We respect your privacy. In order to provide high-quality (online) services, it is often necessary to process certain personal data. We only do this where necessary and in compliance with applicable data protection regulations, in particular the General Data Protection Regulation 2016/679 (GDPR).
This privacy policy provides information about which personal data we process, why we process it, how long we retain it, and with whom we share it.
This privacy policy applies to all personal data we process when you are in contact with us. You may visit this website without providing personal data; however, if you do not accept this policy, we may not be able to provide certain services or the website may not function optimally.
1. Identification of the Controller
The data controller responsible for processing your personal data is:
Cardgameshop BV
Borgveld 1, 3940 Hechtel-Eksel, Belgium
VAT: BE 0783.717.339
info@cardgameshop.be
+32 473 58 23 88
2. Which Data Is Collected?
We may collect and process your personal data when and after you contact us. This may include the following types of data:
- First and last name(s)
- (Former) job title(s) and/or employer(s)
- Date and place of birth
- Gender
- Address details
- Telephone number
- Email address
- Company and VAT number
3. For Which Purposes and on Which Legal Basis Is This Data Processed?
We may process your personal data for one or more purposes. This includes the personal data listed under section 2, as well as any other information you provide to us and/or that is relevant to a specific processing activity. We do not collect sensitive or criminal data unless this is necessary for our services.
Below is an overview of the possible reasons for processing your personal data. We will only process your data for these purposes if you contact us within the relevant context.
- Management of customer files (Art. 6(1)(b), (c) and (f) GDPR)
- Provision of our services (Art. 6(1)(a), (b) and (c) GDPR)
- Processing and delivery of orders (Art. 6(1)(b) GDPR)
- Newsletters and customer communications (Art. 6(1)(a) and (f) GDPR)
- Activities and events (Art. 6(1)(a) and (b) GDPR)
- Invoicing and accounting (Art. 6(1)(c) GDPR)
- Disputes and legal claims (Art. 6(1)(f) GDPR)
- Contact with professional partners (Art. 6(1)(b) and (f) GDPR)
- Job applications (Art. 6(1)(a) and (b) GDPR)
4. Your Rights
You are the owner of your personal data and determine which processing activities may take place.You may contact us if you wish to:
- Obtain a copy of the personal data we hold about you
- Correct and/or delete your personal data
- Object to (specific) processing of your personal data
- Withdraw your consent for (specific) processing
When handling such requests, we may request additional information, such as a justification or a copy of the front of your ID card, in order to verify your identity.
If you wish to submit an objection or complaint regarding the processing of your personal data, you may also contact the Belgian Data Protection Authority (Drukpersstraat 35, 1000 Brussels – +32 2 274 48 00 – contact@apd-gba.be).
5. Data Retention Period
We do not retain your personal data longer than necessary to achieve the purposes described in section 3. In any case, we do not retain your data for more than five (5) years after its last use, except for job application data (maximum two (2) years after last use) and unless longer retention periods are required by law (e.g. anti-money laundering legislation: ten (10) years).
6. Transfer of Personal Data to Third Parties and Security
We have implemented appropriate technical and organizational measures to ensure the security of your personal data and to protect it against accidental or unlawful alteration, access, use, or disclosure.
To achieve the purposes described in section 3, we share your personal data, only where necessary, with our IT partners, marketing partners, accountant, government authorities, and judicial authorities.
We have entered into appropriate agreements with third parties who assist us in providing our services to ensure that your personal data is processed securely. We do not transfer your personal data outside the European Economic Area without ensuring an equivalent level of protection.
7. Final Provisions
This privacy policy may be amended in accordance with applicable data protection regulations. The most recent version is always available on our website.
If you have any questions about this privacy policy, please do not hesitate to contact us.