Arteel is in most cases the processor (Data Processor) of your personal data: the personal data that we process for our customers – your employer or supplier – in the context of the services we provide. The processing of this personal data is regulated in a separate data processing agreement that we have concluded with your employer or supplier. Such a data processing agreement forms an integral part of the service agreement with your employer or supplier and guarantees that we only collect and process your personal information as instructed by our customer.
For personal data for which Arteel is the controller, please refer to Arteel's privacy statement. This statement explains how we handle your personal data, what data we collect and how we use and protect it.
Please contact your employer's or supplier's human resources department or data protection officer if you have any questions about the personal information they provide to us or about your right to privacy as an employee or customer.
Arteel as controller of your personal data - privacy statement
As a customer, supplier or website visitor (hereinafter ‘you’ or ‘your’), your personal data is collected and processed by Arteel, with its registered office at Wingepark 17, 3110 Rotselaar, Belgium, and registered under company number 0448.941.734 in its capacity as controller (hereinafter ‘we’, “us”, ‘our’).
1. Scope of the Privacy Statement
This privacy statement (hereinafter ‘Privacy Statement’) applies to you for your personal data that we collect and process in the context of our services and via our website. It contains important information about how and for what purposes we collect and process personal data, and clarifies what rights you can exercise as a data subject. Please read this Privacy Statement carefully.
We are committed to protecting your (personal) data with the utmost care and to processing it only in a fair and lawful manner in accordance with the provisions of the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), including all current national or international laws or regulations implementing or future laws or regulations replacing the GDPR (hereinafter collectively referred to as ‘Applicable Data Protection Legislation’).
2. Overview of purposes, personal data and legal basis
Personal data can be defined as any information that can be used to directly or indirectly identify a natural person. You may provide us with your personal data in the context of the following activities, for the corresponding purposes and on the basis of the legal basis stated.
2.1. Contact
When you contact us via our website, we process personal data such as your name, email address and any information you provide yourself. This data is used exclusively to respond to your message and to enable further communication. The processing is based on our legitimate interest, namely to be able to handle contact requests adequately.
Legal basis: Legitimate interest (Article 6(1)(f) GDPR)
2.2. Newsletters
When you subscribe to our newsletter, we process your email address to keep you informed of news, updates and offers. This processing is based on your explicit consent, which you can withdraw at any time via the unsubscribe link in each newsletter.
Legal basis: Consent (Article 6(1)(a) GDPR)
2.3. Legal obligations
When you use our services, we process certain personal data in order to comply with legal obligations. This includes, among other things, storing invoice and purchase data for tax purposes and being able to comply with the statutory warranty on products or services. We may also be required to provide data to competent authorities on the basis of laws or regulations. This processing takes place only to the extent necessary to comply with such legal obligations.
Legal basis: Legal obligation (Article 6(1)(c) GDPR)
2.4. Personalised services
In order to provide personalised services, we process personal data such as contact and delivery details. We use this data to perform our services correctly and in line with your situation, for example to deliver products, send service confirmations or tailor communications to your preferences. The processing is necessary to enable the provision of services and takes place on the legal basis of the performance of the agreement.
Legal basis: Performance of an agreement (Article 6(1)(b) GDPR)
If the processing of your personal data as indicated in the table above is a legal or contractual requirement, or a requirement necessary to enter into a contract, you are obliged to provide the personal data. If you refuse to do so, we may not be able to enter into a contract with you.
3. Your rights as a data subject
Subject to the conditions and limitations of the Applicable Data Protection Legislation, you may exercise the following rights as a data subject:
3.1. Right of access to your personal data
The right to request access to your personal data, to request a copy of the personal data we collect about you and additional information about how we process your data.
3.2. Right to rectification
The right to have inaccurate personal data corrected or incomplete personal data that we hold about you completed.
3.3. Right to erasure (‘right to be forgotten’)
The right to have your personal data removed from our systems.
The request to erase your personal data cannot always be granted due to, for example, contractual or legal obligations. We will comply with these obligations when responding to your request.
3.4. Right to object
The right to object to the processing of your personal data if the processing is based on our legitimate interest or on grounds of public interest. We will cease processing unless we can demonstrate compelling legitimate grounds for further processing or for the exercise of legal claims.
You may also object if we process your data for direct marketing purposes, so that the personal data will no longer be processed for these purposes.
3.5. Right to withdraw your consent
You may withdraw your consent at any time for the processing of your personal data that we have collected with your consent. For example, you can unsubscribe from newsletters at any time. However, withdrawing your consent does not affect the lawfulness of processing based on consent before its withdrawal.
3.6. Right to restriction of processing
In certain cases, you have the right to have the processing of your personal data restricted. If you successfully exercise this right, we will continue to store your data, but we will restrict its use. You can make this request, for example, if you believe that your personal data is inaccurate or if our processing of it is not justified. We are only required to comply with these requests in specific cases, as determined by law.
3.7. Right to data portability
The right to obtain your personal data processed by us in a structured, commonly used and machine-readable format and/or to have this data forwarded or copied to another controller.
The above rights can be exercised free of charge by sending an email to privacy@arteel.com. Subject to legitimate exceptions under the Applicable Data Protection Legislation, we undertake to respond to your request within one month of receipt. We may first ask for additional information to confirm your identity and to ensure that the request is coming from you.
3.8. Right to lodge a complaint
If you believe that we are violating your data protection rights, you have the right to lodge a complaint with the Belgian Data Protection Authority: Data Protection, Drukpersstraat 35, 1000 Brussels, Tel +32 (0) 2 274 48 00, e-mail: contact@apd-gba.be
4. Recipients
We refrain from disclosing or selling your personal data to third parties and from publishing your personal data, except in the following specific cases:
- personal data may be shared with external service providers to whom we have outsourced certain processing activities. In any case, they are limited to processing your personal data in accordance with our instructions and, if necessary, a data processing agreement will be concluded so that they are obliged to comply with all obligations required by the applicable data protection legislation;
- if required by applicable law or regulation.
5. International transfer
We will comply with the Applicable Data Protection Legislation with regard to providing adequate protection for the transfer of personal data to recipients in countries outside the European Economic Area (‘EEA’).
In the event that we transfer your personal data to a third country or international organisation outside the EEA, we will ensure that your personal data is transferred to third countries that are considered by the European Commission to offer an ‘adequate’ level of protection (a list of adequate third countries is available on the European Commission's website), or, alternatively, where your personal data is not transferred to a country offering an adequate level of protection, we will ensure appropriate safeguards are in place with the entity receiving your personal data (e.g. the EU standard contractual clauses or binding corporate rules, taking into account additional requirements relating to international transfers such as additional measures) to ensure that your personal data remains protected in accordance with the Applicable Data Protection Legislation.
If you would like to receive more information or a copy of these safeguards, please contact us at the following email address: privacy@arteel.com.
6. Retention of your personal data
We do not retain your personal data for longer than is strictly necessary to achieve the purposes for which we received the data. The retention periods vary depending on the type of processing activity and the purpose for which the personal data was collected.
Personal data that we collect based on your consent will be retained by us for as long as your consent remains valid.
In all cases, personal data may be retained for longer if there is a legal or regulatory reason for doing so, or for shorter if you object to the processing of your personal data and there is no longer a legitimate reason to retain it. We guarantee that your personal data will be deleted or anonymised as soon as the retention period has expired.
If you would like more information about the retention periods we apply, please contact us at the following email address: privacy@arteel.com.
7. Contact details
If you have any comments or questions about the information in this Privacy Statement, or about other issues relating to our processing of your personal data, please contact us at privacy@arteel.com.
If you prefer to contact us by post, you can do so at the following address:
Wingepark 17, 3110 Rotselaar, Belgium
8. Changes to our privacy statement
We may amend or update this Privacy Statement from time to time to reflect changes in our practices regarding the processing of your personal data or changes in the Applicable Data Protection Legislation. We will do this by posting the updated version on this website. When we publish changes to our Privacy Statement, we will change the date and version number of the ‘last update’ of our Privacy Statement. Significant changes will be noted on our homepage. Nevertheless, we recommend that you review our Privacy Statement regularly.