Privacy Policy

1.
Sarco NV (hereafter referred to as "Sarco") uses certain personal data of users, customers and other natural persons when delivering its (online) services and products. Sarco seeks to deal with these data in a correct, secure and ethical manner, and to provide customers and users with as much insight and control over their personal information as possible.

2.
In the following we would like to offer you more information about Sarco´s use of certain of your personal data, the manner in which and the purposes for which Sarco uses them. We also draw your attention to your rights and the control that you have over the collection of data.

3.
By "personal data" is understood any information that enables Sarco to identify you (directly or indirectly) as a natural person. Every processing of personal data that Sarco performs as controller or processor within the framework of its activities takes place in accordance with the General Data Protection Regulation EU/2016/679 (´GDPR´) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.

4.
If you still have questions after reading our Privacy Policy, you can address them at any time to privacy@sarco.be , after which we will respond to you as quickly as possible. You can also always find more information on the website of the Belgian Data Protection Authority.

5.
This Privacy Policy is applicable to, amongst other things, our website www.sarco.be and the physical and online relations with (potential) customers, suppliers and partners. Our Privacy Policy can possibly be amended in order to better protect you and to provide greater insight into the processing of your personal data. We recommend that you consult this Privacy Policy on our website from time to time so as to be sure to remain informed of the latest version.

If, upon reading this Privacy Policy, you do not agree with its content, we ask that you make no further use of the website and that you contact us at privacy@sarco.be.

6.
Sarco is a professional service provider and seller specialised in the production and delivery of clothing for healthcare and companies in various sectors, such as the linen rental sector, medical sector, retail chains, catering companies, restaurant chains and cleaning companies.

7.
Sarco´s company and contact details are as follows:

SARCO NV
Orlaylaan 14-18,
9140 Temse, Belgium

Enterprise no./VAT: BE 0415.874.929
E-mail: info@sarco.be
Tel.: 0032/3.776.13.85

8.
Sarco is responsible for the processing of personal data within the framework of its activities and for the conformity thereof with this Privacy Policy and the applicable legislation.

9.
Sarco requires certain of your data in order to be able to optimally offer our (online) services and steadily improve them for our customers and users. (For more information see 2. What information do we process and how do we obtain it?) For example, Sarco, as controller, uses personal data of (employees of) its (potential) customers in order to draw up its specifications, to provide its services and products, etc. In addition, the personal data give Sarco the possibility to communicate individually with customers or website users and to improve its website, or to engage in marketing communication. For more information see 3. Why do we process your personal information and on what basis?).

10.
Sarco works together with other entities within its structure in Belgium and third countries in order to perform its activities and to make possible a high-quality, fast and optimal provision of services. Sarco also calls upon external partners within the framework of e.g. (i) logistics and transport; (ii) administrative and accounting management and evaluation; (iii) IT and website support and (iv) communication and marketing. Within this framework, Sarco is obliged to share certain necessary personal data with these partners in order to conduct its activities (For more information see 4. With whom do we share your information and why? and 5. Storage limitation).

11.
Sarco strives to give its customers and users not just the best possible insight into the processing of their personal data, but also to provide them with as much control as possible over this processing. Consequently, you have a number of essential rights that you can easily exercise. For example, you possess rights to information, to access, to correct, to transfer, to object, to file a complaint and, in certain cases, even to be forgotten. (For more information see 6. What are your rights and how do you exercise them?).

12.
Finally, Sarco ensures that your data are securely processed and stored so that they are only accessible for a limited number of relevant persons and they can only be used for the necessary purposes. (For more information see 7. How do we deal securely with your information?).

13.
Within the framework of its activities, Sarco collects, consults and uses personal data of (potential) customers, internet users on its website, people who contact Sarco, partners, suppliers and employees.

14.
Within the framework of this Privacy Policy,  personal data means all data of natural persons which identify them or potentially could be identified with them. Personal data include e.g. your name, e-mail address, postal address, telephone number, payment data, clothing sizes, sex, employer, company position, account and order number. In particular, your IP address, surfing behaviour and preferences on our website www.sarco.be can also be regarded as personal data in so far as they are not anonymised and can possibly identify you personally.

15.
Sarco collects and processes more specifically the following categories of personal data:

2.1 Customer data

16.
Sarco collects and processes the identity and contact details of (potential) customers and their employees within the framework of its activity. In particular, this concerns the data of contact persons, owners and managers of a company or organisation that is a (potential) customer of Sarco. By ´customer data´ is understood:

Personal details

• First and last names
• Company
• Position
• Telephone number (fixed or mobile)
• E-mail address

Justification

• Sarco processes these data within the framework of canvassing; in case of a request for information or an offer; if you become a customer by calling upon our services; or when concluding and executing contracts.

2.2 Data within the framework of the provision of services

17.
Within the framework of its specific provision of services, Sarco often also processes other personal data than the above-described customer data. These are necessary for its activities, primarily related to the production and delivery of professional clothing and above all relate to the end user (wearer) of the clothing. Sarco uses this information strictly in order to ensure an optimal and correct provision of services to its customers. Consequently, the focus of the data processing lies on Sarco´s services and not on obtaining personal information. By ´data within the framework of the provision of services´ is understood:

Personal details

• First and last names of the end user
• Identity label
• Company
• Clothing sizes
• Shoe sizes
• Sex

Justification

• Sarco processes these data within the framework of orders of (professional) clothing in order to identify the end user and to produce and deliver correct, personalised clothing.

2.3 Employee data

18.
Sarco collects and processes personal information of its employees in order to allow them to work for Sarco and in order to fulfil its legal and tax obligations. By ´employee data´ is understood:

Personal details

• First and last names of the employee
• Sex
• Date of birth
• Marital status
• Home address
• Telephone number
• E-mail address
• Bank account number
• Social Security number

Justification

• Sarco processes these data in order to exercise its responsibilities as employer within the framework of its activities.

19.
During the employment relationship, Sarco will also process additional personal information, such as the salary, absences and vacation days, competency and health data, the starting and ending dates of the employment relationship, the reasons for the possible termination of the employment relationship, curricula vitae, etc. The processing of personal information of employees is also necessary within the framework of security and access to the buildings of Sarco. The processing of employee data is governed by Sarco´s internal privacy policy for employees.

2.4 Security information

20.
Sarco collects and processes the identity information (such as the name, position and company) of customers, visitors and users of its information systems also with a view to the security of its computer systems, buildings and infrastructure.

2.5 Other contact information

21.
In a certain number of cases, Sarco collects and processes the identity and contact details of natural persons who come into contact with it in a particular manner, such as at trade fairs, events, meetings, via its website, (online) social networks or electronic (marketing) communication. By ´other contact information´ is understood:

Personal details

• First and last names
• Company
• Position
• Telephone number (fixed or mobile)
• Fax number
• IP address (anonymised)
• Social network account
• E-mail address

Justification

• Sarco possibly processes certain of these data within the framework of its contacts with people other than (potential) customers, such as employees of competitors, suppliers, service providers, Internet users, etc.

2.6 Analytical data

22.
Sarco sometimes also collects and processes personal data - which are always anonymised or pseudonymised - in order to gain greater insight into how its services and website are used and experienced. By ´analytical data´ is understood:

Personal details

• Website preferences
• IP address (anonymised)
• Internet browser
• Electronic device
• Preferences with regard to provision of services and/or products
• E-mail address

Justification

• Sarco processes these data on the basis of website cookies for users of its website or on the basis of customer evaluations and analyses that it has conducted.

23.
For more information about our use of website cookies, please consult our Cookie policy .

24.
Sarco processes the above categories of personal data purely for internal use and for the purposes mentioned below. Under absolutely no circumstances will these personal data be passed on to third parties, unless this is necessary for handling the order or providing the service that a customer ordered, or to meet the standards of security and transparency, to fulfil Sarco´s legal obligations, or when explicitly indicated otherwise in a particular communication or action. Moreover, these personal data will not be kept for any longer than necessary for achieving the purposes for which they were obtained.

25.
We process personal data for the following purposes:

26.
Personal data that are processed by Sarco for the above-mentioned purposes are limited to the relevant data that are necessary for that specific purpose.

27.
In order to provide its services and to be able to process, deliver and monitor the orders of customers, Sarco necessarily makes use of certain third parties who assist it.

28.
In this respect, Sarco shares only the personal data that are absolutely necessary to implement the order or provide the service and on condition that the processing by third parties is done securely in accordance with the applicable legislation on the protection of personal data. For this we essentially call upon the following external parties:

1.  External logistical partners: Sarco uses external logistical partners, such as DPD, Jost SA and De Cock, in order to deliver the orders of its customers quickly and efficiently. Within the framework of this service, we communicate to these external logistical partners the company name and the delivery address, as well as the identity and contact details of the contact person on site, so that they can deliver the right order to the right address.
    
2. Subcontractors: Sarco can communicate certain personal information to subcontractors or external business partners when they provide certain services to or collaborate with Sarco within the framework of its activity or when they participate in providing services to the customer, for example with regard to clothing manufacture. If personal data of end users must be communicated to subcontractors, Sarco requires, in its contracts with the subcontractors involved, that they use these personal data solely within the framework of - and in so far as this is necessary for - the agreed service and in accordance with this Privacy Policy and the applicable law.
    
3. External service providers: Sarco calls on a number of external service providers who handle or support certain aspects of managing the business (such as administration and accounting, IT, website development, marketing, etc.). If external service providers call for the personal data of customers or users in order to be able to perform their assignment, the transfer and processing of these personal data are limited to what is strictly necessary, and clear agreements are made about the processing assignment.
    
4. The government: Within the framework of our legal and tax obligations, Sarco must pass on certain personal data to particular government bodies or supervisory authorities, such as the FPS Finance and the Flemish Tax Authority. It can also happen that Sarco is obliged to pass on certain data to other authorities, such as the police, the justice administration or investigative units, within the framework of fraud, abuse or oversubscriptions, such as with regard to money laundering prevention.

29.
Sarco acts in accordance with the applicable principles of Belgian and EU law concerning limitations on the storage of personal data. This means that Sarco removes or anonymises all personal data that are no longer necessary for the purpose for which they were collected.

30.
Sarco stores the personal data of customers and end users for different periods depending on the type of data and the activity for which they are processed, such as the obligations of Sarco as employer or as contracting party in an agreement with a customer or service provider. Sarco is often also obliged to retain personal data within the framework of (statutory) retention periods. These retention periods are e.g. applicable to money laundering prevention and fraud control, tax audits, safety and health, employment obligations, etc. Sarco is also entitled to retain certain data as a function of their evidentiary value for (potential) legal conflicts. For this in particular account is taken of the general prescription period of 10 years for personal legal claims (article 2262bis Civil Code).

Your right to information

31.
You have the right to clear and transparent information on how Sarco deals with your personal data and what rights you can exercise in that respect. This Privacy Policy thus also seeks to provide you with the best possible insight into the use of your personal data and to give you control over this use.

Your right of access

32.
You have the right to ask Sarco at any time to access the personal data on you that we dispose of.  Such a request can be simply addressed to privacy@sarco.be. We undertake to process such requests as quickly as possible.

Your right to rectification

33.
You have the right to have the personal data that Sarco possesses corrected if they are incorrect or out of date and/or to have them supplemented if they are incomplete. You can do this simply by sending an e-mail to privacy@sarco.be.

Your right to erasure of your data (in order to be forgotten)

34.
You have the right to ask Sarco to remove all of the data on you that it possesses. Sarco is obliged to accede to such a request in the statutorily defined cases such as: when the personal data are no longer necessary for the purposes for which they were collected or processed, when the processing rests solely on your consent and you withdraw this consent, or the data are being wrongfully processed by us.

35.
In this limited number of cases we will remove your data that are no longer necessary for the execution of a contract, the fulfilment of a legal obligation or for an activity in our predominantly legitimate interest. You can send a request for data erasure at any time to privacy@sarco.be.

Your right to restriction of the data processing

36.
You have the right to request restriction of the processing of your data. This means that Sarco may retain, but not use, your data. You possess this right in a number of legally defined cases, such as in case of dispute concerning the correctness of your data, an unlawful processing by us, or the fact that the processing of the data is no longer necessary for the purposes for which they had been collected or processed. You can submit such a restriction request at any time by sending an e-mail to privacy@sarco.be.

Your right to object

37.
You have the right to object to the processing of your personal data if you do not agree with the way Sarco is doing it. This right applies for the personal data that Sarco uses for direct marketing purposes or whose processing is based solely on our legitimate interest. You can object to the processing of your data at any time by sending an e-mail to privacy@sarco.be.

Your right to portability of your data

38.
You have the right to receive data that you gave to Sarco within the framework of the contracts that you concluded with Sarco in a machine-readable format, so that you can keep these data yourself (or have them kept). You can send a request for portability of your data at any time to privacy@sarco.be.

Your right to file a complaint

39.
You have the right to file a complaint about the way Sarco is dealing with your data. If you have a complaint, you can firstly turn to us. We promise to deal with the personal data of our customers and users as correctly as possible, and to resolve complaints as quickly as possible. You can file your complaint in the following ways:

• Electronically: privacy@sarco.be
• By post: SARCO NV, Orlaylaan 1418, 9140 Temse, Belgium
• By telephone: 0032/3.776.13.85

40.
You also have the right to lodge your complaint with the Belgian Data Protection Authority by submitting an electronic complaint to contact@apd-gba.be or sending a signed and dated letter to Drukpersstraat 35, 1000 Brussels.

41.
Sarco takes reasonable, physical, technological and organisational precautionary measures in order to prevent (i) unauthorised access to your personal data, as well as (ii) the loss, misuse or alteration of your personal data. For this purpose we keep your personal data in a secure cloud with data centers within the European Union.

42.
Access to your personal data is limited to a select number of employees who require them in order to provide and optimise our services.