Who processes your data?
Pequeña Sudamérica, a proprietorship whose registered office is located at Voskapelstraat 5/12, 1933 Sterrebeek, Belgium, registered with the Crossroads Bank for Enterprises under number 0761901940, processes the data collected concerning you, and is responsible for the processing of personal data for any collection of data concerning you in connection with the services offered by Pequeña Sudamérica.
For what purposes do we collect and process your data?
Pequeña Sudamérica collects and processes data about you for the purposes listed below and detailed below:
First, they are used for customer relationship management purposes and to enable us to better interact with our customers, optimize the user experience or respond to customer requests and complaints.
These treatments include in particular:
- The possibility to create an account;
- Management of your consents and authorizations concerning the use of your personal data, in particular for sending newsletters and commercial solicitations by electronic means;
- Allowing you to benefit from Pequeña Sudamérica’s services, order products and services, track your orders and their invoicing, subscribe to newsletters, etc…
- Collection of your comments and opinions;
- Management and follow-up of communications exchanged, in particular in the context of any disputes (in particular via customer service, for example by telephone or chat-type instant messaging. These exchanges may be recorded for the purpose of improving our service);
- Management of your requests related to the exercise of your rights of access, rectification, opposition, etc., in accordance with the regulations on personal data;
- Management of risk of fraudulent use of your data or the services to which you have access via Pequeña Sudamérica. Depending on the results of the controls carried out, Pequeña Sudamérica may take any measures that seem useful to secure your data and our information systems used for the purposes of using Pequeña Sudamérica, as well as to defend its interests. If necessary, these measures may lead to the suspension of your access to Pequeña Sudamérica and your online account;
- Management of product recalls initiated by suppliers or the sending of various related information or documents to establish analyses or statistics to respond to surveys or requests from public interest bodies, or administrations, or administrative or judicial authorities (e.g. in the case of food risk);
- To trace and administer the evidence that Pequeña Sudamérica must report in accordance with its legal or regulatory obligations or for purposes related to the management of litigation (e. g. the necessary evidence concerning the exercise of your rights, evidence relating to your orders);
- Management of any disputes, in particular those relating to the recovery of debts you may owe us, and the management of payment incidents;
- To comply with our legal or regulatory obligations applicable to Pequeña Sudamérica’s activity (e.g. to respond to requests from the tax authorities).
Your data may also be used to carry out operations relating to commercial prospecting, or studies aimed at improving customer knowledge and services that Pequeña Sudamérica can offer to its customers. Your data may therefore be used, in accordance with any required authorisations you may have given us:
- To send you promotional messages or advertisements, personalized or not, by post or electronically, including mobile notifications, depending on your profile;
- For commercial prospecting operations related to profiling and based on the consent of the data subject, the data subject may withdraw his or her consent at any time, provided that this does not affect the lawfulness of the processing carried out before such revocation.
Your data may be used to carry out technical operations related to the processing of your personal data for the purposes set out herein. This includes:
- Technical operations related to address rectification;
- The assignment of a digital identifier linked to your data, so that we can interact with you via different digital communication media (websites and mobile applications, social networks) including to send you targeted advertisements;
- Technical, organisational or cyber security operations related to the detection of anomalies and the security of your data as well as of our information systems from which your data are processed.
Why are your personal data processed?
Your data may be processed for one or more of the following reasons:
- Because it is necessary to provide Pequeña Sudamérica’s services;
- As part of any agreement you may have entered into, for example to enable us to communicate with you about our offers and products or those of third-party advertisers;
- In the respect of the interests, freedoms and fundamental rights of persons registered in the services of Pequeña Sudamérica because this is necessary to enable us or our partners to pursue our legitimate interests such as building customer loyalty, optimally managing our relationship with our customers, better knowing them and promoting our products and services to them or fighting fraud and defending us in the event of litigation.
What data do we collect?
The data processed in the Pequeña Sudamérica framework derive from:
- Your registration: data on the subscription form such as your name, first name, date of birth, contact details;
- Use of Pequeña Sudamérica services such as your purchases, whether made directly from Pequeña Sudamérica or via Pequeña Sudamérica: data allowing you to be identified and authenticated (connection logs, IP address), data relating to purchases, places and times of order and purchase, your browsing path on the site, dates and times of consultation of the site, location data;
- Mobile sites and applications published by third parties to Pequeña Sudamérica: information relating to navigation or advertising addressed to you;
- Social networks such as Facebook, LinkedIn, Instagram. Data exchanges can occur between Pequeña Sudamérica and social networks, for example when you are connected to the Facebook social network on your computer and you consult a page of the Pequeña Sudamérica site. Similarly, if you click on the Instagram button on a page of the Pequeña Sudamérica site, Instagram will collect this information. If you do not want such exchanges, we recommend that you disconnect from social networks before visiting the Pequeña Sudamérica website;
- Data concerning you may be transmitted to us by third parties, such as your postal or e-mail address, data relating to your profile, which will be included in our databases. These third parties have fairly collected your data and obtained any required consent before any transmission to Pequeña Sudamérica;
- We may use data found through open Data.
With the exception of data from open data, the other data are not accessible to the public.
Data may be collected directly from you or through the use of Pequeña Sudamérica services or from other entities of the group or possibly from our partners or third parties.
The data collected is essential to enable Pequeña Sudamérica, their service providers and/or partners to provide the services of the services offered via Pequeña Sudamérica, to enable us to get to know you better and interact with you, to propose a facilitated relationship with the Pequeña Sudamérica ecosystem, or to send you, us or our partners, content adapted to your profile and your interests.
Who will be able to access your data?
To achieve the purposes described above and within the limits necessary for the pursuit of these purposes, your data may be transmitted to all or some of the following recipients:
- Persons authorised to work in the relevant departments within Pequeña Sudamérica (e.g. departments in charge of marketing, studies and analyses, consumer panels, customer service, litigation, accounting and tax matters or IT and information systems security);
- Payment and collection service providers for any amounts you may owe, the service providers and subcontractors of Pequeña Sudamérica (e.g. IT service providers, service providers working in the advertising sector);
- Advertisers or partner brands. In this case they do not have direct or indirect access to your data and only data related to your profile without it being possible to identify you directly or indirectly, may be used for these advertisers;
- Administrative or judicial authorities, if need be, in order to comply with our legal obligations or to enable us to defend our rights and interests.
Limitation of the storage period of your data
The data collected about you will be kept for the period necessary to fulfil the above purposes, plus the period of legal prescription.
Thus, as a main rule, your account data (registration) will be kept for the duration of your membership. It may then be stored and processed for 3 years following your last contact, to enable us to send you commercial solicitations.
The data concerning you may be stored for a longer period of time in accordance with specific legal obligations or with regard to the applicable legal limitation periods. For example, data can be stored for:
- 6 years for tax documents;
- 10 years for accounting documents;
- Throughout the duration of the disputes and until all legal remedies have been exhausted.
Finally, in the event of the exercise of their rights by the persons concerned, data relating to identity documents may be kept for the applicable legal limitation periods, i.e. for a maximum period of 3 years.
How is your data secured?
Pequeña Sudamérica takes into account the nature of the personal data and the risks presented by the processing in order to put in place appropriate technical, physical and organisational measures to preserve the security and confidentiality of personal data and prevent them from being distorted, damaged or accessed by unauthorised third parties.
Pequeña Sudamérica chooses subcontractors or service providers who offer guarantees in terms of quality, security, reliability and resources to ensure the implementation of technical and organisational measures, including processing security. Subcontractors and service providers undertake to respect confidentiality levels at least identical to those of Pequeña Sudamérica.
Are your data processed outside the European union?
The various categories of data collected and processed may be transmitted to service providers located in countries outside the European Union, or even as part of IT services or data processing related to social networks.
To secure transfers outside the European Union, our subcontractors sign with Pequeña Sudamérica, for example, either standard clauses defined by the European Commission to regulate flows, or are subject to binding internal rules by the authorities that control the protection of personal data, or are located in a country with legislation offering adequate protection.
What are your rights?
In accordance with the regulations on the protection of personal data, you have the right to information, access, rectification and deletion (unless they are necessary for the performance of our contract, or are necessary for us to comply with our legal obligations or to establish or exercise our rights) relating to the data concerning you, as well as the right to define directives concerning the fate of your data after your death. It is hereby specified that, as part of the right of access, Pequeña Sudamérica may request payment of a reasonable fee based on administrative costs for any additional copies of the data to the one provided to you.
You also have a right to obtain the limitation of a processing operation and a right to the portability of the data you may have provided, which will apply in certain cases. In addition, you may request to exercise your right to object on grounds relating to your particular situation, to the processing of personal data concerning you when the processing is based on the legitimate interest of the controller, including profiling. In the event of the exercise of such a right of objection, Pequeña Sudamérica will cease processing except where there are legitimate and imperative grounds for processing which prevail over the interests and rights and freedoms of the data subject or for the establishment, exercise or defence of a legal claim. You may also object to any processing related to prospecting (including profiling related to such prospecting), or withdraw your consent at any time, in cases where it has been requested of you (the withdrawal of your consent will not affect the lawfulness of the processing carried out before the withdrawal of consent).
Pequeña Sudamérica wishes to inform you that failure to provide information or to modify your data may have consequences for the processing of certain requests in the context of the performance of the services and that your requests in respect of the exercise of rights will be kept for monitoring purposes.
To exercise your rights, simply write to Pequeña Sudamérica, at Voskapelstraat 5/12, 1933 Sterrebeek, Belgium:
- By e-mail: firstname.lastname@example.org indicating your first and last name, e-mail address and if possible, your customer reference.
Cookies – Definition and usefulness
When the Client/User consults the Site, information relating to the navigation of his device (computer, tablet, smartphone, etc.) on the Site may be recorded in text files called “Cookies”, installed on his browser. Cookies will be used to recognize the Client/User’s browser during the validity period of the relevant cookie.
Only the issuer of the Cookie concerned may read or modify the information contained therein.
Some Cookies are required to the use of the Site, others allow to optimise the use of the Site and to customize the content displayed. Thus Cookies allow:
- To measure and analyse the use of the Site, its sections and Services, allowing the Site to carry out studies and improve the interest and ergonomics of the Site and its Services;
- To memorize the display preferences of the Customer’s browser (language used, display settings, operating system used, etc.) and to adapt the presentation of the Site during its visits, according to the display or reading hardware and software included in the Customer’s terminal and which are used for navigation on the Site;
- To store information relating, for example, to a form that the Customer has completed or a service (registration, access to his account) or information that the Customer has chosen (subscribed services, contents of his basket);
- To allow the Customer to access reserved and personal areas of the Site or its Services, such as his personal account, using identifiers or personal data concerning him previously communicated, allowing him, if necessary, to access personalized content;
- To implement security measures;
- Limit the number of ads displayed;
- To adapt the advertising content inserted on the Site to the Customer’s interests and, possibly, with a connection to a locality (e.g. list of the nearest stores);
- To adapt and send to the Customer personalized advertisements specifically intended for him by electronic prospecting or by posting on his terminal within advertising spaces containing Cookies issued by the Site. This is done thanks to the personal data that the Customer provides, in particular when registering or accessing one of the services and using it, with which the Site associates the Cookies it issues.
When the Customer accesses a third-party site containing advertising space that displays one of the Site’s advertising ads, this ad may be sent to the Customer via the recognition of one of the Cookies previously placed by the Site on the Customer’s browser. These cookies may be set by technical service providers of the Site and used.
Cookies placed by a third party on areas of the site
The Site may contain Cookies issued by third parties (communication agency, audience measurement company, targeted advertising service provider, etc.) allowing them, during the validity period of their Cookies:
- To collect navigation information relating to the browsers consulting the Site;
- To determine the advertising content likely to correspond to the Customer’s interests in order to send targeted advertising to the Customer, in the light of its browsing history collected by the third party.
Cookies embedded in third-party applications on the site
The Site may include on the Site computer applications from third parties, which allow the Customer to share content from the Site with other persons or to make known to such other persons the Customer’s consultations or opinions regarding content on the Site. This is particularly the case for the “Share”, “Like” buttons, which come from social networks such as Facebook, Instagram, etc.
The social network is likely to identify the Client thanks to this button, even if he did not use it during his consultation of the Site. This type of application button may allow the relevant social network to track the Client’s navigation on the Site, solely because his or her social network account was enabled on his or her browser (open session) during the navigation in question.
The Site has no control over the process used by social networks to collect information relating to the Client’s navigation on the Site and associated with the personal data at their disposal.
The Site recommends that you consult the conditions of use of its data on these social networks to find out the purposes of use, in particular advertising, and the browsing information that they may collect through these application buttons. It is the Client’s responsibility to ensure that the terms and conditions of use of these social networks allow him/her to control and restrict the use of his/her data by these social networks, in particular by setting up his/her use accounts with them.
Sharing the use of the customer’s terminal with others
If the Customer’s terminal is used by several people and when the same terminal has several browsers, the Site cannot be certain that the services and advertising intended for the terminal correspond to the Customer’s own use of this terminal and not that of another user of this terminal.
Sharing with others the use of the Customer’s terminal and configuring the browser settings for Cookies are at the Customer’s free choice and responsibility.
Thus the Customer can manage his Cookies:
- From its navigation software, or
- Inter-professional platforms, or
- When clicking on the following button: Revoke consent
Warning: the consideration of the Customer’s unsubscription is based on a cookie. Therefore, if he disables all cookies on his device or if he changes devices, the Site will no longer know that the Customer has chosen this option.
Management of the Customer’s cookies from his browser software
The Customer may configure his browser software in such a way that Cookies are stored in his terminal or rejected, either systematically or according to their originator.
Online management of the Client’s cookies from inter-professional platforms
The Customer may also connect to platforms, bringing together digital advertising professionals who allow them to know the companies registered on these platforms and who offer them the possibility of refusing or accepting the Cookies they use to adapt, depending on whether they collect, the ads that may be displayed on their browser.
This European platform is a centralized interface that allows the Customer to express his refusal or acceptance of the Cookies of such or such professional ones.
This procedure will not prevent the display of advertisements on the websites that the Customer visits. It will only block technologies that allow advertisements to be adapted to its interests.