Privacy Policy

Updated on September 21, 2023

1. Parties and Purpose

www.rhumlicious.be (hereinafter referred to as Rhumlicious or the Data Controller)

• Address: Langstraat 65, 2223 Heist-op-den-Berg

• VAT/Business Number: BE0804.537.695

• Email: info@rhumlicious.be

• Phone: (+32)476 47 52 04

• Regulated Profession: Rhumlicious affiliated with www.favv.be (Federal Agency for the Safety of the Food Chain)

• Competent Supervisory Authority: www.favv.be (Federal Agency for the Safety of the Food Chain)

• Code of Conduct: Link

Rhumlicious establishes this Privacy Policy with the aim of transparently informing Users about the website hosted at the following address: www.rhumlicious.be (hereinafter the Site) and how personal data is collected and processed by Rhumlicious. The term "User" refers to anyone, whether a natural person or a legal entity, who visits the Site or communicates with the Site in any way.

In its capacity as the data controller, Rhumlicious determines all technical, legal, and organizational means and purposes for processing Users' personal data. Rhumlicious commits to taking all necessary measures to ensure that the processing of personal data complies with the Law of July 30, 2018, on the protection of natural persons with regard to the processing of personal data (hereinafter the Law) and Regulation (EU) 2016/679 of the European Parliament and the Council of April 27, 2016, on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (i.e., the General Data Protection Regulation (GDPR); hereinafter the Regulation).

Rhumlicious is free to choose a natural or legal person to process Users' personal data at its request and on its behalf (hereinafter the Processor or Subcontractor). In such cases, Rhumlicious undertakes to select a Processor who provides sufficient guarantees regarding the technical and organizational measures for the processing of personal data, in accordance with the Law and the Regulation.

2. Processing of Personal Data

The use of the Site by Users may result in the collection of personal data. The processing of this data by Rhumlicious, in its capacity as Data Controller or by service providers acting on behalf of and for the account of Rhumlicious, complies with the Law and the Regulation.

Personal data is processed by Rhumlicious, in accordance with the purposes listed below, through the following methods:

• An automated procedure

• The registration form for inquiries

• The use of cookies

• Sharing of free content

3. Purpose of Processing Personal Data

In accordance with Article 13 of the Regulation, the purposes of processing personal data are communicated to the User. These purposes are as follows:

• Ensuring the provision of offered and agreed-upon services on www.rhumlicious.be

• Legal obligation to retain data

4. Personal Data that may be Processed

The User agrees that, during the visit and use of the Site, Rhumlicious collects and processes the following personal data:

• Email address

• First and last name

• Phone number

• Complete address

• Usage data Rhumlicious collects and processes this personal data in accordance with the terms and principles described in this Privacy Policy.

5. Consent

By accessing and using the Site, the User declares that they have read and given their free, specific, informed, and unambiguous consent for the processing of their personal data. This agreement pertains to the content of this Privacy Policy.

Consent is given through the positive and active action of checking the privacy policy box via a hypertext link. This consent is an essential condition for performing certain actions on the Site or to enable the User to enter into a contractual relationship with Rhumlicious. Any agreement between Rhumlicious and a User related to the services and goods offered on the Site is subject to the User's acceptance of the Privacy Policy.

The User agrees that the Data Controller, in accordance with the conditions and principles set out in this Privacy Policy, collects and processes their personal data provided on the Site or in connection with the services offered by Rhumlicious, for the purposes mentioned above. The User has the right to withdraw this consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on the prior consent.

6. Retention Period of User's Personal Data

In accordance with Article 13(2) of the Regulation, the Data Controller retains personal data only for as long as reasonably necessary to achieve the purposes for which they are processed. In all cases, this duration is not longer than 5 years.

7. Recipients of Data and Disclosure to Third Parties

Personal data may be disclosed to employees, associates, subcontractors, processors, or suppliers of Rhumlicious, provided that adequate guarantees are offered for the security of the data and they collaborate with Rhumlicious in marketing products or providing services. They act under the direct authority of Rhumlicious and are responsible, in particular, for collecting, processing, or outsourcing this data. In all cases, data recipients and those to whom the data is disclosed adhere to the content of this Privacy Policy. Rhumlicious ensures that they process this data only for the intended purposes and in a discreet and secure manner. In the event that data is provided to third parties for direct marketing or prospecting purposes, the User will be informed in advance so they can give prior and explicit consent to the use of their personal data for such purposes.

8. User Rights

a. Right of Access

• Users can exercise their rights at any time by sending an email to the following address: info@rhumlicious.be, or by sending a letter by mail, accompanied by a copy of their identity card, to the following address: Langstraat 65, 2223 Heist-op-den-Berg.

• In accordance with Article 15 of the Regulation, Rhumlicious guarantees the User's right to access their personal data. The User has the right to access this personal data and the following information:

  • Categories of personal data involved.

  • Recipients or categories of recipients to whom the personal data have been or will be disclosed, especially if recipients are located in third countries or international organizations, along with the appropriate safeguards.

  • If possible, the proposed storage period for personal data, or if not possible, the criteria for determining this period.

  • The existence of automated decision-making, including profiling, as referred to in Article 22, paragraphs 1 and 4 of the Regulation, and, at least in such cases, relevant information about the underlying logic, as well as the significance and expected consequences of such processing for the data subject.

• The Data Controller may request a reasonable fee based on administrative costs for additional copies requested by the User.

• When the User submits this request electronically (e.g., via the email address), the data will be provided in electronic form and for general use unless the User requests otherwise. A copy of the data will be provided to the User no later than one month after receiving the request.

b. Right to Rectification

• Rhumlicious guarantees the right to rectify and delete personal data to the User. In accordance with Article 16 of the Regulation, incorrect, inaccurate, or irrelevant data can be corrected or deleted at any time. The User should first make the necessary changes from their user account, unless they cannot be made independently, in which case the request can be directed to Rhumlicious.

• According to Article 19 of the Regulation, the data controller informs each recipient to whom the personal data have been disclosed of any rectification of personal data unless such rectification proves impossible or involves disproportionate effort. The data controller provides the data subject with information about these recipients upon request.

c. Right to Erasure

• The User has the right to obtain the erasure of their personal data as soon as possible in the cases mentioned in Article 17 of the Regulation.

• When the Data Controller has made the personal data public and is obliged to erase it under the preceding paragraph, the Data Controller, taking into account available technology and implementation costs, takes reasonable measures, including technical measures, to inform other data controllers processing such personal data, of the data subject's request to erase any links to, copies or reproductions of such personal data.

• The preceding two paragraphs do not apply to the extent that such processing is necessary for:

  • The exercise of the right to freedom of expression and information.

  • Compliance with a legal obligation to process under the law of the Union or of the Member State to which the Data Controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller.

  • The establishment, exercise, or defense of legal claims.

• In accordance with Article 19 of the Regulation, the data controller for processing informs each recipient to whom the personal data have been disclosed, of any erasure of personal data or any restriction on processing, unless such disclosure proves impossible or involves a disproportionate effort. The data controller provides the data subject with information about these recipients upon request.

d. Right to Restrict Processing

• The User has the right to restrict the processing of their personal data in the cases mentioned in Article 18 of the Regulation.

• In accordance with Article 19 of the Regulation, the data controller informs each recipient to whom the personal data have been disclosed, of any restriction on the processing carried out, unless such disclosure proves impossible or involves disproportionate effort. The data controller provides the data subject with information about these recipients upon request.

e. Right to Data Portability

• In accordance with Article 20 of the Regulation, Users have the right to receive their personal data from Rhumlicious in a structured, commonly used, and machine-readable format. Users have the right to transmit this data to another data controller without hindrance from Rhumlicious, in the cases provided for in the Regulation.

• When the User exercises their right to data portability under the preceding paragraph, they have the right to have personal data transmitted directly from one data controller to another, where technically feasible.

• The exercise of the right to data portability does not affect the right to erasure. This right does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller.

• The right to data portability does not affect the rights and freedoms of others.

f. Right to Object and Automated Individual Decision-Making

• The User has the right to object at any time to the processing of their personal data due to their specific situation, including the automated processing of data by Rhumlicious. In accordance with Article 21 of the Regulation, Rhumlicious will no longer process personal data unless there are compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the User, or for the establishment, exercise, or defense of legal claims.

• When the data subject objects to processing for direct marketing purposes, personal data shall no longer be processed for such purposes.

g. Right to Lodge a Complaint

• The User has the right to lodge a complaint regarding the processing of their personal data by Rhumlicious with the Data Protection Authority responsible for the Belgian territory. More information can be found on the website: https://www.gegevensbeschermingsautoriteit.be/.

• Complaints can be filed at the following addresses:

  • Data Protection Authority

  • Drukpersstraat 35, 1000 Brussel

  • Tel. + 32 2 274 48 00

  • Fax.+ 32 2 274 48 35

  • E-mail: contact@apd-gba.be

• The User may also file a motion for cessation with the President of the Court of First Instance of their place of residence.

9. Cookies

a. General Principles

• A Cookie is a file temporarily or permanently placed on the User's device when viewing the Site for a subsequent connection. Cookies allow the server to recognize the User's device.

• Cookies may also be installed by third parties with whom Rhumlicious collaborates.

• Some of the cookies used by Rhumlicious are necessary for the proper functioning of the Site, while others are needed to improve the User's experience.

• The User can adjust or disable cookies.

• By using the Website, the User expressly agrees to the management of cookies as described in this article.

---