PRIVACY POLICY
Version 2.0
Date: 06/08/2024

Identity and contact details of the controller
This privacy policy applies to all personal data processed by Tastefever BV, with registered office at 8790 Waregem, Plasstraat 30, with company number VAT BE0737.510.893, who is the controller of this website. The Controller attaches great importance to your privacy and therefore processes your personal data in accordance with European Regulation 2016/679 of 27 April 2016 concerning the protection of individuals with regard to the processing of personal data (hereinafter “GDPR”).”) as well as any future or additional legislation implementing it, as applicable. For further questions or comments regarding how we handle your personal data, you can always contact us, either by email to camille@tastefever.be or by post to the aforementioned postal address.
‍
What does “processing personal data” mean?
The processing of personal data (hereinafter “data”) includes any processing of data that can identify you as a natural person. You can read what data this concerns in this Privacy Policy. The term “processing” is very broad and covers, among other things, the collection, storage, use of your data, or sharing it with third parties.

What data do we process?
Below, we explain what data we can process about you. Depending on the specific situation, your preferences and how you contact us, we do not process all of the information below about you.
We process the data entered into our Craft Your Taste platform as processors. We are not responsible for this. If you want more information about the processing of your data when using our platform or if you want to exercise your rights with regard to these processing operations, you should contact the controller (the person for whom the platform was set up) for this purpose.

Customer details
As part of our main activities, including for the use of the Craft Your Taste platform, we process the following personal data from our customers:
- General identification data (name, first name, address, login details...);
- General contact details (email address, address, telephone number,...);
- Data related to your function in the platform;
- Contractual information (e.g. address, VAT number, agreement, quotes, etc. );
- Payment and billing details (account number, billing address,...);
- After-sales service;
- Testimonials, surveys, promotional content such as photos and videos on social media (e.g. reviews and experiences related to our services offered), social media posts via our accounts on, among others, but not limited to: LinkedIn, YouTube, X, Instagram and Facebook.

Suppliers — service providers
As part of our cooperation with our suppliers and service providers, we process the following personal data about them: - General identification data (name, first name, address,...);
- General contact details (email address, address, telephone number,...);
- Business-related data insofar as it is possible to identify a natural person based on that data;
- Contractual information (e.g. address, VAT number, agreement, quotes, etc. );
- Payment and billing information (e.g. invoices, etc. );
- Feedback, testimonials, quotes, promotional content (e.g. reviews and experiences related to our (collaboration), testimonials, quotes, event attendance, etc.)

Candidate staff
We may also process the following information about candidate employees. Of course, this will largely depend on what information you want to provide to us in function of your application. - General identification data (name, first name, address,...);
- General contact details (name, first name, email address, address, telephone number,...);
- Resume, letter of recommendation;
- Personal details;
- Work-related data;
- Personality data, tests, interviews;
- Photo or video footage provided by the candidate employee.
Website visitors
We may process the following data from visitors to our websites www.tastefever.com and www.craftyourtaste.com:
- IP address, browser type, location data, how the individual arrived at the website, interests and how the individual navigates through the web page (via strictly necessary, analytical and marketing cookies);
- Name, first name, email address, contact message (via the online contact form);
Marketing activities
Data that we process in the context of marketing activities:
- Sending a newsletter by email;
- Exchanges (e.g. business cards);
- Professional information (company's public contact details);
For what purposes do we process your data?
The personal data is processed exclusively within the framework of the company and in particular for the following purposes:
- In the context of selling our services,
- Managing the Craft Your Taste online platform;
- For marketing purposes, such as retargeting (we obtain data only via the website);
- Participate in trade fairs;
- Comply with administrative, legal and tax obligations;
- Communication with customers and prospects;
- Employee recruitment process.
‍
On what processing grounds do we process your data?
We process your data for the purposes described below and do not collect and process more or any types of data other than those necessary for these purposes. We process your data only insofar as it is based on one of the processing grounds listed in the GDPR, and as shown below.

Legal obligation
Certain data is processed by us to comply with legal or regulatory obligations that are incumbent on us. For example, in the context of tax and accounting obligations or in the field of data protection.

Necessary for the execution of the agreement
Certain data is processed by us because it is necessary to enter into, execute or terminate an agreement with you as the data subject. For example, for contacting, scheduling, responding to a request or requesting information in the context of entering into a contractual relationship, but also for the effective execution of the contractual assignment in the context of our main activity in order to provide or receive our services to you.

Legitimate interest
Certain data is processed by us on the basis of our legitimate interest, which in specific cases outweighs any possible harm to your rights. For example, sending a newsletter to our existing customers, improving the quality of our services; training employees and evaluating and maintaining data and statistics related to our activities, in the broadest sense; keeping and using evidence in the context of liability, proceedings or disputes and for the purpose of archiving activities; and ensuring safety, both online on this website and in our business buildings.

consent
Certain data is processed by us based on your consent. For example, for sending our newsletter to non-customers; using certain analytical or marketing cookies; placing photos that contain personal data on our website and social media channels. Applicants' data after the recruitment process will only be kept with permission.

Origin of the data
Most of the data that we process about you is also obtained directly from you. As part of our services, we may obtain data from you from external service providers or public sources.

Who do we share your information with?
We will not share your information with third parties unless it is strictly necessary in light of the above purposes, or if we are legally obliged to do so. Where necessary, we use external service providers (processors) to support our operational purposes such as managing our websites and IT systems. If necessary, these external service providers carry out certain data processing on our behalf. We will only share your information with these external service providers to the extent necessary for the purpose in question. The data may not be used by them for other purposes. In addition, these service providers are contractually bound to ensure the confidentiality of your data by means of a “processing agreement” that has been concluded with these parties. In concrete terms, this means that we share your data, insofar as relevant to your situation, with the following third parties for the following purposes, where these third parties act as processors on our behalf:
- Postal companies, transport and delivery companies if we need to send you something by post;
- Payment service providers if we receive payments from you, or vice versa;
- External representatives and consultants or any other parties involved in the context of our main or ancillary activities;
- The IT processors who assist us in operating our organization, with a view to secure and efficient digital data management within our organization;
- Government bodies, courts and regulated professionals such as accountants and lawyers, for the purpose of complying with our legal obligations and defending our interests, as required.

How long do we keep your data?
We do not keep your data longer than necessary for the purpose for which the data was collected or processed. Since the period for which the data can be kept depends on the purposes for which the data was collected, the storage period may vary in each situation. Sometimes, specific legislation will require us to keep the data for a certain period of time. Our retention periods are always based on legal requirements and weighing your rights and expectations with what is useful and necessary to fulfill the purposes. At the end of the storage period, your data will be deleted or anonymized.
 
Where do we keep your information and how is it protected?
We provide appropriate technical and organisational security measures to prevent the destruction, loss, falsification, alteration, unauthorised access or unlawful notification to third parties as well as any other unauthorised processing of this data. In addition, we also pay attention to ensuring that the processors we use also take appropriate security measures to limit the risks of incidents as much as possible. If your data is processed outside the European Economic Area (EEA) when using specific services or software tools, this will only be done to/to countries where the European Commission has confirmed that they ensure an adequate level of protection for your data, or measures will be taken to lawfully process your data to insure in these third countries.

What are your rights?
You have various rights with regard to the data that we process about you. If you wish to exercise any of the following rights, please contact us using the contact details included under the first title of this Privacy Policy.

Right to view and copy
You have the right to view your data and get a copy of it. This right also includes the possibility to request further information about the processing of your data, including the categories of data processed about you and for what purposes this happens.

Right to amend or rectify
You have the right to have your data amended if you believe that we have incorrect information.

Right to erase data (right to be forgotten)
You have the right to request that we erase your data without unreasonable delay. However, we will not always be able to comply with such a request, including when we still need the information as part of an ongoing agreement, or when keeping some of your data for a certain period of time is required by law.

Right to restrict processing
You have the right to restrict the processing of your data. In this way, processing is temporarily stopped until, for example, there is certainty about its accuracy.

Right to withdraw your consent
If the processing is based on your consent, you have the right to withdraw this consent at any time by contacting us. For marketing messages that you receive from us via email based on your consent, you can easily withdraw this consent by clicking the unsubscribe link at the bottom of such a message.

Right to object
You have the right to object to the processing of your data that is based on the legitimate interest. This should be done for reasons specific to your situation. You can also object to the use of your data for direct marketing purposes. An opt-out will always be provided for marketing messages by e-mail.

Right to portability
You have the right to obtain the data that you have provided to us yourself with your consent or in execution of an agreement in electronic form. That way, they can easily be transferred to another organization. You also have the right to request that we transfer your data directly to another organization, if this is technically possible.

Right to file a complaint with your supervisory authority
If you believe that we are processing your data in an incorrect way, you always have the right to file a complaint with your data protection supervisory authority.

Belgian Data Protection Authority (GBA)
Drukpersstraat 35
1000 Brussels
contact@apd-gba.be
‍
How to exercise your rights
‍You can exercise your rights by contacting us, either by email to camille@tastefever.com or by post to Plasstraat 30, 8790 Waregem, with a copy of the front of your identity card or another document that identifies you. The copy will only be used to identify you in accordance with the GDPR.

Changes
‍We reserve the right to change this Privacy Policy. The latest version is available on our websites at all times. The date on which this Privacy Policy was last amended can be found at the top. In the event of a substantial change in the Privacy Policy, we will inform those involved on whom this may have an impact directly, if possible.