Sarco NV (hereafter referred to as "Sarco") uses certain personal data of users, customers and other natural persons when delivering its (online) services and products. Sarco seeks to deal with these data in a correct, secure and ethical manner, and to provide customers and users with as much insight and control over their personal information as possible.
In the following we would like to offer you more information about Sarco´s use of certain of your personal data, the manner in which and the purposes for which Sarco uses them. We also draw your attention to your rights and the control that you have over the collection of data.
By "personal data" is understood any information that enables Sarco to identify you (directly or indirectly) as a natural person. Every processing of personal data that Sarco performs as controller or processor within the framework of its activities takes place in accordance with the General Data Protection Regulation EU/2016/679 (´GDPR´) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
- Quick overview: Sarco and your data
- What information do we process and how do we obtain it?
- Why do we process your personal information and on what basis?
- With whom do we share your information?
- Storage limitation
- What are your rights and how do you exercise them?
- How do we deal securely with your information?
1. Quick overview: Sarco and your data
Sarco is a professional service provider and seller specialised in the production and delivery of clothing for healthcare and companies in various sectors, such as the linen rental sector, medical sector, retail chains, catering companies, restaurant chains and cleaning companies.
Sarco´s company and contact details are as follows:
9140 Temse, Belgium
Enterprise no./VAT: BE 0415.874.929
Sarco requires certain of your data in order to be able to optimally offer our (online) services and steadily improve them for our customers and users. (For more information see 2. What information do we process and how do we obtain it?) For example, Sarco, as controller, uses personal data of (employees of) its (potential) customers in order to draw up its specifications, to provide its services and products, etc. In addition, the personal data give Sarco the possibility to communicate individually with customers or website users and to improve its website, or to engage in marketing communication. For more information see 3. Why do we process your personal information and on what basis?).
Sarco works together with other entities within its structure in Belgium and third countries in order to perform its activities and to make possible a high-quality, fast and optimal provision of services. Sarco also calls upon external partners within the framework of e.g. (i) logistics and transport; (ii) administrative and accounting management and evaluation; (iii) IT and website support and (iv) communication and marketing. Within this framework, Sarco is obliged to share certain necessary personal data with these partners in order to conduct its activities (For more information see 4. With whom do we share your information and why? and 5. Storage limitation).
Sarco strives to give its customers and users not just the best possible insight into the processing of their personal data, but also to provide them with as much control as possible over this processing. Consequently, you have a number of essential rights that you can easily exercise. For example, you possess rights to information, to access, to correct, to transfer, to object, to file a complaint and, in certain cases, even to be forgotten. (For more information see 6. What are your rights and how do you exercise them?).
Finally, Sarco ensures that your data are securely processed and stored so that they are only accessible for a limited number of relevant persons and they can only be used for the necessary purposes. (For more information see 7. How do we deal securely with your information?).
2. What information do we process and how do we obtain it?
Within the framework of its activities, Sarco collects, consults and uses personal data of (potential) customers, internet users on its website, people who contact Sarco, partners, suppliers and employees.
Sarco collects and processes more specifically the following categories of personal data:
2.1 Customer data
Sarco collects and processes the identity and contact details of (potential) customers and their employees within the framework of its activity. In particular, this concerns the data of contact persons, owners and managers of a company or organisation that is a (potential) customer of Sarco. By ´customer data´ is understood:
- First and last names
- Telephone number (fixed or mobile)
- E-mail address
- Sarco processes these data within the framework of canvassing; in case of a request for information or an offer; if you become a customer by calling upon our services; or when concluding and executing contracts.
2.2 Data within the framework of the provision of services
Within the framework of its specific provision of services, Sarco often also processes other personal data than the above-described customer data. These are necessary for its activities, primarily related to the production and delivery of professional clothing and above all relate to the end user (wearer) of the clothing. Sarco uses this information strictly in order to ensure an optimal and correct provision of services to its customers. Consequently, the focus of the data processing lies on Sarco´s services and not on obtaining personal information. By ´data within the framework of the provision of services´ is understood:
- First and last names of the end user
- Identity label
- Clothing sizes
- Shoe sizes
- Sarco processes these data within the framework of orders of (professional) clothing in order to identify the end user and to produce and deliver correct, personalised clothing.
2.3 Employee data
Sarco collects and processes personal information of its employees in order to allow them to work for Sarco and in order to fulfil its legal and tax obligations. By ´employee data´ is understood:
- First and last names of the employee
- Date of birth
- Marital status
- Home address
- Telephone number
- E-mail address
- Bank account number
- Social Security number
- Sarco processes these data in order to exercise its responsibilities as employer within the framework of its activities.
2.4 Security information
Sarco collects and processes the identity information (such as the name, position and company) of customers, visitors and users of its information systems also with a view to the security of its computer systems, buildings and infrastructure.
2.5 Other contact information
In a certain number of cases, Sarco collects and processes the identity and contact details of natural persons who come into contact with it in a particular manner, such as at trade fairs, events, meetings, via its website, (online) social networks or electronic (marketing) communication. By ´other contact information´ is understood:
- First and last names
- Telephone number (fixed or mobile)
- Fax number
- IP address (anonymised)
- Social network account
- E-mail address
- Sarco possibly processes certain of these data within the framework of its contacts with people other than (potential) customers, such as employees of competitors, suppliers, service providers, Internet users, etc.
2.6 Analytical data
Sarco sometimes also collects and processes personal data - which are always anonymised or pseudonymised - in order to gain greater insight into how its services and website are used and experienced. By ´analytical data´ is understood:
- Website preferences
- IP address (anonymised)
- Internet browser
- Electronic device
- Preferences with regard to provision of services and/or products
- E-mail address
- Sarco processes these data on the basis of website cookies for users of its website or on the basis of customer evaluations and analyses that it has conducted.
Sarco processes the above categories of personal data purely for internal use and for the purposes mentioned below. Under absolutely no circumstances will these personal data be passed on to third parties, unless this is necessary for handling the order or providing the service that a customer ordered, or to meet the standards of security and transparency, to fulfil Sarco´s legal obligations, or when explicitly indicated otherwise in a particular communication or action. Moreover, these personal data will not be kept for any longer than necessary for achieving the purposes for which they were obtained.
3. Why do we process your personal information and on what basis?
We process personal data for the following purposes:
Personal data that are processed by Sarco for the above-mentioned purposes are limited to the relevant data that are necessary for that specific purpose.
4. With whom do we share your information and why?
In order to provide its services and to be able to process, deliver and monitor the orders of customers, Sarco necessarily makes use of certain third parties who assist it.
In this respect, Sarco shares only the personal data that are absolutely necessary to implement the order or provide the service and on condition that the processing by third parties is done securely in accordance with the applicable legislation on the protection of personal data. For this we essentially call upon the following external parties:
- External logistical partners: Sarco uses external logistical partners, such as DPD, Jost SA and De Cock, in order to deliver the orders of its customers quickly and efficiently. Within the framework of this service, we communicate to these external logistical partners the company name and the delivery address, as well as the identity and contact details of the contact person on site, so that they can deliver the right order to the right address.
- External service providers: Sarco calls on a number of external service providers who handle or support certain aspects of managing the business (such as administration and accounting, IT, website development, marketing, etc.). If external service providers call for the personal data of customers or users in order to be able to perform their assignment, the transfer and processing of these personal data are limited to what is strictly necessary, and clear agreements are made about the processing assignment.
- The government: Within the framework of our legal and tax obligations, Sarco must pass on certain personal data to particular government bodies or supervisory authorities, such as the FPS Finance and the Flemish Tax Authority. It can also happen that Sarco is obliged to pass on certain data to other authorities, such as the police, the justice administration or investigative units, within the framework of fraud, abuse or oversubscriptions, such as with regard to money laundering prevention.
5. Storage limitation
Sarco acts in accordance with the applicable principles of Belgian and EU law concerning limitations on the storage of personal data. This means that Sarco removes or anonymises all personal data that are no longer necessary for the purpose for which they were collected.
Sarco stores the personal data of customers and end users for different periods depending on the type of data and the activity for which they are processed, such as the obligations of Sarco as employer or as contracting party in an agreement with a customer or service provider. Sarco is often also obliged to retain personal data within the framework of (statutory) retention periods. These retention periods are e.g. applicable to money laundering prevention and fraud control, tax audits, safety and health, employment obligations, etc. Sarco is also entitled to retain certain data as a function of their evidentiary value for (potential) legal conflicts. For this in particular account is taken of the general prescription period of 10 years for personal legal claims (article 2262bis Civil Code).
6. What are your rights and how do you exercise them?
Your right to information
Your right of access
You have the right to ask Sarco at any time to access the personal data on you that we dispose of. Such a request can be simply addressed to email@example.com. We undertake to process such requests as quickly as possible.
Your right to rectification
You have the right to have the personal data that Sarco possesses corrected if they are incorrect or out of date and/or to have them supplemented if they are incomplete. You can do this simply by sending an e-mail to firstname.lastname@example.org.
Your right to erasure of your data (in order to be forgotten)
You have the right to ask Sarco to remove all of the data on you that it possesses. Sarco is obliged to accede to such a request in the statutorily defined cases such as: when the personal data are no longer necessary for the purposes for which they were collected or processed, when the processing rests solely on your consent and you withdraw this consent, or the data are being wrongfully processed by us.
In this limited number of cases we will remove your data that are no longer necessary for the execution of a contract, the fulfilment of a legal obligation or for an activity in our predominantly legitimate interest. You can send a request for data erasure at any time to email@example.com.
Your right to restriction of the data processing
You have the right to request restriction of the processing of your data. This means that Sarco may retain, but not use, your data. You possess this right in a number of legally defined cases, such as in case of dispute concerning the correctness of your data, an unlawful processing by us, or the fact that the processing of the data is no longer necessary for the purposes for which they had been collected or processed. You can submit such a restriction request at any time by sending an e-mail to firstname.lastname@example.org.
Your right to object
You have the right to object to the processing of your personal data if you do not agree with the way Sarco is doing it. This right applies for the personal data that Sarco uses for direct marketing purposes or whose processing is based solely on our legitimate interest. You can object to the processing of your data at any time by sending an e-mail to email@example.com.
Your right to portability of your data
You have the right to receive data that you gave to Sarco within the framework of the contracts that you concluded with Sarco in a machine-readable format, so that you can keep these data yourself (or have them kept). You can send a request for portability of your data at any time to firstname.lastname@example.org.
Your right to file a complaint
You have the right to file a complaint about the way Sarco is dealing with your data. If you have a complaint, you can firstly turn to us. We promise to deal with the personal data of our customers and users as correctly as possible, and to resolve complaints as quickly as possible. You can file your complaint in the following ways:
- Electronically: email@example.com
- By post: SARCO NV, Orlaylaan 1418, 9140 Temse, Belgium
- By telephone: 0032/3.776.13.85
You also have the right to lodge your complaint with the Belgian Data Protection Authority by submitting an electronic complaint to firstname.lastname@example.org or sending a signed and dated letter to Drukpersstraat 35, 1000 Brussels.
7. How do we deal securely with your information?
Sarco takes reasonable, physical, technological and organisational precautionary measures in order to prevent (i) unauthorised access to your personal data, as well as (ii) the loss, misuse or alteration of your personal data. For this purpose we keep your personal data in a secure cloud with data centers within the European Union.
Access to your personal data is limited to a select number of employees who require them in order to provide and optimise our services.