We, Data Value information Technology, firstname.lastname@example.org, with DED License 896397 and address, Business Bay, Prime Tower, Office 1504, with its product Order24, hereinafter ‘Order24’, attach great importance to the protection of privacy and personal data of all users of our website, website application and application, hereinafter ‘Services’.
With 'processing', we mean any processing of data. Some examples: collecting, recording, deriving, saving, structuring, storing, consulting, viewing, sharing, sending, clearing, deleting, archiving, ...
Order24 can process your personal data in the capacity of controller for the following purposes:
1) To execute its Services, based on the contractual relationship or associated previous steps.
Personal identification details (last name, first name, email address, phone number), consumption habits (order time, order content, payment method, order amount) and financial details (card holder, card number, …) are being processed in order to execute the order.
2) To secure and optimize its Services, based on the contractual relationship or associated previous steps.
Electronic identification details (IP address, cookies, HTML5-storage) and information relating to your device (browser, operating system, app version, …) are being processed to secure our Services, combat fraud, improve your browsing experience and optimize our Services. If (a part of) the processing would not be necessary to deliver on the purposes above, your explicit consent will be asked.
Order24 can also use Google Analytics, a web analysis service provided by Google Inc. (hereinafter referred to as "Google"). However, Order24 does not communicate any personal data to Google (How Google processes data can be found here). By analysing these data, Order24 learns how the Services are used, so that Order24 can improve and optimize them.
3) To answer to your requests addressed to Order24, based on the contractual relationship or associated previous steps.
If you fill in a Order24 contact form, your personal identification details (last name, first name, email address and phone number) are being processed, based on the contractual relationship or associated previous steps, in order to provide an answer to your request.
4) For research and statistical purposes, based on legitimate interests.
Your personal details can be processed for research and statistical purposes, i.e. to conduct market research, measure customer satisfaction and to improve our Services.
In our opinion, statistical research can lead to an improvement of our Services and to innovation, which benefits both yourself and the community. This kind of processing can include profiling. Profiling does not impact you, except that it can lead to a personalized satisfaction research and improvement of our Services, which are advantages for you. However, you are not obliged to give your personal data for this purpose. You can object to this (see further).
We also process your data into anonymized statistics that we provide to affiliated companies. This provides them with a general and aggregated overview about the use of our Services.
1) A registered merchant, as processor
If you use our Services to place orders, Order24 transfers your data to the merchant at whom you placed an order so he can execute the order correctly.
2) Other (sub)processors
Order24 relies upon external (sub)-processors. This means, among other things, we temporarily transfer data to third parties for certain tasks or research queries, if we don't have the means to perform these ourselves, for example hosting website, mail platform, helpdesk tools, cash connections, payment processing, … If we do this, we always ensure your data are processed in a confidential manner and used in a secure manner. We always stipulate this in an agreement concluded with these processors.
In the event of a merger, acquisition, sale, joint venture and/or in the event of any other change of control within Order24, Order24 reserves the right to transfer the personal data processed by Order24 to any third party 'as part of such a merger, acquisition, sale, joint venture and/or any other change of control'.
Order24 stores your personal information for up to 10 years after you terminate your account for our Services. After this period, your information will be deleted or anonymized and kept for reporting purposes. Anonymized data cannot lead to a natural person and is therefore not personal data.
Cookies are text files that are placed on your computer in order to collect standard Internet logging information and behavioural information. This information is used to track visitor behaviour on the website and to draw up statistical reports about the website.
Right of access:
You can ask us which personal data of yours we process, why we process them, which personal data categories we process, with which third party categories we share your personal data, where the processed data came from and - if applicable - which reasoning we use when processing personal data automatically.
Right of rectification:
Every user can currently correct his own account details via the account settings. In order to keep your details up to date, we request you personally edit your details.
Right of erasure:
You can ask us to delete your account. By doing so, you will no longer be able to use our Services.
Right of limitation of processing:
In the cases provided for in Belgian and European privacy legislation. When the processing within our Services is limited, your personal data (except for storage) will only be processed with your authorisation or for the establishment, exercise or defence of legal claims or for the protection of the rights of another private individual or legal entity or for reasons of public interest. After obtaining this processing limitation, we will always notify you before the processing limitation is lifted.
Right of transmission of the data:
You have the right to receive the personal data provided by you in a conventional, structured and machine-readable form and you have the right to transmit these personal data to a different controller, where the processing is based on the legal bases authorisation or contractual relationship..
Right of rectracting one’s authorisation:
If the processing of personal data is based on an authorisation basis, you, as a user, have the right to retract your authorisation at any given time. You can do so by cancelling your account.
Right of objection:
You have the right to object to the processing of your personal data only if the processing is based on public interest or a legitimate interest. You also have the right to object to the processing of your personal data for marketing purposes. This is currently possible by opting out for the desired merchant via the account settings. You also have the right to file a complaint with the data protection authority.
You can exercise your rights by sending an email to email@example.com
For the sake of completeness, we would like to inform you that you have the right to file a complaint with the data protection authority (for Dubai: https://www.difc.ae/business/operating/data-protection/ ).