1. Data controller
1.1 The data controller is LUZ, whose registered office is located at 25 rue tomberg, 1200 Woluwe- Saint-Lambert, Belgium (hereinafter “LUZ”) and acting through PRODUCTION ET ASSOCIÉES ASBL having its registered office at: Rue Coenraets, 72 1060 Brussels.As such, LUZ – and / or its service providers acting in its name and on its behalf – determines the purposes, technical and legal means of processing personal data and undertakes to take all the organizational measures necessary to guarantee a safe processing and in accordance with the Data Protection Act of January 6, 1978, as amended by the Act of August 6, 2004 (hereinafter, “the Law”) and the European Regulation of April 26, 2016 on the protection of personal data with regard to the processing of personal data and the free movement of such data (hereinafter the “GDPR Regulation”).
1.2. LUZ is free to choose any natural or legal person who processes the personal data of Users at his request and on his behalf (hereinafter “the subcontractor”). Where applicable, LUZ undertakes to select a subcontractor offering sufficient guarantees as to the technical and organizational security measures for the processing of personal data.
2. Processing of personal data
2.1. Use of the Site, access to some of its sections and / or any request for information or services from Site Users may result in the communication of personal data. The processing of this data by LUZ, in its capacity as Data Controller, and / or by service providers acting in the name and on behalf of LUZ, will comply with the Law and the GDPR Regulations.
2.2. This Privacy Policy is intended to allow Users to know, even before accessing the various sections of the Site and communicating their personal data, how LUZ processes the personal data of Site Users. The User must necessarily read it before communicating his personal data by completing the forms provided for this purpose in the various sections of the Site.
2.3 Personal data will be processed mainly in an automated manner, with procedures strictly linked to the purposes mentioned in point 3.
LUZ ensures that Users’ personal data is treated in complete security and confidentiality and takes appropriate measures to avoid the loss, misuse, alteration and deletion of this personal data.
2.4. LUZ also collects certain personal data from Users in order to recognize them and offer them an optimal, high-quality and personalized user experience. This collection also makes it possible to correct any errors on the Site. The information collected relates to the User’s connection (IP address, geographical area, day and time of consultation, services consulted and / or used, etc.) as well as the device from which the connection takes place.
2.5 The Site, to better meet the needs of the User and the personalized ones, uses cookies. The purpose of the cookie is to indicate your visit to the Site.
2.5. Any breach, partial or inaccurate information on personal data, indicated by an asterisk, and therefore necessary for the performance of the service requested, makes it impossible. However, any breach, partial or inaccurate information on optional personal data is of no consequence.
3. Purposes of processing personal data
>Users’ personal data is processed to enable the processing and delivery of orders placed on the Site.
The ordering process on the website www.luzbyluz.com requires the creation of a Customer account in which their information is stored and protected by a password that the Customer chooses.
Subject to validation by an “opt-in” from the customer, personal information (personal data, e-mail address, gender, etc.) may also be used by LUZ and / or its partners for commercial purposes such as sending newsletter or solicitations.
4. Personal data that may be processed
User information that they provide by filling in forms or creating their customer account is collected and processed. This information may include the name, gender, size, address, email address and telephone number of Users.
5. Consent
The User has the right to withdraw his consent at any time. The withdrawal of consent does not call into question the lawfulness of the processing already carried out, based on the consent formulated before this withdrawal. This right can be exercised electronically at the following address daniela@luzbyluz.com.
6. Retention period of personal data
In accordance with the legal requirements imposed by the Law and the GDPR Regulation, LUZ only keeps Users’ personal data for the time reasonably necessary to allow the fulfillment of the purposes for which they are processed.
7. Communication of Users’ personal data for internal purposes
7.1. Personal data may be transmitted to LUZ employees or collaborators who, by operating under the direct authority of LUZ, are appointed data processors or sub-contractors and receive the appropriate operational instructions. Personal data may also be brought to the attention of employees or collaborators of data controllers if the latter, appointed by LUZ, so decide and subject to such data being processed in accordance with the purposes pursued.
7.2. LUZ ensures that subcontractors, employees or collaborators guarantee the same level of protection as itself and ensures that these subcontractors, employees or collaborators, process personal data only for the purposes authorized by the purposes pursued. , with the necessary discretion and security.
7.3. Personal data directly communicated by Users by filling out online forms may be communicated and processed by external service providers acting in the name and on behalf of LUZ.
7.4 The data are not likely to be transferred to a country outside the European Union.
8. The rights granted to Users
8.1. LUZ guarantees fair and lawful processing of Users’ personal data.
8.2. LUZ guarantees the User a right of access to his personal data.
In accordance with article 15 of the GDPR Regulation, the User has the right to obtain from LUZ the following information (but not exhaustive) concerning his personal data:
1. the purposes of the processing;
2. the categories of personal data concerned;
3. the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular recipients who are established in third countries or international organizations;
4. where possible, the envisaged retention period for personal data or, where this is not possible, the criteria used to determine this period;
5. the existence of automated decision-making, including profiling, referred to in paragraphs 1 and 4 of article 22 of the GDPR Regulation and, where applicable, at a minimum, useful information concerning the underlying logic , as well as the importance and intended consequences of this processing for the data subject.
8.4. LUZ guarantees the right to limit processing.
The User has the right to obtain the limitation of the processing of his personal data in the cases listed in article 18 of the GDPR Regulation.
8.5. LUZ guarantees the right to data portability.
In accordance with article 20 of the GDPR Regulation, Users have the right to receive from LUZ personal data concerning them in a structured, commonly used and machine-readable format. They also have the right to transmit this data to another controller, without LUZ obstructing it in the cases provided for by the GDPR Regulation.
8.6. LUZ guarantees the right to object to data processing
The User has the right at any time to oppose the processing of his personal data, when there are compelling and legitimate reasons relating to his particular situation. In this case, LUZ will no longer process the personal data, unless there are legitimate and compelling reasons for the processing which prevail over the interests and rights and freedoms of the User, or for the observation, exercise or defense of legal claims.
8.7. LUZ guarantees the right to make a complaint
The User has the right to lodge a complaint concerning the processing of his personal data by LUZ with the National Commission for Computing and Liberties, the competent body for French territory.
8.8. The User may, at any time, exercise the rights mentioned above by sending an electronic message to the following address daniela@luzbyluz.com.
9. Limitation of liability of the controller
The Site may contain hypertext links to websites controlled and operated by third parties unrelated to LUZ. Where applicable, LUZ cannot be held responsible for the content of these sites, nor for the personal data protection practices of these third parties.
LUZ cannot be held responsible for the loss, corruption of data or identity theft, which may be caused in particular, but not limited to, by the presence of viruses or computer attacks. 10. Procedures for modifying User data The User may, at any time, modify the data provided by sending an electronic message to the following address daniela@luzbyluz.com.
11. Cookies
Cookies are used on the site to improve the User experience.
The cookie identifies the User’s computer and allows the site to remember his personal settings. Cookies are also used for statistical purposes.
The User can program his browser to know when a cookie is going to be activated. This allows the User to reject the use of the cookie or to ask the browser to delete the cookie at the end of his visit to the site. The online store cannot be used if cookies are refused.
Once logged in, a user identifier will be assigned to the User, which allows anonymized internet tracking on several media (tablet, desktop, phone, etc.).
No personal data is collected or connected to the user identifier and the User can oppose the use of such cookies or by sending an email to the following address daniela@luzbyluz.com.
12. Modification of the Privacy Policy
LUZ reserves the right to modify this Confidentiality Policy in order to comply with the obligations provided for by laws protecting privacy or in order to adapt it to its practices. Consequently, the User is invited to consult it regularly in order to be aware of any modifications and adaptations.