Privacy policy

1. Data controller and data protection officer     

1.1. In this privacy statement, Y D’OR DE FRAIPONT SRL below : ” Y D’OR ” or “we”) explains how it manages your personal data as “controller”. This privacy statement applies to the processing of personal data of customers, potential customers (prospects) and individuals who contract with Y D’OR in any other way as buyer or supplier. Y D’OR has an establishment unit and can be contacted at the coordinates mentioned in point 7.4

1.2. All information concerning an identified or identifiable natural person is personal data. This is information that can reasonably be linked to an individual. 

1.3. The data protection officer is THEMIS-SECURITY.

He can be reached at the following coordinates: 

Rue de l’Abbaye n ° 5 at 4040 Herstal

Phone : +32 4 378 32 30 

Mail : info@themis-security.be 

2. Personal data that we process as a data controller

2.1. Y D’OR may collect your personal data in several ways. We process the personal data that you communicate to us when you take part in an action or use our services and that you communicate data to us directly or indirectly or allow us to save data on your interests, behavior and preferences (cookies).

Information you provide to us

2.2. If you enter a request from Y D’OR, for example via the website, we need the following personal information:

a) Last name, first name, address, postal code;

b) E-mail address and telephone;

c) Date of birth; 

d) Bank account number and / or credit card

2.3. If you conclude a contract with Y D’OR, depending on the type of contract, product or service, we need the following personal information :

a) Last name, first name, address, postal code;

b) Contact data (telephone number and email address);

c) Date of birth; 

d) Bank account number and / or credit card

e) Arrival and departure date

f) Copy of identity card

This personal data must be communicated to us directly. If you do not provide us with the “mandatory” information (which differs depending on the type of contract), we may not be able to provide you with the requested service and conclude the contract.  

Information about your use of our services and / or products

2. 4. If you make use of the services offered by Y D’OR or conclude a contract with us, we process data such as :

a) data relating to your machine, for example a MAC address, an IP address or another number ;

b) your preferences and communication parameters ;

c) the data that we link to certain profiles that we draw up of you according to your consumption behavior (for example : the frequency with which you visit our site, make a purchase or request a service );

d) browsing behavior, determined on the basis of our own observations or cookies (see also article 6 of this privacy statement and our cookie policy ) ;  

e) the results of customer satisfaction surveys ;

f) data concerning your use of the services we offer.

3. Foundations and legitimate interests 

We process personal data on the following legal grounds:

a) Consent

b) Execution of a contract concluded with you or of pre-contractual measures

c) Legal obligation

d) Execution of a public interest mission 

e) Legitimate interest of Y D’OR or a third

We process personal data in a legitimate interest when we use your data to provide services and content, related products and services, to communicate with you and for advertising or marketing purposes in connection with products or services that you have bought in the past. Our legitimate interests include, for example: marketing and advertising related products or services that you have purchased in the past, communication, management and information security, research and analysis of our products or services, business management, affair es legal, internal management and sharing with our affiliates .

4. The purposes for which we process personal data

4.1. Y D’OR processes personal data for the purposes (goals, objectives) mentioned below :

a) maintain customer relationships (including maintaining a direct relationship between Y D’OR, members of the authorized network, service partners and related financial service providers, including for the execution of a contract and the pursuit of legitimate interests).

b) The acceptance and processing of your registration on our website, of your reservation; 

c) Sending by email all the documents relating to your reservation; 

d) Communication of tourist services and attractions, with or without promotions, organized in the vicinity of the holiday home that you have reserved for the period of your stay

e) carry out or coordinate any recall actions, due to legitimate interests or legal obligations;

f) carry out market research to improve our operations, our brands, our services and our products, and identify the wishes of customers, due to legitimate interests;

g) sending targeted advertisements via third-party services such as FACEBOOK and other social networks on the initiative of customers and prospects who wish to do so; 

h) respect legal obligations, settle disputes and enforce our rights;

i) improve the quality of the data by means of the address and the postal code control, due to our legitimate interests;

j) link and analyze cookies from our websites to customer data that we know. We do this to adapt the content of our communication as much as possible to your personal preferences, for the pursuit of our legitimate interests.

1. 5. Third parties involved in the processing

5.1. In some cases, Y D’OR shares personal data with third parties, who are independent “controllers”. We explain below when this is the case and why. Y D’OR may share data with:

a ) network service partners distribution of Y D’OR for the performance of a contract or for the pursuit of legitimate interests;

b) third parties to whom we are legally obliged or authorized to provide data;

c) third parties, if we suspect a violation of the rights of third parties, criminal offenses or abuse, if they have a legitimate interest or if they are public authorities. They may also be authorities such as the police, the public prosecutor;

d) the parties who assist Y D’OR in its services and are not subcontractors of personal data for the pursuit of its legitimate interests;

e) the parties who assist Y D’OR in the development of (direct) marketing activities in the pursuit of its legitimate interests.

5.2. The communication of personal data to the third parties referred to above will only take place if this is authorized on the basis of applicable laws and regulations. 

5.3. Y D’OR also uses third-party services that act as “subcontractors” (for example, hosting service providers, certain software providers, mobility service providers, or parties that organize or perform actions or investigations Y D’OR with these providers, Y D’OR is obliged to conclude a subcontracting contract that states they only treat personal data in accordance with instructions and under the control of Y D’OR.

5.4. Currently, we do not store personal data outside the European Union. If personal data were to be deliberately communicated outside the European Union, we will take additional guarantees such as, for example, the conclusion of a standard contract of the European Union. 

5.5. Our websites may contain references and / or hyperlinks to one or more third party websites. Y D’OR is not responsible for the way in which these third parties process personal data. We recommend that you read the privacy statement of these websites to know and control how they process your personal data.  

5.6 In the context of our activities (accommodation, back up, website), we process the personal data that you provide to us as a subcontractor with regard to article 8 of the RGPD regulations. This processing is governed by our ” GDPR agreement “, transmitted when our contracts are signed.  

6. Marketing, profiling and cookies

6.1. Additionally, we and third parties automatically collect certain information about the history of your activities on our website internet and third-party applications using automated means, such as cookies, according to the preferences you provided. Via certain cookies and similar technologies, unique cookie IDs or other identifiers are assigned or collected. In this way, data can be collected while you are using the website or applications or when these are running in the background on your machine. We may combine them with other information about you or your machine, such as an IP address. If we need permission for this, we will ask for it before we process it.  

6.2. We invite you to read our cookie statement for more information on cookies and similar technologies used and on the configuration of your preferences. 

7. Your rights, including your right to object

7.1. You have the right to know what personal data we have stored about you and to whom we have communicated your personal data. 

7.2. In addition, you have the right to ask us, in compliance with applicable law, to correct, update, delete your personal data, limit the processing of your personal data or to provide your personal data in a structured format, commonly used and machine-readable for transmission to another company. 

7.3. We are obliged to draw your attention to your absolute right to object to direct marketing as well as your rights to object to any treatment, including profiling, performed for the pursuit of the legitimate interests of Y D’OR or a third party and make a complaint to a data protection authority. In Belgium, it is the Privacy Commission designated as the Data Protection Authority (https://www.autoriteprotectiondonnees.be ).  

7.4. The rights of access, rectification, limitation of processing, erasure, or portability of your data, as well as a withdrawal of agreement, can be exercised free of charge by e-mail , form, telephone or letter to following addresses or numbers; 

8. Security

8.1. We have taken appropriate technical and organizational measures to protect your personal data from unauthorized or unlawful processing.

8.2. If you feel that your data is not properly secured or if you have evidence of improper or irregular use of your personal data, please contact our customer service at the address mentioned in point 7.4 above.

9. Shelf life 

We only keep personal data for as long as necessary for the purposes for which it was obtained, unless we are legally obliged to keep personal data for a longer period or if this appears necessary for the management of a possible dispute. 

10. Modification

10.1. We reserve the right to unilaterally modify or supplement this privacy statement. We will inform you as far as possible of any changes. We recommend that you periodically review our privacy statement. 

10.2. This privacy statement was last updated on May 25, 2018.

11. Contact / questions

11.1. For questions or comments concerning this privacy statement and / or the processing of personal data, you can contact us at the addresses or numbers mentioned in point 7.4 above.