§1. Data Controller

  1. The controller of personal data processed in connection with the use of the Shop is:

VECTOR 3 SRL

Contact for data protection matters: info@stalco.be

  1. The Controller ensures processing of personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

§2. Purpose and Scope of Data Processing

  1. Personal data are processed for the following purposes:
  • Registration and verification of B2B Partner (company data, representatives)
  • Performance of cooperation agreement and orders (invoicing, delivery)
  • Handling complaints and returns
  • Commercial communication (offers, newsletters – with consent)
  • Accounting and fulfillment of legal obligations
  • Protection of legally justified interests of the Controller
  1. Scope of processed data:
  • Company name, registered office address, VAT number, registration number
  • Contact details: name and surname of representative, e-mail, phone
  • Data regarding orders, payments, deliveries
  • Transaction and communication history

§3. Legal Basis for Processing

  1. Data are processed on the basis of:
  • Art. 6(1)(b) GDPR – performance of cooperation agreement and order fulfillment
  • Art. 6(1)(c) GDPR – fulfillment of legal obligations (accounting, taxes)
  • Art. 6(1)(f) GDPR – legitimate interest of the Controller (B2B marketing, protection of claims)
  • Art. 6(1)(a) GDPR – consent (newsletter, commercial communications)

§4. Rights of Data Subjects

  1. Persons whose data are processed have the right to:
  • Access their personal data (Art. 15 GDPR)
  • Rectification of incorrect data (Art. 16 GDPR)
  • Erasure of data (Art. 17 GDPR) – subject to legal obligations
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Withdraw consent at any time (if processing is based on consent)
  • Lodge a complaint with the supervisory authority (Belgian Data Protection Authority – GBA)

§5. Data Recipients

  1. Personal data may be disclosed to the following categories of recipients:
  • Courier companies and carriers (for delivery fulfillment)
  • Payment service providers and banks
  • IT service providers (hosting, e-mail, CRM)
  • Accounting offices and legal advisors
  • Public authorities (based on legal provisions)

§6. Data Retention Period

  1. Personal data are retained for:
  • Duration of cooperation agreement and period required by law (e.g., 7 years for accounting documents in Belgium)
  • Period necessary to pursue claims (limitation period is 10 years in Belgium)
  • Until consent withdrawal (in case of marketing)

§7. Security Measures

  1. The Controller applies appropriate technical and organizational measures ensuring data security, including:
  • Connection encryption (SSL/TLS)
  • System access control
  • Regular backups
  • Employee training in data protection