GDPR Fair processing notice
FOR CUSTOMERS, SUPPLIERS and OTHER BUSINESS PARTNERS
Last updated: [22/05/2018]
1. INTRODUCTION
The purpose of this fair processing notice ("Notice") is to inform you about how Van Genechten Packaging ("we", "us" and "our") will process your personal data as a data controller and the measures and processes we have put in place to ensure its adequate protection. Providing such information is one of the requirements of the General Data Protection Regulation 2016/679 ("GDPR").
This notice does not form any contractual relationship between you and us, and we may amend it from time to time.
2. LAWFUL PROCESSING
We will only process your personal data:
(a) where you have given your consent;
(b) where the processing is necessary to provide our products or services to you/your employer;
(c) where the processing is necessary to respond to a request from you/your employer;
(d) where the processing is necessary to maintain our relationship with you/your employer;
(e) where the processing is necessary for compliance with our legal and regulatory obligations
In case of (a) above, you may withdraw your consent at any time, by making a request as set out in section 12 below.
3. WHAT PERSONAL DATA WE COLLECT ABOUT YOU
3.1 We process the following types of personal data about you:
(a) Your name, email address and other contact details;
(b) Your role, position and/or job title within your employment;
(c) Details of your preferences for types of marketing events or materials;
(d) Details of your access to our premises, systems, websites; and
(e) Your messages, feedback or contributions to surveys and questionnaires.
3.2 It may be mandatory for you to provide us with your personal data, to enable us to manage our business and operations, to maintain our relationship with you/your employer, to provide our products or services to you/your employer or to comply with our legal and regulatory obligations. If you fail to provide your personal data, we might be unable to maintain our relationship with you/your employer or to provide our products or services to you/your employer.
3.3 We make every effort to maintain the accuracy and completeness of your personal data which we store and to ensure all of your personal data is up to date. However, you can assist us considerably by promptly contacting us if there are any changes to your personal data or if you become aware that we have inaccurate personal data relating to you (see section 9 below). We will not be responsible for any losses arising from any inaccurate, inauthentic, deficient or incomplete personal data that you provide to us.
4. HOW WE COLLECT PERSONAL DATA.
We usually collect your personal data from the information you/your employer submits during the course of your/your employer's relationship with us. This will typically be through you/your employer sending us emails and other correspondence, business cards, the forms and documents used when you/your employer signs up to our marketing or market data news lists, when you are named as an authorized person to trade on behalf of your employer, the sign up information you/your employer uses to access any of our products or services either on your own behalf or on behalf of your employer.
We may also collect your personal data from our group companies and the records of governmental agencies.
5. HOW WE USE PERSONAL DATA
We will process your personal data in connection with the management of our relationship with you/your employer and the provision of our products and services to you/your employer for the following purposes:
(a) to provide you/your employer with requested products or services;
(b) to respond to your/your employer's messages or posts to us;
(c) to provide you/your employer with promotional and marketing materials about our products and services that we think you/your employer may be interested in;
(d) to manage, develop and improve our product range, services, stores, information technology systems and websites;
(e) for monitoring and assessing compliance with law and our policies and standards;
(f) to comply with our legal and regulatory obligations and requests anywhere in the world, including reporting to and/or being audited by national and international regulatory bodies;
(g) to carry out money laundering, financial and credit checks and for fraud and crime prevention and detection purposes;
(h) for administrative purposes in relation to the security and access of our systems, premises, platforms and websites and applications;
(i) to comply with court orders and exercise and/or defend our legal rights;
(j) for any other legitimate business purpose; and
(k) as otherwise permitted or required by any applicable law or regulation.
6. INTERNATIONAL TRANSFERS OF PERSONAL DATA
Your personal data may be transferred to (including accessed in or stored in) a country or territory outside the European Economic Area ("EEA"), including to countries whose laws may not offer the same level of protection of personal data as are enjoyed within the EU. In particular, we may share your personal data with our group companies outside of the EU including Russia. We will ensure that any such international transfers are made subject to appropriate or suitable safeguards as required by the GDPR.
7. WHEN MAY WE DISCLOSE YOUR PERSONAL DATA
We do not and will not sell, rent out or trade your personal data. We will only disclose your personal data to the following recipients:
(a) to our group companies;
(b) to third parties who process your personal data on our behalf (such as our systems providers including cloud providers);
(c) to third parties who process your personal data on their own behalf but through providing you or your employer with a service on our behalf (such as our suppliers);
(d) to companies providing services for money laundering checks, credit risk reduction and other fraud and crime prevention purposes and companies providing similar services, including financial institutions, credit reference agencies and regulatory bodies with whom such information is shared;
(e) to any third party to whom we assign or novate any of our rights or obligations;
(f) to any prospective buyer in the event we sell any part of our business or assets; and
(g) to any government, regulatory agency, enforcement or exchange body or court where we are required to do so by applicable law or regulation or at their request.
8. HOW WE PROTECT YOUR PERSONAL DATA
We are committed to safeguarding and protecting your personal data and will implement and maintain appropriate technical and organizational measures to ensure a level of security appropriate to protect your personal data from accidental or unauthorized destruction, loss, alteration, disclosure or access.
9. YOUR RIGHTS IN RELATION TO THE PERSONAL DATA WE COLLECT
9.1 If you wish to:
(a) update, modify, delete your personal data or obtain a copy of your personal data that we hold;
or
(b) restrict or stop us from using any of your personal data which we hold, you can request this by contacting us as set out in section 12 below.
9.2 In any of the situations listed above, we may request that you prove your identity by providing us with a copy of a valid means of identification in order for us to comply with our security obligations and to prevent unauthorized disclosure of data.
10. HOW LONG WE WILL HOLD YOUR PERSONAL DATA FOR
We will only retain your personal data as long as necessary to fulfill the purpose for which they were collected or to comply with legal, regulatory or internal policy requirements.
11. HOW WE UPDATE OR CHANGE THIS FAIR PROCESSING NOTICE
We may change or update parts of this Notice in order to maintain our compliance with applicable law and regulation or following an update to our internal practices. We will do this by updating this Notice and make it available to you. You will not necessarily be directly notified of such a change. Therefore, please ensure that you regularly check this Notice on our corporate website vangenechten.com, so you are fully aware of any changes or updates.
12. HOW YOU CAN CONTACT US
If you have any queries about the contents of this Notice or your personal data, or wish to make a request in relation to your personal data, please contact us using the details set out below:
Email: gdpr@vangenechten.com
Post: Data Protection Compliance Manager
Van Genechten Packaging
Raadsherenstraat 2
2300 Turnhout – Belgium
Phone: +32 14 403 640