Privacy policy
BIOSIL PRIVACY NOTICE
This privacy notice provides information on how Bio Minerals collects and processes your personal data when you visit our website to sign up for a newsletter or purchase a product with us.
1. Important information and who we are
Bio Minerals NV is the controller and responsible for processing your personal data.
If you have any questions about this privacy notice or our data protection practices please contact [email protected]
CONTACT DETAILS
Full name of legal entity: Bio Minerals NV
Email address: [email protected]
Postal address: Zenderstraat 12, 9070 Destelbergen, Belgium
2. The data we collect about you
2.1. Expressly communicated data
We may collect, use, store and transfer different kinds of personal data you expressly communicate to us when using our website and services:
- Identity Data includes first name, maiden name, last name, username or similar identifier
- Contact Data includes billing address, delivery address, email address and telephone numbers
- Financial Data includes bank account and payment card details
- Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us
- Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses
- Usage Data includes information about how you use our website, products
- Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences
2.2. Personal data indirectly collected
Other data are collected automatically when using our website through the use of cookies or similar technologies placed on your device. This includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, surfing behavior, ... For more information about cookies and to know how you can edit your preferences, please read our Cookie Policy.
3. How we use your personal data
We collect and use your personal data based on one or more of the following legal bases:
- if necessary to pursue our legitimate interests, to the extent that your fundamental rights and freedoms do not outweigh those interests, e.g. to know your preferences, better personalise our product offerings, prevent fraud and secure our website.
- if this is necessary for the performance of our agreement with you, e.g. if you make a purchase;
- if you have agreed to this, e.g. if you have given your prior express consent, we may use your email address to send you newsletters or marketing communications; or
- if we are required to process your personal data to comply with applicable laws and regulations.
Depending on the context, we may use your personal data to:
- Provide you with the products or services you requested;
- Provide after-sale services;
- Respond to your queries, including exercising your data subject rights;
- Manage complaints and litigation;
- Detect, prevent, and combat fraudulent or illegal activities;
- Improve our products and services;
- Send you direct marketing, with your prior consent;
- Fulfil our legal obligations, including providing information to regulatory bodies when legally required, particularly to comply with our obligations in preventing and combating fraud, money laundering, and the financing of terrorism.
4. How we share your personal data
For the purposes set out in section 3 of this Privacy Policy, we may share your personal data with selected third parties including:
- public authorities (including judicial and police authorities);
- our professional advisors (e.g. lawyers);
- analytics and search engine providers that assist us in the improvement and optimisation of our site
- social media networks;
- suppliers of IT related services; Shopify, Cloudflare, Google CDN, Stackadapt.
- suppliers of marketing related services; Klaviyo, Zoho, HubSpot, YouTube, Meta, Google, Pagesense, Bing, TikTok, DoubleClick, Pinterest
- online survey providers; Hotjar,
- banks: PayPal, Stripe, Shopify Payments
We will also disclose your information to third parties:
- in the event that we sell or buy any business or assets, in which case we may disclose your information to the prospective seller or buyer of such business or assets;
- if Bio Minerals or substantially all of its assets are acquired by a third party, in which case information held by it about its customers may be one of the transferred assets;
- if we are under a duty to disclose or share your information in order to comply with any legal obligation or to protect the rights, property, or safety of Bio Minerals, our customers, or others. This includes exchanging information with public authorities (including judicial and police authorities) in the event of, for example, a cyber security incident;
- if you specifically consented thereto.
5. How long will you use my personal data for?
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
The length of time the data collected through the various cookies will be retained may vary depending on whether the cookie is placed by Bio Minerals or by third parties. We are not responsible for the retention period of third party cookies. Your data collected through the use of cookies placed by Bio Minerals will not be retained beyond the time strictly necessary for the purposes set forth in this Policy and in any case for a maximum of twenty-five (25) months. Beyond that, it will be deleted when the retention periods expire, unless a longer retention period is permitted or imposed by a legal or regulatory requirement, or unless it is subject to a process of anonymization of the data to make it impossible to "re-identify" individuals. These anonymised data, no longer being personal data, can thus be kept freely and enhanced, in particular by the production of statistics.
6. International transfers
We will transfer your information to a destination outside the European Economic Area (the EEA), including to the United States and India, if that is appropriate (i) to achieve any of the purposes set out under section 3 and/or (ii) to disclose your information to a third party in accordance with section 4 of this Privacy Policy.
If we transfer your information outside of the EEA, we will make sure that your information is protected by the following safeguards:
- the laws of the country to which your information is transferred ensure an adequate level of data protection (Article 45 GDPR); or
- the transfer is subject to data protection clauses approved by the European Commission (Article 46.2 GDPR)
If you wish to receive more information relating to the transfers of your information and/or the safeguards that have been implemented (including on how to receive a copy thereof), you can contact us through the contact details set out in section 1.
7. Your legal rights
You have certain rights regarding the information we hold about you. These rights can be exercised by contacting us as set out below:
- you have the right to access the information we keep about you – this is because we want you to be aware of the information we have about you and to enable you to verify whether we process your information in accordance with the applicable data protection laws and regulations;
- you have the right, under certain circumstances, to block or suppress further use of your information. When the processing is restricted, we can still store your information, but we can no longer use it;
- if your information is inaccurate or incomplete, you have the right to request the rectification of your information;
- you have the right, under certain circumstances, to request the deletion or removal of your information from our systems;
- you have the right to lodge a complaint about the way we handle or process your information with your national data protection authority;
- if our processing of your personal information is based specifically on your consent, you have the right to withdraw that consent at any time. This includes your right to withdraw consent to our use of your information for direct marketing purposes;
- you have the right to obtain from us, under certain circumstances, your information in a structured, commonly used and machine readable form so you can reuse it for your own purposes across different services.
You also have the right to object to certain types of processing, including processing for direct marketing purposes.
However, note that we may need to retain certain information, for example for legal or administrative purposes (e.g. keeping of accounting records).
For all requests set out above, please send an email with “data privacy request” in the subject line to [email protected]. We will respond to your request as soon as practically possible. If we need more than one month (from receipt of your request) to respond to your request, we will come back to you and let you know.