Privacy Policy
Privacy policy
Privacy and confidentiality charter
This personal data protection policy applies to the website accessible at the address https://cumulusrainwear.com/fr/ and aims to inform you transparently about how we use them.
Who is responsible for processing my data? Which services are concerned?
Cumulus Rainwear, whose head office is located at avenue Conscience 248 1140 Evere., has an online sales website accessible at the address https://cumulusrainwear.com/fr/. This site allows us to receive orders from our customers and the data collected on this occasion is recorded and processed in a customer file.
Cumulus Rainwear is responsible for processing your data. This means that it decides why and how your personal information is used. Therefore, before using them, it is important to inform yourself of how your data will be processed.
Why do you process my data? On what legal basis?
Cumulus Rainwear is required to process your data to:
| Purpose | Legal Basis |
|
Manage order Payment Delivery |
Performance of a contract (Article 6.1.b of the GDPR) |
| Manage business prospecting activities | Consent (Article 6.1.a GDPR) |
| Measure the audience of our website Consent | Consent (Article 6.1.a GDPR) |
| Bookkeeping involving the retention of data for a period of 10 years |
Legal obligation (Article 6.1.c of the GDPR) |
How do we collect your data? What data is concerned?
A. Data collected from the order form
| Data category | Data detail |
| Relating to identity | Surname, first name, private address, telephone number and email address |
| Relating to computer identification | Email address and bank details |
| Data necessary for carrying out loyalty and prospecting actions | Name and email address |
B. Data collected when you browse the Cumulus Rainwear site
We collect data of a technical nature when using our services which may include:
• Site audience statistics
• Cookies necessary for the proper functioning of the site
• Marketing cookies
• Information about your referral URLs [where the user is coming from]
• The characteristics of the devices you use to access our services (device model, type of operating system, type and version of browser, language of use),
how long do you keep my data?
We have defined the different retention periods for your data in the table below:
| Data concerned | Retention period |
| Data necessary for order management and invoicing |
Throughout the duration of the commercial relationship (three years maximum) and ten years for accounting obligations. |
| Data relating to means of payment | The company Cumulus Rainwear does not keep data relating to the means of payment of its customers. They are collected during the order and deleted immediately after payment of the purchase of the order. |
Are you required to transfer data concerning me outside the European Union? For what reasons ?
As part of our activities, we use the services provided by several specialized companies, which act as subcontractors (mailing services, payment management, delivery).
In this context, we contractually ensure the compliance of the use of your personal information and the security standards used by these companies. If they are required to transfer your data outside the European Union, we make sure to conclude specific contracts with them and standard contractual clauses established by the European Commission to regulate the transfer of your data to these service providers.
What are my rights regarding my data?
In accordance with the General Data Protection Regulation (GDPR), you have the following rights:
• right of access (article 15 GDPR), rectification (article 16 GDPR), updating, completeness of your data
• right to block or erase your personal data (article 17 GDPR), when they are inaccurate, incomplete, ambiguous, outdated, or whose collection, use, communication or storage is prohibited
• right to withdraw your consent at any time (article 13-2c GDPR)
• right to limit the processing of your data (article 18 GDPR)
• right to oppose the processing of your data (article 21 GDPR)
• right to portability of the data you have provided to us, when your data is subject to automated processing based on your consent or on a contract (article 20 GDPR)
These rights can be exercised in the manner described below.
Who are the recipients of my data?
The recipients are the persons authorized to obtain communication of your data because of their functions. As part of our activities, the departments responsible for managing orders and invoicing for the company Cumulus Rainwear are recipients of all categories of data.
The company's subcontractors who are responsible for the delivery of its orders are recipients of the identity, address and telephone number of our customers.
Can I have additional information? Acquire help ?
For any question relating to the processing of your data by Cumulus Rainwear, you can contact Aurélie Aertgeerts (proprietor of Cumulus Rainwear) in complete confidentiality via this email address: cumulusrainwear@gmail.com
You also have the right to file a complaint with the Data Protection Authority under the conditions indicated on its website: https://www.autoriteprotectiondonnees.be/
How can I exercise my rights over my data?
You can exercise your other rights by email, specifying the right you wish to exercise in the subject of your email: cumulusrainwear@gmail.com(access, portability, limitation, opposition for reasons relating to your particular situation).
The exercise of your rights of access and portability requires that the data for which you exercise your rights be linked to the email address used to make your request. A response will then be sent to you within 1 month of receipt of your request.