This version of the Privacy Policy has been in effect since 25 May 2018. On that date, the General Data Protection Regulation (“GDPR”) came into force, protecting natural persons in relation to the processing of personal data and the free movement of such data. The GDPR also replaced the Belgian Act of 8 December 1992.
The GDPR establishes rights for natural persons whose personal data is processed and imposes specific obligations on organisations and businesses that process such data.
This Privacy Policy describes how and when we collect, use and share your personal data and information when you use our website at chateaudebraffe.be and any subsite or application managed by us or on our behalf (referred to as the “service(s)” or “Website(s)”).
The terms of this Privacy Policy form part of our Terms and Conditions, available at chateaudebraffe.be/disclaimer.
By visiting our Website, using our services, completing and submitting a contact form and/or contacting one of our employees in any way, you acknowledge and agree that your personal data will be processed as described in this Privacy Policy.
In certain cases, you may object to specific processing at any time; see section 9 below. Please contact us if you have any further questions or comments about this Privacy Policy; see section 11 below.
We keep the processing of personal data to a strict minimum in providing our services. In particular, the personal data we process includes:
- your first and last name;
- your email address, insofar as it constitutes personal data.
We may also process information about your personal interests that you provided during registration or otherwise.
We also collect and process data generated by your use of the Website. This may include the date and time of your visit, the type of browser you use, your IP address and the pages you visit.
In this context, we may also collect non-personal information such as your browser type or IP address, operating system or the domain name of the website through which you reached our Website. We use this information only to understand how visitors use our Websites and to improve their functionality and user experience. See in particular section 10 below on our use of cookies.
We process this personal data for several purposes:
- if you give us your explicit consent, to send you newsletters or other messages that may contain commercial offers, by email or to your postal address;
- when you enter into an agreement with us, to identify you in accordance with the applicable legal requirements, using details such as your first and last name, postal address and email address;
- where applicable, to authenticate you as a customer or user of our Website;
- if you provide your email address, to send information primarily needed to perform our agreement(s) with you, such as notifications, confirmations and, where applicable, invoices and reminders.
We may generate certain information that qualifies as personal data ourselves, such as a customer number or invoice number. We process this information only to perform the agreement(s) you have entered into with us, as described in the Privacy Policy effective from 25 May 2018.
Any transfer or provision of such information is limited to processing strictly necessary for our services, including administration and the provision of information to and by customer service.
For some services, we use one or more external service providers, in particular to host and manage our Website and related features, such as sending newsletters and announcements or handling reservations. Their processing of personal data is limited to technical support.
Apart from these processors, your personal data is used only by our employees who are authorised to access it.
We may disclose your personal data to third parties in response to a request for information if we believe disclosure is consistent with applicable law, regulation or legal process, or is otherwise required by law, rules, regulations or contractual terms. We may also do so if we believe your actions are inconsistent with the spirit or wording of our user agreements or policies, or to protect the rights, property and safety of ourselves or others.
Where a service requires it, or to support its technical, administrative or financial processing, your personal data may be transferred to and processed by one or more third parties. We have entered into separate agreements with these organisations governing the processing of personal data and, where applicable, the exercise of data subjects’ rights.
Your personal data may also be provided to public authorities in accordance with the applicable law.
Unless we have obtained your prior, explicit consent, we do not share your personal data with third parties for their own promotional purposes or commercial use.
We have taken appropriate technical and operational measures to protect your personal data against unauthorised access, deletion or alteration.
We take reasonable steps to protect information about you against loss, theft, misuse and unauthorised access, disclosure, alteration and destruction. As stated in our Terms and Conditions, however, you expressly acknowledge and accept that transmitting information over the internet is never entirely secure, private or confidential. Information sent to or received from the Website, or through one of our services, may therefore be intercepted, decrypted, accessed and/or used by third parties, even when the exchange is encrypted.
We will continue to make the necessary efforts to protect your personal data in accordance with applicable law and best practices.
Certain employees have access to the personal data described above and must follow a strict code of conduct. This includes:
- a duty of confidentiality concerning personal data they can access in their work;
- a duty to process personal data only in the performance of their tasks;
- compliance with the relevant legal provisions.
We allow you to exercise your rights to rectification, objection, erasure and/or restriction of the processing of personal data in relation to the various services we provide.
Right to rectification
If you are a customer or registered user of our services, you may amend, update or change the personal information you provided for your account and user profile, where applicable. Please send us a written request as explained below.
Automatic erasure
Unless otherwise agreed, personal information collected through the Website or our services will be deleted automatically ten years after the end of the agreement between you and us. Your data is therefore retained for the statutory limitation period.
Exercising your rights
You can exercise these rights as follows:
- in writing, by sending a registered letter to Rue de Wadergnies, B-7604 Péruwelz, stating which rights you wish to exercise and enclosing a copy of both sides of your identity card;
- electronically, by sending a request to info@chateaudebraffe.be, stating which rights you wish to exercise and attaching a scan of both sides of your identity card.
Please note that exercising one or more of these rights:
- for one service does not necessarily affect data processed in relation to another of our services, for example if you have several logins or customer numbers. You may need to submit your request separately for those other services;
- may be refused or restricted in whole or in part in certain cases. We will explain the reason in our response, where appropriate with reference to our Frequently Asked Questions. Examples include legal retention obligations or processing essential to performing an agreement;
- may in certain cases result in the partial or complete suspension or termination of the contractual relationship relating to the service.
We may use information about you to personalise and improve our services, offer content or features suited to user profiles or interests, and monitor and analyse trends, usage and activity. We use various technologies to collect this information, including cookies sent to your computer or device.
Cookies are small data files stored on your device. They help us improve our services and your experience, see which pages are popular and count visits to our Website.
We use functional and analytical cookies.
Functional cookies are essential for using our Websites, store preferences and are not shared with third parties. Analytical cookies help us improve our site by showing how visitors use it, including visitor numbers, pages viewed and time spent on the site. These cookies do not collect information that identifies a visitor.
All information collected by these cookies is aggregated and therefore anonymous.
Most internet browsers allow you to delete cookies from your device, reject them or receive a warning before a cookie is installed. For details, consult your browser’s instructions or help function, or visit www.allaboutcookies.com.
If you block, delete or reject cookies, some Website features and services may be unavailable or may not work properly.
If you have questions about how we use personal data, wish to view, correct, update or delete your personal data, or wish to make a complaint, contact us at info@chateaudebraffe.be.
To prevent us from disclosing, changing, restricting or deleting your personal data at the request of someone else, we ask you to send a copy of both sides of your identity card with your written, dated and signed request to info@chateaudebraffe.be, or by post to the address above.
Where applicable, you may lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels.
We reserve the right to revise this Privacy Policy from time to time.
In addition to announcing changes on our Website(s), we may in some cases send you a separate notice and/or display a message on the Website or in the user area. We encourage you to read the latest version of this Privacy Policy whenever you visit our Website, so that you remain informed about our processing activities and how we protect your privacy and personal data.
