Privacy statement

 

1. Who is responsible for your data

SODEAL Solutions BV, with its registered office at Kluizendorpstraat 25, 9940 Evergem, Belgium (VAT BE 0649.864.762), is the data controller for the personal data processed in the context of this privacy statement.

Contact: hello@sodealsolutions.com — +32 476 79 15 22 — www.sodealsolutions.com

2. Definitions

Personal data: any information relating to an identified or identifiable natural person;

Processing: any operation performed on personal data, such as collecting, storing, consulting, using, or disclosing it;

Data controller: SODEAL Solutions BV, which determines the purpose and means of the processing;

Processor: a party that processes personal data on behalf of SODEAL (e.g. IT suppliers, shipping partners);

Data subject: the natural person to whom the personal data relates;

GDPR: Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data;

DPA: the Belgian Data Protection Authority, the supervisory authority in Belgium.

3. What data do we process, for what purpose, and on what legal basis

SODEAL only processes the data necessary for the purposes set out below:

Customers and orders

• Data: name, address, email address, telephone number, order details, payment details, VAT number (if a business customer).

• Purpose: processing and delivery of orders, invoicing, customer service.

• Legal basis: performance of the agreement (Art. 6.1.b GDPR); for invoicing: legal obligation (Art. 6.1.c GDPR).

Website and browsing behavior

• Data: IP address, device and browser data, click behavior, cookies (see Article 6).

• Purpose: proper functioning of the website, security, analysis, and improvement of the user experience.

• Legal basis: legitimate interest of SODEAL (Art. 6.1.f GDPR) for technical/analytical cookies; consent (Art. 6.1.a GDPR) for marketing/tracking cookies.

Marketing and newsletter

• Data: name, email address, purchase history.

• Purpose: sending newsletters and personalized offers for previously purchased or similar products.

• Legal basis: consent (Article 6(1)(a) GDPR), or legitimate interest for existing customers for similar products (Article 6(1)(f) GDPR, with the right to object).

Job applications

• Data: name, contact details, CV, motivation letter and related data.

• Purpose: assessment of the application and related communication.

• Legal basis: legitimate interest / pre-contractual steps at the request of the data subject (Article 6(1)(b) and 6(1)(f) GDPR).

4. Retention periods

SODEAL does not retain personal data longer than necessary for the purpose of processing. Indicatively:

• Customer and order data: for the duration of the relationship, and thereafter 7 years to comply with accounting and tax retention obligations;

• Newsletter data: until unsubscribing or withdrawing consent;

• Application data: up to 1 year after completion of the application procedure, unless explicit consent has been given for longer retention (e.g. talent pool);

• Cookies: see the retention periods stated in the cookie management settings on the website.

5. Who do we share your data with

SODEAL does not disclose personal data to third parties, except:

• to processors supporting SODEAL (e.g. hosting, accounting, shipping, IT maintenance), on the basis of a processing agreement in accordance with Article 28 GDPR;

• to the online tools listed below, insofar as you have consented to this where required;

• where legally required, to competent authorities.

SODEAL uses the following online tools, each of which has its own privacy policy and responsibility:

• Meta/Facebook (social media and advertising);

• Google Analytics (website statistics);

• Mailchimp (newsletter distribution).

6. Cookies

The SODEAL website uses cookies. On the first visit, consent is requested via a cookie banner, except for strictly necessary cookies.

Technical/functional cookies: necessary for the operation of the website; no consent is required for these.

Analytics cookies: used to analyze website use and improve the website; placed on the basis of legitimate interest or consent, depending on the degree to which they can be linked to an individual.

Marketing/tracking cookies: used to track browsing behavior and display personalized advertisements; only placed after explicit consent, which can be withdrawn at any time via the cookie settings.

7. Security

SODEAL takes appropriate technical and organizational measures to protect personal data against loss, misuse, or unlawful processing, taking into account the nature of the data and the risks of processing.

8. Your rights

As a data subject, you have the right to:

• access to your personal data;

• correction (rectification) of inaccurate data;

• erasure (“right to be forgotten”), within the legal limits;

• restriction of processing;

• data portability;

• objection to processing based on legitimate interest or for direct marketing;

• withdrawal of consent that has been given, without affecting the lawfulness of processing carried out before the withdrawal.

You can exercise these rights by contacting us at hello@sodealsolutions.com. SODEAL will respond within one month, which may be extended by two additional months in the event of complex requests, with reasons provided.

9. Complaints

If you believe that SODEAL is not complying with this privacy statement or the GDPR, you can contact us at hello@sodealsolutions.com. You always have the right to lodge a complaint with the Belgian Data Protection Authority (Drukpersstraat 35, 1000 Brussels — www.gegevensbeschermingsautoriteit.be), or to bring the matter before the competent court.

10. Changes

SODEAL may amend this privacy statement. The most recent version is always available at www.sodealsolutions.com. Important changes will, where relevant, be given additional prominence.