Privacy Policy

Scope

This privacy policy describes how re-shop BV processes personal data from users who https://re-shop.be/en/ , use it, or otherwise provide personal data to us in connection with our activities.

This privacy policy applies to all processing of personal data via the website and the related services of re-shop.

Data Controller

The data controller responsible for the processing of personal data is:

re-shop BV
Jean Monnet Avenue 1 box A
1800 Vilvoorde
Flemish Brabant
Belgium

Company number: 1039.854.846

In this privacy policy re-shop BV is hereinafter referred to as the data controller.

The protection of personal data is carried out in accordance with the General Data Protection Regulation (GDPR) and the applicable Belgian legislation.

The data controller reserves the right to modify this privacy policy. The most recent version is always available on the website.

Legal grounds & reasons for data processing

We process your personal data only when necessary and always on the basis of one of the following legal grounds, as provided for in the General Data Protection Regulation (GDPR):

  1. Performance of a contract
    When processing is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract (for example in the case of orders, quotations, deliveries, invoicing, or customer service).
  2. Legal obligation
    When processing is necessary to comply with legal obligations to which we are subject, such as accounting and tax obligations.
  3. Legitimate interest
    When processing is necessary for the purposes of our legitimate interests, such as improving our website and services, security, fraud prevention, internal administration, or direct communication with existing customers, while always balancing our interests against your privacy rights.
  4. Consent
    When you have given us your explicit consent to do so, for example for marketing communications or the use of non-essential cookies. You may withdraw this consent at any time.

We do not process your personal data for purposes other than those for which they were collected, unless we have obtained another valid legal basis to do so.

What personal data do we collect

We process only personal data that is necessary for the operation of our website, the performance of our services, and compliance with legal obligations.

Depending on your interaction with our website, we may process the following categories of personal data:

  1. Identification and contact details
    When you place an order, request a quotation, or contact us, we may process the following data, among others:
    • first and last name
    • billing and/or delivery address
    • email adress
    • telephone number
  2. Order and transaction data
    In the context of purchases and services, we process:
    • data relating to orders, quotations, and deliveries
    • invoicing and payment information
    • communication related to customer service or support
  3. Technical and usage data
    When using our website, certain technical data may be processed automatically, such as:
    • IP adress
    • browser and device type
    • operating system
    • pages visited and interactions on the website
      This data is primarily used for:
    • the technical functioning of the website
    • security
    • statistical analysis and improvement of the website
  4. Marketing and communication data
    If you have given your consent or if this is permitted based on a legitimate interest, we may process data in the context of:
    • newsletters
    • promotional communication
    • follow-up of customer relationships
      You can unsubscribe from marketing communications at any time.

How do we obtain your personal data?

We obtain your personal data in various ways, depending on your interaction with our website and services:

  1. Directly from you
    When you voluntarily provide personal data to us, for example by:
    • placing an order or requesting a quote
    • filling out a contact form
    • communication by email or telephone
  2. Automatically when using the website
    When you visit or use our website, certain technical and usage data may be collected automatically, such as IP address and information about the use of the website, exclusively for technical, security, and statistical purposes.
  3. Via third-party service providers
    To a limited extent, we may receive personal data via third-party service providers who support us with:
    • website hosting
    • analysis of website usage
    • communication or marketing services

These external parties always act on behalf of the data controller and exclusively within the framework of applicable legislation.

Cookies and consent are managed via our cookie settings (Complianz). See the cookie statement for details.

What do we use your personal data for?

We use your personal data exclusively for specific, explicit, and legitimate purposes, and not in a manner incompatible with those purposes.

Specifically, your personal data may be used for the following purposes:

  1. Execution of agreements and provision of services
    • processing and following up on orders, quotes, and deliveries
    • invoicing, payments, and accounting processing
    • customer service and follow-up of questions, complaints, or service requests
  2. Communication
    • answering questions via email, telephone, or contact form
    • providing practical and administrative information regarding your order or our services
  3. Improvement and security of the website
    • technical management and maintenance of the website
    • analysis of website usage to improve performance and user-friendliness
    • security and prevention of abuse or fraud
  4. Marketing and customer relationship
    • sending newsletters or commercial communications, provided you have given consent for this or it is permitted based on a legitimate interest
    • informing existing customers about similar products or services

You can unsubscribe from marketing communications at any time via the unsubscribe link in our emails or by contacting us at

Sharing personal data with third parties

We do not sell, rent, or trade your personal data to third parties.

Your personal data may be shared with third parties insofar as this is necessary for the performance of our services or to comply with legal obligations. This may include:

  • service providers and processors who support us in the operation of the website (such as hosting, IT support, and maintenance);
  • logistics partners for the execution of deliveries;
  • accounting and administrative service providers;
  • communication or marketing service providers, only if you have given consent for this or if it is legally permitted.

These third parties process your personal data exclusively on our behalf and according to our instructions, and are contractually obliged to take appropriate technical and organizational measures to protect your personal data.

We may also disclose personal data if this is necessary to comply with a legal obligation, a court order, or a request from a competent authority.

Retention periods

We retain your personal data no longer than necessary for the purposes for which they are processed, taking into account legal, contractual, and administrative obligations.

Specifically, we apply the following retention periods or criteria, among others:

  • Order, invoicing, and accounting data are kept for as long as legally required (including based on tax and accounting regulations).
  • Customer and contact data are kept for as long as necessary for the execution of the agreement, the follow-up of customer relationships, or as long as a legitimate interest exists.
  • Communication data (such as emails and contact forms) are kept for as long as necessary for a correct follow-up of your question or file.
  • Marketing data are kept for as long as you have given consent for this or until you unsubscribe.

When personal data are no longer necessary for the purposes for which they were collected, they are securely deleted or anonymized.

Your rights as a data subject

In accordance with the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

  • Right of access
    You have the right to know whether we process your personal data and to obtain access to this data.
  • Right to rectification
    You have the right to have incorrect or incomplete personal data corrected or supplemented.
  • Right to erasure
    You can request to have your personal data deleted, provided this does not conflict with legal obligations or legitimate interests.
  • Right to restriction of processing
    You can request to temporarily restrict the processing of your personal data.
  • Right to data portability
    You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format.
  • Right to object
    You can object to the processing of your personal data when it is based on a legitimate interest or for direct marketing purposes.
  • Right to withdraw consent
    When processing is based on your consent, you can withdraw this consent at any time. This does not affect the lawfulness of the processing before the withdrawal.

If you wish to exercise any of these rights, you can contact us via the contact details mentioned in this privacy policy.

Furthermore, you have the right to file a complaint with the Data Protection Authority (DPA)
(www.dataprotectionauthority.be).

Security of personal data

We take the protection of your personal data seriously and take appropriate technical and organizational measures to secure personal data against loss, misuse, unauthorized access, disclosure, or modification.

These measures are tailored to:

  • the nature of the processed personal data
  • the risks of the processing
  • the state of the art

We work exclusively with service providers and processors who offer sufficient guarantees in terms of data protection and security.

Despite these measures, absolute security cannot be guaranteed. If a data breach occurs that poses a risk to your rights and freedoms, we will handle this in accordance with applicable legal obligations.

Transfer outside the European Economic Area (EEA)

In certain cases, personal data may be processed by service providers located outside the European Economic Area (EEA).

When this is the case, we ensure that this transfer only takes place:

  • to countries for which the European Commission has determined that they offer an adequate level of protection, or
  • on the basis of appropriate safeguards, such as standard contractual clauses approved by the European Commission.

In such cases, we take the necessary measures to ensure that your personal data is also protected in an adequate and secure manner outside the EEA, in accordance with applicable regulations.

Marketing & communication

We may use your personal data to communicate with you in the context of our services and customer relationship.

This may include:

  • administrative or practical communication regarding your order, delivery, or invoicing;
  • customer service and follow-up of questions or service requests.

In addition, we may provide you with marketing or promotional communication, such as newsletters or information about similar products and services, provided that:

  • you have given explicit consent for this, or
  • this is permitted based on a legitimate interest, for example in the context of an existing customer relationship.

You can unsubscribe from marketing communications at any time and at no cost via the unsubscribe link in our messages or by contacting us.

Unsubscribing from marketing communications does not affect the receipt of necessary service or administrative messages.

Business transfer

In the event that re-shop BV is involved in a reorganization, merger, acquisition, sale of assets, or any other form of business transfer, personal data may be transferred to the third party involved.

In that case, we will ensure that this transfer takes place in accordance with applicable data protection legislation and that your personal data remains subject to appropriate safeguards.

If legally required, data subjects will be informed about this.

Minors

Our website and services are not aimed at minors and we do not intend to collect personal data from minors.

We do not knowingly collect personal data from persons under the age of 16. If we determine that we have unintentionally collected personal data from a minor without valid consent from a parent or legal representative, we will delete this data as soon as possible.

Parents or legal representatives who believe that their child has provided personal data to us can contact us via the contact details mentioned in this privacy policy.

Contact & complaints

If you have questions about this privacy policy, about the processing of your personal data, or if you wish to exercise any of your rights, you can contact:

re-shop BV
Jean Monnet Avenue 1 box A
1800 Vilvoorde
Flemish Brabant
Belgium

Email:

Last updated: 2026-02-05