PRIVACY POLICY
This Privacy Policy governs the processing of your personal data by the controller: Stratco BV (“Stratco”, “we”, “us”, or “our”), which processes and transfers your personal data to third parties when you visit or use our services, make a purchase in the shop (the “Site”), or otherwise communicate with us regarding the Site (collectively, the “Services”). For the purpose of this Privacy Policy, “you” and “your” refer to you as a user of the Services, whether you are a customer, website visitor, or another individual whose personal data we have collected under this Privacy Policy.
Please read this Privacy Policy carefully, as it contains essential information about how your personal data is processed. By providing your personal data on the Site, and by supplying personal data via the contact details listed on this Site, you acknowledge that you have read this Privacy Policy and you expressly agree to it, as well as to the processing itself.
Why this Privacy Policy?
We may update this Privacy Policy from time to time, including to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the updated Privacy Policy on the Site and update the date under “What is the latest version of this Privacy Policy.”
How do we collect your personal data?
To be able to provide the Services, we collect personal data about you from different sources, as set out below. The personal data we collect and use depends on your interactions with us. In addition to the specific uses described below, we may use the personal data we collect about you to communicate with you, provide or improve the Services, comply with applicable legal obligations, enforce applicable Terms of Service, and protect or defend the Services, our rights, and the rights of our users or others. The type of personal data we obtain depends on your interactions with our Site and your use of the Services. The following sections describe the categories and specific types of personal data we collect.
Personal data we obtain directly from you
- Information you provide directly through our Services may include:
- Contact details including your surname, first name, company name, address, telephone and mobile number, and email address.
- Order details including your name, billing address, delivery address, payment confirmation, email address, and telephone number.
- Account details including your username, password, security questions, and other information used for account security.
- Customer support information including any information you choose to include in communications with us, for example when you send a message via the Services.
For some features of the Services, it may be necessary for you to provide us with certain personal data about yourself directly. You may choose not to provide this personal data, but in that case, you may not be able to use or access these features.
Children’s data
The Services are not intended for use by children, and we do not knowingly collect personal data about children. If you are the parent or guardian of a child who has provided us with personal data, you may contact us to request that it be deleted.
Information we collect about your use of our Site
We may also automatically collect certain information about your interaction with the Services (“Usage Data”). For this purpose, we may use cookies, pixels, and similar technologies (“Cookies”). Usage Data may include information about how you access and use our Site and your account, including device information, browser information, network connection information, your IP address, and other information about your interaction with the Services. For further details, please see our Cookie Policy.
Information we obtain from third parties
Finally, we may obtain personal data about you from third parties, including vendors and service providers who may collect information on our behalf, such as:
Companies that support our Site and Services, such as Shopify.
Our payment processors, who collect payment data (e.g. bank account, credit card, or debit card details and billing address) to process your payment, fulfil your orders, and provide the products or services you have requested, enabling us to perform the contract we have with you.
When you visit our Site, open or click on emails we send you, or interact with our Services or advertisements, we or third parties we work with may automatically collect certain information using online tracking technologies, such as pixels, web beacons, software development kits, third-party libraries, and cookies (see our Cookie Policy for more information).
All personal data we obtain from third parties will be treated in accordance with this Privacy Policy. See also the section below: “To which third parties may we disclose your personal data?”
For which purposes and on what legal bases do we process your personal data?
Provision of products and services:
We use your personal data to provide you with the Services under the contract we have with you, including processing your payments, fulfilling your orders, sending notifications related to your account, purchases, returns, exchanges, or other transactions, creating, maintaining, and otherwise managing your account, arranging delivery, facilitating returns and exchanges, and providing other account-related functions and features (Article 6(1)(b) GDPR: performance of the contract).
We may also improve your shopping experience by allowing Shopify to match your account with other Shopify services you may wish to use. In such cases, Shopify processes your data as set out in this Privacy Policy.
Marketing and advertising:
We may use your personal data for marketing and promotional purposes, such as sending marketing, advertising, and promotional communications via email, SMS, or post, and showing you advertisements for products or services. This may include using your personal data to better tailor the Services and advertisements on our Site and other websites (Article 6(1)(f) GDPR: legitimate interests).
Security and fraud prevention:
We use your personal data to detect, investigate, or take action regarding possible fraudulent, unlawful, or malicious activity (Article 6(1)(f) GDPR: legitimate interests).
Communication and service improvement:
We use your personal data to provide you with customer support and improve our Services (Article 6(1)(f) GDPR: legitimate interest in communicating with you, providing effective services, and maintaining our business relationship with you).
To which third parties may we disclose your personal data?
In certain circumstances, we may disclose your personal data to third parties if there is a legal basis for doing so. These may include:
Vendors or other third parties who perform services on our behalf (e.g. IT management, payment processing, data analysis, customer support, cloud storage, fulfilment, and shipping);
Business and marketing partners to provide services and show you advertisements;
Where you instruct us, request us, or otherwise consent to the disclosure of certain personal data to third parties, for example to deliver products to you or through your use of social media widgets or login integrations, with your consent (see also our Cookie Policy);
Our affiliates or otherwise within our corporate group;
In connection with a business transaction, such as a merger or bankruptcy, to comply with applicable legal obligations (including responding to subpoenas, search warrants, and similar requests), to enforce applicable Terms of Service, and to protect or defend the Services, our rights, and the rights of our users or others.
We disclose the following categories of personal data about users for the purposes set out above in “To which third parties may we disclose your personal data?”
Categories |
|
Categories of recipients |
|
International transfers of your personal data
Please note that we may transfer, store, and process your personal data outside the country in which you reside. Your personal data may also be processed by staff and external service providers and partners in such countries.
If we transfer your personal data outside Europe, we rely on recognised transfer mechanisms such as the European Commission’s Standard Contractual Clauses, or equivalent contracts issued by the relevant competent authority in the United Kingdom, where applicable, unless the data are transferred to a country that has been determined to provide an adequate level of protection.
Direct marketing
If you are interested in our services or products, we will use your contact details to get in touch with you or to provide you with our services and products. We will only do this if you have given us your prior explicit consent.
This consent can be withdrawn at any time, without justification and free of charge, by contacting us as described in the section “How can you contact us?” or via the unsubscribe option included in every promotional email.
Third-party websites and links
Our Site may contain links to websites or other online platforms operated by third parties. If you follow links to sites that are not affiliated with us or not operated by us, it is important that you read their privacy and security policies and other terms. We provide no warranties and accept no responsibility for the privacy or security of such sites, including the accuracy, completeness, or reliability of the information contained therein.
Information you provide in public or semi-public areas, including information you share on third-party social networks, may also be visible to other users of the Services and/or users of these third-party platforms, without limitation as to its use by us or by a third party. The inclusion of such links on our Site does not in itself imply endorsement of the content on such platforms or of their owners or operators, except as specified in the Services.
How do we protect your personal data?
We have developed appropriate technical and organisational security measures to prevent the destruction, loss, falsification, alteration, unauthorised access to, or accidental disclosure to third parties of personal data collected, as well as any other unauthorised processing of such data.
Under no circumstances can we be held liable for any direct or indirect damage resulting from the unlawful or improper use by a third party of your personal data.
You must at all times comply with the security instructions. You are therefore solely responsible for the use made from the website of your computer, IP address, and your identification details, as well as for keeping them confidential.
If you choose to use the Services and register an account, you are responsible for safeguarding your account login details. We strongly recommend that you do not share your username, password, or other access credentials with anyone. If you believe your account has been compromised, please contact us immediately via the section “How can you contact us?”.
How long do we retain your personal data?
We will retain and process personal data for a period necessary in relation to the purposes of the processing and in relation to the Services we are required to provide, to comply with legal obligations, to resolve disputes, or to comply with other applicable contracts and policies.
How can you exercise your rights?
In accordance with applicable data protection law, you, as a data subject, may exercise the rights set out below.
You can exercise your rights by contacting us by email at info@workout.jarneclaesen.be, including a copy of your identity card or an alternative proof of identity.
To ensure the accuracy of your personal data, you undertake to inform us of any change of address, change of email address, or change of mobile or telephone number. If you fail to do so, all notifications may validly be made.
Right of access and inspection
You have the right to access your personal data free of charge at any time, as well as to know how we use your personal data.
Right of rectification, erasure, and restriction
You are free to communicate or not to communicate your personal data to us. You also have the right to request that we rectify, supplement, or erase your personal data. You acknowledge that in the event of refusal to communicate or request for erasure of personal data, certain services and products may not be deliverable.
You may also request that the processing of your personal data be restricted.
Right to object
You also have the right to object to the processing of your personal data for serious and legitimate reasons.
In addition, you always have the right to object to the processing of personal data carried out by us on the basis of our legitimate interests or in the context of direct marketing.
Right to withdraw consent
Where processing is based on your prior consent, you have the right to withdraw that consent. You can do so by contacting us through the communication channels set out in the section “How can you contact us?”.
Automated decision-making and profiling
The processing of your personal data may involve profiling in order to better meet your needs. This will only take place if we have obtained your prior explicit consent. This consent may be withdrawn at any time, without justification and free of charge, by contacting us as described in the section “How can you contact us?”.
Right to lodge a complaint
You have the right to lodge a complaint with the Data Protection Authority (Gegevensbeschermingsautoriteit – GBA), Drukpersstraat 35, 1000 Brussels, Tel +32 (0)2 274 48 00, Fax +32 (0)2 274 48 35, email: contact@apd-gba.be.
How can you contact us?
You can contact us by email at: info@workout.jarneclaesen.be
What are the recent changes to this Privacy Policy?
You may request an overview of previous versions of the Privacy Policy by contacting us through the methods listed in the section “How can you contact us?”.
What is the latest version of this Privacy Policy?
This Privacy Policy is dated August 2024.