3. PURPOSE OF THE COLLECTION OF PERSONAL DATA 

The data collected in the context of the use of the website, the application or in the physical shops are processed for the purposes described below. The regulations in force protect the privacy of users and require any data controller to be able to justify a legitimate basis for the said processing. 

The regulations thus provide for the following legal bases for processing: 

– information about Belgian legislation (volunteer law, vzw law, accounting law) (legal obligation);

– the performance of a contract to which the data subject is a party, such as a sales contract. Thus, some of the customer’s personal data are necessary to deliver the goods, manage the customer account and make returns;

– compliance with a legal obligation, in particular an accounting obligation, by keeping invoices;

– the prior consent of the data subject;

– information for users for which they consented (for example: newsletters);

– the legitimate interest of the data controller, with respect to the rights and freedoms of users. For example, improving the customer experience or preventing fraud may justify data collection.

Monde du Brol does not share any personal data for commercial purposes with third parties. The user has the possibility to modify his personal data and to withdraw his consent at any time by logging into his customer account.   

4. SERVICE PROVIDERS WITH ACCESS TO USERS’ PERSONAL DATA

The personal data collected is passed on to Monde du Brol’s service providers, who may carry out processing on behalf of Monde du Brol (subcontractors) and/or on their own behalf (data recipients). The recipients of the data are : 

– WordPress and Paypal, payment providers;

– any police or administrative authority in the context of judicial requests concerning the fight against fraud;

– customs services and providers in case of delivery abroad. Monde du Brol’s subcontractors may have access to the data collected for : – the preparation and dispatch of orders and the return of products;

– improving the content of websites and mobile applications;

– technical maintenance and development of the website, mobile applications and Monde du Brol’s internal applications, including entities that execute orders and provide web hosting, information storage, email service providers, as well as analysis services such as Google Analytics.  

Monde du Brol makes the necessary arrangements with these other parties to guarantee the security of your personal data. Monde du Brol never passes on personal data to other parties with whom Monde du Brol has not concluded a processing agreement.

5. USERS’ RIGHTS TO THEIR PERSONAL DATA 

In accordance with Articles 14 to 22 of Regulation 2016/679 of 27 April 2016, any natural person using the Monde du Brol website (www.mondedubrol.com) or mobile applications has the right to exercise the following rights: 

– A right of access, rectification and deletion of the data collected;
– A right to object to the processing of one’s data;
– A right to restrict processing;
– A right to portability of collected data;
– May formulate directives relating to the conservation, deletion and communication of their personal data after their death in accordance with article 40-1 of the law 78-17 of 6 January 1978. 

Finally, if Monde du Brol detects a violation of personal data likely to generate a high risk for the rights and freedoms of its users, it undertakes to inform the users concerned as soon as possible. The user may exercise all of these rights by logging into his or her customer area, by contacting customer service at hello@mondedubrol.com. The user must attach proof of identity to his request. In the event of no response or an unsatisfactory response, the user may refer the matter to the supervisory authority in their country of residence.  

6. DURATION OF DATA RETENTION 

User data will not be retained beyond the period strictly necessary for the purposes set out herein and in accordance with applicable laws and regulations. In this respect, data used for canvassing purposes may be kept for a maximum of 5 years from the closure of the user’s account or the last contact of the prospect concerned. The user’s data is deleted when the retention periods expire. 

Nevertheless, the data may be archived beyond the periods provided for the needs of research, the ascertainment and the prosecution of criminal offenses with the sole aim of making these data available to the judicial authorities, where necessary. Archiving implies that these data will be anonymized and will no longer be available for consultation online but will be extracted and stored on an autonomous and secure medium.  

7. SECURITY MEASURES FOR PERSONAL DATA COLLECTION

In its capacity as data controller, Monde du Brol undertakes to take all necessary precautions to preserve the security and confidentiality of the data and, in particular, to prevent it from being altered, distorted or accessed by unauthorised third parties. 

For example, the following measures have been taken:

– Data are always archived in the office of Hoarderlife in non-public places.

– We use a username and password policy on all our systems.

– We regularly test and evaluate our measures.

– Our employees are informed about the importance of the protection of personal data.

– Monde du Brol has concluded service contracts with partners who have a certain expertise in the field of data protection. All data is hosted in Belgium or in the European Union. 

Payment providers

The payment of purchases on the website and on our mobile applications is made either via Paypal or Woocommerce Payments.

(You can consult the Paypal T&Cs by clicking here.)

Monde du Brol does not have access to customer payment data.

However, the user can choose to save his payment card data in his customer account. These data are not stored by Monde du Brol, but by Woocommerce Payments and/or Paypal. The user can modify or delete these bank details at any time by logging into his customer account.  

You can object if you do not want us to pass on the data to (one of) the processors (see chapter ‘Passing on data to other parties’). In that case, Monde du Brol can decide to refuse participation in activities.