Protection of Personal Data

Necessity of data processing.

We collect and process the personal/company data (your name and address, telephone number, email address, delivery and payment information) that we receive from you in order to execute the order and keep you informed about its progress, as well as for customer management, accounting, and direct marketing purposes. Providing this information is a necessary condition, without which we cannot accept your order. This data also allows us to keep you informed about changes in our assortment, promotions, etc. To make shopping at Discovermeat.be as pleasant as possible, we store your personal data and the information relating to your order and the use of our services on a secure server, with your consent.

Confidentiality.

We respect the privacy of all our customers and ensure that the personal information you provide to us is treated confidentially. We will not transfer your personal data to third parties and will only make it available to parties involved in the execution of your order. These third parties are obliged to respect the confidentiality of your personal data. Your personal data will remain stored as long as the processing purposes (execution of the order and provision of information) remain relevant.

Right to object.

You have the right to object to the processing of your personal data and/or to withdraw your consent at any time, without affecting the lawfulness of the processing based on consent before its withdrawal.

You also have the right, for reasons relating to your specific situation, to object to the processing of your personal data, including profiling, when such processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or when the processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, except where your interests or fundamental rights and freedoms override those interests, particularly when the data subject is a child. The controller shall cease processing the personal data unless he/she demonstrates compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or grounds related to the establishment, exercise, or defence of legal claims.

When personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, including profiling related to direct marketing. If you object to the processing of your personal data for direct marketing, the personal data will no longer be processed for these purposes.

Access – correction – data portability.

It is always possible to obtain access to the stored personal data by logging into your account, by email (info@districarne.be), or by letter (Distri-Carne bvba, Attn: Customer Service Department, 8560 WEVELGEM, Tramstraat 11, 056/33.77.63). We will provide you with the information we hold as soon as possible, and no later than within one month, after verifying your identity. If one or more of the data are incorrect or incomplete, you may request correction by contacting us via telephone, email, or letter. In accordance with current regulations, we must inform you that we will notify every recipient of your personal data about the requested correction unless this proves impossible or requires disproportionate effort. We will also provide information about these recipients upon your request. As stated above, we treat your personal data with the necessary confidentiality.

You have the right to transfer the personal data concerning you to another controller. If technically possible, you have the right to request that your personal data be directly transferred by us to another controller. The exercise of your right to data portability does not affect your rights regarding the restriction of processing. The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. The right to portability does not prejudice the rights and freedoms of others.

Right to restriction of processing.

You have the right to obtain restriction of the processing of your personal data:

a) during the period allowing us to verify the accuracy of your personal data if you contest its accuracy;

b) if the processing is unlawful and you oppose the erasure of the data and instead request restriction of its use;

c) if we no longer need your personal data for the purposes of processing, but you require it for the establishment, exercise, or defence of legal claims;

d) pending verification of whether the legitimate grounds of the controller override yours when you have objected to the processing.

When processing has been restricted in accordance with the paragraph above, the personal data shall, with the exception of storage, only be processed with your consent, or for the establishment, exercise, or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest for the Union or a Member State.

The controller will inform you before the restriction of processing is lifted.

Automated individual decision-making, including profiling.

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you. This does not apply if the decision:

a) is necessary for entering into or performing a contract between us;

b) is authorised by Union or Member State law applicable to the controller and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests;

c) is based on your explicit consent.

In the cases referred to in points a and c, the controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention, to express your point of view, and to contest the decision.

Decisions referred to in the second paragraph may not be based on special categories of personal data in accordance with Article 9(1) of Regulation (EU) 2016/679, unless you have given explicit consent or the processing is necessary for reasons of substantial public interest and appropriate safeguards have been implemented to protect your legitimate interests.

Notification of a personal data breach.

If a breach occurs involving your personal data that is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall inform the data subject without undue delay, providing a clear and simple description of the nature of the breach, including the name and contact details of the data protection officer or other contact point from whom more information can be obtained. The controller shall also communicate the likely consequences of the breach and the measures taken or proposed to address it, including measures to mitigate possible adverse effects.

This notification is not required when:

a) the controller has implemented appropriate technical and organisational protection measures and these have been applied to the personal data concerned by the breach, such as encryption;

b) the controller has taken subsequent measures ensuring that the high risk to your rights and freedoms is no longer likely to materialise;

c) notification would require disproportionate effort, in which case a public communication or similar measure may suffice to inform data subjects effectively.

If the controller has not informed you of the breach, the supervisory authority may, after assessing the likelihood of a high risk, require the controller to do so or decide that the conditions above have been met.

Erasure of your data.

You may request that your personal data be erased without undue delay. We are legally obliged to comply when:

a) the personal data are no longer necessary for the purposes for which they were collected or processed;

b) you withdraw your consent and no other legal basis for processing exists;

c) you object to processing and there are no overriding legitimate grounds, or you object to processing for direct marketing;

d) the personal data have been unlawfully processed;

e) the personal data must be erased to comply with a legal obligation under Union or Member State law applicable to us;

f) the personal data have been collected in connection with the offer of information society services provided for remuneration, at a distance, by electronic means, and at the individual request of the service recipient.

Regulations specify that when the personal data have been made public—which we do not do—and must be erased, the controller must take reasonable measures to inform other controllers processing the data that any link to, copy of, or reproduction of those data must also be erased.

The above does not apply if processing is necessary:

a) for exercising the right to freedom of expression and information;

b) for compliance with a legal obligation under Union or Member State law or for the performance of a task carried out in the public interest or in the exercise of official authority;

c) for reasons of public interest in the area of public health under Article 9(2)(h) and (i) and Article 9(3) of Regulation (EU) 2016/679;

d) for archiving in the public interest, scientific or historical research, or statistical purposes under Article 89(1) of Regulation (EU) 2016/679, insofar as the right to erasure is likely to render impossible or seriously impair the achievement of the processing objectives;

e) for the establishment, exercise, or defence of legal claims.

Complaints

If you have complaints regarding the processing of your personal data, you may contact the supervisory authority.