PRIVACY STATEMENT
Version Privacy Statement 22/03/2019
We understand that your trust in us, is D’HAUDRECY ART GALLERY’s most important asset (hereinafter referred to as "d’Haudrecy", "we" or "us"). As such, your privacy is essential for us.
This privacy statement (hereinafter referred to as "Privacy Statement") is applicable, inter alia, to (i) our website www(dot)dhaudrecy-art-gallery(dot)com (hereinafter referred to as the "Website"), (ii) the participation in exhibitions, (iii) visiting the art gallery and (iv) all (commercial) relations between d’Haudrecy and its customers, prospects and business partners.
This Privacy Statement includes information about the personal data collected by d’Haudrecy, as well as the manner in which d’Haudrecy uses and processes this personal data.
d’Haudrecy wishes to emphasize that it always attempts to act in accordance with (i) the Belgian Privacy Law of 30 July 2018 concerning the protection of individuals with regards to the processing of personal data, (ii) the EU Regulation of 2016 concerning the protection of individuals with regards to the processing of personal data, regarding the free movement of such data and repealing Directive 95/46/EC and/or (iii) all (future) Belgian laws regarding the implementation of this Regulation.
Visiting the Website implies your explicit approval (through disclosure of your personal information or opt-in) of the Privacy Statement and consequently how we collect, use and process your personal data.
Types of personal data
d’Haudrecy can collect and process the following personal data:
- Name
- Surname
- Company name
- Company address
- E-mail address
- Address
- Sex
- Invoicing address
- Telephone number (landline and/or mobile phone)
Methods of personal data collection:
These personal data are collected in the context of:
- Visiting the Website
- Collaboration with d’Haudrecy
- Incoming and outgoing correspondence with d’Haudrecy
- Visiting the art gallery
- Fill out the contact form available on the Website
- Participating in exhibitions
- Exchanging business cards
All personal data, collected by d’Haudrecy, are thus expressly and voluntarily provided by you.
Providing certain personal data is (sometimes) a requirement to be able to enjoy certain services (e.g. to gain access to certain parts of the Website, to subscribe to newsletters, to participate in certain activities and events). In this respect, it shall be indicated which data must be provided mandatory and which data is optional.
Use of personal data
d’Haudrecy can use your personal data for the following purposes:
- Performance of the agreement with d’Haudrecy (incl. follow-up thereof)
- Responding to questions (whether or not received through the contact form)
- Sending invites
- Follow-up after meeting
- Providing support/assistance
- Issuing invoices and the collection thereof
- Optimising the quality, management and content of the Website
Processing takes place on the following legal grounds, as the case may be:
- You have given consent to the processing of your personal data for one or more specific purposes
- Processing is necessary for the performance of the agreement with d’Haudrecy or in order to take steps at your request prior to entering into an agreement
- Processing is necessary for compliance with a legal obligation to which d’Haudrecy is subject
- Processing is necessary in order to protect your vital interests or of another natural person
- Processing is necessary for the performance of a task carried out in the public interest
- Processing is necessary for the purposes of the legitimate interests pursued by d’Haudrecy or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, which require protection of personal data (in particular when you are a child).
Disclosure of personal data to third parties
d’Haudrecy shall not disclose your personal data to third parties, unless it is necessary in the context of performing the agreement and optimisation thereof. In this respect, your personal data may be disclosed to an external IT-consultant.
If it is necessary that d’Haudrecy discloses your personal data to third parties, the third party concerned is required to use your personal data in accordance with the provisions of this Privacy Statement.
Notwithstanding the foregoing, it is however possible that d’Haudrecy discloses your personal data:
- To the competent authorities (i) if d’Haudrecy is obliged to do so under the law or under legal or future legal proceedings and (ii) to safeguard and defend our rights
- If d’Haudrecy, or the majority of its assets, are taken over by a third party, in which case your personal data – which D’HAUDRECY has collected – shall be one of the transferred assets
In all other cases, d’Haudrecy will not sell, hire out or pass on your personal data to third parties, except when it (i) has obtained your permission to this end and (ii) has completed a data processing agreement with the third party in question, which contains the necessary guarantees regarding confidentiality and privacy compliance of your personal data.
Cross-border processing of personal data
Any transfer of personal data outside EEA to a recipient whose domicile or registered office is in a country which does not fall under the adequacy decision enacted by the European Commission, shall be subject of one or more of the listed EU-approved safeguards:
- Closing a data transfer agreement with such recipient, which shall contain the standard contractual clauses, as referred to in the 'European Commission decision of 5 February 2010 (Decision 2010/87/EC)'; and/or
- Binding corporate rules; and/ or
- Certification mechanisms (such as but not limited to the EU-US Privacy Shield).
Storage of personal data
Unless a longer storage period is required or justified (i) by law or (ii) through compliance with another legal obligation, d’Haudrecy shall only store your personal data for the period necessary to achieve and fulfil the purpose in question, as specified in the Privacy Statement under 'Use of personal data'.
Your privacy rights
In light of the processing of your personal data, you enjoy the following privacy rights:
- Right of access to your personal data
- Right to rectification, completion or update of your personal data
- Right to delete your personal data ('right to be forgotten'). (d’Haudrecy wishes to point out that in this context certain services will no longer be accessible and/or can no longer be provided if you delete resp. request deletion of certain required personal data)
- Right to limit the processing of your personal data
- Right to transferability of your personal data
- Right to object to/oppose the processing of your personal data
If you wish to invoke your privacy rights please contact dhaudrecy@skynet.be or complete the form for exercising your privacy rights and deliver it to d’Haudrecy by email or post.
If you no longer wish to receive newsletters or information about the services of d’Haudrecy, you can unsubscribe at any time by sending an e-mail to dhaudrecy@skynet.be.
Security of personal data
d’Haudrecy undertakes to take reasonable, physical, technological and organisational precautions in order to avoid (i) unauthorised access to your personal information, and (ii) loss, abuse or alteration of your personal data.
d’Haudrecy shall store all personal data, which it has collected in a secured cupboard on an encrypted external hard drive, encrypted flash drive and offline.
Notwithstanding d’Haudrecy’ security policy, the checks it carries out and the actions it proposes in this context, an infallible level of security cannot be guaranteed. Since no method of transmission or forwarding over the internet, or any method of electronic storage is 100% secure, d’Haudrecy is, in this context, not in a position to guarantee absolute security.
Update Privacy Statement
d’Haudrecy is entitled to update this Privacy Statement by posting a new version on the Website whereby d’Haudrecy will indicate the revision date at the top of the first page of this Privacy Statement. As such, it is strongly recommended to regularly consult the Website and the page displaying the Privacy Statement, to make sure that you are aware of any changes.
Contact d’Haudrecy
If you have questions and/or remarks about this Privacy Statement or the manner in which d’Haudrecy collects, uses and/or processes your personal data, please contact us:
- Via e-mail: dhaudrecy@skynet.be
or
- Via mail: 8300 Knokke-Zoute (België), Zeedijk – Het Zoute 779
In case you are not satisfied with the way d’Haudrecy handled your questions and/or remarks or have any complaints about the way d’Haudrecy collects, uses and/or processes your personal data, note that you have the right to lodge a complaint with the Data Protection Authority.