0
1. General
In this Data Protection Statement, we inform you about how Art & Stick (hereinafter also referred to as “we”, “our” and/or “Art & Stick”) processes personal data. In order to provide Art & Stick services and the various functions of the website, it is necessary for us to process a certain amount of personal data. In addition, address and order-related data are collected and processed for internal marketing purposes.
2. Data Controller
The data controller within the meaning of data protection law is the company:
ART & STICK, Rue de Brabant 83, 6200 Châtelineau, Telephone: 0497/73.40.20, Email: info@artandstick.be
3. Purposes of Processing and Legal Bases
In the following paragraphs, you will find more detailed information regarding the purposes for which we process personal data, as well as the relevant legal bases for such processing.
3.1. Log Data
Each time an Art & Stick page is accessed, usage data is transmitted by the Internet browser and stored in log files, known as “logfiles”. The records stored in this way include the following data: the date and time of access, the name of the page accessed, the IP address, the referrer URL (the originating URL from which you reached our website), the volume of data transferred, the loading time, as well as information about the product and version of the browser used. We analyze these log file records in anonymized form in order to further improve our offer and make it more user-friendly, to detect and correct errors more quickly, and to manage server capacity (see also the section “Analysis Tools and Internet Technologies”). In addition, log file records are also used to detect, prevent and prosecute attacks against our services.
The legal basis for processing log data is our legitimate interest in improving our offer and managing our server capacities, ensuring the uninterrupted availability of our services, and complying with our legal obligations relating to IT security.
3.2. Data Processing for the Provision of Art & Stick Services (User Account and Others)
At Art & Stick, you have the possibility to create a user account containing the following information: your first and last name, your company name and VAT number, your email address, your telephone numbers, your delivery and billing addresses, your selected browsing language, your gender, and your date of birth. Mandatory fields that are absolutely necessary are marked accordingly.
In addition, we also process the personal data that you voluntarily provide in your ART & STICK profile. In particular, you have the possibility to upload your own content (for example photos) and save it in your profile.
The information entered by you can be managed and completed via “My Account”.
We use the above-mentioned data in order to make the various ART & STICK features available to you, to provide you with offers tailored to your interests, and to be able to contact you.
3.3. Data Processing in the Context of Online Purchases
You may also order paid products on ART & STICK. In this context, we process personal data for the performance of the contract and, more specifically, for the processing of your order and the delivery of goods. For this purpose, we mainly process your first name and surname, your delivery and billing address, your VAT number and your email address, as well as your telephone numbers.
For the purposes of contract performance or billing, your personal data will only be disclosed or otherwise transferred to third parties where necessary for the performance of the contract or billing, or if you have previously given your consent. As part of the execution of your order, this may include service providers responsible for delivery.
In addition, we also use the data entered during contract performance or billing in order to provide you with offers tailored to your interests.
3.4. Contact
ART & STICK enables you to contact us in several ways: by email, by telephone or by post. When you contact us, all personal data that you voluntarily provide in this context is used exclusively for the purpose of contacting you and enabling us to process your request.
3.5. Marketing - Newsletter
When you subscribe to the newsletter, your email address is used for sending advertising by email. You may revoke the consent granted for this purpose at any time and free of charge with effect for the future by clicking the unsubscribe link in the newsletter.
The legal basis for processing your email address for the sending of a newsletter ordered by you is the performance of the contract.
3.6. Other Purposes
We also process your data for the purpose of asserting, exercising and defending our rights; the legal basis in this respect is our legitimate interest in safeguarding our rights.
4. Retention Period
Unless you request deletion, this data will be retained by Art & Stick.
5. Cookies
We use cookies on various pages in order to make visiting our website attractive and to enable the use of certain functions. Cookies are encrypted and are in no way used for advertising purposes. They enable us, among other things, to display the shopping cart across the pages of the website, where you can see exactly how many items are in your cart and the current total amount of your purchases.
These cookies serve in particular to make our offer more user-friendly, more effective and more secure.
The legal basis for the processing of information concerning our users by means of cookies is the performance of the contract and our legitimate interest in the user-friendly and secure provision of ART & STICK services.
6. Analysis Tools and Internet Technologies
The legal basis for the processing of your data in connection with all analysis tools and Internet technologies is our legitimate interest in analyzing website activities and the usage or browsing behavior of ART & STICK users, as well as our interest and the interest of third parties in displaying personalized advertising related to the user’s interests.
6.1. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, which are text files placed on your computer to help analyze your use of the website. As a rule, the information generated by the cookie about your use of this website is transmitted to and stored on a Google server in the United States. We have activated IP anonymization on this website; in this case, your IP address is shortened in advance by Google within Member States of the European Union or in other States party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and shortened there.
Google uses this information on behalf of the operator of this website in order to evaluate your use of the website, compile reports on website activity, and provide other services related to website and Internet use to the website operator. The IP address transmitted by your browser within the scope of Google Analytics and shortened before storage is not merged with other Google data.
6.2. Other Internet Technologies
On this website, information relating to the browsing behavior of website visitors is collected and stored anonymously through other Internet technologies. This data is stored by means of cookies – text files – on your computer and allows us to analyze browsing behavior anonymously. This includes, in particular, the city from which a website visitor originates, the type of browser and operating system used by the visitor, and which pages were visited on our website. Under no circumstances can the data collected in this way be used to personally identify the visitor of this website. The data collected is used exclusively for the purpose of improving our offer. For this reason, all IP addresses are shortened so that IP addresses are only processed in anonymized form. Any other use or transmission to third parties is excluded.
7. Payment Methods
In order to offer you the best possible choice of payment methods, we work together with our partners Hipay and Paypal. When redirected to these payment platforms, Art & Stick does not transmit any of your personal data.
The legal basis for the processing of your data in connection with the payment methods selected by you is the performance of the contract.
8. Data Processing Outside the European Economic Area
Personal data is not processed in States that do not fall within the scope of Directive 95/46/EC (European Data Protection Directive) or Regulation 2016/679 (General Data Protection Regulation, GDPR), unless the service providers mentioned in this Data Protection Statement or third-party suppliers whose registered office is established outside the European Economic Area are concerned. In such a case, before the transfer, we ensure that the recipient has either an adequate level of data protection (for example through the recipient’s self-certification under the EU-US Privacy Shield or through the conclusion of the European Union’s standard contractual clauses with the recipient) or sufficient authorization from our users.
9. Data Security
Art & Stick shall take the technical and organizational measures necessary to protect your personal data against destruction, loss, alteration, unauthorized access, or unauthorized processing.
10. Your Rights
If you wish to exercise your rights as a data subject, please send your written request to info@artandstick.be. Please ensure that you provide us with sufficient information to clearly identify you.
Right of access: You have the right to obtain information regarding the personal data we process about you.
Right to rectification and erasure: You also have the possibility at any time to have your personal data rectified or deleted, provided that the legal conditions are met. In the event of inaccuracy, we undertake to immediately correct the data stored by us following a notification from you to info@artandstick.be. Personal data shall be deleted where the legal conditions are fulfilled, in particular because the purposes for which the data was collected or otherwise processed are no longer necessary, or if such data has been processed unlawfully. Excluded from deletion are only the data we need in order to carry out outstanding tasks or to assert our rights and claims, as well as data that we are required to retain due to statutory retention periods. Where data is not deleted solely because a retention period still applies, its processing by us will nevertheless be restricted, even without you having to request this.
Right to restriction of processing: You may require us, provided that the legal conditions are met, to restrict the processing of your data.
Right to object to data processing: You also have the right to object at any time to the processing of your data by us. We will then stop processing your data unless we can demonstrate – in accordance with legal requirements – compelling legitimate grounds for continuing the processing which override your rights.
Objection to direct advertising: You may furthermore object at any time to the processing of your personal data for advertising purposes (“advertising opt-out”). However, this does not apply to data required for the performance of your order. Upon receipt of your objection, we undertake to no longer use, process or transmit the data concerned for purposes other than the performance of your order, and we will cease sending advertising materials.
Objection to processing based on the legal basis of “legitimate interest”: You also have the right to object at any time to the processing of your data by us insofar as such processing is based on the legal ground of legitimate interest. We will then stop processing your data unless we can demonstrate – in accordance with legal requirements – compelling legitimate grounds for continuing the processing which override your rights.
Withdrawal of consent: Insofar as you have given us consent for the processing of your data, you may withdraw it at any time with effect for the future, without affecting the lawfulness of the processing carried out up to the time of such withdrawal.
Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a data protection authority. For this purpose, you may contact the data protection authority competent for your place of residence.