Privacy policy

Responsibility for data processing

1.1 The data controller is Graftys SA, whose registered office is at Rue Saint-Denis 282 1190 Forest. In this capacity, Graftys SA determines the purposes and the technical and legal means of processing personal data and undertakes to take all the necessary organizational measures to guarantee secure processing that complies with the Law of 8 December 1992 on the protection of privacy with regard to the processing of personal data (hereinafter, « the Law ») and the European Regulation of 26 April 2016 on the protection of data of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, the GDPR Regulation).

1.2 Graftys SA is free to choose any natural or legal person who processes Users’ personal data at its request and on its behalf. Where applicable, Graftys SA undertakes to select a processor offering sufficient guarantees regarding the technical and organizational security measures for the processing of personal data. Processing of personal data

2.1. The use of the Website and access to certain sections thereof or any request for information or services from users may result in the communication of personal data. The processing of such personal data by Graftys SA in its capacity as Data Controller shall comply with the Law and the GDPR.

2.2 This Privacy Policy is intended to enable users to know, before accessing the various sections of the Website and communicating their personal data, how Graftys SA processes the personal data of users. The user must be aware of this before providing his/her personal data by filling in the forms provided for this purpose in the various sections of the Website.

2.3 Personal data is processed mainly in an automated manner, with procedures strictly related to the purposes mentioned in point 3.

2.4. Graftys SA also collects certain personal data from users with a view to recognising them and providing them with an optimal user experience. The collection of this data allows us to correct any errors on the site. The information collected includes the IP address, the geographical area, the day and time of the visits, the pages visited and the device from which the connection is made.

2.5. Any lack, partial or inaccurate information on personal data, marked with an asterisk, and therefore necessary for the execution of the requested service, makes the latter impossible. On the other hand, any failure to provide partial or inaccurate information on optional personal data that is not required will not have any consequences. Purposes of the processing of personal data

3.1 Depending on the different sections of the website, the purposes of the processing of personal data will be the following:

* To authorize the user to register on the site, as in some cases authorization is necessary to access specific sections or services of the site;

* After prior consent of the user and until revocation of such consent, to interact with the user by sending newsletters offering information, tips, promotions and news about the company (section « Subscribe to newsletter » of the site);

* Respond to users’ inquiries about products and services, (« Contact Us » section of the site). Cookies The Site uses cookies to distinguish users of the Site from one another. This allows us to provide users with a good experience when browsing the Site and to improve it. For detailed information about the cookies we use, and the purposes for which we use them, please see our cookie policy. Personal data that may be processed The following data is collected and processed: Users’ information that they provide by filling in forms or contacting us by e-mail or any other means. This information may include the name, address, e-mail address and telephone number of users. With respect to each user’s visit to the Site, we automatically collect the following information:

* Technical information, including the IP address used to connect, browser type, time zone, browser plug-in types, operating system and platform;

* User visit information, including URLs, page response times, download errors, duration of visits to certain pages; such as scrolling, clicks and hovers. Consent

6.1. The user has the right to withdraw consent at any time. The exercise of this right can be done by emailing info@graftys.be Personal data retention period In accordance with the legal requirements imposed by the Law and the GDPR Regulation, Graftys SA only retains users’ personal data for the time reasonably necessary to enable the fulfilment of the purposes for which they are processed… Disclosure of users’ personal data for internal purposes

8.1. Personal data may be passed on to employees or collaborators of the Graftys SA Marketing Department who, operating under the direct authority of Graftys SA, are appointed as data processors or subcontractors and will receive the appropriate operational instructions. The personal data may also be made known to employees or collaborators of the data processors if the latter, appointed by Graftys SA, so decide, provided that the data is processed in accordance with the purposes for which it is to be used.

8.2. Graftys SA ensures that its employees or collaborators guarantee the same level of protection as Graftys SA itself and ensures that these employees or collaborators will only process personal data for the purposes authorised by the purposes pursued, with the required discretion and security. Recognized users’ rights

9.1. Graftys SA guarantees fair and lawful processing of users’ personal data.

9.2. Graftys SA guarantees the user’s right of access to his/her personal data. In accordance with Article 15 of the GDPR Regulation, the user has the right to obtain from Graftys SA the following information (but not exhaustive) regarding their personal data:

a) The purposes of the processing;

b) The categories of personal data concerned;

c) How long the personal data will be kept and the criteria used to determine this period; In accordance with Article 16 of the GDPR Regulation, incorrect or inaccurate data may be corrected or deleted at any time. It is up to the user to make the necessary changes themselves from their user account in the first instance, and then to ask Graftys SA to make these changes if they cannot be made independently. The user has the right to obtain the deletion of his/her personal data in the cases listed in Article 17 of the GDPR.

9.4. Graftys SA guarantees the right to limitation of processing. The user has the right to obtain the limitation of the processing of his/her personal data in the cases listed in Article 18 of the GDPR Regulation.

9.5. Graftys SA guarantees the right to data portability. In accordance with Article 20 of the GDPR Regulation, users have the right to receive from Graftys SA their personal data in a structured, commonly used and machine-readable format. They also have the right to transmit such data to another data controller without Graftys SA’s interference in the cases provided for by the GDPR Regulation.

9.6. Graftys SA guarantees the right to object to the processing of data The user has the right to object to the processing of his/her personal data at any time when there are legitimate reasons relating to a particular situation.

9.7. Graftys SA guarantees the right to lodge a complaint The user has the right to lodge a complaint regarding the processing of his/her personal data by Graftys SA with the Commission for the Protection of Privacy, the competent body for Belgian territory.

9.8. The user may, at any time, exercise the aforementioned rights by sending a message by e-mail to the address of info@graftys.com or a letter by ordinary post addressed to: Graftys SA Rue d’Edimbourg 6040 Jumet. Limitation of liability of the controller The Site may contain hypertext links to websites controlled and operated by third parties not related to Graftys SA.

Where applicable, Graftys SA cannot be held responsible for the content of these sites, nor for the personal data protection practices of these third parties. Graftys SA cannot be held responsible for the loss, corruption of data or identity theft, which may be caused in particular but not exclusively by the presence of viruses or computer attacks. The site does not contain information intended directly for minors. Minors must not disclose any personal information or data to Graftys SA without parental consent.

Where applicable, Graftys SA cannot be held responsible for the content of these sites, nor for the personal data protection practices of these third parties. Graftys SA cannot be held responsible for the loss, corruption of data or identity theft, which may be caused in particular but not exclusively by the presence of viruses or computer attacks. The site does not contain information intended directly for minors. Minors must not disclose any personal information or data to Graftys SA without parental consent.

Therefore, Graftys SA invites all persons exercising parental authority over minors to inform them about safe and responsible use of the Internet. Modalities for modifying the user’s « profile » The user may, at any time, modify the data provided or delete his/her personal profile by sending an electronic message to the Holder’s address: info@graftys.be or a letter by ordinary post to the attention of: Graftys SA – AVENUE SAINT DENIS 282 1190 FOREST

Modification of the Privacy Policy Graftys SA reserves the right to modify this Privacy Policy in order to comply with the obligations laid down by the legislation protecting privacy or in order to adapt it to its practices.

The user is therefore invited to consult the Privacy Policy on a regular basis in order to take note of any changes and adaptations.