DERBIGUM Website Privacy Policy

Information

This policy informs you (as a data subject) about how we process your personal data in connection with our DERBIGUM website, in our capacity as data controller, in accordance with all applicable data protection and privacy laws and regulations, including the GDPR – Regulation (EU) 2016/679 (hereinafter referred to as the “Data Protection Laws”), and, more specifically, in accordance with Articles 13 and 14 of the GDPR.

This policy also aims to inform you about your rights regarding the processing of your personal data.

Informed consent

In certain circumstances (specified below), the legal basis for our processing of personal data is your informed consent. In such cases, this policy also aims to provide you with the information necessary to obtain your valid consent.

When our processing of personal data is based on your consent, you may withdraw your consent at any time, without this withdrawal affecting the lawfulness of the processing carried out prior to the withdrawal. To withdraw your consent, you are invited to use the simple unsubscribe mechanisms provided by our communication tools or by sending us an email (to the address indicated below).

When our processing of personal data is based on your consent, we are responsible for demonstrating that you have validly given that consent. For this purpose, we retain records of your consent for as long as necessary to demonstrate compliance with the Data Protection Laws.

If you are under 16 years of age, it is our duty to make reasonable efforts to verify, in such cases, that consent is given or authorised by the person holding parental responsibility, taking into account the available technology. This explains why, where applicable, we may ask for more information about the person holding parental responsibility.

The term “data controller” refers to any natural or legal person who, alone or jointly with others, determines the purposes and legal and technical means for the processing of personal data.

The following entity is designated as the data controller:

Imperbel SA (hereinafter referred to as “DERBIGUM” or “We”)
Guido Gezellestraat 123
B-1654 Beersel (Huizingen) – Belgium
Company number (VAT-BE) 0400.456.085
Email: dataprotection@derbigum.be

In general

DERBIGUM specialises in the effective and targeted dissemination of information about waterproofing and roofing solutions. This website is a platform that processes all kinds of information and data, some of which may be classified as personal data (IP addresses, cookies, form submission data, account data). This personal data is provided directly to DERBIGUM by the User. Personal data is only processed to provide information, services or to improve or personalise our services, offers or business relationships. The information collected will not be made visible to other Users of our website. When the User makes more extensive use of the site, a correspondingly greater amount of personal data may be collected. This processing of data is therefore essential for the proper functioning of the website and related services (including our commercial communication with you).

Data processing only takes place for the following (internal) purposes, which are based on the following legal grounds:

• To provide the User with access to their profile and the associated features (performance of the contract for the provision of services).
• To offer and improve our services, both general and personalised, including the provision of information via this website and the provision of support (legitimate interest).
• Detecting and protecting against fraud, errors and criminal behaviour (legitimate interest).

We never share your personal data for external analysis without first anonymising it.

Registration procedure

The use of certain parts of our website requires the creation of an individual profile and your registration as a User. We collect all data necessary to provide a personalised service, such as title, age, essential demographic data and contact details, such as your postal address, email address, telephone number and fax number. The User determines the extent of the information they provide through the website.

Proper technical operation

In addition, we collect and process personal data in order to guarantee the User the proper technical operation of the website.

The website uses various means to optimise the User’s experience and to detect any (technical) errors on the website:

• Cookies: this information allows us to identify the User and enable effective use of the website’s features, such as staying logged in, browsing information, using features, displaying personalised advertising messages, etc. For more details about our cookies, please refer to our Cookie Policy;
• Connection logs: this concerns information such as the IP address, as well as various telecommunications data;
• Information relating to the device, software, or network used;
• Information about local data storage.

The website also collects anonymous data, i.e. technical data that is used solely for internal purposes to obtain an overview of how Users navigate the website.

Marketing

We only use your data for marketing purposes where we have obtained your explicit prior consent. In this case, the legal basis for processing is your consent.

Personal data is primarily processed for internal use within DERBIGUM and its group. We can assure you that the data collected is not sold, transmitted or shared with third parties except as described below.

However, data may be disclosed to third parties if:

• The User has explicitly consented to this;
• The transfer is necessary for the performance of the contract between the User (or their employer) and Derbigum. This will be the case with workers, employees, agents, subcontractors, suppliers, business partners, marketing services, etc.;
• The transfer is necessary for the conclusion or performance of a contract, concluded or to be concluded in the interest of the User, between the data controller and a third party (in a context of fraud, for example);
• The transfer is necessary or required by law (substantial public interest or legal obligation).

DERBIGUM is a Belgian company, but is part of a group with numerous locations around the world. DERBIGUM may therefore transfer personal data to other countries, including outside the European Union. The transfer of personal data is limited to countries that offer a similar level of protection and where identical or similar privacy provisions are respected. Otherwise, DERBIGUM guarantees that no data will be transferred to third countries for processing or storage without the necessary measures (contractual clauses) being taken to meet the protection requirements laid down by law.

We retain your data only for as long as necessary to fulfil the purposes for which it was collected and then delete it.

For example: form data is only kept for the period necessary to answer a question you may have asked via that form, your account data is kept for as long as your account is active (until you unsubscribe), etc.

If your data is processed on the basis of your consent, it is retained until your consent is withdrawn (unless another period is specified in the consent form).

For cookies, please refer to the Cookie Policy.

Data used for security purposes is retained for one year.

Data protection laws grant you rights in certain cases and under certain conditions, including the rights to access, rectify, request the erasure of your personal data, as well as the right to request the restriction of processing or to object to processing. In certain cases and under certain conditions, you also have a right to data portability.

Please contact us as specified in the section “Who to contact about your personal data” below to make any request to exercise your rights or if you have any questions or concerns about how we process your personal data.

In principle, you can exercise these rights free of charge. However, please note that the processing of external requests that are unfounded or excessive may sometimes be subject to reasonable administrative fees.

Please note that certain personal data may be exempt from the rights of access, rectification, objection, erasure, restriction or portability in accordance with Personal Data Protection Laws or other legislation.

DERBIGUM will take appropriate technical, physical, legal and organisational measures that comply with Personal Data Protection Laws. Unfortunately, no data transmission over the Internet or data storage system can be guaranteed to be completely secure. If you have reason to believe that an interaction with us is no longer secure (for example, if you feel that the security of any personal data you may have with us has been compromised), please notify us immediately. See the section “Who to contact about your personal data” below.

When DERBIGUM provides personal data to a service provider, the service provider will be carefully selected and will be required to use appropriate measures to protect the confidentiality and security of personal data.

If you are not satisfied with how we process your personal data and believe that contacting us will not resolve your concern, Data Protection Laws give you the right to lodge a complaint with the competent supervisory authority (more information on their website: https://www.autoriteprotectiondonnees.be/).

Data Protection Authority

Rue de la Presse, 35
1000 Brussels (Belgium)
Tel.: +32 (0)2 274 48 00
Fax: +32 (0)2 274 48 35
Email: contact(at)apd-gba.be

If you have any questions about our use of your personal data, you can send us an email at the following address: dataprotection@derbigum.com, or write to DERBIGUM, Data Protection, Guido Gezellestraat 123 – B-1654 Beersel (Huizingen) – Belgium

We regularly review this Privacy Policy and reserve the right to make changes at any time to reflect changes in our business or new legal requirements.

To notify you of any changes, we will post updates on our website. In some cases (and if we have your address), we may also notify you by email.

Please check the “Last Updated” date at the top of this Privacy Policy to see when it was last revised.