Privacy

Locus endeavors to protect the privacy of users of its website. Please read this Privacy Policy carefully and in full before registering, placing an order or otherwise using the website at www.locuslight.eu.

In this Privacy Policy, the following definitions apply:

Locus: Locus, Spoorweglaan 25, 9120 Melsele, Belgium, enterprise number: 0701.838.748

Applicable Privacy Legislation: Applicable Privacy Legislation, including the General Data Protection Regulation (hereinafter: GDPR) and any other applicable law relating to the processing of personal data.

Customer: A Website Visitor who makes a purchase via the Website.

Contract: The Contract between a Customer and Locus concerning the purchase and delivery of products.

Personal Data: Personal Data is any information concerning an identified or identifiable natural person that is processed by Locus as described in article 3 of this Privacy Policy.

Privacy Policy: The present Privacy Policy.

Processing: An operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

Controller: The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data;

Processor: The person who processes Personal Data on behalf of the controller, without being subject to his direct authority.

Website: With ‘Website’ the website: www.locuslight.eu is meant.

Website Visitor: The website visitor refers to the person who uses the Website of Locus

2. Scope privacy policy

This Privacy Policy applies to every use of the Website and governs the processing of Personal Data via the Website. Locus is the Controller for this processing.

The Website of Locus contains references to websites of third parties (for example hyperlinks, banners or buttons). Locus is not responsible for compliance with the Applicable Privacy Legislation by these third parties.

Locus Processes the following Personal Data from Website Visitors and Customers

• name and address details*
• information about the order / donation*
• e-mail address*
• username and password*
• IP address*
• payment details*.

These Personal Data are collected by requesting a Locus newsletter, registering on the Website, placing an order or otherwise using the Website.

Locus will only process the Personal Data in accordance with the Applicable Privacy Legislation. Locus will only use your Personal Data as described in this Privacy Policy.

Locus collects and processes your Personal Data solely for the purposes specified below:

Performance of a Contract: If you decide to place an order, your Personal Data will be processed by Locus for the performance of the Contract. This includes the handling of the payment and the delivery of the products and the processing of donations. No more Personal Data are processed than strictly necessary for the performance of a Contract (Article 6 paragraph 1 section b GDPR).

Communication: Your Personal Data are used to communicate with you about your order/donation and to inform you of matters that are important for your account and/or use of the Website and the handling of any complaints. If you create an account on the Website, we will keep the Personal Data so that you do not have to enter it every time. This Processing of Personal Data is necessary for the performance of a Contract (Article 6 paragraph 1 section b GDPR) and/or for purposes of a legitimate interest pursued by Locus, namely to conduct its normal business (Article 6 paragraph 1 section f GDPR).

Marketing purposes: Your Personal Data can be used to reach out to you for inspirational purposes (by e-mail or by phone). If you have registered for it we will send the newsletter, the action mail and/or inspiration mail. To approach Locus via e-mail for marketing purposes, Locus always requests your prior consent, unless it concerns offers about similar products that you have ordered. You always have the option to unsubscribe from mailings. This Processing of Personal Data is based on consent (article 6 paragraph 1 section a GDPR) or is necessary for purposes of a legitimate interest pursued by Locus, namely to perform marketing activities (article 6 paragraph 1 section f GDPR).

Customer service: If you use customer service, your Personal Data will be used to provide you with customer service. This Processing of your Personal Data is necessary for the performance of a Contract (Article 6 paragraph 1 section b GDPR), or is necessary for purposes of a legitimate interest pursued by Locus, namely to conduct its normal business (Article 6 paragraph 1 section f GDPR).

Job application: If you apply for a job via our Website, your Personal Data may be used by us to handle your job application. This Processing of your Personal Data is necessary for purposes of a legitimate interest pursued by Locus, namely to hire people to work for Locus (Article 6 paragraph 1 section f GDPR).

If Locus intends to further process the Personal Data for a purpose other than that the Personal Data have been collected, Locus will provide you with information about that other purpose and all relevant further information before that further processing.

Locus may provide Personal Data to its partners for the performance of a Contract with you.

Locus shares Personal Data with the following entities:

• Mollie (online payment platform)
• MailChimp (mailing list provider)
• Google Analytics (see article Locus only uses third party cookies to improve the quality and effectiveness of the Website. For example, it uses Google Analytics. These cookies collect information about how you use and move around on our Website. For example, these will keep track of what pages are most visited, internet protocol (IP) address, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp and clickstream data. When you access our Website, a banner is displayed informing you which cookies will be installed if you continue browsing on our Website. If you click on “I agree” on the banner, you are giving your consent to use Google Analytics. The collected and processed data expires after the end of the browser session and after two years from set/update. To opt out of being tracked by Google Analytics cookies on all the websites you visit, please go to this page.)

Locus only shares Personal Data of Website Visitors with third parties after having made contracts with these third parties regarding the processing of Personal Data. In this way, Locus ensures that the Processors take appropriate technical measures, treat the Personal Data confidentially and guarantee the rights of Website Visitors.

Locus takes appropriate organisational and technical security measures to protect your Personal Data and to prevent misuse, loss or alteration thereof.

Locus stores your Personal Data on servers in and outside of Europe, including in the US. If and insofar as Locus stores Personal Data with parties in countries that do not have an adequate level of protection, it will agree with these parties standard data protection provisions set by the European Commission. A copy of the agreed standard provisions can be requested by the Website Visitor or Customer via Locus’s customer service (email address: info@locuslight.eu.

Locus does not store the Personal Data of Website Visitors longer than strictly necessary in relation to the purposes for which they are processed. Except where there is a legal retention term;

• IP addresses of Website Visitors are kept 1 month;
• E-mail address, user names and passwords are stored for 6 months after the services are provided;
• Payment details are stored 10 months after the services are provided;

You can request Locus to erase the Personal Data earlier. If the Personal Data are no longer necessary in relation to the purposes for which Locus has collected or otherwise processed the Personal Data, Locus will erase the Personal Data.

Please refer to the Cookie Policy accessible here.

You can request Locus at all times to view, correct, rectify, supplement, delete or restrict your Personal Data if these are factually incorrect, incomplete or if they are processed in violation of a legal obligation. In so far as the data processing is based on consent (see above), you have the right to withdraw this consent at any time.

You can request Locus to obtain the Personal Data that you have provided to Locus in a structured and commonly used form, so that you can transfer the data to another controller. You are only entitled to this insofar as the processing is based on consent in the sense of article 6 paragraph 1 section a GDPR or article 9 paragraph 2 section a GDPR or if it concerns a processing that is based on the performance of a Contract as referred to in Article 6 paragraph 1 section b GDPR and the processing is carried out by automated means.

If you wish to make use of one of the rights mentioned in this article, you can request this from Locus’s customer service via info@locuslight.eu

Locus will provide you with information about the follow-up given to the request immediately and in any case within one month of receipt of the request. Depending on the complexity of the request and on the number of requests, this period can be extended by another two months. Locus will notify you of such an extension within one month of receipt of the request.

If your requests are manifestly unfounded or excessive, in particular because of the repetitive character, Locus will either charge you a reasonable fee or refuse to comply with the request.

Locus is entitled at all times to delete your account without notice. In such a case, Locus owes no compensation to the Customer as a result of the termination of the account.

Locus reserves the right to change this Privacy Policy on a regular basis. It is your responsibility to regularly review the applicable conditions. This Privacy Policy is last amended and revised in May 2018.

If a provision from this Privacy Policy is in conflict with the law, it will be replaced by a provision of the same purport that reflects the original intention of the provision, all this to the extent legally permissible. In that case, the remaining provisions remain applicable unchanged.