Privacy Statement

(Version 24-5-2018)

Introduction

Lenz attaches great importance to the protection of your personal data (and that your privacy is respected).

In this privacy statement we want to provide clear and transparent information about what data we collect and how we handle personal data.

We do everything we can to guarantee your privacy and therefore handle personal data with care.

In all cases, Lenz complies with applicable laws and regulations, including the General Data Protection Regulation.

This means that we at least:

• process your personal data in accordance with the purpose for which it was provided, these purposes and type of personal data are described in this privacy statement;
• processing of your personal data is limited to only those data that are minimally necessary for the purposes for which they are processed;
• ask for your explicit consent if we need it for the processing of your personal data;
• have taken appropriate technical and organizational measures to ensure the security of your personal data;
• not to pass on personal data to other parties, unless this is necessary for the implementation of the purposes for which they were provided;
• be aware of your rights regarding your personal data, wish to point this out to you and respect them.

Company identity

As Lenz, we are responsible for the processing of your personal data. If, after reading our privacy statement, or in a more general sense, you have any questions about this or wish to contact us, you can do so via the contact details below:

Lenz

Herentalsstraat 2/1

2300 Turnhout

info@bylenz.be

www.byLenz.be

Why do we process personal data?

Your personal data is processed by LENZ for the following purposes and legal grounds:

• To be able to participate in LENZ activities; (performance of agreement)
• Processing orders
• Communicating the status of orders
• Sending newsletters and invitations. (Consent of the data subject)

For the above purposes we may request (store and process) the following personal data from you:

• Personal identification data: name, first name, address (billing and delivery address), telephone number, e-mail

• Personal characteristics: gender, date of birth, place of birth, nationality

We use the collected data only for the purposes for which we obtained the data.

Provision to third parties

We may provide the information you provide to us to third parties if this is necessary for the implementation of the purposes described above.

Data that you enter when placing an order or sending a message is stored on the servers of our processor Mijnwebwinkel. Mijnwebwinkel ensures a level of security that matches the data to be processed and takes adequate measures to protect data against loss or any form of unlawful processing. For example, a secure SSL connection is used as standard.

To process and ship our orders, we have a connection with Sendcloud.You will receive your address details (delivery address) from us in order to be able to send/deliver the orders.

Your online payments are processed by our partner Mollie.

We never pass on personal data to other parties with whom we have not concluded a processing agreement.

With these parties (processors) we naturally make the necessary agreements to guarantee the security of your personal data. Furthermore, we will not pass on the data provided by you to third parties, unless this is legally required and permitted.

We may also share personal data with third parties if you give us (written) permission to do so. You have the right to withdraw this permission at any time, without prejudice to the lawfulness of the processing prior to the withdrawal. We do not provide personal data to parties established outside the EU.

Retention period

Lenz does not store personal data for longer than necessary for the purpose for which it was provided or as required by law. The data is never stored for longer than five years.

Data security

We have taken appropriate technical and organizational measures to protect your personal data against unlawful processing. For example, we have taken the following measures;

• All persons who may access your data on behalf of Lenz are bound to confidentiality.
• We maintain a username and password policy on all our systems;
• We regularly test and evaluate our measures;
• Our employees have been informed about the importance of protecting personal data.

Your rights regarding your data

You have the right to inspect and correct or delete the personal data we have received from you. At the top of this privacy statement you can find how to contact us.

You can also object to the processing of your personal data (or part thereof) by us or by one of our processors.

You also have the right to have the data provided by you transferred by us to yourself or on your behalf directly to another party. We may ask you to identify yourself before we can comply with the aforementioned requests.

Complaints

Should you have a complaint about the processing of your personal data, we ask you to contact us directly. You always have the right to file a complaint with the Privacy Commission, which is the supervisory authority in the field of privacy protection.

Changes to privacy statement

Lenz may change its privacy statement. We will make an announcement of this change on our website. The last change was made on May 24, 2018. Older versions of our privacy statement will be stored in our archive.