Privacy policy

Through this Privacy Statement, we wish to clarify how Not Now uses your personal data. We will do everything in our power to protect your privacy and therefore handle your personal data with great care. Not Now complies with all applicable laws and regulations, including the General Data Protection Regulation.

This means that:

- Your personal data will be processed in accordance with the purpose for which it was provided. These purposes and types of personal data are described in this Privacy Statement;
- The processing of your personal data is limited to only those data that are strictly necessary for the purposes for which they are processed;
- Appropriate technical and organizational measures have been taken to ensure the security of your personal data is maximized;
- Personal data are not disclosed to third parties unless necessary for the execution of the purposes for which they were provided;

Identity and Contact Details

The controller of your personal data is the following legal entity:

Not Now

Nieuwe Kaai 17, 1760 Roosdaal, Belgium

Business Number: BE1036.127.274

Hereinafter referred to as the Seller.

Categories of Personal Data

The Seller collects the following data about you:

Identification data (and/or of your legal representative); including:

- Your name, surname, telephone number of customers, stakeholders, employees, suppliers;
- Your identification numbers, such as your customer number;
- Your email address(es) and location data;
- Your browser history;
- Your purchase history and receipts;
- Financial data;
- Technical data relating to the use of the Website, such as the IP address of the Data Subject, the date and time of their visit to the Website;
- Any information that the Data Subject voluntarily provides.

This data is collected from both individuals and contact persons of companies. We also process data from prospects, suppliers and subcontractors and visitors to our website and webshop and from anyone we come into contact with.

Purposes of Processing

The Seller processes personal data for the purposes and on the basis of the principles stated below:

- In order to provide quality and optimal customer care including customer administration, management and processing of orders, after-sales services and the like: the legal basis for the processing of personal data is based on the conclusion or performance of a contract;
- With regard to invoicing and compliance with accounting obligations: the legal basis for the processing of personal data is based on legal obligations;
- In the context of supplier management, in particular for supplier administration, order management and payments, evaluation and prospecting of suppliers: the legal basis for the processing of personal data is based on the conclusion or performance of a contract;
- In the context of complaint handling and dispute management: the legal basis for the processing of personal data is based on the legitimate interest to safeguard the (contractual and non-contractual, legal and other) rights of the Seller;
- For the purpose of sending newsletters and other commercial communications: the legal basis for the processing of personal data is based on the Seller's legitimate interest in promoting its products and services to clientele. If you have subscribed to our newsletter, you receive our commercial communications because you have consented to this;
- To develop and improve our products, services, communication methods and the functionality of our Website: the legal basis for the processing of personal data is based on the Seller's legitimate interest in improving or further developing its services and business activities in general;

If you object to the processing of your personal data that is based on the conclusion or performance of a contract, the contract cannot be (further) executed.

If we process your data on the basis of your consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing based on the previous consent.

Recipients of Data

The Seller wishes to protect your privacy as much as possible. To this end, the Seller takes appropriate technical and organizational measures to protect personal data.

Personal data are only accessed or processed by employees of the Seller who must have access to it given their function. Seller's employees are, where applicable, subject to a confidentiality obligation.

In the context of achieving the objectives, we may share your personal data with:

- Judicial, police or administrative authorities when the law requires it or to the extent necessary for the establishment, exercise or substantiation of a legal claim;
- External service providers (such as third parties with whom we cooperate for the storage and management of our data (IT providers), accountants, banks and insurance companies, insurers, insurance brokers, law firms);
- Third parties mentioned in the Seller's Cookie Policy;

A list of these third parties with whom we work is available upon simple written request.

If any of the above parties acts as a 'processor', the Seller will enter into a data processing agreement with this processor to ensure the protection of your personal data.

Data Retention Period

Unless a longer retention period is required or justified by law or compliance with another legal obligation, the Seller retains your personal data only for the period necessary to provide its services.

By way of exception to the above, the following retention periods apply:

- For our invoicing and accounting purposes, we retain your personal data until 7 years plus a verification period of 1 year after the respective fiscal year;
- For our supplier management, we retain personal data until 10 years plus a verification period of 1 year after termination of the contract;
- For our dispute resolution, we retain your personal data until 5 years after the expiration of the last period for appeal (longer if necessary, for example to comply with legal obligations) plus a verification period of 1 year;
- For sending our commercial communications, we retain your personal data as long as you are a client with us, i.e. until 2 years after the closure of the last file. You can of course unsubscribe from our communications at any time. In that case, we will stop processing your personal data for that purpose.

Your rights

You enjoy the following rights with respect to the Seller:

- Right of access/inspection of your personal data: you have the right to access your personal data at any time and to learn about how we use your personal data. This also includes the right to request a copy.
- Right to correct your personal data: you always have the right to correct your data if they prove to be inaccurate.
- Right to deletion of your personal data: you have the right to request the deletion of your personal data, as soon as there is no longer a legitimate basis for processing this data.
- Right to restrict processing of your personal data: under certain conditions, you have the right to restrict the processing of your personal data to mere storage.
- Right to data portability: you have the right to obtain personal data processed by us in a structured, standard and machine-readable format and/or to ask us to transfer it to another controller.
- Right to withdraw consent: you may withdraw at any time the consent you have given us to process your personal data. This withdrawal does not affect the lawfulness of processing of data that took place before you withdrew your consent.
- Right to object to processing of your personal data: you have the right to object to the processing of your personal data (1) that are necessary for our legitimate interests, but where there are reasons specifically related to your situation and (2) for direct marketing purposes (in the latter case you do not need to provide reasons). However, such objection is not possible if the processing of your personal data is necessary for the performance of a contract.
- Right to lodge a complaint: if you believe we have violated the GDPR, you always have the right to lodge a complaint with the Data Protection Authority, the body that oversees compliance with the GDPR: www.databankbelgium.be - Drukpersstraat 35, 1000 Brussels Tel: +32 (0)2 274 48 00 Fax: +32 (0)2 274 48 35, contact@apd-gba.be.

The above rights can sometimes only be applied in certain cases and may be subject to certain conditions, exemptions or exceptions as determined by applicable data protection legislation.

You may exercise the above rights with respect to the Seller in the following ways:

By post/mail: Not Now, attention of the DATA PROTECTION OFFICER, Nieuwe Kaai 17, 1760 Roosdaal, Belgium

By email: info@notnow.coffee

Questions or Complaints

For any complaints regarding the processing of personal data, the Data Subject may contact the Seller at the email address info@notnow.coffee. Furthermore, the Data Subject has the right to lodge a complaint with the competent supervisory authority.

For Belgium:

For the Netherlands:

  • Name: Dutch Data Protection Authority (Dutch DPA / Autoriteit Persoonsgegevens)
  • Address: Bezuidenhoutseweg 30, 2594 AV The Hague
  • Phone: +31 (0)88 1805 250
  • Website: www.autoriteitpersoonsgegevens.nl

    Not Now reserves the right to modify this data protection statement without individual notice. Any such changes will be announced on the website.