This is the privacy policy of GAASCH PACKAGING NV/SA (hereinafter referred to as 'GAASCH PACKAGING', 'us' or 'we'). This privacy policy applies to all services and deliveries by GAASCH PACKAGING and we explain how we handle your personal data.

All personal data we receive from you will be processed in accordance with applicable data protection regulations, in particular the General Data Protection Regulation 2016/679 of 27 April 2016 ("GDPR") and applicable national legislation, as well as this privacy policy.

1. The controller of your personal data is:

GAASCH PACKAGING NV/SA
Z.5 Mollem 530
1730 Mollem
Belgium
Company number: 0404.889.282

If you have any questions about the processing of your personal data, feel free to contact us:

•    By e-mail: info@gaaschpack.eu
•    By regular mail: to the address above
•    By phone: +32 2 454 14 11

2. We process the following personal data:

•    Name and surname
•    (Company) Address 
•    Billing address
•    E-mail address
•    Phone number
•    Language
•    VAT-number
•    Payment details (bank account number, method of payment)
•    IP-address and cookies
•    Other information you may provide to us (for example, information about your business position)

3. We obtain this personal data directly from you and/or through a third party (customers, trading partners and publicly available information).

4. We process your personal data for one or more of the following purposes:

a)    Customer management: preparing quotations, entering into customer contracts, providing our services and delivery of our goods, invoicing and after-sales service.
b)    Supplier management: comparing suppliers, requesting quotations and entering into supplier contracts, managing orders placed and organizing payments.
c)    Accounting: preparing our invoices, keeping our accounts and complying with the accounting obligations, including preparation of the annual accounts.
d)    Security: the registration of our visitors, access control and camera surveillance*.
e)    Website: optimizing our website and answering your contact request, etc.

Legal basis: 

•    Your consent to the processing (art. 6, §1, (a) GDPR): e** 
•    The entering into and the performance of a contract (art. 6, §1, (b) GDPR): a, b and c
•    Various legal obligations (art. 6, §1, (c) GDPR), such as those contained in the Belgian Code of Economic Law (“WER”) (art. I.1 WER, art. III.82 WER, art. III.89 WER and art. III.90 WER), the Belgian Royal Decree of 29 April 2019 implementing the Code of Companies and Associations (“KB WVV”) (double-entry accounting), the Belgian Code on Companies and Associations (“WVV”) (art. 3:1 WVV) and the Belgian Income Tax Code (“WIB”) (art. 320 WIB): c
•    The legitimate interest to organize our B2B management, to promote and provide our services and to guarantee the safety of our employees, visitors and offices (art. 6, §1, (f) GDPR): a, b, d and e

(*) the processing of camera images, indicated with the mandatory icon, is based on your consent in accordance with Article 8, paragraph 3, 1e of the Belgian Camera Act. 
(**) when placing essential or functional cookies: see our cookie policy.

5. We do not process sensitive personal data (e.g. personal data revealing your racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic data, biometric data, data related to your sex life or sexual orientation) or personal data related to criminal convictions and violations.

6. We share the personal data, where appropriate and insofar as this is necessary for the performance of a contract or based on our legitimate interest or a legal provision, with our partners, service providers, suppliers and/or (sub)contractors, government departments, banks and insurance companies, accountants and auditors and external (legal) advisers. In addition, third parties with whom we collaborate for the storage and management of our data also have access to this personal data (IT providers).

A list of these third parties with whom we share your personal data is available upon simple written request.

7. We do not keep your personal data longer than necessary to fulfill the purposes described in this privacy policy.

In principle, your personal data will be stored for the duration of your contractual relationship with GAASCH PACKAGING and up to ten years after the end of the contract. Depending on the data, the purpose pursued or on the basis of our legal obligations or our legitimate interests, the retention period may be shorter or longer.

8. We have implemented appropriate technical and organizational measures to maintain the confidentiality of your personal data and to protect your data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access.

We have made the necessary contractual agreements with the third parties with whom we collaborate and will not transfer your personal data outside the European Economic Area without the guarantee that your data also enjoys an equivalent level of protection there.

9. You can always contact us to exercise the following rights:

•    a request for access or rectification of your personal data
•    a request for erasure of your personal data
•    a request to restrict the processing of your personal data
•    an objection to the processing of your data
•    a request for transfer of your data
•    a complaint if you believe that we are not acting in accordance with applicable data protection law. You can also file a complaint with the Belgian Data Protection Authority

You can always contact us for this:

•    By e-mail:  info@gaaschpack.eu
•    By regular mail: to the address of the registered office above
•    By phone: +32 2 454 14 11

We undertake to provide you with a reasoned answer to your request within a period of 1 month. Depending on the complexity of the request and/or the number of requests, this period can be extended by another 2 months if necessary. This answer will indicate in a substantiated manner why we, if necessary, will (not) comply with your request.

If necessary, we reserve the right to charge a reasonable fee for the administrative costs associated with granting the request.

10. This privacy policy may be changed from time to time, within the limits of applicable data protection regulations. You always have access to the most current version via our website (https://www.gaaschpack.eu).

11. If you believe that we are not acting in accordance with applicable data protection legislation, you can always file a complaint with the Belgian Data Protection Authority:

Belgian Data Protection Authority
Drukpersstraat 35, 1000 Brussels, Belgium
Tel: +32 (0)2 274 48 00
Fax: +32 (0)2 274 48 35
contact@apd-gba.be