Privacy declaration

Privacy Declaration

Privacy Declaration GOUT FOU

GOUT FOU (LANOO J, SEGERS N, Chocolaterie), with registered office at KOUTERSTRAAT 53B 9240 ZELE, with company number 0737.768.142,


Hereafter referred to as: “GOUT FOU”,

Declares the following:

GOUT FOU processes personal data in the execution of the assignment entrusted by the customer, as well as in the event of contact via the contact form and/or a visit to the website (www.goutfou.be). This as a controller or as a processor, depending on the concrete circumstances.

GOUT FOU is the controller insofar as the processing of personal data takes place for its own purposes and GOUT FOU itself determines the means for this. Insofar as personal data of data subjects are processed on behalf of the customer, GOUT FOU acts as processor.

GOUT FOU recognizes the importance of secure processing of personal data. In this sense, both GOUT FOU and the customer acknowledge that any processing will take place in accordance with the prevailing national regulations, including the law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data, as well as Regulation (EU) 2016/679 (hereinafter: GDPR) in force since 25 May 2018 and will comply with it. In the event of substantive changes in the law, GOUT FOU undertakes to adjust the privacy policy accordingly.

The privacy policy as well as any changes can be consulted at all times on the GOUT FOU website, www.goutfou.be.

Definitions

For a proper understanding of this privacy policy, the following terms have the following meaning:

  • GDPR: Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC , also known as the General Data Protection Regulation or GDPR;
  • Personal data: Any information about an identified or identifiable natural person such as a name, email address, location data, an online identifier or one or more elements characteristic of the physical, physiological, genetic, psychological, economic, cultural or social identity;
  • Data Subject: The identified or identifiable natural person; Consent of the data subject: any free, specific, informed and unambiguous expression of will by which the data subject accepts the processing of personal data by means of a statement or an unambiguous active act;
  • Processor: A natural or legal person, a government agency, a service or another body that processes personal data on behalf of the controller;
  • Processing: An operation or set of operations relating to personal data or a set of personal data, whether or not performed by automated means, such as collecting, recording, organizing, structuring, storing, updating or changing, retrieving, consulting, using, forwarding, distribute or otherwise make available, align, combine, block, erase or destroy data;
  • Controller: A natural or legal person, a public authority, a service or other body which, alone or together with others, determines the purposes and means of the processing of personal data;
  • Data breach: Any breach of security that accidentally or unlawfully leads to the destruction, loss, alteration, unauthorized disclosure of or access to data transmitted, stored or otherwise processed;

Scope Privacy Policy

  1. Contractual relations

The current privacy policy applies to the contractual relationship between GOUT FOU and the customer or data subject and applies for the entire duration of the assignment. Deviations from the privacy policy are only permissible in the event of a contractual relationship between the customer or data subject and GOUT FOU if prompted by legal requirements, or after implicit or implicit consent from both parties. Substantial changes will be expressly announced on the website.

  1. Website

By consulting the GOUT FOU website (www.goutfou.be) and/or by using the contact form, the person concerned acknowledges having read the privacy policy and agrees that GOUT FOU can and may use making the collected Personal Data taking into account the scope of the request for which the data was provided (Art. 6.1.a and 6.1.b GDPR).


GOUT FOU in no way guarantees the completeness, correctness and up-to-dateness of the information contained on the website, nor of the content of third-party websites to which reference is made.

The processing of the Personal Data

GOUT FOU guarantees that personal data is collected and processed in a transparent manner and this only for specified, explicit and legitimate purposes. Any processing is limited to what is necessary for the purposes for which the processing takes place. GOUT FOU ensures that the personal data is correctly registered and updated if necessary.

In the context of the service provided by GOUT FOU, the collected personal data include the name, first name, e-mail address, address (geolocation) and telephone number, as well as any other personal information that the customer or data subject chooses to provide in his/her request information or services from GOUT FOU. No data is processed that can be regarded as sensitive or that fall under a special category of personal data.

GOUT FOU does not store the personal data it processes for longer than is necessary for the purpose of the processing, or what is required on the basis of legal obligations.

Processing ground

By calling on the services of GOUT FOU or filling in the contact form on the website and submitting personal data, the customer acknowledges and accepts that these data can be processed (art. 6.1.b) GDPR). However, the customer and/or the data subject remains the owner of the data made available.


For the personal data that GOUT FOU receives as responsible party from the customer and that are used for marketing purposes and customer management, GOUT FOU falls back on the legal basis of the legitimate interest consisting of the situation in which the person concerned is a customer of GOUT FOU as a result of placing of an order (Art. 6.1.b) and f) GDPR), or explicitly obtained consent (Art. 6.1.a) GDPR).

The customer in his capacity as data subject has the option at all times to change or withdraw the consent given, insofar as the processing thereof is based solely on his consent.

Processing Purposes

GOUT FOU processes personal data for the following purposes:

Type of personal data

Purposes

Name, first name, address, e-mail address, telephone number and VAT number

Execution of the order (incl. delivery), accounting purposes (invoicing), legal obligations (identification obligation)

Name, first name, address, e-mail address, telephone number

Information about products and services, processing requests addressed to GOUT FOU via email or the website

Name, first name, address, e-mail address, telephone number

Information about products and services, processing requests addressed to GOUT FOU via email or the website

Name, first name or other personal information

Personalization of orders

When you visit the GOUT FOU website and if necessary use the contact form, it is possible that certain information must be made available to facilitate contact. This information will be used internally only.


GOUT FOU also uses cookies that can register certain information about the website visit, including personal data.

Even when GOUT FOU is invoked, it must have certain personal data that are necessary for the execution of the agreement.

GOUT FOU will only use those personal data that are minimally necessary in the context of the requested service for each processing.

Appropriate technical and organizational measures

GOUT FOU will take appropriate technical and organizational measures for the secure processing of personal data, thus limiting the risk of destruction, loss, unauthorized modification or processing. This takes into account the practices within the sector, the state of the art, the nature, scope, context of the processing, processing purposes and the possible associated risks for the rights and freedoms of data subjects. GOUT FOU will provide detailed information about the applied security policy upon written request.

Subcontractors and processors

GOUT FOU uses sub-processors, including, but not limited to, external courier services, which process personal data on behalf of and under the supervision of GOUT FOU. These processing operations will at all times be limited to what is strictly necessary for the execution of the respective assignment.

GOUT FOU ensures that the processors designated by it, including its employees and subcontractors, process personal data in accordance with the applicable legislation and hereby commit, contractually or otherwise, to the necessary technical and organizational security measures based on art. 28 GDPR. The employees and sub-processors of GOUT FOU have contractually committed to observe the confidentiality of the personal data.

The sub-processor decides autonomously about the way in which the personal data are processed, taking into account the risks associated with its expertise. In the absence of the same expertise, GOUT FOU, as controller, is not liable for any unlawful processing that takes place as a result of an incorrect assessment by the sub-processor. GOUT FOU therefore bears no responsibility whatsoever in the event of loss or corruption of data, theft of data, viruses or other attacks on the computer systems and (cloud) servers of the subprocessor.

Transfer of personal data to third parties

Except in relation to the employees and sub-processors involved in the context of the service, GOUT FOU will not exchange personal data with third parties, unless in case of explicit permission, at the request of the data subject, judicial authorities or when this is required by law. In the latter case, GOUT FOU will inform the person concerned without delay of the request from the authorities and/or authorities involved.

Data processing within the European Union

GOUT FOU tries to limit the transfer and processing of personal data to countries within the European Economic Area or to countries that guarantee an adequate level of protection, equivalent to the level guaranteed under the GDPR and this privacy policy, taking into account the intended processing, scope and category of the personal data to be processed, the country of destination and the legal rules that apply in the country concerned. In the case of processing outside the boundaries of processing outside the European Economic Area, GOUT FOU will provide further explanation at the written request of the data subject.

The rights of the data subject

Within the framework of the GDPR, the data subject has the following rights with regard to the collected and processed personal data (Art. 12 to 22 GDPR): the right to access, the right to correct and/or supplement the collected data, the right to limit the purpose of the processing, the right to data portability, the right to be forgotten and the right to file retention.


Questions about the collection and processing of personal data or an appeal to your rights as a data subject can be addressed to GOUT FOU via a written, motivated letter to info@goutfou.beor by post to Kouterstraat 53B, 9240 Zele. GOUT FOU processes every request without delay and provides feedback within a period of 30 days. In certain cases, GOUT FOU has the right to extend this period by two months, in which case GOUT FOU will inform the data subject within 30 days of receipt of the request (Art. 12.3 GDPR).

Retention period of personal data

GOUT FOU guarantees that it does not keep the collected personal data for longer than necessary to achieve the intended purpose, with the exception of accounting documents and those relating to liability claims, which may justify a longer retention period according to the relevant legal provisions. Other data that may be necessary for adequate after-service, or future services, are kept anonymous as far as possible so that they cannot be traced to identifiable persons for longer than necessary.


When the retention of the personal data is no longer required, it will be securely destroyed or deleted or made available to the data subject.

Measures in the event of a data breach

GOUT FOU takes the necessary measures to prevent a loss of data. However, if such a loss should occur, GOUT FOU undertakes to report this, where appropriate, to the Data Protection Authority (DPA) within the legal deadlines. This information obligation only applies insofar as the data breach turns out to be large-scale or has a far-reaching impact on security.


If a data breach also entails a high risk for the rights and freedoms of the persons concerned, GOUT FOU will inform the data subject without undue delay.

GOUT FOU fully cooperates with the competent authorities by providing the necessary information and limiting the consequences of the infringement.

Other provisions

GOUT FOU guarantees the necessary support to those involved to meet their obligations, except in the case of information that is confidential or may not be disclosed due to a legal regulation. The person responsible for the processing of Personal Data at GOUT FOU is Mrs. Justine Lanoo ( info@goutfou.be ). For more information about the processing of personal data, you can always contact the Data Protection Authority in 1000 Brussels, Drukpersstraat 35 (022/74.48.00) or www.dataprotectionauthority.be).


In case of nullity of one or more provisions of this privacy policy, these provisions will be interpreted in accordance with the GDPR. The nullity of one of the provisions does not affect the validity of the other provisions of this privacy policy. If there are discrepancies between the privacy policy and the agreement concluded between GOUT FOU and the customer or data subject, the provisions of the latter shall prevail.

GOUT FOU reserves the right to amend the privacy policy if this should prove necessary to comply with its rights and/or obligations under the GDPR. Substantial changes will always be announced on the website. It is recommended that you visit the website regularly to keep abreast of recent changes.


This privacy policy is exclusively governed by Belgian law. Only the courts belonging to the judicial district of the registered office of GOUT FOU are competent to hear disputes arising from this.

GOUT FOU's privacy policy was last modified on 10/03/22.