Privacy Statement

The protection of your personal data is important to us, which is why we have drawn up this policy setting out how we handle your personal data. In any event, Offlow complies with the applicable laws and regulations, including the GDPR.

1. Who is the controller?

Offlow, with its registered office at Polderstraat 4, 9190 Stekene, and with company number BE0742507284, is the controller for the processing of your personal data.

If you wish to get in touch, you can do so using the contact details below:

Offlow (for the attention of Silvio De Maeyer)

Polderstraat 4

9190 Stekene

If you contact us because you wish to exercise one of your rights (see point 7), we ask you to state clearly which right you wish to exercise. Please be as specific as possible when exercising your rights.

2. Which personal data do we process?

Depending on your capacity, we collect the following personal data:

• From clients:
  • General identification data (such as name, title/position, form of address, address, mobile and/or telephone number, email, identification data assigned to the client, identity card number, national register number);
  • Financial details (such as identification and bank account numbers; creditworthiness assessment (based on public data); financial transactions);
  • Professional activities (including the nature of the activity, the nature of the goods/services used by the person included in the file, business relationships) ;
  • Agreements and arrangements with Offlow;
  • Electronic identification data (such as IP address and cookies) if the client visits the website;
  • All other personal data that the client lawfully makes available to Offlow;
• From prospects:
  • General identification data (such as name, title/position, form of address, address, mobile and/or telephone number, email, identification data assigned to a prospect, identity card number, national register number). This personal data may come from other sources, such as purchased databases or public sources;
  • Professional activities (including the nature of the activity, business relationships) This personal data may come from other sources, such as purchased databases or public sources;
  • Electronic identification data (such as IP address and cookies) if a prospect visits the website;
  • All data relating to pages of other sites that you consulted on our website;
  • All data relating to pages that you consulted on our website;
  • All other personal data that a prospect lawfully makes available to Offlow;
• From suppliers:
  • General identification data (such as name, title/position, form of address, address, mobile and/or telephone number, email, identification data assigned to the supplier, identity card number, national register number);
  • Financial details (such as identification and bank account numbers; creditworthiness assessment; financial transactions);
  • Professional activities (including the nature of the activity, the nature of the goods/services supplied by the person included in the file, business relationships) ;
  • Agreements and arrangements with Offlow;
  • Electronic identification data (such as IP address and cookies) if the supplier visits the website;
  • All data relating to pages of other sites that you consulted on our website;
  • All data relating to pages that you consulted on our website;
  • All other personal data that the supplier lawfully makes available to Offlow;

If you provide us with personal data of a third party, such as, among others, your:

• staff;
• self employed contractors;
• directors;
• representatives;
• clients;
• suppliers;

you guarantee to Offlow that:

• this personal data was lawfully obtained from the third party and lawfully provided to Offlow;
• the personal data you provide to Offlow is up to date;
• you have provided this third party with relevant information about the existence and content of this Policy.

3. Why do we process the personal data (purposes)?

The personal data is processed for the following purposes:

3.1. Performance of the agreement

• Creating a personal account;
• Correctly performing the agreement;
• Drawing up invoices and billing data;
• Customer service: so that we can help you quickly in case of questions and/or problems;
• Carrying out credit checks and investigating, preventing and combating fraud;

3.2. Direct marketing

• Sending newsletters, offers, promotions, etc. to prospects.

If you no longer wish to receive these communications, you can unsubscribe via the opt out provided. After that, you will no longer receive direct marketing from us about the communications you no longer wish to receive, and we will stop processing your personal data for these direct marketing purposes.

3.3. Necessary for the functioning of our business

• Improving our services;
• Sending newsletters, offers, promotions, etc. to clients. You can always unsubscribe from these via the opt out in the email;
• Preventing abuse or improper use of our services;
• Retaining personal data as evidence or for bringing a legal claim;
• Sending surveys so that we can improve our services;
• Retaining personal data to register attendance at/participation in events.

3.4. Complying with legal obligations

• Complying with legal obligations (for example in the context of anti money laundering legislation and the fight against terrorism);

You are not obliged to share your personal data with us, but if you do not provide us with the requested personal data, we may not be able to supply you with the desired services and/or products.

4. Legal basis for the personal data?

The processing of personal data under point 3.1 and 3.2 is based on the performance of the agreement or on taking steps, at the request of the data subject, prior to entering into the agreement.

The processing of personal data under point 3.3 is based on the explicit consent of the data subject.

The processing of personal data under point 3.4 is based on the legitimate interest of our business (only if and when the legitimate interest of our business outweighs the interest of the data subjects; on request you can receive more information about this balancing exercise). The interests are set out further under point 3.5.

The processing of personal data under point 3.5 takes place in order to comply with legal obligations incumbent on our business.

5. With whom do we share the personal data?

We do not provide personal data to third parties, unless these parties are contractually bound to Offlow or act on behalf of or under contract with Offlow, and this for the respective purpose indicated above.

Naturally, agreements regarding the protection of your data are also made with these external parties.

Nor do we provide personal data to companies outside the European Economic Area, unless there is an adequacy decision, appropriate safeguards, binding corporate rules or transfers as referred to in Article 49(1) GDPR.

In the cases provided for by law, we are, however, obliged to disclose certain personal data to the specified authorities.

6. How long do we keep the personal data?

We only keep the personal data for as long as is necessary for the purposes set out above.

Since the retention period depends on the purpose, but also on the type of personal data, the retention periods vary.

7. What rights do you have?

7.1. Right of access, rectification or erasure

7.1.1. Access

You have the right to access your personal data. If you request this, we will provide you with a copy of the personal data processed.

7.1.2. Rectification

You have the right to have incorrect or incomplete personal data corrected.

7.1.3. Erasure

You have the right to ask Offlow to erase your data in the cases set out in Article 17(1) GDPR, such as if you withdraw your consent or if you object to processing for direct marketing.

Offlow will erase your data without undue delay, unless Article 17(3) GDPR applies. For example, Offlow will not have to erase your personal data if this is necessary in order to comply with a legal obligation, among other cases.

7.2. Right to restriction of processing concerning you

You have the right to have the processing restricted in the cases set out in Article 19(1), e.g.: if the accuracy of the personal data is contested.

7.3. Right to data portability

You have the right to request the personal data you yourself provided to Offlow, or to have it transferred to another company.

7.4. Right to withdraw consent

You have the right to withdraw your consent at any time.

Withdrawing your consent does not affect the lawfulness of processing based on consent before its withdrawal.

7.5. Right to lodge a complaint with a supervisory authority

If you do not agree with Offlow’s position, if you have comments regarding the exercise of your rights, or if you believe that the processing of your personal data is not carried out in accordance with the legislation, including the GDPR, you can lodge a complaint with the supervisory authority (https://www.gegevensbeschermingsautoriteit.be/).

7.6 Right to object to processing

You always have the right to object to processing for the purpose of direct marketing. In practice, you can do this via the “opt out” provided. After that, you will no longer receive direct marketing from us about the communications you no longer wish to receive, and we will stop processing your personal data for these direct marketing purposes.

Of course, we may still contact you in connection with the performance of the agreement.

In addition, you always have the right to object to processing based on Article 6(1)(e) or (f) GDPR.

8. Cookies

Offlow also uses cookies on the website. Cookies are small pieces of information that the browser stores on your computer and that allow us to record certain information about the users of the website (e.g. language choice, duration of your visit to the website, …). This data helps us to better tailor the website to your wishes, preferences and ease of use.