Privacy Policy

Data privacy is extremely important to Liefmans. Therefore, we want to communicate openly and be transparent on how Liefmans treats your personal data. This privacy policy has the objective to inform you of the data that duvel collects, why we collect this data, how we treat the data you provide to us, and what your rights are.

1. WHO PROCESSES YOUR DATA?

The Belgian company, DUVEL MOORTGAT NV, with registered office at 2870 Puurs-Sint-Amands, Breendonkdorp 58, registered in Crossroads Bank for Enterprises Antwerp, department Mechelen with company registration number 0400.764.903 (herein after referred to as “DUVEL”) and all subsidiaries are the responsible for processing and de beheerders onder het toepasselijke recht regarding protection of data of the personal data you provide to us.

Duvel Moortgat and her affiliated companies are concerned about privacy questions and we would like to inform you on how the data that relates to you as a person (herein after: “personal data”) is collected, treated and provided.

In this privacy policy (herein after: “the Privacy policy”) our policy regarding the processing of your personal data that we collect through our websites ww.duvel.be. In Website or Websites, we mean all potential website of the Duvel-Group (herein after: “the Website” or “the Websites”).

2. WHICH DATA DO WE COLLECT?

When you visit our website, we collect the following data from you, regardless of whether you are a registered user of the website or not:
IP-address: Your IP-address (internet protocol address) is a unique number that is automatically assigned to your computer by your internet service provider. Each time you visit our website, your IP-address is automatically logged and saved in the logfiles of our server, so we can determine at what time(s) you visited our website, and which individual page(s) you visited. The way in which your IP-address is processed, is logged in our Cookie Policy.
Information about your device (e.g. screen size)
User-ID (social) network, if applicable
Use of the website (meaning how you treat our website)
Public content that you potentially published on social networks (e.g. pictures, comments, names) or content that you shared through our social media platforms (e.g. pictures, comments, names)
Cookies: The way we process personal data collected through the cookies is explained in the Cookie Policy.
We use your IP-address and cookies to collect personal data:

In general, you are not requested to log-in or to provide personal data before you can access our website. Potentially it can be requested to log-in to gain access to certain functions.

On the forms on our websites is each time indicated which fields are mandatory and which fields are optional.

3. HOW DO WE COLLECT YOUR DATA?

Duvel collects your personal data in the following ways:
Through websites: we collect Personal data through the websites of Duvel as described in chapter 2.
Offline: we collect Personal data when you are offline, e.g. when you contact our customer service to place an order.
By means of cookies: we collect Personal data through cookies when you visit our websites. The Cookie Policy explains how we collect and treat your Personal data through cookies.
Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses cookies. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on their servers. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. By using this website, you give authorization for the processing of data by Google in the way and for the goals as described in this paragraph. You can find more information on this in our cookie policy.

4. WHY DO WE COLLECT PERSONAL DATA?

Most of our services do not require any form of registration. However, some of our services require registration:
Orders: To process and deliver your orders and to inform you of its status. We use this information to process your transaction, follow your purchase and provide assistance in the case of issues with the delivery, returns and other problems related to the purchase of DUVEL products. The processing of your personal data for this objective is necessary for the application of the agreement we concluded.
=> Legal basis for processing: the performance of a contract you concluded with Duvel to process your order;
Maintenance of your account: To create and maintain your DUVEL account, including offering of loyalty programs that are linked to this account.
=> Legal basis for processing: Our legitimate interest to process your personal data for this purpose;
Customer service: To provide better services to our customers, including answering to your questions, complaints and general feedback on our products. Our service to customers can be offered through different communication channels, such as e-mail, letter, telephone.
=> Legal basis for processing: Our legitimate interest to process your personal data for this purpose;
Promotional messages: To send promotional messages, only if you specifically agreed to receive such messages.
=> Legal basis for processing: Our legitimate interest to process your personal data for this purpose;
If you choose not to provide your personal data, it is possible that you can’t access certain parts of our website or that we can’t answer to your request.µ

DUVEL can use your personal data for all or some of the following purposes:
Direct marketing: We use your personal data to send you direct marketing communication through e-mail. Through these direct marketing communications, you are for example informed on current events, promotions and other similar activities, and about products and services of Duvel or related brands. Our newsletter, to which you can subscribe, does also fall under the header of marketing communication. We use a “double opt-in” system for registration for our newsletter. This means that we send a confirmation to the e-mailadddress you provided in which you are asked to confirm your registration to our newsletter. When you don’t confirm within 48 hours, your application is automatically deleted. You need to provide an e-mailaddress and your age before we can send our newsletter. This information is only used for this specific purpose. We only use the information regarding your age to verify you are older than 16 years (Art. 8.1 of GDPR). Unfortunately we can’t send our newsletter if you are under the age of 16. We save your e-mailaddress until you unsubscribe to our newsletter; at this time, we delete your e-mailaddress.
=> Legal basis for processing: Our legitimate interest and/or your consent. You can revoke your consent to receive these direct marketing communications by clicking on the Unsubscribe link (which you can find at the bottom of each marketing e-mail). You can also inform us that you would like to revoke your consent by sending an e-mail, by calling us or by sending us a letter. You can use the contact details at the end of this Privacy Policy.
Online advertising: we use your personal data to send you online marketing communication through Google Adworks, Programmatic Advertising and Social Media Advertising. Through online marketing communication you are for example informed on current events, promotions and other similar activities, and about products and services of Duvel or related brands.
=> Legal basis for processing: Your consent.
Optimization of the website: DUVEL also collects information in logfiles. This information is used for internal purposes, like traffic and profiling to further fine-tune our services offered on the website.
Other specific purposes: We can use your data for other specific purposes, like the daily operation and safety of our DUVEL sites, to conduct audits and to contact you for consumer surveys, when you gave your consent for this.
=> Legal basis for processing: Your consent.
Data analysis regarding your activity on our Sites: We collect your personal data, including your location, to measure your involvement on our Sites( e.g. to know how you use our Sites, when and how often, which device you are using, how long you visit, which items you click on), and to deduct consumption trends and patterns from this analysis. This way we can better get to know the users of the Sites and we can adjust our Sites to determined preferences of users, but we can also in general improve the products and services offered by Duvel.
=> Legal basis for processing: Your consent.
Save and share content you publish on Social Media: You can share content on our Social Media, like pictures of yourself, hashtags, videos and recordings. When you communicate this type of content on our social media, we can decide to share part of this content (and your public social media profile) on our Sites, in the context of marketing campaigns, and more in general to present and illustrate our Sites, and the products and service of Duvel. When we do this, we save your personal data in the database of Duvel.
=> Legal basis for processing: Your consent.
Comply with legal obligations: To comply with legal obligations, legal procedures or orders by authorities (outside your country of residence), when we are reasonably of the opinion that we are legally obliged to do this and when providing your personal data is strictly necessary to comply to such legal obligations, procedures and orders of the authority.
=> Legal basis for processing: complying to legal obligations.
Legitimate interest for the protection of our interests: For the Legitimate interest of our conditions, protection of our activities or these of affiliated societies, protection of our rights, privacy, safety and property and/or these of our affiliated companies, and to allow us to use available rights or to limit any potential damage.
=> Legal basis for processing: Legitimate interest

5. DO WE SHARE YOUR PERSONAL DATA ?

Your personal data will in no case be given, transferred or sold to third parties. DUVEL can call upon service providers, representatives or contractors to provide services in name of DUVEL, such as providing you the DUVEL sites and the services that are available to you (such as delivery). It is possible that these external parties gain access to your personal data or need to process these. DUVEL requires by means of a written agreement of these third parties that they comply to all relevant legislation related to protection of data and security measures regarding personal data.

DUVEL only shares data that is needed to deliver our products or to offer our services.

Your personal data is provided to following processors:

The processors with whom we collaborate are bound by strict confidentiality rules. They cannot use your data with permission for other purposes then the ones we impose.

Your data is only provided to processors so they can take on part of the tasks that are described in this privacy policy.

As such, your personal data can be processed by the following processors:
All subsidiaries of Duvel Moortgat NV;
Our operational partners and IT-partners: these companies help Duvel Moortgat to comply to all contractual obligations and we can rely upon to develop our IT-systems, to improve, to modify or to secure, or to provide apps, tools, services etc in the context of activities of the Duvel Moortgat Group:
Cloud License, that hosts our IT-systems and provides system support;Azure, that hosts our IT-systems and provides system support;
Combell, that hosts our IT-systems and provides system support;
Microsoft Dynamic, that hosts our IT-systems and provides system support;
Drupal, that hosts our IT-systems and provides system support;
Our consultants: independents who offer services to Duvel Moortgat;
Our partners for delivery of products and services: these companies act for Duvel in the context of deliveries of goods and services offered by us;
Our marketing partners; These companies help us for example to analyze your data so that we can be of better service to you. This could also be companies that are specialized in satisfaction surveys or market studies;
Google analytics, that supports our IT-systems and performs data analysis for the purposes described in this Policy;
Google Adwords, that supports our online marketing communication;
Facebook and Instagram, that supports our online marketing communication;
Twitter, that supports our online marketing communication;
Agora Pulse, that supports our online marketing communication;
Flowbox, that supports our online marketing communication;
Mailchimp, that supports our online marketing communication;
Hotjar, that supports our online marketing communication;
CampaignDesigner, that supports our online marketing communication.

6. WHAT ARE YOUR RIGHTS?

Rights to information and access to personal data
You have the right to request DUVEL to gain access and to rectify your personal data or to limit the processing of your data. More specifically, you have the right to gain access to your personal data and the following information: the purposes of processing, the categories of personal data, the recipients or categories of recipients to whom the personal data is provided or will be provided, more specifically recipients in third countries or International organizations, and, if possible, the period it is expected that your personal data will be stored and if not possible, the criteria that determine this retention period.
Right to rectification of data
The personal data needs to be accurate, and if needed, be updated. Therefore, you have the right to rectify your personal data.
Right to data portability
You have the right to obtain your personal data, provided to DUVEL, in a structured, commonly used and machine-readable format, and you have the right to transmit this data to another controller, if this is technically possible.
Right to erasure (“right to be forgotten”)
You have the right to obtain from DUVEL the erasure of your personal data without undue delay, and DUVEL has the obligation to erase this data without undue delay when the personal data are no longer necessary in relation to the purposes for which they were collected (e.g. an order that was placed).
Right to restriction of processing
You have the right to obtain from DUVEL the restriction of processing when:
The accuracy of your personal data is contested by you, for a period enabling DUVEL to verify the accuracy of the personal data;
The processing is unlawful, and you oppose the erasure of your personal data and you request the restriction of its use instead;
DUVEL no longer needs your personal data for the purposes of processing, but you require these for the establishment, exercise or defense of a legal claim.
Right to object
You have the right to object to the processing of your personal data for the specified purpose, to the extent the processing of data is not required for legal obligations and for the normal operations of the organization. DUVEL shall no longer process personal data in this case, unless there are legitimate grounds for the processing which override your interests, rights and freedoms (e.g. in the context of a labor agreement).

7. COOKIES

Certain categories of data are received and stored each time you have contact with us.

For example, like a lot of other websites, we use “cookies” and we receive certain types of data when your web browser opens DUVEL (e.g. which pages are visited and how intensely these are used). This way, we can adapt our site better to your expectations.

More information on cookies you can find in our “cookie policy”, as well as instruction on how to disable these cookies.

8. SAFETY

DUVEL makes efforts to implement and maintain the appropriate measures to ensure that the safety, integrity and privacy of the personal data you provided is not abused. When processing your personal data, we take reasonable measures to protect this information from loss, abuse, unauthorized access, disclosure, modifications or deletion.

We use different technical and organizational measures to protect your personal data and to help prevent theft, abuse and unauthorized access, disclosure, modifications and deletion of your information. For example, we maintain the data provided by you on computer systems with limited access and in controlled environments. In addition, we require our external datacenter providers to take appropriate security measures. While transferring your data through internet, your data is protected by encryption. Your password is encrypted and can’t be made legible, which means it can’t be recovered or be disclosed by anybody, not even by DUVEL.

When you place an order online and choose online payment by Visa, Master Card or Eurocard, you will be requested to provide the card number. The processing of this transaction is done by the certified payment provider Ingenico who guarantees a 100% safe transaction. DUVEL will not see you card number or other data.
For questions about the safety of your personal data you can contact us through dataprotection@duvel.com.

9. LINKS TO OTHER WEBSITES

The site can contain links to other websites. When you leave the site and visit another website, it is possible that other privacy practices are applied and that another privacy policy is applicable of which DUVEL has no control and for which we are not responsible.

10. RETENTION

DUVEL retains personal data no longer then strictly needed for the offering of our services or products, to perform transactions you have requested or for essential purposes like respecting our legal obligation, the settlement of potential disputes and to comply with our agreements. Because these needs can differ, the retention periods can also differ considerably.

We can maintain your personal data after a last interaction with DUVEL for a reasonable period for example to follow-up on an order. When the personal data we collected is no longer required for the purpose for which they were maintained, we will delete them in a secure way.

11. CHILDREN

This website is not aimed at individuals that don’t have the legal age of 18 years. We don’t purposefully collect data of these individuals. They can only use the services of our site in the presence of a parent or guardian and only with their permission.

If, after reporting of a parent or guardian, or after discovery in another way, it seems that a child younger than 18 years is registered unjustly with false data, we shall remove the account of the child and delete the personal data of the child from our registration.

12. LEGAL REQUIREMENTS

DUVEL can divulge your personal data if it legally needs to or if DUVEL, in good faith, judges that such divulgation is reasonably necessary to fulfill legal procedures or to react on potential claims.

13. MERGERS AND ACQUISITIONS

In case of a partial or complete merger or partial or complete acquisition of DUVEL by another company, the company that acquires DUVEL shall receive access to the information that is maintained by DUVEL, but is also bound to the same obligations with regard to your personal data.

14. TRANSFER OF DATA (OUTSIDE EEA)

DUVEL has implemented appropriate measures to protect your personal data when these are transferred internationally, for example by using standard contractual clauses as approved by the European Commission. Your protection is hereby guaranteed.

15. ENTRY INTO FORCE AND MODIFICATIONS

This policy is created and enters into force as from 25/02/2020.
We maintain the right to, if it is deemed necessary, to change, modify, add or delete (parts) of this policy.
It is your responsibility to be aware of the most recent version of this Policy. Using this Site means you agree to the content of this Policy.

16. QUESTIONS?

If you have questions on the use of your personal data or about the security of our website, contact us by sending an e-mail to dataprotection@DUVEL.com.

Unless specifically mentioned otherwise, DUVEL is controller for the personal data we collect and to which this privacy policy applies. Our address is 2870 Puurs-Sint-Amands, Breendonkdorp 58, Belgium.

ANNEX 1

Purposes and sub-purposes

Legal basis

Data concerned

Retention period

Recruitment Management

Receive and analyze applications/CVs

Contact Candidates

Arrange interviews

Negotiate terms

Legitimate interest (to recruit staff for the company)

Identity information

Financial Information

Private Life Information

Working Life Information

Correspondence

As a general rule, for a maximum period of 2 years from the end of the recruitment period

Management of customers (bars, restaurants, etc.), suppliers and business partners

Negotiate contracts with contact persons

Monitor contracts and ensure compliance

Negotiation/performance of a contract

Identity information

Financial Information

Working Life Information

Correspondence

As a general rule, for a maximum period of 5 years from the end of the negotiation period/contract

Accounting management

Management of invoices and other accounting documents

Legal Obligation

Identity information

Financial Information

Working Life Information

As a general rule, for a period of 7 years

Pre-Litigation & Litigation Management

Management of pre-litigation and litigation with customers, suppliers, business partners, consumers, etc.

Legitimate interest (to defend the interests of the company)

Identity information

Financial Information

Private Life Information

Working Life Information

Correspondence

As a general rule, for a maximum period of 5 years from the end of the (pre)litigation

Website Management

Follow up on requests submitted via the contact form

Performance of a contract

Identity information

Private Life Information

Working Life Information

Correspondence

As a general rule, for the period necessary to process the request and maximum for 5 years after

Manage strictly necessary and functional cookies

Performance of a contract

Navigation information

See cookie policy

Manage optional cookies (marketing and statistics)

Consent

Navigation information

See cookie policy

Shops management (online and physical)

Track orders

Follow up on claims/special requests

Performance of a contract

Identity information

Financial Information

Private Life Information

Correspondence

As a general rule, for the period necessary to process the order and maximum for 5 years after

If the data subject has created an account: for as long as the data subject does not delete this account

Brewery tour Management

Register bookings

Organize visits

Survey satisfaction

Legitimate interest (to promote the company and products)

Identity information

Financial Information

Private Life Information

Correspondence

As a general rule, during the period necessary for the organization of the visit and maximum for 5 years after

If the data subject has created an account: for as long as the data subject does not delete this account

Events and Activations Management

Register participants

Ensure that things are running smoothly

Survey satisfaction

Legitimate interest (to promote the company and products)

Identity information

Private Life Information

Correspondence

As a general rule, for the period necessary for the organization of the event/activation and maximum for 5 years after

Security Management

Ensure the security of company buildings and assets through video surveillance

Legitimate interest (to ensure security)

Identity information

As a general rule, for 1 month from the date of the video

Online Contest Management & Activations

Notify the winner and send them the prize

Performance of a contract

Identity information

Private Life Information

Correspondence

As a general rule, for the period necessary for the organization of the competition/activation and maximum for 5 years after

Communication Management

Send the newsletter for products/services that are not similar to products/services already ordered

Consent

Identity information

For the duration of the consent

Send the newsletter for products/services similar to products/services already ordered

Legitimate interest (to promote the company's news)

Identity information

As long as the person does not object to the processing

Communicate about new products in the company (e.g. a new beer, a new partnership, etc.)

Legitimate interest (to promote the company's news)

Identity information

Working Life Information

For the website: lifetime of the website or post

For social media: lifetime of the account or post

Share visual content (photos/videos)

Performance of a contract when it is the subject of a contract

Legitimate interest (to share content with which the company is actively associated) in the cases referred to in Article 9.2 (e) of the GDPR

Consent in other cases

Identity information

During the term of the contract or consent, and not more than:

For the website: lifetime of the website or post

For social media: lifetime of the account or post

Interact with followers on social media

Legitimate interest (to promote the company's news)

Identity information

Private Life Information

Correspondence

During the lifetime of the account

Management of personal data

Dealing with data subject requests

Legal obligation (GDPR)

Identity information

Correspondence

As a general rule, for the period necessary to process the request and for a maximum of 5 years after

Generate aggregated statistics

Legitimate interest (to understand customers and consumers)

Identity information

Navigation information

Private Life Information

Working Life Information

As a general rule, deletion when the data subject has not had any further interactions with the company for a period of at least 6 months

Live life on the rocks! Share your moment with

#liefmans