Date of this privacy notice: Aug. 17, 2023
(date of last amendment: Oct. 20, 2024)
This Privacy Statement provides you with detailed information in connection with the protection of your personal data by Gyles BV, a limited liability company under Belgian law, with its registered office at Aardekensweg 21, 2390 Oostmalle, Belgium and registered in the Crossroads Bank for Enterprises with number 0784.879.755 (RPR Antwerp, Turnhout Division) ("we" or "us") in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC ("AVG").
As a data controller, we are responsible for processing your personal data as part of our operations. The purpose of this Privacy Statement is to inform you about what personal data we process about you, the reasons for which we process and share this data, how long we keep it and how you can exercise your rights.
Our representative for purposes of the AVG is Mr./Ms. Jordi Gyles. His/her contact details are: Aardekensweg 21, 2390 Oostmalle and jordi@g4u-app.com.
1. Which one?
We collect and use your personal data to the extent necessary in the course of our business and to achieve a high standard in terms of products and services.
In doing so, we process various categories of personal data, including: - identification data (e.g., name, first name, address);
- contact information (e.g., mailing and email address, phone number);
- employee data (e.g., account number, age, gender, seniority); - financial data (e.g., payment history);
- legal data (e.g. criminal convictions and offenses); - additional data (e.g. info provided by you for the establishment, exercise, defense of legal interests).
2. How, why and on what basis?
| Communicator | Personal data | Legal Basis |
| When you communicate with us by e-mail communicate with us by email | we will collect your name, first name, phone number, postal and e mail address. | Article 6, 1, b) of the AVG, in particular the performance of a contract to which you are a party or taking action at your request before a contract has been concluded. |
| When you register to use our services (including when you subscribe via our website or app) | we request your name, first name, company name (optional), country/region, e-mail address, phone number, address and payment information (depending on the payment method chosen e.g. card number, expiration date, CVC) in order to transact business with you and provide requested services. | Article 6, 1, b) of the AVG, in particular the performance of a contract to which you are a party or taking action at your request before a contract has been concluded. |
| When you provide goods or services to us | For day-to-day purposes especially communication to you and internally. | The legal basis used for this is Article 6, 1, b) of the AVG, specifically the performance of a contract to which you are a party or the taking of measures at your request before a contract has been concluded. |
| when you visit our website | for marketing purposes. | The legal basis used for this is Article 6, 1, a) of the AVG, in particular consent (your preferences in connection with the storage of your personal data are requested as soon as you visit our website, where you can choose between silver (only necessary information is collected for the functioning of the website), gold (your data is used for personalization of website content) or platinum (high level of personalization where your data is used to make advertisements and media more relevant) and you can specify the length of time for which your data may be stored. |
| when you are employed with us | for purposes of managing the client/employer contractor/employee relationship. | The legal basis used for this is Article 6, 1, b) of the AVG, specifically the performance of a contract to which you are a party. |
3. With whom do we share your personal data?
To fulfill the above-mentioned purposes, we communicate your personal data only to: - our employees;
- Group entities (if applicable);
- service providers providing services on our behalf;
- financial and judicial authorities, governmental or public agencies, upon request and to the extent permitted by law.
- Producers of supermarket products with whom we have a cooperation agreement.
- Supermarkets.
4. Transfer of personal data outside the European economic area
Your data will not be subject to international transfer from the European Economic Area ("EEA") to a country outside the EEA.
5. How long do we keep your personal data?
We do not retain your personal data longer than necessary for the purpose for which it was provided or required by law, specifically:
- For agreements concluded with parties (e.g. customers, suppliers): during the execution of the agreement resp. use of the app and up to 5 years after the last interaction;
- for marketing purposes: for as long as the data is necessary for the further development of the Company, but never longer than the time period specified by you when you visit our website and up to 5 years after the last website visit; and
- For managing the client-employer-client-employee relationship: 5 years. 6. Automatic decision-making
Your personal data provided to us will not be used for automated decision making, including profiling.
We would like to expressly inform you that personal data will be shared with partners with whom we have entered into a cooperation agreement for information purposes and that they will share this data, including the search behavior of the app users, the buying behavior (as collected from scanned checkout tickets in the app) of the app users, age, gender and region in which the app users live/buy (without communicating their exact address). For this, you have given your express consent at the time you register via the website or the app for a (trial) subscription and consequently accept our terms and conditions (as made available on our website).
7. Protection of your personal data
We use appropriate technical and organizational measures to protect your personal data. We have implemented appropriate security measures to protect your personal data from unauthorized access, modification, communication or destruction.
8. Cookies
(a) What cookies are used
We use cookies on our website. Cookies are small pieces of information stored on your device by your browser. We use cookies so that our Web site can remember you and provide content that you request. We also use cookies to collect statistical information about our Web site, such as the time users spend on a site and the pages they visit most often. Those statistics do not contain any personal information. We will also use cookies for marketing purposes.
Cookies can be in the form or session cookies or persistent cookies. Session cookies are deleted from your device when you close your web browser. Persistent cookies remain on your device until deleted or until they reach their expiration date.
We use the following cookies:
- functional cookies: these are technically necessary and ensure that the website functions properly. Without these cookies, certain essential functions of the website would not work or would not be saved for the visitor.
- analytical cookies: these are used to track the functioning of the website and to gain insight into how often and how certain parts of the website are read. This allows us to improve the website and the communication through the website.
- Google Analytics cookies: through our website a cookie is set by the U.S. company Google, as part of the "Analytics" service. We use this service to track and receive reports on how visitors use the website. Google may provide this information to third parties if Google is legally required to do so, or insofar as third parties process the information on Google's behalf. We have no influence on this. We have not allowed Google to use the obtained analytics information for other Google services. The information collected by Google is anonymized as much as possible. Your IP address is expressly not provided. The information is transferred to and stored by Google on servers in the United States. Standard Contractual Clauses are therefore part of Google's terms and conditions.
(b) How consent is given or denied
The website uses a cookie banner for asking permission (which is visible on the first visit to the website and can be accessed again by clicking on the fingerprint at the bottom left of the website). Here it can be selected for the use of which cookies consent or no consent is given by the visitor and for what duration the personal data may be kept. The cookies for which no consent is given will then not be placed when visiting the website.
If permission to place cookies is refused, the website or certain features of the website may not function as well as they should.
Visitors can set the browser settings to block certain cookies on each website they visit. Where this feature is located varies by browser.
(c) Retention period
Cookies are not stored longer than necessary for the purpose for which the cookie was placed.
Some cookies are session-based, meaning that after the website visit is over, the cookie is deleted.
Other cookies have a certain retention period, ranging from a few hours to an indefinite period, but never longer than necessary.
The retention period can be checked in the full overview of cookies used by the website.
More information regarding the cookie policy can be found at https://g4u-app.com/cookieverklaring/. 9. What are your rights and how can you exercise them?
Both, where applicable, in relation to the performance of the agreement to which you are a party and, where applicable, in relation to the consent you have given for marketing purposes, you have the following rights in respect of your personal data:
1. right to information i.e. the company has an obligation to communicate certain information to you.
2. right of inspection, i.e., you have the right to obtain confirmation as to whether or not your personal data are being processed and, if so, to obtain access to that personal data. You may also obtain a copy of your data.
You can exercise this right as follows:
With respect to the performance of the contract to which you are a party: you may request details from the representative regarding your personal data that we hold and process as appropriate; and
Regarding the consent you have given for marketing purposes: you may request details from the representative regarding your personal data that we hold and process as appropriate.
3. right to rectification, i.e. you have the right to obtain the rectification of incorrect personal data and the completion of incomplete personal data.
You can exercise this right as follows:
With respect to the performance of the contract to which you are a party: you may request that the representative correct and/or complete the incorrect personal data; and
Regarding the consent you have given for marketing purposes: you may request the representative to have the incorrect personal data corrected and/or completed.
4. right to data erasure, i.e. you have the right to obtain erasure of your personal data without unreasonable delay in the following cases:
(a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
b) you withdraw your consent, and there is no other legal basis for the processing; c) you object to the processing;
(d) the personal data have been processed unlawfully;
e) the personal data must be deleted to comply with a legal provision; and/or f) the personal data was collected in connection with an offer of information society services.
You can exercise this right as follows:
With respect to the performance of the contract to which you are a party: you may request the representative to erase personal data based on enumerated cases belonging to the right to data erasure; and
Regarding the consent you have given for marketing purposes: you may request the representative to have personal data deleted based on enumerated cases belonging to the right to data erasure.
5. right to restriction of processing, i.e. you have the right to obtain the restriction of processing in the following cases:
(a) the accuracy of the personal data is disputed by you, for a period that allows us to verify the accuracy of the personal data;
b) the processing is unlawful and you oppose the erasure of the personal data and request instead that its use be restricted;
c) we no longer need the personal data for the purposes of processing, but you need it for the establishment, exercise or vindication of a legal claim; and/or d) if you have objected to the processing, pending the answer to the question of whether our legitimate grounds outweigh yours.
You can exercise this right as follows:
Regarding the execution of the contract to which you are a party: you can send an e-mail to the representative. Please include your name and first name and the subject "Right to restrict personal data". Attach a copy of the recto side of your identity card. In your e-mail, also include the reason for your request; and
Regarding the consent you have given for marketing purposes: you can send an e-mail to the representative. Include your name and first name and the subject "Right to restrict personal data". Attach a copy of the recto side of your identity card. In your e-mail, also include the reason for your request. In addition, you may also exercise this right by sending a letter to the following address: Aardekensweg 21, 2390 Oostmalle, Your written request must be signed, as well as accompanied by a copy of the recto side of your identity card. The request must indicate the address to which the reply should be sent. In that case, a reply will be sent to you within 1 month of receiving the request and within 2 months if in-depth research needs to be done or in case Gyles would receive too many requests;
6. right to object to processing, i.e. you have the right to object to the processing of your personal data for reasons specifically related to your situation. We will then cease processing unless there are compelling legitimate grounds which outweigh your interests, rights and freedoms or which are related to the establishment, exercise or vindication of a legal claim. Where personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing, including profiling related to direct marketing. We will then no longer process your personal data for these purposes.
You can exercise this right as follows:
Regarding the performance of the contract to which you are a party: you may send an e-mail to the representative with your name and first name as well as the subject line "Right to object.
personal data". Attach to your e-mail a copy of the recto side of your identity card. Further in the text, state the reasons that motivate your objection; and
Regarding the consent you have given for marketing purposes: you can send an e-mail to the representative with your name and first name as well as the subject "Right to object: personal data". Attach to your e-mail a copy of the recto side of your identity card. Furthermore, please indicate in the text the reasons motivating your objection. In addition, you may also exercise this right by sending a letter to the following address: Earthkensweg
21, 2390 Oostmalle. Your written request must be signed, as well as accompanied by a copy of the recto side of your identity card. The request must indicate the address to which the reply should be sent. In that case, a reply will be sent to you within 1 month of receiving the request and within 2 months if in-depth research needs to be done or in case Gyles would receive too many requests;
It may happen that we do not respond to your request. However, it goes without saying that in this case we will provide you with as clear a response as possible. Furthermore, any e-mails or information letters that may be sent to you will contain a link that you may click to stop receiving promotional information from us.
7. right to portability, i.e. you have the right to obtain your personal data in a structured, common and machine-readable form, and he has the right to transfer that data to another party, if:
(a) the processing is based on consent or agreement; and
(b) the processing is carried out through automated processes.
You can exercise this right as follows:
Regarding the execution of the contract to which you are a party: you can send an e-mail to the representative with your name and first name and the subject "Right to data portability: personal data". Attach a copy of the recto side of your identity card. Remember to specify in your e-mail the respective files and type of request (return of data and/or transfer to a new service provider); and
Regarding the consent you have given for marketing purposes: can you send an e-mail to the representative with your name and first name and the subject "Right to data portability: personal data". Attach a copy of the recto side of your identity card. Do not forget to specify in your e-mail the respective files and type of request (return of data and/or transfer to a new service provider). In addition, you can exercise this right by sending a letter to the following address: Aardekensweg 21, 2390 Oostmalle. Your written request must be signed, as well as accompanied by a copy of the recto side of your identity card. The request must indicate where the reply should be sent. In this case, a reply will be sent to you within 1 month of receiving the request and
within 2 months if in-depth research needs to be conducted or in the event that Gyles would receive an excessive number of requests;
However, you should know that we have the right to refuse your request for data portability. Indeed, this right applies only to personal data collected on the basis of your consent or the performance of a contract entered into with you. Furthermore, this right may also not affect the rights and freedoms of third parties whose data would form part of the data that would be transferred following a request for portability.
In accordance with the applicable regulations, you have the right to lodge a complaint with the competent supervisory authority in particular in the Member State where you normally reside, have your place of work or where the alleged infringement was committed, if you consider that the processing of the personal data in question violates the AVG.
10. Changes
This privacy policy protecting your personal data may be modified at any time, in particular to be in line with any legislative or regulatory changes and with the evolution of our services.
Significant changes that would be made will be notified via our website or by email and, to the extent possible, at least thirty days before they take effect. When we will publish changes to this privacy policy, we will update the date of the "last change" at the top of the privacy policy.
We encourage you to periodically review this privacy policy to be informed of how Gyles is protecting your personal information
* * *