PRIVACY AND COOKIE POLICY

This is the privacy and cookie policy (hereinafter referred to as the ‘ Privacy and Cookie Policy’) of the public limited liability company (“naamloze vennootschap”, abbreviated to “NV”) G&V ENERGY GROUP, organised and existing under the laws of Belgium, having its seat at 8790 Waregem, Vredestraat 53, Belgium, with VAT number BE 0838.523.626, also applicable to all of its affiliated companies, namely: the public limited liability company (“naamloze vennootschap”, abbreviated to “NV”) G&V Servicestations BE0461.054.460 - the private limited liability company (“besloten vennootschap”, abbreviated to “BV”) XL Servicestations BE0840.931.701 – the private limited liability company (“besloten vennootschap”, abbreviated to “BV”) Breakpoint Foodservices BE0874 264 958 

(hereinafter collectively referred to as ‘G&V’).

The aim of this Privacy and Cookie Policy is for G&V to inform you as fully as possible about how it collects and processes your personal data. This Privacy and Cookie Policy applies to all relations between G&V and its customers, suppliers, partners, prospects and other third parties, as well as in relation to use of all digital applications, websites and platforms (www.caps.be, www.g-v.be, www.gvtruck.be; www.enjoybreakpoint.be; Caps Energy Finder; Breakpoint Loyalty App ).

Data controller and obligations

The data controller is G&V Energy Group NV.

G&V considers your privacy to be one of the most fundamental rights and thus goes to every effort to protect your privacy in the best way possible. G&V acts in accordance with the Regulation of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (hereinafter referred to as the ‘Regulation’) and with this Privacy and Cookie Policy.

What personal data does G&V process and why?

G&V collects and processes various categories of personal data, including identification and contact data, marketing communication data, location, financial and usage data.

G&V collects and processes both personal data provided to it directly by you as well as data that it obtains through its systems (camera images, cookies, etc.), credit reference agencies and/or public sources. G&V does not use automated data processing or ‘profiling’.

G&V processes your personal data for various purposes, to include maintaining its general and financial records, assessing credit risk, managing its customer and supplier database, providing a proper service and the proper performance of its agreements. Subject to consent, your data will be used for (electronic) direct marketing activities, from which you may unsubscribe at any time.

On what legal basis does G&V process your personal data?

Article 6.1 of the Regulation sets out the legal basis on which personal data may be processed. The following is a brief overview of the legal basis on which G&V relies for the processing of personal data.

G&V processes personal data:

1. As you have granted your consent: G&V processes personal data on the basis of your explicit and specific consent. Your consent is free and you may revoke it at any time.
2. To comply with legal obligations (money laundering laws, tax and social regulations, etc.).
3. To be able to perform an agreement: the correct performance of agreements with customers, suppliers, etc. also makes it necessary to collect and process personal data. G&V always limits itself to the processing of data that are strictly necessary.
4. Owing to a legitimate interest as a commercial organisation (e.g. to make improvements to products and services).

Who has access to your personal data?

Only G&V and its employees, as well as members of the European partner network to which it belongs, have access to your personal data.

In addition, G&V cooperates with third-party service providers, with whom it shares your personal data to a limited extent with a view to (further) processing if necessary and/or if it can assert a legitimate interest for doing so. G&V takes the necessary measures to ensure that these service providers process your personal data only for the purposes and in the manner specified by G&V and that they provide sufficient safeguards to respect and guarantee the confidentiality of your personal data.

If any of these service providers is located outside the European Economic Area, G&V will transfer your personal data only if an adequate level of protection is provided and the service provider offers sufficient guarantees in relation to the security and protection of the personal data.

G&V will not make your personal data available to third parties for commercial and/or promotional purposes unless you have granted your explicit consent.

G&V has introduced operational procedures and adequate technical and organisational security measures to prevent unauthorised access, modification, deletion or transfer of your personal data.

For how long does G&V keep your personal data?

G&V will keep your personal data for as long as required by law or for as long as is required to render its services in the correct manner or (longer) if a legitimate interest for keeping your personal data manifests (e.g. risk of conflict).

What rights do you have when it comes to processing of your personal data?

The Regulation grants you a number rights when it comes to processing of your data. You can, at any time, request:

1. To view your personal data (right of access and inspection): you have the right to view your personal data held by G&V free of charge and to be told what your data are used for;
2. To have your data corrected (right of rectification): you have the right to ask to have incorrect data corrected and incomplete personal data completed;
3. To have your data deleted (right of deletion): if you suspect that G&V is processing any of your personal data unlawfully, you may ask to have those personal data deleted. G&V may refuse this request if the personal data are needed to meet a legal obligation, for the performance of the agreement or as part of a legitimate interest;
4. To transfer your data (right of portability): you have the right to request that the personal data you have provided to G&V be transferred to you or to a third party.

In the circumstances and under the conditions set out in the Regulation, you are also entitled to:

1. Restrict processing of your data (restriction of processing);
2. Submit an objection to the processing of your personal data on the basis of G&V’s legitimate interest (right of objection). G&V would like to point out that it is not possible to object to processing of personal data where this is required for G&V to meet its legal obligations, perform its agreements or as part of its legitimate interest.

G&S would also like to reiterate that, where processing is based on your prior consent, you may revoke that consent at any time.

If you wish to exercise any of these rights, a request may be sent to privacy@g-v.be. In order to be able to handle your request correctly, G&V asks that you be as specific as possible when outlining your request. In addition, G&V also asks that you include a copy of the front and back of your identity card with each request.

Cookies

G&V websites use ‘cookies’.

What are cookies?

A cookie is a small quantity of data that a website, via the server on which it is hosted, sends to the visitor’s internet browser with the intention of having those data stored on the visitor’s computer.

Cookies have different purposes, such as to improve the user experience on subsequent visits to the same website, e.g. by retaining language and other preferences on the website. Essential cookies ensure that the website works correctly. Cookies can collect statistics about the number of visitors to the website or to certain pages over a certain period time, can personalise the website or collect information about visitors to the website.

Cookies can be placed by the server of the website that you visit (first-party cookies) as well as by another party (third-party cookies).

Further information about types of cookie can be found at www.allaboutcookies.org or https://www.gegevensbeschermingsautoriteit.be/burger/thema-s/internet/cookies.

G&V uses the following types of cookie; the types may vary depending on the specific website:

• Essential cookies

These cookies are essential for visiting our websites and using certain parts of those websites. These cookies allow you to navigate between the different parts of the website or to complete forms and participate in discussions on our platform. If you reject these cookies, certain parts of the website may not work or may not work properly.

• Functional cookies

Functional cookies are those that make the operation of our websites easier and more pleasant for visitors and ensure that you enjoy a more personalised browsing experience. These cookies may be used to identify you if you make a return visit to the website and store your registration details or retain preferences that you have specified on the website.

• Preferences

Preference cookies allow a website to retain information that affects its behaviour and design, such as your preferred language or region.

• Statistics

Statistical cookies help website owners to understand how visitors use their websites by collecting and reporting data anonymously.

• Tracking (marketing) cookies

These cookies maintain statistics on how many visitors visit a website and which pages they view while there. They are used to track visitors when they visit different websites. Their purposes include the display of advertisements tailored and relevant to the individual user. The value of these advertisements to publishers and third-party advertisers thus becomes greater.

Managing cookies

G&V does not seek consent for the use of essential and functional cookies. These cookies are essential and optimise the user experience such that both the website user and G&V have an interest in their use.

When you visit our websites for the first time, we also ask if you accept the use of the other types of cookie. You can refuse the use of cookies by type with the option to open an overview of the specific cookies that are covered.

You can also refuse the installation of cookies via your browser settings. The following website explains how to reject cookies in the most commonly used internet browsers: http://www.aboutcookies.org/
 

You can also delete cookies that have already been installed on your computer or mobile device at any time.

Changes

G&V may occasionally amend this Privacy and Cookie Policy. We recommend that you consult this Privacy and Cookie Policy at regular intervals so that you are aware of any changes.

Questions or complaints

If you have any questions or complaints about the way in which G&V processes your personal data or would like further information about the content of this Privacy and Cookie Policy, please visit privacy@g-v.be.

Finally, G&V would like to draw your attention to the fact that you always have the option to file a complaint with the supervisory authority:

Belgian Data Protection Authority
rue de la Presse 35
1000 Brussels
T: +32 [0]2 274 48 00
F: +32 [0]2 274 48 35
contact@apd-gba.be