Privacy policies and processing of Personal Data of the User of the EUREFAS Site edited by EUREFAS.
1. Definitions
Personal Data: refers to any information that allows for the direct or indirect identification of an individual, such as: name, postal address, telephone number, email address, or IP address.
Data Controller: Any legal entity or natural person that determines the purposes and means of processing Personal Data. The Data Controller is responsible for ensuring GDPR compliance within their organization.
Site: Refers to the Site www.eurefas.com
User: Refers to the person using the Site.
2. Acceptance and management of cookies
Cookies are text files used for statistical purposes or for the operation of certain identification modules, for example.
The Site only uses identification, authentication, and audience measurement analysis cookies.
A banner informs the User about the use of cookies, the purposes of this use, and requests explicit consent made by a clear affirmative action.
The User has the option to manage the cookies used on the Site by configuring their browser.
The deposit or reading of certain cookies does not require the prior collection of your consent, either because they do not process any data, or because they are strictly necessary for the provision of the service.
Strictly necessary cookies: these cookies allow you to navigate the Site and are essential for the proper functioning of the Site. Disabling them will result in difficulties in using the Site and will prevent access to certain features.
Functional cookies: these cookies allow you to remember your preferences, your choices in order to personalize your experience on the Site.
Performance and statistical cookies: these cookies collect information about how Users use the Site (the number of visits, the number of pages viewed, the activity of visitors) via the Google Analytics analysis tool. These cookies also allow us to identify and resolve problems with the operation of the Site and to improve it.
The Google Analytics service allows the counting of Users and identification of how they use the site. These cookies are deposited and read on the User's terminal equipment as soon as the User accesses a website using the
3. Personal Data
3.1 What Personal Data is collected?
Personal Data collected through the Website and subsequently processed by EUREFAS, are those that Internet Users voluntarily transmit via a contact form or email or telephone exchanges.
These are also Personal Data collected indirectly through cookies.
EUREFAS may collect the following Personal Data:
- Personal Data related to the User's identity: civility, name, first name accompanied by the email address and phone number, organisation or company when filling out a contact form
- Personal Data related to browsing: this includes data related to how the User uses the Site including: IP address (Internet User's connection address), the browser used, browsing duration, search history, operating system used, language, and viewed pages collected for the management of its computer system and for the analysis of Site usage
- Personal Data regarding visits to the Site, including traffic data, log files, and other data or communication resources used when accessing the Site;
3.2 Why this Personal data is collected and on what legal basis?
The collected Personal Data is intended for the use of the Site. It is necessary for the processing and management of User requests, the provision of information about EUREFAS activities, to send newsletter if the User has subscribed to this option, to ensure the security and proper functioning of the Site.
Personal Data relating to the User's identity and their email and telephone address are collected so that the User can contact EUREFAS via a contact request.
Navigation and visit data on the Site are collected to improve the User's experience on the Site:
- Adaptation of the Site format according to the device used
- Recognition of the User in order to maintain an active connection
- Analysis of traffic and navigation data to improve the performance of the Site
Regarding the IP address, EUREFAS reserves the right to use the Internet User's IP address in cooperation with its internet service provider, in order to identify the Internet User if it deems it necessary to enforce its T&C or to protect its services, or at the request of judicial authorities.
EUREFAS – European Refurbishment Association, an international non-profit association (AISBL) registered under the numero 0764.678.318 and registered office Rue Montoyer 25 1000 Brussels – Belgium - contact@eurefas.com is responsible for the processing of the collected Personal Data.
The processing of User Personal Data is justified by different legal bases depending on the use made by EUREFAS.
Among the applicable legal bases:
- Legitimate interest: EUREFAS has an interest in processing Personal Data that is justified, balanced, and does not infringe on the privacy of Users (deposit of technical cookies to ensure the security of the website…).
- Consent: the User accepts the processing of their Personal Data through express consent (checkbox, click…): for 'non-strictly necessary' cookies, subscription to a newsletter, for example.
- Legal obligations: to ensure compliance with our legal and regulatory obligations as defined by the regulations.
3.3 Who processes the collected Personal Data?
The Personal Data collected is processed by the EUREFAS employees in charge of :
- Site management
- Support management
- Legal management
3.4 What is the Personal Data protection policy and what are my rights?
The Personal Data protection policy applies:
- to browsing on the Site
- to the communication of data to access the contact form
- to emails exchanged between EUREFAS and the User
- to newsletter subscription
The User can choose how the Personal Data is transmitted and used on the Site. He can browse the Site without providing Personal Data.
In accordance with Articles 16, 17, 18, 20, and 21 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 EUREFAS guarantees the User the right to object to, access, erase, transfer and rectify Personal Data concerning him/her.
The right of access: is the right for any person to obtain communication of all information concerning him or her held by the Data Controller.
The right of rectification: is the right of any person to obtain the rectification of inaccurate Personal Data concerning him or her, as well as the right to obtain that incomplete Personal Data be completed, including by providing a supplementary declaration.
The right to object: is the right of the data subject to object at any time (either at the time of data collection, or later, by contacting the Data Controller), for reasons relating to his or her particular situation based on the public interest or the legitimate interest of the Data Controller. With regard to commercial canvassing, any person may object at any time to his or her data being circulated, transmitted or stored. This right can be exercised without having to justify a legitimate reason.
The right to define directives relating to the fate of Personal Data after the death of the data subject: in the absence of directives or of mention to the contrary in said directives, the heirs of the data subject may after his or her death exercise the rights over the deceased’s Personal Data.
The right to restrict processing: is the right of the data subject to obtain from the Data Controller the restriction of processing where:
- the accuracy of the Personal Data is contested for a period of time allowing the Data Controller to verify the accuracy of the Personal Data,
- the data processing is illicit and the person involved objects to the erasure of the Personal Data, demanding instead that their use be restricted,
- the Data Controller no longer needs the Personal Data for the purposes of processing, but it is still necessary for the data subject to establish, exercise or defend legal claims,
- the data subject has objected to the processing during the verification as to whether the legitimate grounds pursued by the Data Controller prevail over those of the data subject.
The right to portability: the individual has the right to have his or her Personal Data transmitted in a structured, commonly used and machine-readable format and have the right to transmit such data to another controller without the controller to whom the Personal Data has been communicated hindering this, where:
- Processing is based on consent or contract, and
- Processing is carried out using automated processes.
The right to lodge a complaint with a supervisory authority: For further information concerning the exercise of his rights, the data subject may go to the following web address: https://www.autoriteprotectiondonnees.be/citoyen
3.5 What are the terms for exercising my rights?
You can exercise the aforementioned rights by writing to EUREFAS – European Refurbishment Association – Rue Montoyer 25 1000 Brussels, Belgium – or by email: contact@eurefas.com
A response will then be sent to you within 1 month following receipt of the request.
You must be able to prove your identity by any means. In case of reasonable doubt, an identity document may be requested.
An identity document is not required for the exercise of your right to object to receiving commercial offers or advertising.
For legal or contractual reasons, certain information cannot be altered or deleted from databases.
3.6 What is the retention period for Personal Data?
The collected Personal Data is kept for one year to meet the purpose of its collection.
Regarding the Personal Data collected through cookies or trackers, they will be kept for up to 13 months.