Privacy Policy

By using certain parts of this website, or by subscribing to our newsletter, you share information that allows you to be personally identified. This is done exclusively to deliver our services and share information, and only with your explicit consent. 

Your personal data is processed in accordance with the provisions of the European General Data Protection Regulation (GDPR). 

This privacy policy applies to the services of Candyville. We are not responsible for the privacy practices of other sites and resources linked to our website, though we do reference them to help you find all the information you need. 

By using this website, you accept this privacy policy. 

You always retain the right to your stored personal data: 

  • to request access and review it, 
  • to modify it (or have it modified), 
  • to delete it (or have it deleted). 

This can be done for one or several entries across different databases. 

You may also request to be removed from all databases. You will then be ‘forgotten’ and will no longer be contacted in any way. 

If you make the changes or deletions yourself, they take effect immediately. If you submit a request for modifications, this will be handled as swiftly as possible and at least within 30 days. 

How can you exercise your rights? 

You can do so by clicking the link at the bottom of our newsletter, or by sending a simple request via email to info@candyville.eu. You are also most welcome to use our contact form. 

Please always specify: 

  • The first and last name of the person you wish to remove or update. 
  • The email address of the person you wish to remove or update. 
  • Which changes you wish to make, or whether you wish for the person to be completely removed.

How we care for and process your data. 

​

The data controller is: 

Guy De Vil of The Candyville Company bv 
Brulens 30/8 – 2275 Gierle
014 / 89 31 48
info@candyville.eu 

Your personal data is processed by the following data processors (who also adhere to GDPR standards). 
own name + organization name + address + if applicable: telephone number + email address 

  • For sending email newsletters, our data processor is Mailchimp, based in the U.S.A. By subscribing to our newsletter, you agree to Mailchimp's terms. A data processing agreement is in place with this processor to safeguard your personal data. 
  • To analyze the use of our website, we rely on Google Analytics. For this purpose, anonymous information regarding the use of our website is gathered. This data is not shared with Google and is not used for marketing or advertising purposes. 

​

  • Which data do we collect? 

We only collect personal data that is essential to provide a specific part of our service or to send you requested information. 

This may include: 

  • first name and surname 
  • email address 
  • home address 
  • business address 
  • telephone number 
  • VAT number 

Certain information on our forms is mandatory (usually marked with an *), as these details are necessary to deliver your desired service. 

Other details—not marked with an *—may be helpful, but are not strictly required. It is entirely up to you whether you choose to share them. 

No marketing profiles are created based on the details you provide or the cookies placed (see further below). 

​

Why is your personal data retained? 

Your personal data is used solely for specific purposes, based on the following legal grounds: 

  • Contact form: to address your inquiry and provide a thoughtful response (performance of a contract). 
  • Newsletter subscription: to occasionally send you an inspiring newsletter with delightful offers or updates that may interest you (consent of the data subject). This newsletter is only sent when there is relevant information for you, which may include news from, for example, the world of coffee, tips on brewing and selecting coffee, and special promotions. 
  • Order form: to process your purchase, deliver your cherished products, and present other treats that might delight you (performance of a contract and legitimate interest). 
  • Brochure request: to send you our brochure (performance of a contract).​

Any exception to this can only occur with your explicit consent. 

​

How long is your data retained? 

Personal data is retained only for as long as necessary to provide the service you requested or consented to. Your personal data will be kept for a maximum of 5 years following its last use. 

​

Sharing with third parties 

Your personal data is never sold or transferred to third parties. We only engage service providers to process personal data if we have established a data processing agreement with them, if they are necessary for providing our services and communications, and if they can ensure the secure storage of personal data while safeguarding your privacy. 

Your personal data will only be shared when necessary to fulfill the purpose for which you granted consent and provided the information (sending a newsletter, purchasing a product, booking a service...) or when required and permitted by law (for instance, in the context of a legal investigation). 

​

Accordingly, a third party is engaged for: 

  • maintaining IT infrastructure (including booking software, sales software, etc.); 
  • providing (and distributing) newsletters and invitations. 

If you grant your explicit consent, your personal data will be shared with third parties.

You have the right to withdraw this consent at any time, without affecting the lawfulness of the processing prior to its withdrawal. 

We do not provide personal data to parties located outside the EU, with the exception of Mailchimp and Google. 

​

Minors 

We have absolutely no intention of collecting data regarding website visitors who are minors, even with the consent of parents or guardians. However, we cannot verify whether a visitor is a minor. We therefore encourage you to remain involved in your minor children's online activities to prevent their data from being processed by us or our partners. 

Data Security 

The computers and internet connections on which your personal data is stored and transferred are protected as effectively as possible against hacking, malware installation, and other improper use. The computers and network may only be accessed with a username and password. 

Anyone authorized to view or access your personal data on behalf of Candyville is bound by a duty of confidentiality regarding that information. 

All Candyville team members have been informed about the importance of protecting personal data and privacy. 

Automatic Storage of Non-Personal Data

During a visit to this website, data regarding website usage is automatically recorded. This consists exclusively of non-personal and anonymous data (for example, your IP address is not tracked). We analyze this information with Google Analytics (please consult the privacy policies of Google and Google Analytics for further details) in order to continually enhance our website; however, no personal information is tracked or shared with Google or other third parties. 

​

Cookies 

This website uses functional and analytical cookies. This is done entirely anonymously. You can learn more about this in our cookie policy. 

In brief: functional cookies ensure our website runs seamlessly, while analytical cookies provide insights into how the website is enjoyed and used. No personal data is gathered or shared through these cookies, nor are they used for marketing or advertising purposes. 

You can enable, disable, and clear cookies at any time via your browser settings. 

Facebook, Twitter, and Other Social Media 

This site features sharing buttons for social media networks. When used, the code behind these buttons places a cookie on your computer. In this regard, the privacy policies of the respective social networks apply. We have no influence over and assume no responsibility for how these networks handle your personal data. 

We also have no control over how other social media users interact with your information once you have shared something featured on our website. 

​

Amendments 

This Privacy Policy may be updated from time to time. We refine our terms and practices to ensure your privacy is protected to the highest standard and to handle your personal data with complete transparency. We warmly invite you to review this page regularly. The most recent update was made on February 9, 2021. 

​

In the Unlikely Event of an Incident… 

We treat your personal data with the utmost care and keep it securely protected. Should an issue nonetheless arise, we will inform you as promptly as possible and take every measure to mitigate any impact. 

The unauthorized dissemination of your personal data due to data theft or data breaches shall not give rise to any claims for damages against us. 

​

Complaints 

If, despite our careful precautions, you have any concerns regarding the use of your personal data, please contact 

info@candyville.eu and we will gladly seek a resolution. 

Further information regarding complaint procedures can be found on the following websites: Privacy Commission, Flemish Supervisory Commission.