Your rights under the General Data Protection Regulation
The General Data Protection Regulation (GDPR) is a European Union regulation that governs the collection, use, and protection of personal data. At Cadeaux d'Exception, we are committed to complying with GDPR requirements and respecting your privacy rights.
Cadeaux d'Exception acts as the data controller for personal information collected through our website and services. Our contact details are:
Cadeaux d'Exception
Rue de la Montagne 45
1000 Brussels, Belgium
Email: [email protected]
As a data subject, you have the following rights:
You have the right to obtain confirmation as to whether we process your personal data and, if so, to access that data along with information about how it is processed.
You have the right to request correction of inaccurate personal data and to have incomplete data completed.
Also known as the "right to be forgotten", you may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for its original purpose.
You may request that we limit how we use your data while we verify its accuracy or assess a request you have made.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
You may object to processing of your personal data based on our legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects.
To exercise any of your GDPR rights, please contact us at [email protected] with your request. We will respond within one month of receiving your request. In complex cases, this period may be extended by two additional months, and we will inform you of any such extension.
To verify your identity, we may request additional information. This is a security measure to ensure that personal data is not disclosed to unauthorised persons.
We process personal data based on the following legal grounds:
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
If you believe that our processing of your personal data violates GDPR, you have the right to lodge a complaint with the Belgian Data Protection Authority:
Autorité de protection des données / Gegevensbeschermingsautoriteit
Rue de la Presse 35
1000 Brussels, Belgium
Website: www.dataprotectionauthority.be
We may update this GDPR information page to reflect changes in our practices or legal requirements. We encourage you to review this page periodically.
Last updated: January 2024