Privacy policy

Who is responsible for your data?

TST Reclamewerken (hereinafter "we", "us" or "TST") is the controller for the personal data processed via this website and in the context of our services. We attach great importance to your privacy and process your data in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Belgian Act of 30 July 2018 concerning the protection of natural persons with regard to the processing of personal data.

Company	TST Reclamewerken
Address	Koolmijnlaan 58, 3550 Heusden-Zolder, Belgium
VAT number	BE 0847.230.662
Email	info@tst-reclamewerken.be
Phone	+32 491 98 34 96

For all questions about this privacy policy or the processing of your personal data, you can always contact us via the details above.

Which personal data do we process?

We only process the personal data necessary for the purposes for which it is collected. Depending on your interaction with us, this may include:

Data you provide to us yourself

• Identification data: first and last name, company name;
• Contactgegevens: email address, phone number, (billing) address;
• Company details: VAT number, position;
• Project data: logos, design files, images and the content of your message or quote request;
• Billing and payment details in the context of an assignment.

Data collected automatically

• Technical data: IP address, browser type, device and pages visited, collected via cookies (see our Cookie policy).

In principle we process no special categories of personal data (such as health or biometric data). Please do not send us such data unsolicited.

What do we use your data for (purposes & legal bases)?

We process your personal data exclusively for specific, explicit and legitimate purposes. In accordance with Article 6 GDPR, we always rely on a valid legal basis:

Doeleinde	Legal basis (art. 6 GDPR)
Answering quote requests and contact questions	Pre-contractual measures at your request
Performance of the agreement and delivery of services	Performance of the agreement
Invoicing and accounting	Legal obligation
Customer management and after-sales service	Legitimate interest
Website analysis and improvement	Consent (cookies) / legitimate interest
Sending any newsletters	Consent

When the processing is based on your consent is based, you can withdraw it at any time without affecting the lawfulness of the processing before the withdrawal.

How long do we keep your data?

We don't keep your personal data longer than necessary for the purposes for which it was collected, or as long as legally required:

• Quote and contact requests that don't lead to an assignment: up to 24 months after the last contact;
• Client and project data: for the duration of the collaboration and up to 10 years afterwards (for warranty, repeat orders and liability, among others);
• Accounting and invoicing data: 7 years, in line with the Belgian fiscal retention obligation;
• Design files: kept as long as useful for possible reprints or repeat orders, unless you request deletion.

After the applicable retention period, your data is deleted or anonymised.

Who do we share your data with?

We never sell your data to third parties. We only share your personal data when necessary, with:

• Processors who provide services on our behalf, such as our IT and hosting partner, accountant, print and material suppliers and, where applicable, courier services. With each processor we conclude a data processing agreement in accordance with article 28 GDPR;
• Competent authorities when we are legally obliged to do so.

How do we secure your data?

We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access, including secure connections (SSL/TLS), access restrictions and regular backups. Despite all our efforts, no transmission via the internet can be fully guaranteed secure.

In the event of a personal data breach that poses a risk to your rights and freedoms, we report it within 72 hours to the Data Protection Authority and, where required, to you.

What rights do you have?

As a data subject you have the following rights under the GDPR, which you can exercise free of charge:

• Right of access — request a copy of the data we process about you;
• Right to rectification — have incorrect or incomplete data corrected;
• Right to erasure ("right to be forgotten") — within the legal limits;
• Right to restriction of the processing;
• Right to portability of your data;
• Right to object against processing based on legitimate interest or direct marketing;
• Right to withdraw your consent, where the processing is based on it.

You can exercise your rights via info@tst-reclamewerken.be. To verify your identity we may request additional information. We respond in principle within one month after your request.

Complaints & supervisory authority

If you believe we are processing your personal data unlawfully, we ask that you contact us first so we can look for a solution together. You also always have the right to file a complaint with the Belgian supervisory authority:

Authority	Data Protection Authority (DPA)
Address	Drukpersstraat 35, 1000 Brussels
Email	contact@apd-gba.be
Website	www.gegevensbeschermingsautoriteit.be

Changes to this privacy policy

We may adjust this privacy policy from time to time, for example with new services or changed legislation. The most recent version is always available on this page, with the date of the last change stated at the top. We recommend consulting this policy regularly.