Privacy policy

  1. CONCERNING THIS PRIVACY POLICY
    1. This Website, available via the domain names www.herbavita.be and www.herbavita.eu, is brought to you by us, Herbavita BVBA. If you visit this Website, we can collect and process your personal.
    2. We attach great importance to the protection of your personal data and we process the shared data carefully. In this Privacy policy we explain when we process what type of personal data, the reason why we process your data and the legal grounds on which this is based. This Privacy policy is applicable to all processing operations of the personal data that we collect via the website.
    3. This Website uses Cookies. Cookies are small text files that are saved on the hard drive of a device and contain certain information and sometimes personal data. Social media plugins are small software pieces that are developed and delivered by social media service providers. If you want more information concerning the way we process your personal data, you can consult our Cookie policy.
    4. By continuing to use our Website, you recognize that we collect and process your personal data in the way explained in this Privacy policy.
  2. GENERAL
    1. Your personal data are processed by Herbavita BVBA (after this “Herbavita”, “we”, “our”), with its registered office at Avelgemstraat 17, 9690 Kluisbergen, and registered in the Belgian Legal Entities Register under number 0412.058.257.
    2. We are the controller of the personal data that are processed via our Website. You can contact us using the email address privacy@herbavita.eu
    3. The terms in this Privacy policy that start with a capital are explicitly defined in order that these would have the same meaning each time.
    4. We have reserved the right to alter this Privacy policy from time to time. In the event of changes, you will always be informed via the Website or by e-mail. Nevertheless, we recommend consulting this Privacy policy from time to time.
  3. TYPES OF PERSONAL DATA THAT WE COLLECT
    1. Each time you visit our website, we collect:
      • Technical information concerning the devices you use, such as your IP address, browser type, geographical location, operational system.
      • Information concerning your surfing behavior, such as the duration of your consult, which links you click on, the pages you consult or the number of times you consult a page.
    2. If you fill in the contact form published on our website, we collect:
      • Identity information you provide us, such as your name and email address;
      • The content of your message or question and the technical details of the communication, such as with who you have contact within our company, date, time, etc.;
      • Your preferences concerning the means of communication that is used;
      • Other personal data you share with us.
    3. If you create an account, we collect:
      • Address, such as postal code;
      • Telephone number(s);
      • Account number.
    4. If you enter into an agreement with us, we collect:
      • VAT number;
      • Delivery and/or billing address.
    5. We receive the personal data mentioned above directly from you. It is possible that we receive information concerning your preferences and surfing behavior from our partners, such as Google. If you would like more information concerning the way these parties process and make your personal data available for others, you must consult their privacy policy.
  4. PURPOSES FOR WHICH WE USE YOUR PERSONAL DATA AND LEGAL GROUNDS ON WHICH THIS HAPPENS

    We always collect your personal data in function of a specific objective that is justified on the basis of a legal ground. The reason why, for what purpose we collect your personal data and the legal ground on which this happens is explained below.

    Objectives Legal ground
    We process your personal data to be able to give you specific information concerning our products and services, that you have requested us via the Website, by email, telephone, fax or other social media. To take the necessary steps prior to an agreement, we can base the processing of your personal data on the necessity of the execution of the agreement or to be able to take certain measures concerning your demand for the establishment of the agreement.
    We process your personal data you buy products. This processing activity is necessary to be able to execute the agreement.
    We would also like to inform you concerning our products and services. We will always ask your explicit consent before sending you a promotion, offer, information, newsletter by email or other means of communication, except if you are an actual customer and already have bought similar goods or services from us. This processing activity is based on your agreement.
    We process your personal data to comply with legal obligations or any reasonable request of the competent authority, including the Data protection authority.

    On our own initiative, your personal data can be sent to the police or judicial authorities as proof or if there is a justified presumption that you have committed a delict or crime by using our Website.
    This processing activity is necessary for the strict compliance with the legal obligations on us.
    We process your personal data to enable statistical analyses in order to improve our Website, advertisements, products and services and to develop new products and services. This processing activity is based on our legitimate interest. Our legitimate interests that justify the processing of your personal data are:
    • Continuous improvement of our Website, social media, products and services to be able to assure that we offer you the best service;
    • Protect our Website and social media for abuse and illegal activities;
    • Marketing and promotion of our products, services, brands and our activities in general.
    We process your personal data for marketing purposes, to provide you more personal information and advertisements, adjusted newsletters, promotions and other commercial messages of us or our selected partners.
    We can process your personal data to inform a third party concerning a take-over, a transaction or merger by this third party also if this party has its registered office outside the European Union.
    We can process your personal data to protect our legitimate interests our those of our partners or third party, if your use of the Website can be considered as (a) an infringement of this Cookie policy or another intellectual property of any other right of a third party, (b) is a threat for the safety or integrity of our website or in regard to us or in regard to the systems of our partners, subcontractors due to viruses, Trojan horses, spyware, malware or other types of malicious cypher, or (c) if your use of the website is in any way hatred, discriminating, obscene, racist, illegal or improper in a different way.
  5. WITH WHO WE SHARE YOUR PERSONAL DATA
    1. We trust on external processors to be able to offer you the Website and to process the personal data on our instructions. These external processors may only process your personal data in our name and on our explicit written request.
    2. We guaranty that all our external parties are selected carefully and are obliged to protect the safety and integrity of your personal data.
    3. We do not send your personal data, in a clearly identifiable manner, to another third party than the ones mentioned in article 5.1 and 5.2, without your explicit consent for such a transfer. However, it is possible that we transmit anonymous data to other organisations that use these data to improve our services and products, as well as to adjust our marketing and offer of our services and products.
  6. LOCATION AND TRANSFER
    1. In principle, we process your personal data within the European Economic Area (EEA). It is possible that we transmit your personal data to an organisation outside the EEA in the context of the purposes of the processing mentioned in article 4. If your personal data are transmitted to organisations outside the EEA, the appropriate precautions shall be taken to guarantee the safety of this transfer. These precautions consist of:
      • the fact that the country where the receiver of the personal data is located, is in possession of legislation that provides equal protection as offered within the EEA;
      • an agreement between us and the entity outside the EEA that includes the Model Clauses of the European Commission’s decision 2004/915/CE or 2010/87/EU, as appropriate.
    2. We can transmit anonymous and/or aggregated data to organisations outside the EEA. If such a transfer takes place, we assure you that precautions are taken to guarantee the security and integrity of the data and that respect your rights in this context.
  7. QUALITY GUARANTEES
    1. We are doing our utmost to only process your personal data in the context of the objectives described in article 4 of this Privacy policy.
    2. Your personal data are processed as long as needed to achieve the objectives mentioned in article 4 of this Privacy Policy, or until you cancel your consent on the use of your personal data. Hereby, you should take into account that withdrawal of your consent can cause that you may no longer be able to use the complete or a part of the Website. We de-identify your personal data if it is no longer needed for the objectives mentioned in article 4, except:
      • If there is an essential importance for us, or for another third party to keep your personal data identifiable;
      • If there is a legal obligation or an executive or judicial order that prevents us from de-identifying your personal data.
    3. We take the appropriate technical and organisational measures to protect your personal data against unauthorised access or theft, as well as against loss, forgery or destruction. Our employees or third-party processors only have access to your personal data, if this is necessary and they are submitted to strict confidence. On the other hand, you understand that safety and protection of your personal data are commitments that not always can be guaranteed.
  8. YOUR RIGHTS
    1. You have the right to ask access to your personal data that we process. We reserve the right to charge administrative costs for multiple credential access requests that cause inconvenience, high costs or damage.
    2. You have the right to request a costless correction of your personal data that are not correct. A request for correction must contain an evidence of the inadequate or false nature of the data for which a correction is requested.
    3. You have the right to withdraw your consent given previously for the processing of your data, in which case article 7.2 will be applied.
    4. You have the right to request a removal of your personal data if they are no longer needed in the context of the objectives mentioned in article 4 or if you cancel your authorisation. Hereby, you must take into account that your request for removal will be balanced by us against:
      • our interests or those of a third party;
      • a legal obligation, or executive or judicial orders that can contradict such removal.
    5. You can also request to limit the processing of your data instead of removal, if and when (a) you contest the correctness of the data, (b) the processing of the data is illegal or (c) the data are no longer needed to reach the objectives mentioned in article 4, but you need these data to defend your position within the law.
    6. You have the right to oppose the processing of your personal data if you can prove that there are serious and justified reasons related to special circumstances that justify such protest. If the processing qualifies for direct marketing, you have the right to object free of charge to such processing without justification.
    7. You have the right to request us a structured, commonly used and readable format of all your personal data that you have given us.
    8. If you want to submit a request to exercise one or more of the abovementioned rights, you can send an e-mail to privacy@herbavita.eu Any such request must clearly mention the right you want to exercise and the reason therefor, if necessary. It must also be dated, signed and include a digital copy of your valid identity card that proves your identity. If you use the contact form, we can ask for your signed confirmation and valid identity document.

      We shall acknowledge receipt of your request as soon as possible. If the request is valid, we will as soon as reasonably practicable examine your request and reply within thirty (30) days after receipt of the request.

      If you have a complaint concerning the processing of your personal data by us, you can always contact us by e-mail, as mentioned above.

      If our response is unsatisfactory, you have the opportunity of filing a complaint to the competent Data Protection Authority. In principle, this is the Belgian privacy committee. For more information, consult the website http://www.privacycommission.be.