Privacy Statement
(version 3 May 2021) Septentrio is committed to ensuring that your privacy is protected. All personal data that we obtain from you, as a prospective customer (‘prospect’), as a customer and/or as a user of our website, is processed in accordance with applicable data protection legislation, in particular the General Data Protection Regulation 2016/679 of 27 April 2016 ("GDPR"), as well as this Privacy Statement.
This Privacy Statement provides more information about the personal data that we process, why we process it, how we obtain the data, how long we retain the data and with whom we share it.
- Identity and contact details
- Purposes
- Prospects
- Customers
- Website
- Security
- Rights
- Updates
1. IDENTITY AND CONTACT DETAIL
The data controller for your personal data is the following legal entity:
Septentrio N.V.
Greenhill Campus
Interleuvenlaan 15i
3001 Heverlee
Belgium
Company number: 0470094266
If you have any questions about the processing of your personal data, you can always contact us:
- via e-mail: dataprotection [a] septentrio.com
- by phone: +32 16 30 08 00
2. PURPOSES
PROSPECTS
When we meet you at fairs, conferences, etc. and you have shown an interest in our products and/or services, we may process your personal data for one or more of the following purposes:
- Governance of pre-contractual relations
- Direct marketing
Below, you can find for each purpose the personal data that we process, why we process it, how we obtain the data, how long we retain the data and with whom we share it.
1) Governance of pre-contractual relations
As part of the governance of our pre-contractual relations, we may process your personal identification data (name, (company) address, telephone number and email address) and other information you may provide to us (for example, employment data if you are a B2B customer).
This data allows us to execute our sales and contract process and to provide you with offers and answers requested by you.
The legal basis for this processing is to answer your questions prior to entering into an agreement (art. 6, §1, (b) GDPR), if you are a B2C customer. If you are a B2B customer we have a legitimate interest to process your personal data to enter into the contract (art. 6, §1, (f) GDPR).
We obtain this personal data directly from you, e.g. when we obtain your business card at a trade fair or conference.
For the governance of our pre-contractual relations, we store your personal data for up to 15 years after the respective financial year of our last contact, plus a verification period of 6 months.
We only share this personal data with affiliated partners (wholesalers, distributors/dealers) on a need to know basis and third parties with whom we work together as part of our customer management (IT and software providers). We will never sell your personal data.
2) Direct marketing
For direct marketing, we process your personal identification information such as name, company name, address, telephone number, email address, industry, product and other preferences.
This data allows us to send you messages via e-mail. This way, we can inform you about our new products and services, special offers or other information you may find interesting and we can invite you to events and fairs.
The legal basis for this processing is your consent which you have given to us (art. 6, §1, (a) GDPR). If you have not given us consent, we will at the most send you one message to ask for your consent. That message will be sent on the basis of our legitimate interest to promote our products and services to contacts that have shown interest in our products and (art. 6, §1, (f) GDPR).
We always obtain this personal data directly from you.
We send commercial messages until you withdraw your consent (or object to the further receiving of such messages). You can unsubscribe at any time (for more information, see Rights).
We only share this personal data with third parties with whom we work together for direct marketing (IT and software providers and providers of marketing tools). We will never sell your personal data.
CUSTOMERS
When you are our customer, we process your personal data for one or more of the following purposes:
- Customer management
- Direct marketing
- Finance and corporate housekeeping
- Litigation management
Below, you can find for each purpose the personal data that we process, why we process it, how we obtain the data, how long we retain the data and with whom we share it.
1) Customer management
As part of our customer management, we may process your personal identification data (name, (company) billing address, (company) delivery address, telephone number and email address) as well as financial data (only if you are a B2C customer) and other information you may provide to us (for example, employment data if you are a B2B customer).
This data allows us to manage and deliver your orders, invoice ordered goods, provide you with product information and updates and answer your questions or solve any problems that you have reported (via e-mail, our website or social media). We may also contact you via e-mail for market research purposes.
The legal basis for this processing is the execution of an agreement to which you are a party or to answer your questions prior to entering into an agreement (art. 6, §1, (b) GDPR), if you are a B2C customer. If you are a B2B customer we have a legitimate interest to process your personal data to enter into and perform the contract (art. 6, §1, (f) GDPR).
We obtain this personal data directly from you, e.g. when you place an order on our web shop or via e-mail.
For our customer management purposes, we store your personal data for up to 10 years after the respective financial year of your last purchase, plus a verification period of 6 months.
We only share this personal data with affiliated partners (wholesalers, distributors/dealers) on a need to know basis and third parties with whom we work together as part of our customer management (payment service providers and IT and software providers). We will never sell your personal data.
2) Direct marketing
For direct marketing, we may process your personal identification information (such as name, company, (company) address, telephone number and email address) and (industry and other) preferences.
This data allows us to send you messages via e-mail or to contact you via telephone (in case your e-mail address is incorrect). This way, we can inform you about our new products and services, special offers or other information you may find interesting and we can invite you to events and fairs. When you have selected industry and other preferences on our web shop or a (paper) form, we will only send you the messages relating to such industry/industries or other preferences.
The legal basis for this processing is the legitimate interest to promote our products and services to our customers (art. 6, §1, (f) GDPR).
We always obtain this personal data directly from you.
We send commercial messages up to 15 years after the respective financial year of your last purchase or last contact in this respect, whichever is later, plus a verification period of 6 months. You can unsubscribe at any time (for more information, see Rights).
We only share this personal data with third parties with whom we work together for direct marketing (IT and software providers and providers of marketing tools). We will never sell your personal data.
3) Finance and corporate housekeeping
For our internal finance and corporate housekeeping purposes, we process your personal identification data (name, address, e-mail address, payment details) and employment data (if you are a B2B customer).
This data allows us to conduct internal audits and other control procedures, keep our accounting as well as our annual accounts, conduct Know Your Customer (KYC) checks and enter into corporate transactions.
The legal basis for this processing is a legal obligation to which we are subject (art. 6, §1, (c) GDPR). As regards internal audits and controls, we rely on our legitimate interest to ensure legal compliance within our company (art. 6, §1, (f) GDPR). As regards corporate transactions, we rely on our legitimate commercial interests (art. 6, §1, (f) GDPR).
We always obtain this personal data directly from you.
For our internal finance purposes, we store your personal data for up to 10 years after the respective financial year, plus a verification period of 6 months.
We only share this personal data with third parties with whom we work together for the above mentioned purposes (IT and software providers, external auditors, external accountants and other advisors) and other parties on a need to know basis (public authorities, financial institutions, third parties in corporate transactions).
4) Litigation management
For our litigation management, we process your personal identification data (name, address, e-mail address), employment data (if you are a B2B customer) and any other information relevant to the (potential) litigation (if you are a B2C customer).
This data allows us to defend our legitimate interests in all forms of dispute resolution and the administration of disputes (e.g. product liability, tax disputes and labour law disputes).
The legal basis for this processing is the legitimate interest to exercise our rights of defence (art. 6, §1, (f) GDPR).
We always obtain this personal data directly from you.
For our litigation management, we store your personal data for up to 5 years after we closed the dispute or – in case of legal proceedings – 5 years after the expiry of the period for appeal at last instance.
We only share this personal data with third parties with whom we work together for the above mentioned purposes (external legal advisors, debt collection agencies) and other third parties on a need to know basis (public authorities, judicial authorities, bailiffs.
WEBSITE
When you visit and/or use our website, we process your personal data for one or more of the following purposes:
- Direct marketing
- Optimisation of the website
- Advice, information and webinars
- Recruitment
1) Direct marketing
For direct marketing, we process your personal identification information (such as name, company name, (company) address, telephone number, email address, IP address, cookies) as well as industry, product and other preferences.
This data allows us to send you messages via e-mail and to display commercial messages online. This way, we can inform you about our new products and services, special offers or other information you may find interesting and we can invite you to events and fairs.
The legal basis for this processing is the legitimate interest to promote our products and services to our customers and other contacts that have shown interest in our products and services by contacting us via our website (art. 6, §1, (f) GDPR). If you have subscribed to our newsletter via the website, you will receive our commercial messages because you have given your consent (art. 6, §1, (a) GDPR). Commercial messages online will only be displayed if you have given your consent to the placement of advertising cookies via the website (for more information, see Cookie Statement).
We always obtain this personal data directly from you.
We send commercial messages up to 15 years after the respective financial year of your last purchase, plus a verification period of 6 months. You can unsubscribe at any time (for more information, see Rights). Also the permission for advertising cookies can be withdrawn at any time via your cookie preferences (for more information, see Cookie Statement).
We only share this personal data with third parties with whom we work together for direct marketing (IT and software providers and providers of marketing tools). See also our Cookie Statement in this respect. We will never sell your personal data.
2) Optimisation of the website
In order to optimise our website, we process your electronic identification data (IP address and cookies).
This data allows us to offer a well-functioning and user-friendly website and web shop.
The legal basis for placing technically essential and functional cookies is a legitimate interest to offer a well-functioning and user-friendly website and web shop (Art. 6, §1, (f) GDPR). Analytical cookies and social media cookies are only placed if you have given your consent for placing such cookies via the website (art. 6, §1, (a) GDPR) (for more information, see Cookie Statement).
We always obtain this personal data directly from you.
The expiration date varies per cookie and you can change your cookie preferences at any time (for more information, see Cookie Statement).
We only share this personal data with third parties with whom we work for our website and web shop (IT and software providers). See also our Cookie Statement in this respect. We will never sell your personal data.
3) Advice, information and webinars
In order to provide you with advice, information and free on-demand webinars that you have requested via our website, we process your personal identification data (name, e-mail address, telephone number, company name and website, country and login data), product interests and quantity and any possible additional information that you provide to us.
This data allows us to provide you with the advice, information and/or free on-demand webinar that you have requested via our website, e.g. by requesting a quote, requesting a data sheet or brochure, signing-up to a live webinar, sending us a message through our contact form or a request for information or reporting a problem.
The legal basis for this processing is the consent that you have given by submitting to us your personal data for the above mentioned purposes (art. 6, §1, (a) GDPR).
We always obtain this personal data directly from you.
For providing advice and information to you, we store your personal data for 15 years after the respective financial year of your request for advice / information, plus a verification period of 6 months.
We only share this personal data with third parties with whom we work together for data management purposes (IT and software providers).
4) Recruitment
For recruitment purposes, we process your personal identification data (name, e-mail address, and telephone number), education and training (academic curriculum, professional experience and competence and memberships, as may be included in your resume), employment data (current employment and recruitment), the way you found out about the vacancy as well as any other information that you provide to us, e.g. in your cover letter or resume.
This data allows us to process and consider your application and to maintain a database of potential job applicants.
The legal basis for this processing is the consent that you have given by submitting to us your personal data for the above mentioned purposes (art. 6, §1, (a) GDPR). We will only store your personal data in our database for future purposes if you have explicitly consented hereto (art. 6, §1, (a) GDPR).
We always obtain this personal data directly from you.
For our recruitment purposes, we keep your personal data for up to 5 years after your application, plus a verification period of 6 months.
We only share this personal data wit h third parties with whom we work together for data management purposes (IT and software providers).
3. SECURITY
We are committed to ensuring that your information is secure. We have therefore implemented appropriate technical and organizational measures to ensure the confidentiality of your personal data and to protect your data from accidental and unlawful destruction, loss, alteration, unauthorized disclosure and access.
We have made the necessary contractual arrangements with the third parties with whom we work together and will not transfer your personal data outside the European Economic Area without ensuring that your data is granted an equivalent level of protection there.
4. RIGHTS
You can always contact us to exercise the following rights:
- the right to request access or rectification of your personal data
- the right to request erasure of your personal data
- the right to request restriction of the processing of your personal data
- the right to object to the processing of your data
- a complaint if you believe that we are not acting in accordance with applicable data protection laws. You can also submit a complaint to the Belgian Data Protection Authority.
You can reach us via one of the following channels:
- via e-mail: dataprotection [a] septentrio.com
- by telephone: +32 16 30 08 00
We respect all rights relating to your personal data to which you are entitled under applicable law and will therefore always adhere to your request as required by law.
If you no longer wish to receive our electronic communications and wish to stop the processing of your data for that purpose, you can always use the unsubscribe link provided at the bottom of each communication.
For those processing activities for which the legal basis is a legitimate interest, you can ask us more information about the balancing test that we have carried out in that context (for more information, see Purposes).
For identification purposes, we may ask you for a copy of the front of your identity card.
5. UPDATES
This Privacy Statement may be amended from time to time, within the limits of the applicable data protection laws. Via our website you always have access to the most recent version.