Updated on 12-03-2020
1. Parties and Subject
TEONIA SA (hereinafter "Celestetic" or "the Controller")
Belgicastraat 9 - 1930 Zaventem
Mail : [email protected]
Telephone: +32 (0)2 588 76 58
Celestetic has drawn up this Privacy Policy in order to transparently inform Users of the website hosted at the following address: www.celestetic.com, hereinafter referred to as "the Site", of the manner in which personal data is collected and processed by celestetic.
The term "User" refers to any natural or legal person who visits or interacts in any way with the Site.
As such, celestetic determines all the technical, legal and organizational means and purposes of the processing of Users' personal data. To this end, Celestetic undertakes to take all necessary measures to ensure the processing of personal data in accordance with the law of July 30, 2018, on the protection of individuals with regard to the processing of personal data and the free movement of such data (hereinafter the "Regulation").
Celestetic is free to choose any individual or legal entity that processes users' personal data at its request and on its behalf (hereinafter the "Processor"). Where applicable, Celestetic undertakes to select a Subcontractor offering sufficient guarantees as to the technical and organizational security measures for the processing of personal data, with regard to the Law and the Regulation.
- **1. Processing of personal data
The use of the Site by Users may result in the communication of personal data. The processing of such data by Celestetic, in its capacity as Data Controller, or by service providers acting in the name and on behalf of Celestetic, will comply with the Law and the Regulation.
Personal data will be processed by Celestetic, in accordance with the purposes set out below, via :
-
Use of cookies
-
Newsletter registration
-
Contact via the contact form
-
Any request for information, any e-mail sent to our customer service department
-
Any participation in a competition, voting for a product or opinions posted
-
During any visit to the Site, your Internet location (I.P. address), the browser used, the country and telephone prefix of your computer, the pages of the site you consulted during your visit, the advertisements you clicked on and any searches you carried out.
-
We may collect this information even if you do not have a Celestetic user account.
**3. Purpose of personal data processing
In accordance with Article 13 of the Regulation, the purposes for which personal data is processed are communicated to the User and are as follows:
- Processing orders and deliveries
- Sending emails and newsletters about our services and products
- Constantly improving the Site and its operation, as well as enhancing your browsing experience.
- To improve our advertising
**4. Personal data likely to be processed
The User consents, when visiting and using the Site, that Celestetic collects and processes, according to the terms and principles described in this Privacy Policy, the following personal data:
Information provided in the various contact forms: surname, first name, VAT number, e-mail address, telephone number.
Information linked to your I.P. address.
**5. Consent
By accessing and using the Site, the User declares that he/she is aware of and gives his/her free, specific, informed and unequivocal consent to the processing of his/her personal data. This agreement covers the content of the present Privacy Policy.
Consent is given by the positive act by which the User has ticked the box proposing the Privacy Policy as a hypertext link. This consent is an essential condition to perform certain operations on the Site or to allow the User to enter into a contractual relationship with Celestetic. Any contract between Celestetic and a User relating to the services and goods offered on the Site is subject to the User's acceptance of the Privacy Policy.
The User consents to the processing and collection by the Controller, in accordance with the terms and principles set out in this Privacy Policy, of any personal data provided by the User on the Site or in connection with the services offered by Celestetic, for the purposes set out above.
The User has the right to withdraw his/her consent at any time. Withdrawal of consent does not compromise the lawfulness of processing based on consent previously given.
6. Retention period for Users' personal data.
In accordance with article 13 §2 of the Regulation and the Law, the Data Controller only keeps personal data for as long as is reasonably necessary to achieve the purposes for which it is processed.
This period is, in all cases, less than : 36 months.
7. Recipients of data and disclosure to third parties.
Personal data may be transmitted to Celestetic's employees, collaborators, subcontractors or suppliers who offer adequate data security guarantees, and who collaborate with Celestetic in the marketing of products or the provision of services. They act under the direct authority of Celestetic, and are in particular responsible for collecting, processing or subcontracting such data.
In all cases, the recipients of data and those to whom such data has been disclosed shall comply with the contents of this Privacy Policy. Celestetic assures that they will process such data only for the purposes intended, in a discreet and secure manner.
In the event that data is disclosed to third parties for direct marketing or prospecting purposes, the User will be informed in advance so that he/she may express his/her consent to the use of such personal data.
**9. Users' rights
At any time, the User may exercise his/her rights by sending a message by e-mail to the following address: [email protected], or a letter by post addressed, enclosing a copy of his/her identity card to the following address: Avenue Louise 503, 1050 Brussels.
*a. Right of access
In accordance with Article 15 of the Regulation, Celestetic guarantees the User the right of access to his/her personal data. The User has the right to obtain access to said personal data as well as the following information:
- the purposes of processing
- the categories of personal data concerned;
- the recipients or categories of recipients to whom the personal data has been or will be communicated, in particular recipients established in third countries or international organizations;
- where possible, the length of time for which the personal data will be kept, or, where this is not possible, the criteria used to determine this length of time
- the existence of automated decision-making, including profiling, as referred to in Article 22(1) and (4) of the Regulation, and, at least in such cases, useful information concerning the underlying logic, as well as the significance and anticipated consequences of such processing for the data subject
The Data Controller may require payment of a reasonable fee based on administrative costs for any additional copies requested by the User.
Where the User submits such a request electronically (via the e-mail address, for example), the information will be provided in a commonly used electronic form, unless the User requests otherwise.
The User will be sent a copy of his or her data no later than one month after receipt of the request.
*b. Right of rectification
Celestetic guarantees the User the right to rectify and delete personal data.
In accordance with Article 16 of the Regulation, incorrect, inaccurate or irrelevant data may be corrected or deleted at any time. The User shall first make the necessary changes himself/herself from his/her user/other account, unless they cannot be made autonomously, in which case the request may be made to Celestetic.
In accordance with Article 19 of the Regulation, the Data Controller shall notify each recipient to whom personal data has been communicated of any rectification of personal data, unless such communication proves impossible or requires disproportionate effort. The Data Controller shall provide the data subject with information about such recipients if the data subject so requests.
*c. Right to erasure
The User has the right to obtain the deletion of his/her personal data as soon as possible in the cases listed in Article 17 of the Regulation.
Where the Data Controller has made the personal data public and is required to erase it pursuant to the preceding paragraph, the Data Controller shall, taking into account available technology and implementation costs, take reasonable steps, including technical steps, to inform other Data Controllers processing such personal data that the Data Subject has requested the erasure by such Data Controllers of any link to such personal data, or any copy or reproduction thereof.
The two preceding paragraphs do not apply insofar as such processing is necessary:
- to exercise the right to freedom of expression and information;
- to comply with a legal obligation which requires processing and which is laid down by Union law or by the law of the Member State to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
- to establish, exercise or defend legal claims.
In accordance with Article 19 of the Regulation, the Data Controller shall notify each recipient to whom personal data have been communicated of any erasure of personal data or any restriction of the processing carried out, unless such communication proves impossible or would require disproportionate efforts. The data controller shall provide the data subject with information on these recipients upon request.
d. Right to limit processing.
The User has the right to obtain the limitation of the processing of his/her personal data in the cases listed in Article 19 of the Regulation.
In accordance with Article 19 of the Regulation, the Data Controller shall notify each recipient to whom personal data have been communicated of any limitation of the processing carried out, unless such communication proves impossible or requires disproportionate efforts. The Data Controller shall provide the data subject with information about such recipients if the data subject so requests.
e. Right to data portability.
In accordance with Article 20 of the Regulation, Users have the right to receive from Celestetic personal data concerning them in a structured, commonly used and machine-readable format. Users have the right to transmit this data to another data controller without Celestetic being able to prevent this in the cases provided for by the Regulation.
Where Users exercise their right to data portability pursuant to the preceding paragraph, they have the right to have their personal data transmitted directly from one data controller to another, where technically possible.
The exercise of the right to data portability is without prejudice to the right to erasure. This right does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
The right to data portability is without prejudice to the rights and freedoms of third parties.
f. Right of opposition and automated individual decision-making.
The User has the right at any time to object to the processing of his/her personal data due to his/her particular situation, including the automation of data carried out by Celestetic. In accordance with Article 21 of the Regulation, Celestetic will no longer process personal data unless there are compelling legitimate grounds for the processing which override the interests and rights and freedoms of the User, or for the establishment, exercise or defence of legal claims.
Where personal data is processed for canvassing purposes, the User has the right to object at any time to the processing of personal data concerning him or her for such canvassing purposes, including profiling insofar as it is linked to such canvassing.
If the person concerned objects to the processing for canvassing purposes, the personal data will no longer be processed for such purposes.
*g. Right of complaint
The User has the right to lodge a complaint concerning the processing of his/her personal data by Celestetic with the Data Protection Authority, competent for the Belgian territory. Further information can be found on the website: https://www.autoriteprotectiondonnees.be.
Complaints can be submitted to the following addresses:
Data Protection Authority
Rue de la Presse 35, 1000 Brussels
Phone + 32 2 274 48 00
Fax: + 32 2 274 48 35
E-mail: [email protected]
The User may also lodge a complaint with the court of first instance in his place of residence.
10. Limitation of liability of the data controller.
The website may contain links to other websites owned by third parties unrelated to Celestetic. Celestetic is not responsible for the content of these sites or their compliance with the Law and Regulations.
The holder of parental authority must give his express consent for a minor under 16 years of age to disclose information or personal data on the website. Celestetic strongly advises persons exercising parental authority over minors to promote responsible and secure use of the Internet. The Data Controller cannot be held liable for collecting and processing personal data and information from minors under the age of 16 whose consent is not effectively covered by that of their legal parents, or for incorrect data - in particular regarding age - entered by minors. Under no circumstances will personal data be processed by the Data Controller if the User specifies that he/she is under 16 years of age.
Celestetic is not responsible for the loss, corruption or theft of personal data caused in particular by the presence of viruses or following computer attacks.
**13. Applicable law and place of jurisdiction
This Privacy Policy is governed exclusively by Belgian law. Any dispute shall be brought before the courts of the judicial district of Celestetic's registered office.
**14. Contact us
For any questions or complaints relating to this Privacy Policy, the User may contact the Data Controller at the following address: [email protected].