned and operated by Galerie Greta Meert NV. We are registered in Belgium under registration number 432.784.207 and our registered office is at 1000 BRUSSELS, 13 Rue du Canal.
Should you have any further questions regarding the collection, processing and use of your data, please feel free to contact us anytime by post (using the postal address given above), by telephone: +32 2 219 14 22 or by e-mail: info@galeriegretameert.com.
Revised: February 2020