Privacy policy

1. Identity and contact details of the controller

This privacy policy applies to all personal data processed by Filou Company Inc., with registered office at Baliestraat 5, 8510 Marke, with company number VAT BE 0435.732.215, which is the controller of this website.

The controller attaches great importance to your privacy and therefore processes your personal data in accordance with the European Regulation 2016/679 of 27 April 2016 on the protection of natural persons with regard tot the processing of personal data (herinafter the "GDPR") as well as any future or additional legislation implementing it, insofar as applicable.

For futher questions or remarks regarding the way in which we handle your personal data, you can always contact us, either by e-mail to info@filoufriends.com or by post to Baliestraat 5, 8510 Marke, Belgium.

2. What does "processing personal data" mean?

The processing of data (hereinafter "data") covers every processing of data that can identify you as a natural person. Which data this concerns is set out in this Privacy Policy. The notion of 'processing' is very broad and covers, among other things, the collection, storage and use of your data, or the sharing of it with third parties.

3. Which data do we process?

Below we clarify which data data we may process about you. Depending on the specific situation, your preferences and the way in which you contact us, we do not process all of the data set out below about you.

Customer data

If you visit the physical store, we process your purchase data and payument data.If security cameras are installed in the physical store, we process these images in line with the Camera Act. We also possibly process the data below on the basis of the following distinction:

Do you want a customer card?

In that case we ask you for your e-mail address, name possibly address and possibly telephone number. In addition, the name, gender and date of birth of children that you wish to have linked to your accant can be added. Order and payment data are also processed. In the context of a survey, feedback data may also be processed.

We further process your purchase history.

Do you not want a customer card?

If you do not create a customer card, nor wish to receive the receipt by e-mail, no further personal data are processed.

If you visit the webshop and place an order, we additionally process the data of your account such as login data, statistical data relating to your account, order data and order history, delivery data, invoicing and payment data and data of the children that you wih to link to your account.

Website visitors - evets - fashion shows

Contact details, media

Models for catalogue - fashion shows

Contract data of the child and representatives, media (photos - videos), data relating to the agreement

Suppliers - service providers

• From our suppliers and service providers we additionally possibly process the data below:
• Contractual data (e.g. company name, address, VAT number, agreement, etc.);
• Payment and invoicing data (e.g. payment card data, invoices, etc.);
• Feedback, testimonials, quotes, promotional content such as photos and videos (e.g. Reviews and experiences relating to our (co)operation, testimonials, quotations, attendance at events, etc.

Candidate employees

From candidate employees we additionally possibly process the data below. Of course this will largely depend on which data you yourself wish to provide to us in connection with your application.

• Personal particulars;
• Work-related data:
• Personality data;
• Photos

4. For which purposes do we process your data?

Filou Company processes personal data for the following clearly defined purposes:

• Management of customer relations and purchases: we process your data for the creation and management of your customer card, selling in our stores and via our webshop, sending till receipts by e-mail on request and handling orders, deliveries and returns - including communication with the delivery service and payment provider.
• Transactional communication: we send automatic confirmation e-mails upon the creation of an account, upon the placing of an order, upon dispatch and upon availability for collection. These e-mails are a purely informative nature.
• Newsletter: we inform you about new collections, actions and promotions on the basis of a legitimate interest, namely maintaining the commercial relationship. You can unsubsribe at any time via the link at the bottom of every newsletter.
• Birthday actions: if upon registration you have provided the name and date of birth of a child, we send a birthday surprise by e-mail or post.
• Organisation of events, competitions and give-aways: when you take part in a fashion show, a competition or give-away, we process the data provided by you solely for the organisation and follow-up of that specific event or that specific action.
• Take-Back system: if you wish to hand in used clothing of Filou Company nv, we process your contact details for the organisation of the collection and the link to your customer card.
• Management of suppliers and service providers: we process contact details of employees and suppliers for contact management, invoicing and operational communication.
• Candidate employees: Data of applicants are processed solely with a view to the assessment of their application and possible recruitment.
• Photoshoot processing: Models and / or their representatives conclude an agreement prior to the photoshoot, setting out the purposes of the processing and specific rights of the parties + explicit consent for the processing of the media.

5. On the basis of which grounds for processing do we process your data?

We process your data for the purposes described below and do not collect or process more data or other types of data than those that are necessary for these purposes.

We only process your data insofar as it is based on one of the grounds for processing listed in the GDPR, and as set out hereafter.

Legal obligation

Certain data are processed by us in order to comply with legal or regulatory obligations incumbent on us. For example in the contect of tax and accounting obligations or in the field of data protection.

Necessary for the performance of the agreement

Certain data are processed by us because it is necessary for entering into, performing or terminating an agreement with you as data subject. For example when you wish to make a purchase via our webshop, whereby we ask for your name, e-mail and address so that your order can be carried out correctly.

Legitimate interest

Certain data are processed by us on the basis of our legitimate interest wihich in specific cases outweighs any possible detriment to your rights. For example for sending our newsletter of other communications to our existing customers; improving the quality of our services; training employees and evaluating and keeping data and statistics relating to our activities, in the broad sense; retaining and using evidence in the context of liability, proceedings or disputes and with a view to archiving the activities; and guaranteeing security, both online on this website and in our company buildings.

Consent

Certain data are processed by us on the basis of your consent. For example promoting activities among potential customers; the use of certain analytical or marketing cookies; the placing of photos containing personal data on our website and social media channels. Data of applicants after the recruitment procedure will only be kept subject to consent.

6. Origin of the data

Most of the data we process about you we have also obtained directly from you. Within the framework of our services, it is possible that we obtain data about you via external service providers or public sources.

7. With whom do we share your data?

We do not pass on your data to third parties, unless where this is strictly necessary in light of the aforementioned purposes, or if we are legally obliged to do so.

Where necessary we call upon external service providers (processors), in support of our operational purposes such as the management of our websites and IT systems. These external service providers carry out, where applicable, certain processing of data on our behalf. We will only share your data with these external service providers to the extent that this is necessary for the relevant purpose. The data may not be used by them for other purposes. Moreover, these service providers are contractually bound to safeguard the confidentiality of your data by means of a "processing agreement" concluded with these parties.

Specifically, this has the consequence that we share your data, insofar as relevant in your situation, with the following parties for the following purposes, whereby these third parties in certain cases act as processors on our behalf:

• Postal companies, transport and delivery companies if we have to send you something by post;
• Payment service providers if we receive payments form you, or vice versa;
• External representatives and consultants or any other parties involved in the context of our main or ancillary activities;
• The processors who assist us in the IT field in operation our organisation, with a view to secure and efficient digital data management within our organisation;
• Public authorities, judicial bodies and practitioners of regulated professions such as accountants and lawyers, with a view to compliance with our legal obligations and the defence of our interests, insofar as required.

8. How long do we keep your data?

We do not keep your data longer than is necessary for the purpose for which the data were collected or are processed. Since the period for which the data may be kept depends on the purposes for which the data were collected, the storage period may vary in each situation. Sometimes specific legislation will oblige us to keep the data for a certain period. Our retention periods are always based on legal requirements and balancing on your rights and expectations against what is useful and necessary for the fulfilment of the purposes. After expiry of the retention period your data are erased of anonymised.

9. Where do wo keep your data and how are they protected?

We provide appropriate security measures on a technical and organisational level, in order to avoid whitin the framework of our activities the destruction, loss, falsification, alteration, unauthorised access or unlawful disclosure to third parties as well as any other unauthorised processing of these data.

In addition, we also pay attention to ensuring that the processors we call upon likewise take appropriate security measures in order to limit the risks of incidents as far as possible.

The data we process remain at all times within the European Economic Area (EEA).

10. What are your rights?

You have various rights with regard to the data we process about you. If you wish to invoke one of the following rights, please contact our GDPR officer via the contact details set out under the first heading of this Privacy policy.

Right of access and copy

You have the right to inspect your data and to obtain a copy of it. This right also includes the possibility to request further information about the processing of your data, including as regards the categories of data processed about you and the purposes fo which this takes place.

Right of amendment or rectification

You have the right to have your data amended if you believe that we hold incorrect data.

Right to erasure of data (right to be forgotten)

You have the right to request that we erase your data without undue delay. However, we will not always be in a position to grant such a request, including where we still need the data in connection with an ongoing agreement, or where keeping certain of your data for a certain period is legally required.

Right to restriction of processing

You have the right to restrict the processing of your data. In this way the processing is temporarily suspended until, for example, there is certainty about its accuracy.

Right to withdraw your consent

Where the processing is based on your consent, you have the right to withdraw this consent at any time by contacting us. For marketing messages that you receive from us by e-mail on the basis of your consent, you can easily withdraw this consent by clicking the unsubscribe link at the bottom of such a message.

Right to object

You have the right to object to the processing of your data that is based on the legitimate interest. This must take place on the basis of specific reasons relating to your situation. You can also object to the use of your data for direct marketing purposes. For marketing messages by e-mail an opt-out will always be provided.

Right to portability

You have the right to obtain in electronic form the data that you yourself have provided to us with your consent or in performance of an agreement. In this way they can easily be transferred to another organisation. You moreover have the right to request us to transfer your data directly to another organisation, if this is technically possible.

Right to lodge a complaint with your supervisory authority

If you were of the option that we process your data in an incorrect manner, you always have the right to lodge a complaint with your supervisory authority in the field of data protection.

Belgian Data Protection Authority (DPA)
Drukpersstraat 35
1000 Brussels
contact@apd-gba.be

11. How can you exercise your rights?

You can exercise your rights by conacting us, either by e-mail to info@filoufriends.com or by post to Baliestraat 5, 8510 Marke, enclosing a copy of the front of your identity card or another document by which you can be identified. The copy will only be used to identify you in accordance with the GDPR.

12.Changes

AWe deserve the right to amend this Privacy policy. The most recent version is available at all times on our websites. The date on which this Privacy policy was last amended can be found at the top. In the event of a substantial change to the Privacy policy, we will inform the data subjects on whom this may have an impact directly where possible.