Privacy policy

Privacy Statement
PRIVACY STATEMENT – Captains of Cycling
Last update June 2022

The websites www.captainsofcycling.be and www.lottodstny.be (hereafter: the “Websites”) are owned by:

Captains of Cycling CV (hereafter “Captains of Cycling”, “We” and “Us”)
Belliardstraat 25-33
1040 Brussels
Belgium
BTW N°: 0478.242.662

At Captains of Cycling, we value your privacy. We respect and protect your privacy and find it important that you feel comfortable on our website. We therefore want to inform you about the use of your Personal Data in an open and transparent way.

This Privacy Statement applies to, amongst others,:

  • Our Websites and;
  • All other (commercial) relationships between Captains of Cycling and its customers, prospects, suppliers and business partners.

Visiting the Websites, placing an order, purchasing any of the products and/or services of Captains of Cycling, or any communication with Captains of Cycling, signifies your explicit consent (through provision of your Personal Information or opt-in) to this Privacy Statement and thereby to the manner in which Captains of Cycling collects, uses and processes your Personal Information.

Please read this Privacy Statement in conjunction with Captains of Cycling’s version history, Terms and Conditions and Cookie Policy.

1. Why this Privacy Statement?

When you visit one of our Websites, create an account or place an order, you are providing us with information about yourself. All the information we collect about you, as an identifiable natural person, is called ‘Personal Data’. Through this Privacy Statement, we want to give you an understanding of what Personal Data we collect from you, why we do this, how we do this and what your rights are.

Captains of Cycling would like to emphasize that at all times, it aims to act in accordance with the EU Regulation 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR”) and the Belgian Law of 30 July 2018 on the protection of individuals with regard to Personal Data processing.

2. Where does your Personal Data end up?

2.1 Data controller

Captains of Cycling is ‘data controller’ within the meaning of the GDPR. Specifically, this means that we alone determine what Personal Data is collected, for what purposes Personal Data is collected and with which means we are processing Personal Data.

2.2 Processors

As a controller, we are free to engage so-called ‘data processors’. A processor is a natural or legal person who processes Personal Data at the request of or in the name of the controller. The processor always acts according to the instructions of the controller.

Captains of Cycling uses the following categories of processors:

  • Companies/organisations we have engaged for marketing purposes;
  • Companies/organisations we have engaged for hosting purposes;
  • Companies/organisations we have engaged for administrative purposes;
  • Companies/organisations we have engaged for communication purposes;
  • Companies/organisations we have engaged for security purposes;
  • Companies/organisations we have engaged for transport and logistic purposes;
  • Companies/organisations we have engaged for online payment functionalities;

All above mentioned processors are – under the GDPR – obliged to ensure the security and confidentiality of your Personal Data. We conclude a processing agreement with all our processors.

3. What data is collected by us?

We will only process the Personal Data that we really need to achieve the purposes for which we process them (see also article 4). We process the following Personal Data categories:

  • Personal identification data

(customer type, surname, first name, gender, company name)

  • Contact details

(phone number and e-mail address);

  • Address data:

(street, house number, zip code, town/city, country)

  • Electronical identification data

(IP address, cookies, login, password);

  • Payment data

(payment method)

We collect this Personal Data when you use the Website or when you use our services. How much, how often and what kind of data we collect depends on certain services you use.

We also use cookies to recognise visitors of the Website(s) and to provide them with a personal user experience, to remember their technical choices (e.g. language) and to detect and correct any errors on the Website. Questions about our cookie policy? Then make sure to check it on our Website(s).

4. Why do we need your Personal Data?

We collect your Personal Data in order to provide you with an optimal, secure and personalised user experience. As you increase your use of our Websites and our services, we will collect more Personal Data. We have the right to temporarily suspend or completely cancel certain operations if your Personal Data is missing, inaccurate or incomplete.

Processing Personal Data is essential for the functioning of our Websites and related services.

We will only process Personal Data for the following specified purposes and in accordance with the following retention periods.

4.1 Processing activities concerning the use of the Websites

METHOD OF COLLECTION

PERSONAL DATA

PURPOSES

LEGAL BASIS

RETENTION PERIOD

Filling out contact form

 

Last name, first name, e-mail address, telephone, mobile phone, other voluntary provided personal data, (communication means)

Answering questions

 

Explicit consent

1 year

Cookies on the website (*)

Depending on the type of cookie

In general, cookies are used to optimise and, where possible, personalise your browsing experience on our websites.

Explicit consent (consent can be withdrawn at any time for non-essential cookies)

Depends on the type of cookie. Session cookies are immediately deleted after the browser session, other cookies are always set for a specific, proportional period.

Account creation

Gender, Last name, First name, E-mail address, Password

Visitors can place orders after they have created an account. The Personal Data is necessary to enable communication with the customer.

Explicit consent.

As long as the person concerned does not cancel his account and does not withdraw his consent

Placing an order

Customer type, telephone number, street, house number, zip code, town/city, country

The preparation of an invoice, the delivery of the order and communication about the delivery.

Explicit consent / execution agreement

As long as the person concerned does not cancel his account and doesn’t withdraw his consent

Paying an order

Payment details: payment method, card number, expiry date, name on card, CVC code if applicable

Check-out of an order

Explicit consent / execution agreement

As long as the person concerned does not cancel his account and doesn’t withdraw his consent

5. Transferring personal data

Your personal data is processed for internal use withing Captains of Cycling. We can also reassure you that we will never sell,  give or communicate your Personal Data to third parties, except if it is necessary for the performance of the contract, you have given us your explicit consent in advance or if there is a legal obligation to do so.

6. Retention period of personal data?

Unless a longer retention period is required or justified due to compliance with a legal obligation, Captains of Cycling will only retain your Personal Data for the period necessary for the achievement and fulfilment of the purposes as described under Section 4 of this Privacy Statement.

We will remove your personal Data from our database as soon as we no longer need it to fulfil these purposes or when you validly exercise your right of deletion as described in article 7.3.

7. What are your rights?

Guarantee of a lawful and secure processing

Your Personal Data shall always be processed for legitimate purposes, as set out in Article 3. It shall be collected and processed in an appropriate, relevant and proportionate manner, and shall not be kept longer than necessary to achieve the purposes set out.

7.2 Right of inspection

If you provide proof of your identity (e.g. a copy of your identity card), we will be pleased to inform you of exactly which Personal Data we hold on you and what we do with that information. The right of inspection is free of charge.

7.3 Right of erasure

You have the right to obtain the removal of your Personal Data in the following cases:

  • When we no longer need your Personal Data for the purposes stated;
  • When you withdraw your consent to the processing of your Personal Data and there is no other legal basis for processing your Personal Data;
  • When you have legitimately objected to the processing of your Personal Data;
  • When your Personal Data are unlawfully processed;
  • When we have to remove your personal data on the basis of a legal obligation.

Please note that in certain cases the removal of your Personal Data from our database may result in the unavailability of certain services to you.

7.4 Right of correction

If the information we hold about you is not accurate, up to date or complete, you may correct it in your profile or request Captains of Cycling to correct it, as provided in article 8.

7.5 Right to limitation

You have the right to restrict data processing if:

  • You dispute the accuracy of the data for a period that allows Captains of Cycling to verify its accuracy
  • The processing is unlawful and you oppose the erasure of the Personal Data and instead request the restriction of its use.
  • Captains of Cycling no longer needs your Personal Data for the purpose of processing, but you still need them for the establishment, exercise or substantiation of legal claims
  • You have objected to the processing of your Personal Data, pending the answer to the question whether the objection is well-founded

7.6 Right to object

You have the right to object at any time the processing of your Personal Data for direct marketing purposes, profiling purposes or purposes arising from our legitimate interests. We will no longer process your Personal Data unless we can demonstrate compelling legal grounds which override your right to object.

7.7 Right of data portability

You have the right to receive the Personal Data you have shared with us in a standard, digitally readable format. In addition, you may transfer that Personal Data yourself or have it transferred by us to another data controller. This right only applies as far as this is technically possible.

7.8 Right to withdraw your consent

You have the right to withdraw your consent at any time, for example if you have given your consent for direct marketing or profiling purposes.

8. How can you exercise your rights?

If you want to exercise one of the above mentioned rights, you can send your written request and proof of identity by post to Captains of Cycling, Rue Belliard 25 – 33, 1040 Brussels. You can also use our contact form on the Website to inform us that you wish to exercise your rights. At the latest 1 month after we have received your request, you may expect a response from us. Depending on the complexity of the request, our response will already contain an answer to the question, or a provisional answer with possibly additional questions. Furthermore, you can always contact us at webshop@lottodstny.be

Captains of Cycling explicitly recognizes that it will not systematically request the identity card of the data subject in this context and that it will only use this evidence to verify that you are indeed the data subject whose Personal Data are being processed. Captains of Cycling will in principle only request a copy of the front of the identity card. Once both parties are satisfied with the answer to your question, Captains of Cycling will destroy the evidence.

9. Security of Personal Data

Captains of Cycling undertakes to implement appropriate and reasonable physical, technological and organizational security measures to prevent (i) unauthorized or unlawful access to your Personal Data, as well as (ii) loss, misuse or alteration of your Personal Data.

Captains of Cycling will store all Personal Data it has collected on site and in the cloud with data centres located in the EU.

Notwithstanding (i) Captains of Cycling’s security policies, (ii) the controls it maintains and (iii) the actions it takes in this regard, an infallible level of security cannot be guaranteed. No method of transmission or transfer over the Internet nor any method of electronic storage is 100% secure, so Captains of Cycling cannot guarantee absolute security in this regard.

10. Privacy Statement Updates

Captains of Cycling may update this Privacy Statement by posting a new version on the Websites. In this context, it is strongly recommended that you periodically review the Websites and the applicable page on which the Privacy Statement is displayed to ensure that you are aware of any changes.

The most recent version of the Privacy Statement is always available on the Websites. Any update and corresponding moment of change will be explained and displayed in the version history of the Privacy Statement, which can be consulted via the following link https:www.lottodstny.be/en/privacy-policy

11. Reference to other websites

The Websites may contain hyperlinks to other websites. When you click on one of these links, you may be transferred to another website or Internet resource that knowingly, or through the use of cookies or other technologies, collects information about you. Captains of Cycling has no responsibility, liability or control over these other websites or Internet resources or their collection, use and disclosure of your Personal Information. You should review the privacy policies of such other websites and Internet resources to determine whether they are compliant with privacy legislation.

12. Contact

If you have any questions about this Privacy Statement or the way Captains of Cycling collects, uses or processes your Personal Data, please contact us:

If you are dissatisfied with the manner in which Captains of Cycling has dealt with your questions or comments, or if you have any complaints regarding the manner in which Captains of Cycling collects, uses or processes your data, you may lodge a complaint with the competent supervisory authority. This may be the supervisory authority of (i) your habitual residence, (ii) your place of work or (iii) the location of the alleged breach of privacy law. The contact details of the Belgian Data Protection Authority:

Data Protection Authority
Drukpersstraat 35, 1000 Brussels, Belgium
Tel.: +32 (0)2/ 274 48 00
E-mail: contact@apd-gba.be