Date of last revision: 17/01/2019
Lab Box SA/NV is committed to protect your privacy and takes its responsibilities regarding the security of customer personal information very seriously. For more detailed information about privacy legislation, please do not hesitate to read the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC).
Your personal data are handled by:
Lab Box SA/NV (hereafter: “Lab Box”)
Rue du Mail/Maliestraat 50
Enterprise number: BE0680845473
To contact us: firstname.lastname@example.org
1. Scope of Application
As used in this Policy, the terms "using" and "processing" of Personal Data (as defined below) include subjecting the personal information to statistical or other analysis and using or handling personal information in any way, including, but not limited to collecting, storing, evaluating, modifying, deleting, using, combining, disclosing and transferring as detailed in this Privacy.
The terms of this Policy will govern the use of the Website and contain important information on the collection and processing of Personal Data through the Website by Lab Box. By using the Website and sharing your personal data, you had to specifically consent to the treatment of your personal data by Lab Box. By giving your explicit consent, you explicitly agree on the manner in which Lab Box collects and processes your Personal Data, including cookies, as described in this Policy and on the application of this Policy. If you do not agree (anymore) with any of the provisions of this Policy, please refer to section 8 below concerning your rights.
Lab Box ("we" or "us") provides this Policy to inform you of our policies and procedures regarding the collection, use and disclosure of Personal Data we receive from any person who uses the Website and the Services provided thereon (the “Users”). This Policy applies to all Personal Data provided to us through our Website.
2. What information do we collect?
Lab Box collects and processes two types of information: (i) information Users provide to us and (ii) information relating to the User’s use of the Website (collectively the “Personal Data”). Personal Data shall have the meaning as ascribed to it in applicable Belgian and European law.
If you decide to add or provide additional Personal Data to your personal settings which must not compulsorily be given, you give Lab Box with explicit approval to process this additional Personal Data in accordance with this Policy.
By voluntarily giving us this personal information and giving your consent on this Policy, you consent to such personal information being collected, used, disclosed, and stored by us, as described in this Policy.
(i) Information you provide to us:
When you access the Website, launch a research, request an offer, send us an email or communicate with our customer service, you are voluntarily providing us with certain individually identifiable information that we collect and process. Such personal information may include but is not limited to your name, date of birth, physical address, phone number or email address. Should you give us details about another person, you hereby confirm that you fully respect the GDPR doing so and that you received every necessary authorization therefor.
Additionally, we might collect necessary information from Users in order to complete all legally obligated paperwork in each country/region in which either the User or Lab Box is active.
Finally, when you contact our customer service or anyone of the Lab Box staff, we may keep a record of that correspondence and collect the necessary information to classify your question, respond to it and, if applicable, investigate any breach of this Policy.
(ii) Information we learn about you from your use of the Website:
We may collect or process your IP address and certain non-personal information or aggregated data about how and when you use the Website. This information is usually of a technical nature (device settings and information, including but not limited to the type of browser, operating system, keyboard language, screen resolution, IP address, location, etc.) and behavioral nature (the actions taken by you on the Website, including but not limited to access times, pages requested, actions executed, etc.) and is used to compile statistical data about the use of our Website.
We may also collect additional information in connection with your participation in any promotions offered by us and information you provide when giving us feedback.
3. Purposes of collecting information
Lab Box only collects the Personal Data for the following purposes:
1/ We collect certain Personal Data to allow us to process your searches on the Website, to suggest different options, to confirm your requests and to send all relevant information to our partner (Volkswagen D’Ieteren Finance SA) to enable you to enter into a leasing agreement with them and to inform you in case of problem (execution of the contract).
2/ Beyond the collection of your Personal Data to provide our services, we may collect and use your Personal Data to (legitimate interests):
a. Improve user experience:
Tracking your use of the Website will allow us to personalize our services to your needs and process uploaded data related to your profile such as booking preferences. It will allow you to correctly use the Website. This will also allow us to learn more about User preferences and general trends on the Website in order to improve the quality of the Website and personalize your experience.
b. Provide customer service:
We will perform general customer administration by sending you communications about the Website (e.g. upcoming changes or improvements) as well as our other products and services and respond to your questions, treat your requests or troubleshoot any problems.
c. Perform marketing actions:
We can contact you with tailored suggestions and information about events and other products or services as well as communications about the Website.
You can choose to opt-out at any time of marketing promotions from Lab Box and/or third parties and/or mail/email correspondence from Lab Box if you do not want your Personal Data to be used anymore for any of the aforementioned purposes. If you do not want to receive commercial communications from us anymore, you can choose to unsubscribe from such commercial communications at any time by sending us an email at email@example.com.
d. Generate statistics and perform statistical analysis:
We may generate anonymous statistics about the (use and Users of the) Website in order to improve it and to perform statistical analysis.
e. Sharing anonymous information with third parties:
Anonymous visitor information about our Users and the Use of our Website can be disclosed to third parties for marketing, advertising and promotional purposes as well as for statistical purposes for mobility trends.
f. Comply with legal and ethical requirements:
We may verify the compliance with your obligations set out in our Policy and investigate fraud and infringements on all applicable rules and regulations.
We will ask for your consent before using any Personal Data for a purpose other than those that are set out in this Policy. As mentioned above, you can object, at any time and free of charge, to the use of your Personal Data for direct marketing purposes.
4. Disclosure to third parties
a. Data processors
We rely on third party service providers to offer our services and enhance your experience. Only to the extent required (i.e. to perform specific tasks on our behalf such as the storage of data, the processing of a booking, targeted communication on the Website or suggestions concerning possible offers), such third-party service providers (including some located outside of the European Union) will have access to your Personal Data. Once such third-party service provider has completed its specific task and their legal relationship with Lab Box, they will no longer have access to your personal data. Our subcontractors are listed in a register of processing activities (kept internally). We ensure that all our subcontractors provide the same level of protection for your Personal Data as we do (including subcontractors located outside the EU).
b. Service providers
In such a case, Lab Box will send your Personal Data directly to the third party that offered the services you were interested in (such as your email address, name or phone number) in the extent it is necessary to enable you to enter into an agreement with them, to use the services provided by them (confirmation of purchase or booking; requests or claims you make; information in case of problem; etc.) and/or in case of illegal use of the third-party services.
Should you wish to know in more details to which third parties your Personal Data and which Personal Data have been disclosed, please refer to section 8 below (“your rights”).
5. Lawfulness of processing
The processing of Personal Data by Lab Box is in principle based on your express consent for Lab Box to do so or on the execution of your contract with Lab Box to offer you our services.
We may also process your Personal Data in order to comply with the law or in case of illegal use, when we receive orders from legal authorities.
6. Security of your Personal Data
In order to prevent the loss, misuse and alteration of your Personal Data, Lab Box has implemented a variety of appropriate technical and organizational security measures conform with or exceeding industry standard technologies, in order to safeguard the confidentiality of your Personal Data and ensure your online safety. However, Lab Box cannot guarantee that unauthorized access will never occur.
Lab Box uses its best efforts to protect the confidentiality and security of your Personal Data.
In case of violation of your Personal Data, Lab Box undertakes to notify the Data Protection Authority without delay and, if possible, not later than 72 hours after becoming aware of such violation.
Lab Box shall in no event be liable for any direct or indirect damages that result from a wrong or illegal handling by third parties.
7. Data retention period
We do not process your Personal Data any longer than is necessary for the purposes set forth in this Policy: we do store your Personal Data as long as long as the process of your Personal Data is necessary to allow you to make use of our Website. Your Personal Data are deleted or anonymized maximum two years after your last use of our Website.
8. Your rights
Access to and modification or deletion of your Personal Data is free of charge. You may review, update, modify or delete your Personal Data at any time. Please promptly update your Personal Data if it changes. If you wish to exercise your right to be forgotten, you can send us an email at firstname.lastname@example.org and we will process your request.
If and to the extent provided under applicable Belgian and European law, you shall have the right:
a) to obtain from Lab Box confirmation as to whether or not your Personal Data is being processed and, where that is the case, you shall have the right to access such Personal Data being processed;
b) to obtain from Lab Box, without undue delay, the rectification of inaccurate or incomplete Personal Data;
c) to obtain from Lab Box the erasure of Personal Data;
d) to obtain from Lab Box the restriction of processing of your Personal Data;
e) to receive the Personal Data in a structured and commonly used, machine-readable format and have such Personal Data transmitted;
f) to object to processing of your Personal Data and to object at any time and without any justification to the processing of your Personal Data and/or to the transmission of your Personal Data to third parties for direct marketing purposes (including profiling).
These rights can be exercised by sending an email to email@example.com or sending a letter to Lab Box SA/NV, Maliestraat/rue du Mail 50, 1050 Elsene/Ixelles, Belgium.
If and to the extent provided under applicable Belgian and European law, you have the right to lodge a complaint with the authorized supervisory authority (the Data Protection authority), should you consider that the processing of your Personal Data infringes applicable law, by sending an email to firstname.lastname@example.org or any other email address provided by the authorized supervisory authority (https://www.dataprotectionauthority.be/contact-us).
9. Modifications to this Policy
We reserve the right to modify this Policy at any time. Any changes to the Policy will be published on the Website and will be “popped-up” for your approval. In case of significant changes to the Policy that results in Lab Box using your Personal Data in a manner materially different from that stated at the time of the collection, we will provide you with a notice on the Website and/or send you an email notification and request your approval.
Following cookies are being stored when you visit and use our Website:
- Cookies essential for navigation
These are cookies that are required in order to use our Website. Without them certain sections will not function correctly, or not at all. In particular, they enable navigation between the various sections of our Website, completion of forms and secure verification of your identity before granting access to your Personal Data.
- Functional cookies
Functional cookies are intended to facilitate operation of our Website and make using it a more pleasant and personalized experience for you. These are cookies which, for example, store your preferences such as choice of language or your customer segment, collect information in forms for statistical purposes (number of unique visitors, etc.) or enable analysis of how visitors use the Website.
- Marketing cookies
When you visit our website, socio-demographic data and profile data are collected and stored anonymously in a marketing cookie. Marketing cookies do not contain any personal data and are placed by advertisers when their ad is posted. They prevent you being bombarded by the same advertisements over and over again and help to personalize publicity, but they also measure the effectiveness of various marketing and publicity actions.
- Third party cookies
These cookies are placed via our Website by third parties, for example Google. In particular they improve our Website content and operation.
You can configure your internet browser in order to be informed of each cookie sent or systematically refuse them by modifying the parameters of your browser. Lab Box cannot guarantee the access, use and operation of the Website if the storage of cookies is disabled.
If you want to refuse marketing cookies (including Google among others), you can do this with the help of the following website: http://www.youronlinechoices.com/
11. Legislation and competent courts
This Policy is governed by and construed in accordance with the Belgian legislation that is exclusively applicable to any potential dispute.
Any dispute arising under, or in connection with, this Policy shall be settled exclusively by the competent courts of Brussels, Belgium.
If you have any further questions about our Policy or its implementation, please contact email@example.com.
Date of last revision: 17/01/2019