Meet us at one of our sites or on our social media.
Europal Twelve
Beneluxpark 35
8500 KORTRIJK
BELGIUM
Europal Blandain
Rue du petit Tilleul 3
7522 BLANDAIN
BELGIUM
Europal Mouscron
Avenue Anne Franck 5
7700 MOUSCRON
BELGIUM
This statement aims to inform you in a transparent and clear manner about how we process your personal data. By "personal data", we mean any information that identifies you, directly or indirectly. The "processing" of your personal data covers all operations or a set of operations involving your personal data such as, but not limited to, the collection, storage, use, updating or deletion.This statement relates in particular to the processing of your personal data that we collect through various forms on our website, which are made available to us by the person who communicates his personal data (customer/supplier/staff member/...) and/or through documents made available to us and/or through publicly accessible sources such as the CBE, the national register, websites. We also collect data through the use of cookies and similar technologies. If you would like more information on this use, we invite you to consult our Cookie policy.
We are EUROPAL-PACKAGING NV, with registered office at 7700 MOESKROEN, Anne Francklaan 5, KBO 0467.257.413, info@europal-packaging.com, tel. 056/78.25.80 What data do we keep, why, and on what legal basis do we process your personal data? The categories of personal data that may be processed include surname, first name (or, if applicable, given names), address data (such as street name, house number, P.O. box number, postal code, town/village/city, country,...), contact data (e.g. e-mail address, telephone number, fax number, cell phone number, fax number,...), gender, date of birth, national registration number, identity card number, place of birth, delivery address, account number, professional category/function and CBE and/or VAT number.We process, among other things, the data, mainly your contact data, that you share with us through these forms only in order to respond to your requests. We clarify in each of our forms the data you are required to fill in in order to process your request. Consequently, you are free to share your data with us or not if they are not indicated as mandatory.If the personal data provided to us were not provided to us by explicit consent, they are necessary for the performance of the contract in which we are involved and/or the fulfillment of the legal obligations to which we and/or our customer and/or our supplier and/or our staff member are subject. All provided personal data of which we take cognizance and process within the scope of our assignment, are used exclusively for professional purposes and are processed in a lawful, proper and transparent manner.
In general, we try to avoid transferring your personal data to third parties. Therefore, we only transfer your personal data to third parties if this is necessary in order to fulfill your requests and to parties who necessarily need to know this personal data in order to properly perform the contract in which we are involved and/or if the law so provides. When we transfer your personal data to a third party processor, we limit the third party's access to the data they need to fulfill their mission. In addition, we require each of our processors to comply with the Data Protection Legislation at all times. In addition, we ensure that the necessary measures are taken (e.g., by imposing certain contractual obligations) to guarantee an appropriate level of protection of your personal data when our subcontractor processes your data in a country that does not offer the same level of protection as the European Union.
We do not retain your personal data for longer than necessary for the purposes for which we collect your personal data, insofar as there is no legal obligation requiring us to retain your data for longer. Personal data will be kept at least for the legally defined criteria for keeping accounts. The retention of personal data is done with a security that is appropriate and usual for a company of our size in our sector.
In accordance with the Personal Data Protection Legislation, and provided your request meets legal requirements such as the presentation of proper identification, you may ask us at any time to:- Confirm that we process your personal data and obtain a copy of all personal data that we process about you ("right of access")- Access and, if necessary, correct your personal data in case of erroneous or incomplete data ("right of rectification")- Delete your personal data delete ("right to oblivion")- restrict the processing of Your personal data ("right to restrict processing")- stop the processing of Your personal data ("right to object") in case we process Your personal data for prospecting purposes- obtain Your personal data in a structured, commonly used machine-readable file for your own use or to transfer it to another processing controller ("right to data portability")
You can direct all your complaints about the way we handle your personal data to our controller :Europal-Packaging NVAnne Francklaan 5, 7700 MOESKROEN (BELGIUM)VAT BE 0467.257.413 Controller: Email: info@europal-packaging.com. In addition, you can always direct your complaints to the Belgian Data Protection Authority.
This website and the services offered on it are not designed for persons under 16 years of age. In accordance with Article 12 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, you will find below the text of Articles 15 to 22 as well as Article 34 of the aforementioned Regulation:
Article 15 (Data subject's right of inspection): "1. The data subject shall have the right to obtain from the controller a confirmation as to whether or not personal data relating to him are being processed and, if so, to obtain access to those personal data and to the following information:(a) the purposes of processing) the categories of personal data concerned) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations) if possible, the period for which the personal data are expected to be stored, or if that is not possible, the criteria for determining that period) that the data subject has the right to request the controller to rectify or erase personal data or that the processing of personal data relating to him be restricted, as well as the right to object to such processing) that the data subject has the right to lodge a complaint with a supervisory authority) where the personal data are not collected from the data subject, any available information as to the source of such data) the existence of automated decision making, including profiling referred to in Article 22(1) and (4), and, at least in those cases, useful information on the underlying logic, as well as the significance and expected consequences of such processing for the data subject.2. Where personal data are transferred to a third country or an international organization, the data subject shall have the right to be informed of the appropriate safeguards in accordance with Article 46 on the transfer.3. The controller shall provide the data subject with a copy of the personal data being processed. If the data subject requests additional copies, the controller may charge a reasonable fee based on administrative costs. Where the data subject submits its request electronically, and does not request any other arrangement, the information shall be provided in a commonly used electronic form.4. The right to obtain a copy referred to in paragraph 3 shall not affect the rights and freedoms of others."
Article 16 (Right to rectification): "The data subject shall have the right to obtain from the controller without delay the rectification of personal data relating to him that are inaccurate.Taking into account the purposes of the processing, the data subject shall have the right to obtain completeness of incomplete personal data, including by providing an additional statement. "
Article 17 (Right to erasure of data ('right to oblivion'): '1. The data subject shall have the right to obtain from the controller the erasure of personal data relating to him without unreasonable delay, and the controller shall be obliged to erase personal data without unreasonable delay where any of the following applies: a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; 4.5.2016 EN Official Journal of the European Union L 119/43 (b) the data subject withdraws the consent on which the processing is based pursuant to Article 6(1)(a) or Article 9(2)(a), and there is no other legal ground for the processing; (c) the data subject objects to the processing pursuant to Article 21(1), and there are no overriding compelling legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) (d) the personal data have been processed unlawfully; (e) the personal data must be deleted in order to comply with a legal obligation laid down in Union law or in Member State law incumbent on the controller; (f) the personal data have been collected in connection with an offer of information society services referred to in Article 8(1).2. Where the controller has disclosed the personal data and is required to erase the personal data pursuant to paragraph 1, it shall, taking into account available technology and implementation costs, take reasonable measures, including technical measures, to inform controllers processing the personal data that the data subject has requested the controller to erase any link to, or copy or reproduction of that personal data.3. Paragraphs 1 and 2 shall not apply to the extent that processing is necessary: (a) for the exercise of the right to freedom of expression and information; (b) for compliance with a legal processing obligation laid down in Union or Member State law which rests on the controller, or for the performance of a task carried out in the public interest or in the exercise of public authority vested in the controller; (c) for reasons of public interest in the area of public health pursuant to points (h) and (i) of Article 9(2) and Article 9(3); (d) for archiving in the public interest, scientific or historical research or statistical purposes pursuant to Article 89(1), insofar as the right referred to in paragraph 1 is likely to make the achievement of the purposes of such processing impossible or seriously jeopardize it; (e) for the establishment, exercise or defence of legal claims.
Article 18 (Right to restrict processing): "1. The data subject shall have the right to obtain from the controller the restriction of processing if any of the following applies: (a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data; (b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests instead the restriction of their use; c) the controller no longer needs the personal data for the processing purposes, but the data subject needs them for the establishment, exercise or defence of legal claims; d) the data subject has objected to the processing in accordance with Article 21(1), pending the answer to the question whether the legitimate grounds of the controller outweigh those of the data subject.2. Where processing is restricted pursuant to paragraph 1, personal data, with the exception of their storage, shall only be processed with the consent of the data subject or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for important grounds of public interest for the Union or for a Member State. L 119/44 EN Official Journal of the European Union 4.5.2016 3. A data subject who has obtained a restriction on processing pursuant to paragraph 1 shall be informed by the controller before the restriction on processing is lifted. "
Article 19 (Duty to notify rectification or erasure of personal data or restriction of processing): "The controller shall notify any recipient to whom personal data have been disclosed of any rectification or erasure of personal data or restriction of processing in accordance with Article 16, Article 17(1) and Article 18, unless this proves impossible or involves a disproportionate effort. The controller shall provide the data subject with information about these recipients if the data subject so requests."
Article 20 (Right to data portability): "1. The data subject shall have the right to obtain the personal data concerning him that he has provided to a controller in a structured, common and machine-readable form, and he shall have the right to transfer such data to another controller, without hindrance from the controller to whom the personal data had been provided, if: (a) the processing is based on consent under Article 6(1)(a) or Article 9(2)(a) or on an agreement under Article 6(1)(b); and (b) the processing is carried out through automated processes.2. In exercising his right to data portability under paragraph 1, the data subject shall have the right to have the personal data transferred, if technically possible, directly from one controller to another.3. The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17. That right shall not apply to processing which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. 4. The right referred to in paragraph 1 shall not affect the rights and freedoms of others. Section 4 Right to object and automated individual decision-making"
Article 21 (Right to object): '1. The data subject shall have the right to object at any time, on grounds relating to his particular situation, to the processing of personal data concerning him on the basis of points (e) or (f) of Article 6(1), including profiling on the basis of those provisions. The controller shall cease processing the personal data unless it adduces compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or which relate to the establishment, exercise or defence of legal claims.2. Where personal data are processed for the purposes of direct marketing, the data subject shall have the right to object at any time to the processing of personal data concerning him/her for such marketing, including profiling related to direct marketing.3. Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes. 4.5.2016 EN Official Journal of the European Union L 119/454. The right referred to in paragraphs 1 and 2 shall be explicitly brought to the attention of the data subject at the latest at the time of the first contact with the data subject and shall be displayed clearly and separately from any other information.5. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, the data subject may exercise his right to object through automated processes using technical specifications.6. Where personal data are processed pursuant to Article 89(1) for the purpose of scientific or historical research or statistical purposes, the data subject shall have the right to object to the processing of personal data concerning him on grounds relating to his particular situation, unless the processing is necessary for the performance of a task carried out in the public interest."
Article 22 (Automated individual decision-making, including profiling): "(1) The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or significantly affects him or her in any other way.2. Paragraph 1 shall not apply if the decision is: a) necessary for the establishment or performance of a contract between the data subject and a controller; b) authorized by a provision of Union or Member State law applicable to the controller, which also provides for appropriate measures to protect the rights and freedoms and legitimate interests of the data subject; or c) based on the data subject's explicit consent.3. In the cases referred to in points (a) and (c) of paragraph 2, the controller shall implement appropriate measures to protect the rights and freedoms and legitimate interests of the data subject, including at least the right to human intervention by the controller, the right to express their point of view and the right to challenge the decision.4. The decisions referred to in paragraph 2 shall not be based on the special categories of personal data referred to in Article 9(1), unless Article 9(2)(a) or (g) applies and appropriate measures have been taken to protect the data subject's legitimate interests." Article 34 (Notification of a personal data breach to the data subject: "1. Where the personal data breach is likely to present a high risk to the rights and freedoms of natural persons, the controller shall communicate the personal data breach to the data subject without undue delay. L 119/52 EN Official Journal of the European Union 4.5.20162. The communication to the data subject referred to in paragraph 1 of this Article shall contain a description, in clear and simple language, of the nature of the personal data breach and at least the information and measures referred to in points (b), (c) and (d) of Article 33(3).3. The communication to the data subject referred to in paragraph 1 shall not be required when one of the following conditions is met: (a) the controller has implemented appropriate technical and organizational protection measures and these measures have been applied to the personal data concerned by the personal data breach, in particular those which render the personal data unintelligible to unauthorized persons, such as encryption; (b) the controller has taken subsequent measures to ensure that the high risk to the rights and freedoms of data subjects referred to in paragraph 1 is unlikely to recur; (c) the communication would require disproportionate effort. In this case, a public notice or similar measure that informs data subjects equally effectively shall take its place.4. If the controller has not yet notified the personal data breach to the data subject, the supervisory authority may, after considering the likelihood that the personal data breach poses a high risk, require the controller to do so or decide that one of the conditions referred to in paragraph 3 has been met."
Beneluxpark 35
8500 KORTRIJK
BELGIUM
Rue du petit Tilleul 3
7522 BLANDAIN
BELGIUM
Avenue Anne Franck 5
7700 MOUSCRON
BELGIUM
