Privacy Policy - Kitchenequipment.be

Effective Date: [Insert Date]
Last Updated: [Insert Date]

1. Introduction

This Privacy Policy explains how [Your Full Name], operating kitchenequipment.be ("we," "us," or "our"), collects, uses, and protects your personal information in compliance with the European Union General Data Protection Regulation (GDPR) and Belgian data protection laws.

We are committed to protecting your privacy and ensuring transparency about our data practices. This policy applies to all users of our website and customers of our kitchen equipment maintenance services.

2. Data Controller Information

Data Controller:
Said Zendaoui
Business Address:
Rue Meyers hennau 13F Laken
Brussels, Belgium
Email: info@kitchenequipment.be
Phone: +32487254374
VAT Number: (not yet applicable)

For all data protection inquiries, please contact us using the information above.

3. Legal Basis for Processing

We process your personal data under the following legal bases as defined in GDPR Article 6:

Contract Performance (Article 6(1)(b)): To provide maintenance and repair services you have requested
Legitimate Interest (Article 6(1)(f)): For business operations, fraud prevention, and improving our services
Legal Obligation (Article 6(1)(c)): To comply with tax, accounting, and other legal requirements
Consent (Article 6(1)(a)): For marketing communications and non-essential cookies (where applicable)

4. Personal Data We Collect

4.1 Information You Provide Directly

Contact Information: Name, address, phone number, email address
Service Details: Equipment specifications, maintenance history, service requests
Payment Information: Billing address, payment method details (processed securely through third-party providers)
Communication Records: Emails, phone calls, and messages related to our services
Emergency Contacts: If provided for service access purposes

4.2 Information Collected Automatically

Website Usage Data: IP address, browser type, pages visited, time spent on site
Device Information: Operating system, device type, screen resolution
Cookies and Tracking: As detailed in our Cookie Policy section below

4.3 Information from Third Parties

Equipment Manufacturers: Technical specifications and warranty information
Payment Processors: Transaction confirmation and fraud prevention data
Professional Networks: Referral information from business partners

5. How We Use Your Personal Data

We use your personal data for the following purposes:

5.1 Service Provision

Scheduling and performing maintenance and repair services
Providing technical support and advice
Managing service warranties and follow-up care
Maintaining equipment service history records

5.2 Business Operations

Processing payments and managing accounts
Communicating about service appointments and updates
Improving our services and website functionality
Complying with legal and regulatory requirements

5.3 Marketing (with your consent)

Sending newsletters about equipment maintenance tips
Notifying you about new services or seasonal maintenance reminders
Providing relevant offers based on your equipment type

6. Data Sharing and Disclosure

We may share your personal data in the following circumstances:

6.1 Service Providers

Payment Processors: To handle secure payment transactions
Equipment Suppliers: To order parts and verify warranties
IT Service Providers: For website hosting and technical support
Accounting Services: For financial record keeping and tax compliance

6.2 Legal Requirements

To comply with legal obligations or court orders
To protect our rights, property, or safety
To prevent fraud or illegal activities
For tax reporting and regulatory compliance

6.3 Business Transfers

In the event of a business sale or merger, personal data may be transferred to the new owner with appropriate safeguards.

Note: We never sell your personal data to third parties for marketing purposes.

7. International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure adequate protection through:

Adequacy Decisions: Transfers to countries deemed adequate by the European Commission
Standard Contractual Clauses: EU-approved contract terms with service providers
Certification Schemes: Providers certified under recognized data protection frameworks

8. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

Customer Records: 7 years after last service (for warranty and legal purposes)
Financial Records: 7 years (Belgian legal requirement)
Service History: Until equipment replacement or customer request for deletion
Marketing Communications: Until you withdraw consent
Website Analytics: 26 months maximum
CCTV Footage: 30 days (if applicable to business premises)

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

9.1 Right of Access (Article 15)

You can request confirmation of what personal data we hold about you and receive a copy of this data.

9.2 Right to Rectification (Article 16)

You can request correction of inaccurate or incomplete personal data.

9.3 Right to Erasure (Article 17)

You can request deletion of your personal data in certain circumstances, such as when:

The data is no longer necessary for the original purpose
You withdraw consent (where consent was the legal basis)
You object to processing and there are no overriding legitimate grounds

9.4 Right to Restrict Processing (Article 18)

You can request limitation of processing in specific situations, such as while we verify data accuracy.

9.5 Right to Data Portability (Article 20)

You can request your personal data in a structured, machine-readable format to transfer to another service provider.

9.6 Right to Object (Article 21)

You can object to processing based on legitimate interests or for direct marketing purposes.

9.7 Rights Related to Automated Decision-Making (Article 22)

We do not use automated decision-making or profiling that significantly affects you.

10. How to Exercise Your Rights

To exercise any of these rights:

Contact us directly using the information in Section 2
Provide sufficient information to verify your identity
Specify which right you wish to exercise
Include relevant details to help us locate your data

We will respond to your request within one month of receipt. In complex cases, we may extend this period by two months with notification.

11. Cookies and Website Tracking

11.1 Essential Cookies

We use essential cookies necessary for website functionality:

Session management for secure browsing
Security features to prevent fraud
Basic website functionality and navigation

11.2 Analytics Cookies

With your consent, we use analytics cookies to:

Understand how visitors use our website
Improve website performance and user experience
Track popular content and services

11.3 Marketing Cookies

With your consent, we may use marketing cookies to:

Remember your preferences for future visits
Provide relevant content based on your interests
Measure the effectiveness of our marketing efforts

11.4 Cookie Management

You can manage cookie preferences through:

Your browser settings
Our cookie consent banner
Contacting us directly to opt-out

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

12.1 Technical Safeguards

SSL encryption for data transmission
Secure hosting with regular security updates
Access controls and authentication systems
Regular data backups with encryption

12.2 Organizational Measures

Staff training on data protection principles
Confidentiality agreements with employees and contractors
Regular review of data processing activities
Incident response procedures for data breaches

13. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms:

We will notify the Belgian Data Protection Authority within 72 hours
We will inform affected individuals without undue delay
We will provide information about the nature of the breach and steps taken to address it

14. Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children without parental consent. If we become aware of such collection, we will take steps to delete the data promptly.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will:

Post the updated policy on our website
Notify you of significant changes via email (if we have your contact information)
Update the "Last Updated" date at the top of this policy

Your continued use of our services after changes constitutes acceptance of the updated policy.

16. Complaints and Regulatory Contact

If you believe we have not handled your personal data in accordance with this policy or GDPR, you have the right to lodge a complaint with:

Belgian Data Protection Authority (APD/GBA)
Rue de la Presse 35
1000 Brussels, Belgium
Phone: +32 (0)2 274 48 00
Email: contact@apd-gba.be
Website: www.dataprotectionauthority.be

You also have the right to seek remedy through the courts if you believe your data protection rights have been infringed.

17. Contact Information for Data Protection

For any questions about this Privacy Policy or our data protection practices, please contact:

Data Protection Officer: [Your Name or designated person]
Email: [Your Email]
Phone: [Your Phone Number]
Address: [Your Business Address], Brussels, Belgium

We aim to respond to all data protection inquiries within 5 business days.

Additional Resources:

EU GDPR Information Portal: https://gdpr.eu/
Belgian Data Protection Authority: https://www.dataprotectionauthority.be/
European Data Protection Board: https://edpb.europa.eu/

This Privacy Policy should be reviewed by a qualified data protection attorney to ensure full GDPR compliance for your specific business operations.

Privacy Policy Page