1. WHO ARE WE?
We are Stanley and Stella SA (“Stanley/Stella”). We have our registered office at Delta Building, Rue Jules Cockx 8-10, floors 3-4, 1160, Auderghem, Belgium and we are registered with the Belgian companies register under company number BE 0810.580.894.
Pursuant to applicable data protection and privacy legislations, we qualify as the controller with respect to the processing of your personal data.
2. WE VALUE YOUR PRIVACY
We value your right to privacy and strive to protect your personal data in accordance with the applicable data protection legislation and more specifically with the General Data Protection Regulation 2016/679 (“GDPR”) and its Belgian implementing legislation.
Therefore, we encourage you to read it very carefully.
3. WHOSE PERSONAL DATA DO WE COLLECT?
In the context of our services, we may collect personal data relating to visitors of our website or current and potential clients in the manners described below.
4. HOW DO WE COLLECT YOUR PERSONAL DATA?
We may collect information about you in the following ways:
directly from you when you visit our website which may include information you provide to us by means of contact forms on our website or as part of creating your online account on our website;
directly from you when you contact us by e-mail or otherwise communicate your personal data to us;
indirectly, through our commercial partners, in case they have obtained your personal data from you and have to provide us with this information in order to perform the services that you have requested or to execute an agreement between us and them (e.g. when you are an employee of one of our distributors, customers or suppliers,).
5. WHAT PERSONAL DATA DO WE COLLECT AND FOR WHAT PURPOSES DO WE USE THEM?
We collect the following information about you, which we use for the following purposes:
Purposes and Legal Ground:
This processing is based on the necessity to execute our contract with you when you decide to create an online account on our website.
In addition, all of the personal data listed above can – where necessary – also be used for the handling of inquiries and complaints, and for the management of our legal disputes. This is based on our legitimate interests to defend our legal rights both inside and outside of court proceedings.
You have the possibility to refuse that your personal data are used for electronic direct marketing purposes at the moment we collect these data from you or any time after, by clicking the 'unsubscribe’ link at the bottom of our marketing e-mails or by sending us an e-mail or a letter at the contact details indicated below.
6. WITH WHOM DO WE SHARE YOUR PERSONAL DATA?
In the context of the purposes as listed above, we can share your personal data with third parties. The third parties to which we can communicate some of your personal data are the following:
- Any appropriate law enforcement agency, regulator, government agency, court, or other third party, when such disclosure is necessary (i) under applicable laws, (ii) to exercise, establish, or defend our rights, or (iii) to protect your vital interests or those of any other person;
- Our auditors, advisors, legal representatives and similar agents in connection with consulting services they provide to us for legitimate business purposes and pursuant to a contractual prohibition on the use of personal data for other purposes;
- Any prospective purchaser (and its agents and advisors), in connection with a proposed purchase, merger or acquisition of a portion of our business;
- Any other person when you have given your prior consent to the disclosure.
We will ensure that, where relevant, contractual safeguards are implemented to ensure the protection of your personal data when disclosing them to a third party. For example, we will enter into data processing agreements with relevant parties providing for restrictions on the use of your personal data and obligations with respect to the protection and security of your personal data and will only disclose your personal data to recipients we trust.
The parties to whom we may disclose your personal data may be located in countries outside the European Economic Area (EEA), which countries may offer a lower level of data protection than in the country in which we are established. For example, such could be the case for some of our IT service providers or when your order requires that we resort to transport & logistics providers outside the EEA.
In such case, measures are taken to ensure adequate protection of your personal data in accordance with the applicable data protection legislation. Generally, we will enter into Standard Contractual Clauses (as approved by the European Commission) with the recipient of your personal data. You may contact us by sending an email or a letter to the contact details indicated below, if you wish to obtain a copy of the Standard Contractual Clauses entered into or insight into other adequate measures taken.
7. HOW LONG DO WE STORE YOUR PERSONAL DATA?
Your personal data will not be stored for longer than what is necessary in relation to the purposes for which we process them (we refer to the purposes as listed above in clause 5). Only when we are legally obliged to, or when this is necessary for defending our interests in the context of judicial proceedings (e.g. in case of a dispute), we will store the personal data for longer periods.
More specifically, the following storage periods apply:
Your identification and contact information (name, address, telephone number, gender, language, email address or other contact details).
Personal data are generally erased after 4 years of inactivity, unless the personal data are included in accounting, financial or other official documents, in which case they will be retained for as long as such documents legally need to be kept.When these contact details concern retail clients who contact us through the website, and which we directly refer to our retail partners, such data are erased after 2 years.In addition hereto, as soon as we note that your contact details are no longer accurate or active, or whenever you decide to use your unsubscribe/opt-out right, we will no longer keep your personal data for the relevant purposes.
Any personal data collected by cookies used on our website.
As indicated per cookie in our cookie consent banner and in our Cookies Policy.
8. HOW DO WE PROTECT YOUR PERSONAL DATA?
We use appropriate technical and organizational measures to protect the personal data we collect and process about you. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal data. Specific measures we use may include data anonymisation and encryption where appropriate (notably, when transferring your personal data or when the objectives of our processing can be reached with anonymised personal data).
Further, we seek to ensure that we keep your personal data accurate and up to date. In view thereof, we kindly request you to inform us of any changes to your personal data (such as a change in your contact details).
9. WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM?
You have the following data protection rights, subject to the conditions and restrictions set out in Articles 12-22 of the GDPR:
Right to information and right to access your personal data
You may at any time request more information on our processing activities and your personal data that we are keeping, as well as a copy hereof.
Right to rectification of inaccurate or incomplete personal data
You have the right to require us to, without undue delay, rectify or complete any of your personal data that is inaccurate or incomplete.
Right to deletion of your personal data (‘right to be forgotten’)
You may request us to delete your personal data or part of your personal data in the following situations:
Note that we may refuse to delete your personal data: (i) if it is justified by the exercise of the right of freedom of expression and information; (ii) for compliance with a legal obligation; or (iii) for the establishment, exercise or defence of legal claims.
Right to restriction of processing
You may request us to permanently or temporarily restrict the processing of your personal data in the following situations:
Right to object to the processing of your personal data (free of charge)
When we process your personal based on our ‘legitimate interests’, you may object to the processing of your personal data, provided that you invoke ground relating to your particular situation. We will then no longer process your personal data, unless we have compelling legitimate grounds to do so, or if such processing is necessary for the establishment, exercise or defence of legal claims.When we process your personal data based on our legitimate interests for direct marketing purposes or based on Article 1 of the Royal Decree of 4 April 2003, you may at any time object to this processing without any justification. You also have the right not to be subject to profiling for direct marketing purposes.
Right to data portability
In some cases, you have the right to receive all your personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller. This right applies:
Finally, you have the right to lodge a complaint with the Belgian Data Protection Authority relating to the processing of your personal data by us. You can find the contact details of this authority on www.dataprotectionauthority.be.
Please find a list of other EU supervisory authorities here: https://edpb.europa.eu/about-edpb/board/members_en.
In principle you may exercise these rights free of charge. Only where requests are manifestly unfounded or excessive, we may charge a reasonable fee. Further information and advice about your rights can also be obtained from the data protection authority in your country (if you are not located in Belgium). We might (if deemed necessary) request a proof of identity in advance in order to double-check your request.