1. Introduction

1.1. General
Tailorfit, a division of XePOS cvba (hereinafter “We” or “Our” or “Us”) understand that your privacy is important to you and that you are concerned about how your personal data is used. We respect and value the privacy of everyone who visits our website /www.tailorfit.be or uses our services. At the time you use our services or visit our website, we will only collect and use personal data in a manner described here and in a manner consistent with our obligations and rights under applicable privacy laws.
This Privacy Statement applies when we act as a data controller for the processing of personal data from our website and from our services, in other words, when we determine the purpose and means of processing that personal data.
Transparency in the processing of personal data is a crucial part of the General Data Protection Regulation (AVG, EU Regulation 2016/679 known in English as the General Data Protection Regulation the “GDPR”) and all other applicable national laws affecting the processing of personal data, such as the Framework Law of 30 July 2018 on the Protection of Natural Persons with regard to the Processing of Personal Data. The premise of this Privacy Statement is that your personal data will be processed in accordance with the relevant laws and regulations. It also takes into account principles such as proper and careful processing.
Please read this Privacy Statement carefully and make sure you understand it.

1.2. What is personal data?
Personal data is defined in the AVG as “any information relating to an identifiable person who can be identified, directly or indirectly.” Personal data is, in simpler terms, any information about you that allows you to be identified. Personal data refers to obvious information, such as your name and contact details, as well as less obvious information, such as identification numbers, electronic location data and other online identifiers.

1.3. Principles in the processing of personal data
To comply with the above, the following principles apply:
– All processing of personal data is based on one of the grounds as indicated in Article 6 of the AVG and the Framework Law of 30 July 2018;
– Justified purposes are formulated prior to processing. The purposes for which personal data are processed are explicitly defined and in plain language;
– The processing of personal data is, in view of the purpose, relevant. This means that the amount of personal data and the type of personal data is limited to the personal data considered necessary for the specified purpose;
– The processing of personal data is in reasonable proportion to the intended purpose. In line with this, the processing of personal data will be done in the least intrusive way;
– Technical and organizational measures will be taken so that the personal data to be processed are accurate and up to date;
– In accordance with the applicable security standards, personal data will be appropriately secured;
– Personal data will not be processed further in a way that is incompatible with the purposes for which they were originally obtained;
– Personal data are not processed for longer than is considered necessary for the established purposes of the processing;
– The rights of data subjects are respected and observed;

2. Contact details

Our website and services are provided and managed by
– Combell, registered in ….. under registration number ……….. with registered offices located at…………,
– Tailorfit, a division of XePOS cvba, registered in Belgium under registration number 0818.536.775 with registered offices at Antwerpsesteenweg 124, 2630 Aartselaar.
You may contact us:
(a) by mail, to the postal address listed above;
(b) via the contact form on our website;
(c) by e-mail, using info@tailorfit.be.

3. What personal data is processed and how is this data used?

3.1. What personal data are processed and for what purposes?
In sections 3.1.1 to 3.1.3, we will set out for each category of personal data:
(a) the purposes for which we may process personal data; and
(b) the legal bases for the processing.
We may process any of your personal data identified in this privacy notice when necessary for the establishment, exercise or defense of legal claims, whether in judicial proceedings or in administrative or extrajudicial proceedings. The legal basis for this processing is our legitimate interests, namely the protection and exercise of our legal rights, your legal rights and the legal rights of others.
In addition, we may process your personal data when necessary to comply with a legal obligation to which we are subject, or to protect your vital interests or the vital interests of another natural person.

3.1.1 Usage data
We may process data about your use of our website and services (“usage data”). Usage Data may include your IP address, geographical location, browser type and version, operating system, referral source, duration of your visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your use of the Service. The source of the usage data is our analytical tracking system. This usage data may be processed for the purpose of analyzing the use of the website and services. The legal basis for this processing is consent and/or our legitimate interests, which are to monitor and improve our website and services. We do this through the use of cookies. Please refer to our cookie statement in this regard.

3.1.2 User data
We may process your information that you provide to us to schedule an appointment (“user data”). User data may include your first name, last name, telephone number, email address. User data may be processed to schedule your appointment for a demo and to enable and monitor our services. The legal basis for this processing is consent.

3.1.3 Correspondence Data.
We may process information contained in or relating to a communication you send us (“correspondence data”). Correspondence Data may include the content of the communication and metadata related to the communication. Correspondence Data may be processed for the purposes of communicating with you and maintaining records. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and our business and communication with users.

3.2 Processors
A processor is a natural or legal person who processes personal data at our request or on our behalf. We may sometimes contract with this party to provide certain products and/or services. In other words, we use processors because it is necessary for the provision of services. In this case, we will enter into a written agreement with the processor whereby the security of your personal data is guaranteed by the processor. The processor will always act in accordance with our instructions.
We use the following categories of processors:
– Companies we have engaged for ICT -technical support and hosting purposes;
– Companies we have engaged for analytical purposes.

4. Provision of your personal data to third parties

We may provide your personal data to a partner identified on our website for the purpose of scheduling the appointment. This partner acts as the data controller of the personal data. The partner has its own privacy statement, which applies to the further use of your personal data.
We may disclose your personal data when this is necessary to comply with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.

5. International transfer (outside EEA) of your personal data

We will only store or transfer your personal data within the European Economic Area (the “EEA”). The EEA consists of all EU Member States plus Norway, Iceland and Liechtenstein. This means that your personal data will be fully protected under the AVG or according to equivalent legal standards.

6. Retention and deletion of your personal data

Personal data that we process for the purposes described in section 3.1 will be retained for no longer than 14 days after scheduling the appointment.
Without prejudice to the above, we may retain your personal data where necessary to comply with a legal obligation to which we are subject, or to protect your vital interests or the vital interests of other natural persons.

7. Security of your personal data

We will take appropriate technical and organizational measures to secure your personal data and to prevent the loss, misuse or alteration of your personal data.
Standard security measures

8. Amendments

We may update this policy from time to time by publishing a new version on our website. For example, this may be necessary if the law changes, or if we change things in a way that affects the protection of personal data. We recommend that you check this page occasionally to ensure that you are happy with any changes to this privacy statement.
We will notify you of significant changes to this privacy statement via email.

9. Your rights

Some rights are complex and not all details are included here. Therefore, please read the relevant provisions and guidelines from supervisory authorities for a full explanation of these rights.
Your most important rights under the AVG are:
A. the right to inspect;
B. the right to rectification;
C. the right to erasure (forgetfulness);
D. the right to restrict processing;
E. the right to object to the processing;
F. the right to data portability;
G. the right to lodge a complaint with a supervisory authority; and
H. the right to withdraw your consent.
You may exercise your rights in relation to your personal data by written notification to us. See Chapter 2 for contact details.
We will respond to your request within one month of receiving your request. Normally, we aim to provide a complete response within that time. However, in some cases, especially if your request is more complex, more time may be required, up to a maximum of three months from the date we receive your request. You will be kept fully informed of progress.

9.1. The right of access
You have the right to confirm whether or not we are processing your personal data and, where we are doing so, to access the personal data, together with certain additional information. This additional information includes data on the purpose of the processing, the relevant categories of personal data and the recipients of the personal data. Provided that the rights and freedoms of others are not affected, we will provide you with a copy of your personal data. The first copy will be provided free of charge, but additional copies may be provided for a reasonable fee.

9.2. The right to correction
You have the right to have inaccurate personal data about you corrected and, taking into account the purposes of the processing, to have incomplete personal data about you completed.

9.3. The right to erasure (forgetfulness)
In some circumstances, you have the right to have your personal data erased without undue delay. These circumstances include: the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed; you withdraw your consent to processing based on consent; you object to the processing under certain rules of applicable data protection law; the processing is for direct marketing purposes; and the personal data has been unlawfully processed. However, there are exclusions to the right to erasure. The general exclusions include where processing is necessary: for the exercise of the right to freedom of expression and information; for compliance with a legal obligation; or for the establishment, exercise or defence of legal claims.

9.4. The right to restrict processing
In some circumstances, you have the right to restrict the processing of your personal data. These circumstances are: you dispute the accuracy of the personal data; the processing is unlawful, but you oppose its erasure; we no longer need the personal data for our processing, but you need personal data for the establishment, exercise or defense of legal claims; and you have objected to the processing, pending verification of that objection. If processing is restricted on this basis, we may continue to store your personal data. However, we will only process them in other ways: with your consent; for the establishment, exercise or defence of legal claims; for the protection of the rights of another natural or legal person; or for reasons of overriding public interest.

9.5. The right to object to the processing
You have the right to object to our processing of your personal data for reasons relating to your particular situation, but only to the extent that the legal basis for the processing is that the processing is necessary for the purposes of the legitimate interests pursued by us or by a third party. If you raise such an objection, we will cease processing the personal data unless we can demonstrate that there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or that the processing is for the establishment, exercise or defense of legal claims.
Furthermore, you have the right to object to our processing of your personal data for scientific or historical research purposes or statistical purposes on grounds relating to your particular situation, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

9.6. The right to data portability
To the extent that the legal basis for our processing of your personal data is based on:
(a) consent; or
(b) that the processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request before entering into a contract, and such processing is carried out by automated means, you have the right to receive your personal data from us in a structured, commonly used and machine-readable format. However, this right does not apply where doing so would compromise the rights and freedoms of others.

9.7. Right to lodge a complaint with a supervisory authority
If you believe that our processing of your personal data is in breach of data protection legislation (AVG), you have the right to lodge a complaint with a supervisory authority responsible for data protection. In Belgium, the supervisory authority is the Data Protection Authority (GBA).
GBA contact details
Data Protection Authority
Rue du Printing 35, 1000 Brussels
+32 (0)2 274 48 00
contact@apd-gba.be
https://www.gegevensbeschermingsautoriteit.be

9.8. The right to withdraw your consent
Insofar as the legal basis for our processing of your personal data is consent, you have the right to withdraw such consent at any time. Revocation does not affect the lawfulness of the processing before the revocation.

10. Updating your personal data

Please let us know if the personal data we hold about you needs to be corrected or updated.