1.What we need
Our Personal Data Protection Policy governs the use and storage of your data. You can see our Personal Data Protection Policy at [https://www.oystershell.com/en/privacy-notice]
Oystershell uses your data in compliance with EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EG.
Oystershell is a Controller of the personal data you provide us. We collect the following types of personal data from you:
- First and last name
- E-mail address
- Address data
- phone number
- IP address
- Payment details
- Client number
- Purchase history
- Online click behaviour
2.Why we need it
We need your personal data in order to provide you with the following services:
·purchasing articles via the website and using the functionalities on the website;
·handling your order and informing about its progress;
·sending personalized messages after your consent based on, among other things, your interests and your purchase history (both online and offline). We will tell you more about this in the section 'profiling';
·the processing of possible participation in competitions, workshops, promotions and other matters;
·answering questions asked via the website, for example;
·improving our services, both online and offline.
3.What we do with it
Your personal data is processed in Merelbeke located in Belgium. Hosting and storage of your data takes place in Merelbeke which is located in Belgium.
No third party providers have access to your data, unless specifically required by law.
4.How long we keep it
The majority of the information on our clients are stored, for the period of 10 years after an opt-out or after the end of that contractual relationship. The period is necessary to guarantee the exercise our legal rights or to defend ourselves against legal claims.After this period, your personal data will be irreversibly destroyed. Any personal data held by us for marketing and service update notifications will be kept by us until such time that you notify us that you no longer wish to receive this information.
Please see [2.6 Data Retention Policy] for more information on our personal data retention schedule.
5.What are your rights?
Should you believe that any personal data we hold on you is incorrect or incomplete, you have the ability to request to see this information, rectify it or have it deleted. Please contact us for our [Data Subject Access Request Form] (Available on request GDPR@oystershell.com).
In the event that you wish to complain about how we have handled your personal data, please contact Data Protection Officer at firstname.lastname@example.org or in writing at Nijverheidsweg 10 - B -9820 MERELBEKE.
Our DPO will then look into your complaint and work with you to resolve the matter.
If you still feel that your personal data has not been handled appropriately according to the law, you can contact https://www.privacycommission.be and file a complaint with them.