Simplycure privacy policy
Last modified on 1/1/2024
This privacy policy (hereinafter, the “Privacy Policy”) governs the protection, collection and processing of your personal data by Compliment SRL, whose registered office is at Boulevard de la Cambre 17, 1000 Brussels, registered with the Crossroads Bank for Enterprises of Belgium under number 0665.835.813 (hereinafter referred to as “Simplycure”, “we”, “us” or “our”).
We attach the highest importance to the confidentiality and security of your (hereinafter, “you”, “your” or “yours”) personal data. Our Privacy Policy is intended to inform you about:
- the (categories of) personal data we collect and process in the context of the services we provide, in particular through the website Simplycure (hereinafter, the “Site”),
- the reasons why we collect and process your personal data, and the legal basis on which we rely,
- how long your personal data are kept,
- the possible disclosure of your personal data to third parties,
- the possible transfer of your data outside the European Union or to international organisations,
- the rights you can exercise in relation to your personal data or their processing, and
- the security measures we put in place to ensure the protection and confidentiality of your personal data.
We advise you to read this Privacy Policy carefully, of which our policy on the storage and use of cookies (the “Cookie Policy”), accessible here, forms an integral part.
- General information and contact
For the purposes of this Privacy Policy, we must be regarded as the controller of your personal data.
As a consequence of this qualification, certain obligations are imposed on us under data protection legislation. This legislation includes in particular:
- the General Data Protection Regulation (Regulation (EU) 2016/679 of 27 April 2016 or “GDPR”),
- the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data, and
- the Act of 13 June 2005 on electronic communications, including their future adaptations and amendments,
hereinafter collectively referred to as the “Applicable Data Protection Legislation”.
If you have any questions about our Privacy Policy or the processing of your personal data, or if you feel that your interests are not represented, or not adequately represented, you can always send us your questions, comments or complaints by emailing pro@simplycure.com.
You also have the right to lodge a complaint with the competent data protection authority or to request further information from it. You will find all the information you need to do so in Article 8 below. If you have questions or comments, or if you wish to lodge a complaint, we nevertheless invite you to contact us first so that we can resolve any issues you may encounter.
- Personal data collected and processed
The personal data we collect and process about you will always be linked to the specific purposes set out below.
We may receive your personal data directly from you, for example when you interact with us by email or through our contact form on the Site. We may also receive your personal data through any means related to information and communication technologies, in particular by automated means such as cookies. We refer you to our Cookie Policy for more information on this subject.
We set out below, in more detail, the different categories of personal data we collect and process about you, the purposes of this processing and the way in which we process your personal data.
- Processing of personal data when you visit the Site
- Cookies
Purposes
We use different types of cookies:
- technically essential cookies and cookies used for functional purposes
We use Shopify to manage our Site and its content, and to manage our cookies. This software uses technically essential cookies. This means that these cookies are necessary for the proper functioning of the Site. It is not possible to refuse these cookies if you want to visit our Site;
cookies used for social media sharing
We use Meta to enable pages of our Site to be shared on social media. These are therefore third-party cookies (indirect cookies). This means that we do not control the information collected via these cookies; and
- cookies used for analytical purposes
We also use Google Analytics for analytical purposes. This analysis tool sets cookies that we use to quantify visits (traffic) to the Site. Among other things, this tells us how many times a given page has been read. We use this information solely to improve the content of our Site.
Lawful basis (bases)
- Technically essential cookies and cookies used for functional purposes: necessary for the performance of the service (Article 6.1.b of the GDPR)
- Other cookies (analytics and social media sharing): The use of these third-party cookies, for which we are joint controller, is subject to your prior consent (Article 6.1.a of the GDPR).
You may refuse to allow these cookies to be set on your device. You will not be denied access to our Site as a result. However, some features may not be available.
Categories of data
We refer you to our Cookie Policy, which details the different data collected depending on your choices.
Retention period
Cookies generally also have an expiry date. Some cookies, for example, are automatically deleted when you close your browser (known as session cookies), while others remain on your computer for longer, sometimes even until you delete them manually (known as permanent cookies).
Recipient(s)
- Facebook;
- Youtube; and
- Instagram.
Likewise, this communication to our service providers and processors (IT providers, hosting providers) could also be necessary.
- Processing of personal data when you interact with us
- Correspondence by email or via the Site
Purpose(s)
If you wish to use our services, your data will be processed in order to contact you. These data are also used for marketing purposes.
Lawful basis (bases)
The processing of these data is essential for the performance of our services (Article 6.1.b) GDPR) and for the legitimate interest of Simplycure (Article 6.1.f) GDPR).
Category of data
This concerns your identification data (surname, first name, address, email address, mobile phone number, postal address).
Retention period
The data are processed for a period of 10 years from the deletion of your account.
Recipient(s)
Likewise, communication to our processors (IT providers, accountant, auditor) could be necessary. The data processing agreement is available here: www.simplycure.com/traitement-de-donnees
- Administrative and accounting management
Purpose(s)
The data you provide to us are processed to ensure the administrative management as well as the accounting and tax management of the services you order from us.
Lawful basis (bases)
The processing of these data is essential for the performance of the contract between us (Article 6.1.b) GDPR), in particular issuing invoices, tracking orders and notifying you of changes to our terms of service or to the Privacy Policy (including new purposes).
The processing of these data is also necessary to fulfil our legal obligations, in particular under the Code of Economic Law and the VAT Code in tax and accounting matters (Article 6.1.c) GDPR).
Categories of data
This concerns:
- your identification data (surname, first name, email, address, telephone number, company number, VAT number, address);
- invoices issued and payments;
- your financial data (bank, account number).
Retention period
The data are processed for a period of 10 years from the end of the provision of our services.
Recipient(s)
Likewise, communication to our processors (IT providers, accountant, auditor) could be necessary.
- Newsletter
Purpose(s)
If you have subscribed to our information service, we process your data in order to send you newsletters free of charge.
Lawful basis (bases)
The data are processed on the basis of the performance of the service contract (Article 6.1.b) of the GDPR).
Category of data
This concerns your surname, first name and email address.
Retention period
The data are processed until you end this free service.
Recipient(s)
Communication of your data to our service providers and processors (IT providers, emailing and direct mail services, etc.) could also be necessary. The data processing agreement is available here: www.simplycure.com/traitement-de-donnees
- Processing of personal data when you provide services to Simplycure
Purpose(s)
The data you provide to us are processed in order to manage our contractual relationship: managing orders, offers, delivery, invoicing and payment, and (where applicable) evaluating the supplier’s performance.
Lawful basis (bases)
The processing of the data is essential for the performance of the contract. Without the processing of these data, we cannot perform the contract (Article 6.1.b) GDPR).
Categories of data
This may concern:
- your identification data (surname, first name);
- your contact data (email address, telephone number);
- your professional data (company, role);
- your financial/accounting information (bank account number, account holder);
- data relating to the monitoring of services provided.
Retention period
Your data are kept for 10 years after the end of the last contract concluded with us.
Recipient(s)
Likewise, this communication could also be necessary to our service providers (IT providers, accountant, auditor).
In the event of a dispute, communication of your data to our lawyer, to the other parties or their lawyers, to the courts, to experts, technical advisers, notaries, mediators, arbitrators or bailiffs, or to banking or insurance institutions may be necessary. The data processing agreement is available here: www.simplycure.com/traitement-de-donnees
- International data transfers
Our offices are located in Belgium and the personal data we collect are stored on servers in Europe (EU West in Ireland).
However, for the purposes set out in Article 2, your personal data may be transferred to other jurisdictions outside the European Economic Area (EEA), which are therefore not bound by the GDPR. Your data may also be hosted on servers outside the EEA.
Where your personal data are transferred to third parties residing in those jurisdictions, we implement appropriate safeguards in our agreement with those third parties so that your personal data enjoy an adequate level of data protection, at least equivalent to the level you are entitled to under the GDPR. To that end, we assess the level of data protection in the country of transit or destination, taking into account in particular the relevant decisions taken by the European Commission. We may use the Standard Contractual Clauses adopted by the European Commission and any other appropriate solution, as required or permitted by the Applicable Data Protection Legislation.
- Your data protection rights
Under the Applicable Data Protection Legislation, you have certain rights over the personal data we collect and process about you.
If you would like more information about your rights as listed below, or if you wish to exercise them, do not hesitate to email us at pro@simplycure.com. We simply ask that, when exercising your data protection rights, you identify yourself correctly so that we can respond to your request within the time limits indicated below.
Exercising your rights is free of charge and will be carried out within one (1) month of receipt of your request. We may extend this period by two (2) additional months, for a total of three (3) months, if your request proves particularly complex. If we decide to extend the initial period, we will inform you of that decision in good time.
Where we consider that your request is manifestly unfounded or excessive, we reserve the right to charge you an administrative fee for handling your request, or even to refuse to act on it. You will be informed of our decision within the above-mentioned time limits.
Below is a brief overview of the rights you can exercise in relation to your personal data:
- Withdrawal of consent: you have the right to withdraw your consent for all processing activities that depend on it;
- Right of access: you have the right to request a copy of the data we process and store about you, in an understandable format;
- Right to rectification: you have the right to ask us to correct, amend or complete your personal data;
- Right to erasure: you have the right to request the deletion of the personal data we process or store about you;
- Right to restrict processing: in certain circumstances, you have the right to ask us to restrict the processing of your personal data. When you exercise this right, the relevant personal data will remain in our possession, but we will not be able to process them further;
- Right to object to processing: where we process and collect your personal data on the basis of our legitimate interest, you have the right to object to the processing of those data;
- Right to data portability: this means that we may, at the request of the data subject, provide them with their personal data and/or provide those data to third parties in a structured, machine-readable format.
- Security of your personal data
We use generally accepted and reasonable technical and organisational methods, in line with current technological developments in operational security, to provide protection against the loss, misuse, alteration or destruction of all the personal data we store and process.
Our technical and organisational measures are updated frequently in order to adapt them to new technical and organisational procedures and to guarantee the ongoing security of your personal data.
Our Site contains links to other websites or Internet resources (hereinafter collectively referred to as the “Third-Party Sites”), which may also collect personal data, in particular through cookies or other technologies. We are not responsible for these Third-Party Sites, nor for their collection, use or disclosure of your personal data, and we exercise no control over them. We invite you to review the privacy policies of these Third-Party Sites to understand how they collect and process your personal data.
- Changes to the Privacy Policy
We may adapt and amend our Privacy Policy from time to time, in particular to take account of new data protection practices and to give you better control over your personal data.
We will always make the most recent version of our Privacy Policy available on the Site. You can also ask us to send you the current version or earlier versions of our Privacy Policy by emailing us at pro@simplycure.com. At the top of this document, you can check the date on which we last amended our Privacy Policy.
- Questions and requests
You undertake to provide us with accurate personal data. You can change the personal data we hold at any time by emailing us at pro@simplycure.com. We cannot be held responsible for any failure of our services linked to incorrect information you have provided to us.
If you have any questions about our Privacy Policy, or if you feel that your interests are not represented or are insufficiently represented, you can send all your questions to the email address referred to above.
- Governing law and dispute resolution
Our Privacy Policy is governed by and interpreted in accordance with Belgian law, unless mandatory legal provisions provide otherwise.
You have the right to lodge a complaint with the competent data protection authority, namely the authority of the Member State of your habitual residence, your place of work or the place of the alleged infringement of the Applicable Data Protection Legislation.
The main data protection authority is the Belgian Data Protection Authority (Data Protection Authority or Gegevensbeschermingsautoriteit), which can be reached through the following channels:
- By following the instructions and completing the form accessible via this link;
- By sending a letter to the following address: rue de la presse 35, 1000 Brussels, Belgium;
- By calling the following telephone number: +32 (0)2 274 48 00;
- By sending an email to the following address: contact@apd-gba.be.
