Privacy statement for business partners
PRIVACY STATEMENT FOR BUSINESS PARTNERS
This privacy statement aims to inform our business partners about the processing of their personal data by us. The current, valid version will always be available on our website.
Controller
The controller is the natural or legal person who determines why your personal data are processed and the manner in which they are processed.
The various companies in the Milcobel Group (Milcobel or We) are joint controllers. A full list of Milcobel companies can be found at the end of this privacy statement, together with their full addresses.
As joint controllers, the companies have agreed that MILCOBEL CV, with its registered office at Fabriekstraat 141, 9120 Kallo, Belgium, registered with the CBE under number 0870.019.427, shall assume the concrete implementation of the obligations regarding the provision of information and the exercise of your rights in connection with the processing of personal data.
Persons involved
This privacy statement applies to all business partners of Milcobel, both natural persons and employees of legal entities, and in particular:
- Customers;
- Suppliers;
- Subcontractors;
- Prospects; and
- Sponsors.
Personal data processed and purposes of processing
The following personal data is usually kept from you: (non-exhaustive)
- Contact details (Name and first name; correspondence details, position, etc.);
- Details regarding your capacity as a business partner (bank account number, orders; breaches of appointments; evaluations of cooperation; etc.);
- Communication data (e.g. e-mail traffic; correspondence; invoicing; etc.).
We do not conduct profiling activities, and thus no automatic decisions are made on that basis. The personal data we process is usually provided by yourself or by other group companies.
We process your personal data only in the context of our business relationship and do not use it for other purposes:
| Personal data | Purpose of processing | Legal basis |
|---|---|---|
| Contact and communication details | Management of orders and services | Necessary for the performance of the agreements (cf. article 6, b) GDPR) |
| To contact you (e.g. upon receiving your business card) for the purpose of entering into a commercial agreement | Necessary for Milcobel's legitimate interest (cf. article 6.1, f) GDPR) (i.e. for Milcobel's commercial interests). | |
| Compliance with our legal obligations on working with subcontractors for risk management purposes | Legal obligations concerning labour law, social security law and tax regulations on welfare at work, posting and joint and several liability (cf. article 6, c) GDPR) | |
| Risk management and compliance, other than aforementioned cooperation with subcontractors | Legitimate interest to manage risk and compliance (cf. Article 6(f) GDPR) | |
| Financial management of our business relationships | Legitimate interest to manage its finances effectively (cf. article 6, f) GDPR) | |
| Intra-group reporting | Legitimate interest to be able to report qualitatively on commercial activities and business relationships (cf. article 6, f) GDPR) | |
| Arranging business meetings and agreements (e.g. purchase, service, or sponsorship agreements). | Necessary for the performance of agreements with customers, suppliers, sponsors and subcontractors (cf. article 6, b) GDPR) | |
| Organising events (including arranging accommodation and/or transport etc.) | Justified interest to organise events with a view to concluding a contract with the customer, supplier or subcontractor (cf. article 6, f) GDPR) | |
| Marketing activities such as collecting and analysing data and questionnaires to develop new products or improve services | Justified interest to improve its goods and services (cf. article 6, f) GDPR) | |
| In exceptional circumstances, managing potential disputes that may arise from our business relationships | The legitimate interest to defend one's own rights in the best possible way (cf. article 6, f) GDPR) | |
| To inform a third party in the context of a potential merger with, acquisition of/by or divestment by that third party, even if that third party is located outside the EU | The legitimate interest to efficiently organise company law transactions as part of a usually pre-transaction due diligence process (cf. article 6, f) GDPR) |
Milcobel will inform you in advance if they intend to process your personal data for purposes other than those indicated in this privacy statement.
Where Milcobel processes your Personal Data on the basis of your consent, you have the right to withdraw your consent at any time. This withdrawal will not affect the lawfulness of the processing of personal data, based on your consent, prior to the withdrawal of consent.
Where Milcobel processes your Personal Data on the basis of its legitimate interest, this means Milcobel has determined, after balancing the interests, that the identified interest outweighs . If you would like more information on the balancing of interests, please contact privacy@milcobel.com directly.
Where Milcobel processes your Personal Data for the purposes cited because it is necessary for the performance of the agreement you have with Milcobel, Milcobel cannot provide those services for those purposes without processing those Personal Data.
Retention of your personal data
In general, your personal data will be kept for as long as necessary to fulfil the above purposes. This means, in most cases, that your personal data will be kept for the duration of the agreement as a customer, supplier and/or subcontractor, with a minimum period of 10 years (unless the law would impose a shorter period for specific data), possibly extended by the term of legal proceedings.
Sharing of your personal data
For the purpose of qualitative and efficient processing of personal data, we may enter into agreements with third parties to carry out processing on our behalf and only in accordance with our instructions. For example, customer data may be shared with transport companies in charge of delivering the products. Service providers to which your personal data is transferred are bound by specific agreements and are obliged to keep your personal data safe.
Moreover, in fulfilment of our legal obligations, we may share your personal data with customs authorities. Disputes and other incidents may also result in your personal data being shared with the police and other judicial authorities in exceptional circumstances.
Within the framework of internal reporting within Milcobel, your personal data may also be shared with other intra-group companies.
When and to the extent that Milcobel would be the subject of a potential sale, your personal data may also be shared with potential acquirers as part of a customary pre-sale due diligence process.
Cross-border transfer of personal data
Your Personal Data will only be processed within the European Economic Area (EEA). If this does happen, Milcobel will take sufficient security measures to ensure that your personal data are adequately protected (including through the inclusion of standard provisions for the transfer of personal data). If you would like more information on any transfer of personal data, please contact privacy@milcobel.com directly.
Your rights
You have the right to request access to your personal data and to have it corrected if it is incorrect. You also have the right to request the erasure of your personal data when it is no longer relevant. Despite the fact that you have the right to request to have your personal data erased, we may need to retain certain personal data for the performance of the contract or because of a legal obligation to keep certain data.
In addition, you have the right to object to the processing of your personal data for legitimate personal reasons and to request that processing be restricted in specific circumstances.
Finally, you also have the right to obtain the personal data you have provided to us in a structured, common and machine-readable form (data portability).
Where the processing of your personal data is based on your consent, you have the right to withdraw that consent at any time.
Contact details
If you have any questions or concerns about this privacy statement, if you have any concerns about the processing of your personal data as explained above or if you wish to exercise your rights as explained above, you can contact us by sending an e-mail to privacy@milcobel.com, which is the single point of contact.
Supervisory authority
Finally, note that you have the right to lodge a complaint regarding the processing of your personal data with the Belgian supervisory authority: Data protection authority Printing Press Street 35, 1000 Brussels (www.gegevensbeschermingsautoriteit.be).
Changes
We may change the provisions of this privacy notice. We will announce each new version.
List of joint controllers
- MILCOBEL CV, with registered office at Fabriekstraat 141, 9120 Kallo, Belgium, registered with the CBE under number 0870.019.427;
- Milcobel Dairy NV, with its registered office at Fabriekstraat 141, 9120 Kallo, Belgium, registered in the CBE under number 0870.017.447;
- Camal SA, with registered office at Rue Légipont 12/OOOD, 4671 Blégny, Belgium, registered in the CBE under number 0412.859.912;
- Kaasimport Jan Dupont NV, with registered office at Lieven Bauwensstraat 9, 8200 Bruges (Sint Andries), Belgium, registered in the KBO under number 0405.109.216;
- Ysco NV, with registered office at Fabriekstraat 141, 9120 Kallo, Belgium, registered in the CBE under number 0472.336.451;
- Ysco France SAS, with registered office at 53 Avenue de la 2e D.B., 61206 Argentan, France, with company number 43531711000011;
- Cheeseline NV, with registered office at Lieven Bauwensstraat 9, 8200 Bruges (Sint Andries), Belgium, registered in the KBO under number 0441.187.078; and
- Kaasbrik NV, with registered office at Industriepark 1216, 3445 Halen, Belgium, registered with the CBE under number 0423.910.091.