Source: https://www.seasons.agency/en-be/privacy
Timestamp: 2019-03-25 15:00:06
Document Index: 588002760

Matched Legal Cases: ['Art. 13', 'Art. 49', 'Art. 45', 'Art. 46', 'Art. 45', 'Art. 46', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 45', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 28', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 45', 'Art. 46', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 16', 'Art. 17', 'Art. 17', 'Art. 20']

Please find below our statement on the processing of personal data by our company in accordance with the legal requirements, especially with the EU General Data Protection Regulation (GDPR).
Itemisation of data processing operations
Administration of B2B client data
Application as employee in our company
Cookies: Text files which the web server places on the user's computer by means of the browser which is used. The stored cookie information may contain both an identifier (cookie ID) for recognition purposes and content data, such as login status or information about websites visited. The browser sends the cookie information back to the web server with each new request upon subsequent repeat visits to these sites. Most browsers accept cookies automatically. Cookies can be managed using the browser functions (usually under "Options" or "Settings"). The storage of cookies may be disabled in this way or it may be made dependent on the user’s approval in any given case or otherwise restricted. Cookies may also be deleted at any time.
Third countries: Countries outside the European Union (EU)
GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC General Data Protection Regulation
Personal data: Any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Profiling: Any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
Tracking: The collection of data and their evaluation regarding the behaviour of visitors in response to our services.
Pixel: Pixels are also called tracking pixels, web beacons or web bugs. These are small, invisible graphics in HTML emails or on websites. When a document is opened, this small image is downloaded from a server on the Internet and the download is registered there. This allows the operator of the server to see if and when an email has been opened or a website has been visited. This function is usually carried out by calling up a small program (JavaScript). Certain types of information can be detected on your computer system in this way and shared, such as the content of cookies, the time and date of the visit, and a description of the page on which the tracking pixel is located.
This data privacy statement applies to the following offers:
our website seasons.agency, most notably available at www.seasons.agency
whenever reference is made to this data privacy statement from one of our offers (e.g., websites, subdomains, mobile applications, web services or integrations in third-party websites), regardless of the way in which it is accessed or used
All these offers are also collectively referred to as "services".
The following party is responsible for the processing of data in relation to the services, i.e., this is the person who determines the purposes and means of processing personal data:
Rue Fritz Toussaint 5 /A.4
Fritz Tousaintstraat 55 / A.4
Phone: +32 (0)2 420 30 50
Email: hello@isopix.be
The provision of personal data is not required by law or contract, and you are under no obligation to provide any data. We will inform you during the data entry process when personal information needs to be provided for the relevant service (e.g., by indicating 'mandatory fields'). In cases where the provision of data is required, the consequence of not providing data will be that the service in question cannot be provided. Otherwise, failure to provide data may result in our inability to provide our services in the same form and quality.
In various cases, you may also grant us your consent to the further processing of data (or some of the data, where applicable) in connection with the operations listed below. In this case, we will inform you separately in connection with the submission of the respective declaration of consent about all the procedures and the scope of the consent and about the purposes which we pursue in these processing operations. The processing operations based on your consent are therefore not listed again here (Art. 13, subs. 4, GDPR).
When we send data to third countries, i.e., countries outside the European Union, the data are then transmitted strictly in compliance with the statutory conditions of admissibility.
If the transmission of the data to a third country does not serve the purpose of fulfilling our contract with you, if we do not have your consent, if the transmission is not required for the establishment, exercise or defence of legal claims, and if no other exemption applies under Art. 49 GDPR, we will only transmit your data to a third country if in possession of an adequacy decision pursuant to Art. 45 GDPR or appropriate safeguards under Art. 46 GDPR.
One of these adequacy decisions is the Commission Implementing Decision (EU) 2016/1250 of 12.07.2016 on the 'EU-US Privacy Shield' for the USA. The level of data protection is generally considered to be appropriate according to Art. 45 GDPR for transfers to companies which are certified under the EU-US Privacy Shield.
Alternatively or additionally, safeguards under Art. 46 subs. 2 c) GDPR through the conclusion of the EU standard data protection clauses adopted by the European Commission with the receiving body provide appropriate safeguards and an adequate level of data protection. Copies of the standard EU data protection clauses are available on the website of the European Commission at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.
Our data processing work is carried out to a large extent with the involvement of hosting service providers who provide us with storage space and processing capacities at their data centres and who also process personal data on our behalf according to our instructions. It may be the case that personal data are transmitted to hosting service providers in respect of all of the functions listed below. These service providers process data either exclusively in the EU or subject to guaranteed levels of data protection which we have put in place based on the standard EU data protection clauses (cf. subsection c.).
We send personal information to government authorities (including law enforcement agencies) when required to fulfil a legal obligation to which we are subject (legal basis: Art. 6, subs. 1 c), GDPR) or when it is necessary for the assertion, exercise or defence of legal claims (legal basis: Art. 6, subs. 1 f), GDPR).
The time specified in the "period of storage" paragraph indicates how long we use the data for the purposes in any given case. At the end of this period, the data will no longer be processed by us but will be deleted at regular intervals, unless continued processing and storage are required by law (in particular, because it is necessary to fulfil a legal obligation or for the establishment, exercise or defence of legal claims) or unless you grant us extended consent.
Newsletter user profile data: Opening of newsletter (date and time), contents, selected links, as well as the following information relating to the computer system accessing the newsletter: Internet Protocol address used (IP address), browser type, browser version, device type, operating system and similar technical information.
Access data: Date and time of visit to our service; the page from which the system accessed our site; pages visited during the session; session identification data (session ID), as well as the following information relating to the computer system accessing the service: Internet Protocol address used (IP address), browser type, browser version, device type, operating system and similar technical information.
The passages below set out how your personal data are processed when you access our services (e.g., loading and viewing the website, opening the mobile app and navigating within the app). We would point out, in particular, that it is impossible not to send access data to external content providers (cf. subsection b.) due to the technical processes involved in transmitting information over the Internet. The third-party providers are themselves responsible for the privacy-compliant operation of the IT systems which they use. The service providers are required to decide how long the data will be stored.
Legitimate interest, where applicable
Access data Establishing connection, presenting contents of the service, detecting attacks on our site due to unusual activities, fault diagnosis Art. 6, subs. 1 f), GDPR Proper functioning of services, security of data and business processes, prevention of misuse, prevention of damage through interference in information systems 4 weeks
Legitimate interests, where applicable
External content providers who provide content which is needed to display the service (e.g., images, videos, embedded postings from social networks, banner ads, fonts, update information) Access data Art. 6, subs. 1 f), GDPR; in case of transmission to the USA also Art. 45 GDPR in conjunction with the Commission Implementing Decision (EU) 2016/1250 of 12.07.2016 on the "EU-US Privacy Shield ” Proper functioning of services, (accelerated) display of content
IT security service providers Access data Art. 6, subs. 1 f), GDPR Prevention of attacks through exploitation of security gaps / vulnerabilities
The tables below show how your personal data are processed when you subscribe to a newsletter:
Email address Verification of the application (double opt-in procedure), sending of the newsletter Art. 6, subs. 1 b), GDPR Duration of newsletter subscription
Personal master data Personalisation of newsletter Art. 6, subs. 1 b), GDPR Duration of newsletter subscription
Login data Traceability of newsletter registration / confirmation / deregistration Art. 6, subs. 1 b), f), GDPR Proof of successful newsletter registration / confirmation / deregistration Duration of newsletter subscription
Newsletter user profile data Reflection of interests in the composition of the newsletter Art. 6, subs. 1 f), GDPR Improvement of our service, promotional purposes Duration of newsletter subscription
Newsletter distribution service providers All data listed in 2.a. Processing on behalf of a controller (Art. 28 GDPR)
The tables below indicate how your personal data are processed when you enter prize draws or take part in promotions (e.g., events, polls, competitions).
Personal master data Identification, age verification Art. 6, subs. 1 b), GDPR Duration of the prize draw / promotion
Address data Establishment of contact Art. 6, subs. 1 b), GDPR Duration of the prize draw / promotion
Contact data Establishment of contact Art. 6, subs. 1 b), GDPR Duration of the prize draw / promotion
Where applicable (according to the terms and conditions in any given case), answering of competition questions, provision of application information, voting information Execution of the relevant prize draw / promotion, selection of winners / entrants Art. 6, subs. 1 b), GDPR Duration of the prize draw / promotion
Dispatch service providers Name, address data Art. 6, subs. 1 b), GDPR
The tables below set out how your personal data are processed in connection with an existing relationship between us and you as a customer in our online shop.
Personal master data, address data, contact data Customer registration, identification, age verification, establishment of contact, provision of information relevant to your interests, issue of advertisements for own services and third-party services Art. 6, subs. 1 b), f), GDPR Customer relationship management, marketing of our services, promotional purposes 10 years after completion of the last purchase order
Purchase order data Purchase order processing, services relevant to interests Art. 6, subs. 1 b), f), GDPR Customer relationship management, marketing of our services, promotional purposes 10 years after completion of the last purchase order
Payment service providers Personal master data, address data, payment data Art. 6, subs. 1 b), GDPR
Collection service providers Personal master data, address data, payment data Art. 6, subs. 1 b), GDPR
Below we describe how your personal data is processed in connection with a potential customer relationship existing between you and us:
Personal master data, address data, contact data Customer registration, identification, establishment of contact, order processing, provision of information relevant to your interests, issue of advertisements for own services and third-party services, issue of invitations for our own events and third party events Art. 6, subs. 1 b), f) GDPR Customer relationship management, marketing of our services, promotional purposes unlimited
Purchase order data Purchase order processing, services relevant to interests Art. 6, subs. 1 b), f) GDPR Customer relationship management, marketing of our services, promotional purposes unlimited
Payment data Processing of payments for the service Art. 6, subs. 1 b) GDPR unlimited
Payment service providers Personal master data, address data, payment data Art. 6, subs. 1 b) GDPR
Credit check service providers Personal master data, address data Art. 6, subs. 1 f) GDPR Address verification, verification of solvency, avoidance of payment defaults
Marketing service providers Personal master data, address data, contact data Art. 6, subs. 1 f) GDPR Customer relationship management, marketing and promotional purposes
Collection service providers Personal master data, address data, payment data Art. 6, subs. 1 b) GDPR
License Partner (StockFood GmbH) Personal master data, address data, contact data, purchase order data Art. 6, subs. 1 f) GDPR Efficient data management, justification and maintenance of a relationship as a user of the StockFood portfolio, marketing and promotional purposes
The passages below explain how your personal data are processed with the help of tracking technologies to analyse and optimise our services and to serve promotional purposes.
The explanation of the tracking methods also includes information on how to prevent or object to the processing of data.
Please note that this "opt-out” request, i.e., denial of consent to processing, is usually stored via cookies. If you use our services on a new end device or in a different browser, or if you have deleted the cookies set by your browser, you will need to reconfirm the refusal of consent.
The tracking methods presented here will only process personal data in pseudonymous form. No connection is made with a specific, identified natural person, i.e., the data are not merged with information which would reveal the identity of the person behind the pseudonym.
a. Tracking for the analysis and optimisation of our services and their use
The analysis of user behaviour by means of tracking helps us to check the effectiveness of our services, to improve and adapt them to the needs of the users, and to correct errors. It also allows us to produce statistics on the use of our services (reach, intensity of use, surfing habits of users) – on the basis of uniform standard procedures – and thereby to obtain comparable figures across the market.
(2) Legal basis of processing
In cases where we provide services under a contract, the tracking and the associated analysis of user behaviour are carried out in order to fulfil our contractual obligations. The legal basis for this processing of personal data is Art. 6, subs. 1 b), GDPR. The evaluation of information obtained through tracking is necessary in order to optimise the provision of services according to the contractual purpose and to ensure the greatest possible benefit for you.
Otherwise, i.e., in cases where services are not connected with a contract, the legal basis for this processing of personal data is Art. 6, subs. 1 f), GDPR. We hereby pursue the legitimate interest in providing attractive services as efficiently as possible on the basis of the information gained through tracking and marketing them in the best possible way.
(3) Explanation of individual tracking methods
Option of preventing processing (opt-out)
Adequacy decision, where applicable (Art. 45 GDPR)
Appropriate guarantees, where applicable (Art. 46 GDPR)
Google Analytics Provider
Google Analytics is a Service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Purpose of the Tracking
We use Google Analytics to collect information regarding user behaveior in order to improve the user-friendliness of this website.
The IP-Address is processed.
We use Google Analytics including the functions of Universal Analytics. Universal Analytics allows us to analyze the activities on our services across devices (e.g. for access via laptop and later via a tablet). This is made possible by the pseudonymous assignment of a user ID.
We have also added the code "anonymizeIP" to our Google Analytics services. This guarantees the masking (shortening of the last eight digits) of your IP address, so that all data is collected anonymously. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
The transmitted data are deleted after 26 months. Data whose retention period has been reached is automatically deleted once a month.
Legitimate interest You can object the processing of your personal data by Google by downloading and installing the browser plug-in available under the following Link: http://tools.google.com/dlpage/gaoptout.
You can furthermore prevent Google Analytics from collecting data, especially when using browsers on mobile evices, by clicking this link.
Please be aware that the website at www.seasons.agency and our Corporate Blog at www.stockfood.com/blog are technically separated and that your opt-out will only work for the appropriate device where it’s offered. Yes, USA Commission Decision (EU) 2016/1250 of 12.07.2016 on the so-called "EU-US Data Protection Shield" ("Privacy Shield")
Google ReCaptcha Provider
Google ReCaptcha is a Service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
With the help of Google ReCaptcha a check takes place whether an input is made by a person or an input is abusively made by automated, automatic processing.
A shortened IP-address will be processed, only in exceptional cases the full IP-address will be transmitted to a server of Google in the USA and shortened there.
The deviating data privacy regulations of Google Inc. do apply to this function. For more information about Google's privacy policy, please visit: https://www.google.com/intl/en/policies/privacy/
Legitimate interest Yes, USA Commission Decision (EU) 2016/1250 of 12.07.2016 on the so-called "EU-US Data Protection Shield" ("Privacy Shield")
In the following, we describe how your personal data is processed in connection with an existing application process between you and us for a position as an employee in our company:
a. Intended purpose of data processing and legal basis and, if applicable, legitimate interests, storage period
Personal master data, address data, contact data Identification, contact, communication for contract initiation Art. 6 para. 1 b) DSGVO 6 months
Cover letter, curriculum vitae, certificates, letters of recommendation and other application documents submitted by you Applicant selection & recruitment Art. 6 para. 1 b) DSGVO 6 months
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing with future effect, which includes profiling to the extent that it is related to such direct marketing.
You also have the right, at any time with future effect and for reasons relating to your particular situation, to object to the processing of personal data concerning you which is based on Art. 6, subs. 1 e) or f), GDPR, including profiling based on these provisions.
The right to object may be exercised free of charge. In order to be able to process your request, please contact us using the contact information provided in paragraph I.3 or alternatively via email to hello@isopix.be
You have the right to obtain from us the rectification of inaccurate personal data concerning you without undue delay (Art. 16 GDPR). Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
You have the right to obtain from us the erasure of personal data concerning you without undue delay if one of the reasons listed in Art. 17, subs. 1, GDPR is applicable and the processing operations are not required for one of the purposes approved in Art. 17, subs. 3, GDPR.
Under the conditions set out in Art. 20, subs. 1, GDPR, you have the right to receive the personal data concerning you which you have provided to us, in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance on our part. In exercising your right to data portability, you have the right to have the personal data transmitted directly by us to another controller where technically feasible.
You have the right to lodge a complaint with the supervisory authority responsible for our company. The supervisory authority responsible for our company is:
CCP - Comission for the protection of privacy, Drukpersstraat 35, 1000 Brussel, Belgium, http://www.privacycommission.be
Date of Data Privacy Statement