Your rights as a user

As a user, you have the right to request free information about which personal data has been stored about you. If you believe that your data has been processed unlawfully, you may lodge a complaint with the competent supervisory authority.

Deletion of data

Data stored by us is deleted once it is no longer required for its intended purpose and no statutory retention periods apply. If deletion cannot be carried out because the data is required for permissible legal purposes, processing is restricted instead. In that case the data is blocked and not processed for any other purpose.

Right to object

Users of this website may exercise their right to object and may object to the processing of their personal data at any time.

General information

The following notes give a simple overview of what happens to your personal information when you visit our website. Personal data is any data by which you can be personally identified. Where the following text refers to the “client”, this means the operators of the website, also named in the legal notice as the “responsible editor”.

Data collection on our website
Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You will find their contact details in the legal notice of this website, and you can also reach us at eupen@experience-factory.com.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This may be data that you enter in a contact form, for example.

Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (for example internet browser, operating system or the time of the page request). This data is collected automatically as soon as you access our website.

What do we use your data for?

Some of the data is collected to ensure that the website is free of errors. Other data may be used to analyse your user behaviour. Your IP address is stored by our servers for 24 months. This is done for security reasons (the “Fail2Ban” firewall software uses it to reliably repel attacks on our server systems). After a maximum period of 24 months, or on written request, the IP addresses are deleted accordingly.

What rights do you have regarding your data?

You have the right at any time and free of charge to receive information about the origin, recipient and purpose of your stored personal data. You also have the right to request the correction, blocking or deletion of this data. You can contact us at any time at eupen@experience-factory.com, or at the address given in the legal notice, for this and any other question relating to data protection. You also have the right to lodge an appeal with the competent supervisory authority.

Third-party tools and analytics tools

When you visit our website, your browsing behaviour may be evaluated statistically. This is mainly done using cookies and so-called analysis programmes. The analysis of your browsing behaviour is generally anonymous; the browsing behaviour cannot be traced back to you. You may object to this analysis, or prevent it by not using certain tools. For more details, please see the section “Third-party plugins and analytics tools” in this privacy policy.

You may object to this analysis. We inform you of the ways to object in this privacy policy.

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection provisions and this privacy policy.

When you use this website, various personal data is collected. Personal data is data by which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that the transmission of data over the internet (for example communication by email) can have security gaps. Complete protection of data against access by third parties is not possible.

Note on the responsible body

The controller responsible for data processing on this website is:

Experience Factory Eupen SRL, Industriestrasse 37, 4700 Eupen (Belgium), Tel.: +32 (0)87 31 32 33, Email: eupen@experience-factory.com.

The responsible body is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (for example names, email addresses and the like).

Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw your consent at any time. An informal notification by email to eupen@experience-factory.com is sufficient for this. The lawfulness of the data processing carried out up to the withdrawal is not affected by the withdrawal.

Right of appeal to the competent supervisory authority

In the event of a breach of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The supervisory authority competent for data protection matters is the data protection officer of the state in which the client is domiciled.

Right to data portability

You have the right to request that data which we process automatically on the basis of your consent or in performance of a contract be transferred to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

SSL or TLS encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the padlock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, blocking, deletion

Within the scope of the applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, its origin, its recipient and the purpose of the data processing and, where applicable, a right to have this data corrected, blocked or deleted. You can contact us at any time at eupen@experience-factory.com, or at the address given in the legal notice, for this and any other question on the subject of personal data.

Objection to advertising emails

We hereby object to the use of contact details published under the legal notice obligation to send unsolicited advertising and information material. The operators of these pages expressly reserve the right to take legal action in the event of the unsolicited sending of spam or other similar advertising material.

Data collection on our website
Cookies

Some web pages use cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and more secure. Cookies are small text files that are stored on your computer by your browser.

Most of the cookies we use are “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognise your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, accept cookies in certain cases or exclude them generally, and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be limited.

Cookies that are necessary to carry out the electronic communication process or to provide certain functions that you have requested (for example a shopping cart function) are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies so that its services are technically free of errors and optimised. Insofar as other cookies are stored (for example cookies for analysing your browsing behaviour), they are dealt with separately in this privacy policy.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address
  • This data will not be merged with other data sources.

The basis for the data processing is Art. 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures. This data is kept for 24 months and is presented graphically by the statistics tool “PIWIK/MATOMO” in an anonymised, data-protection-compliant form.

Social media
Sharing content via plugins (Facebook, Google+1, Twitter & Co.)

The content of our pages can be shared on social networks such as Facebook, Twitter or Google+ in compliance with data protection rules. This website uses data-protection-compliant links to the corresponding networks. These simple links do not transfer any data in advance without your consent. This tool only establishes direct contact between the networks and users when the user actively clicks on one of these buttons.

This tool does not automatically transfer user data to the operators of these platforms. If the user is registered with one of the social networks, an information window appears when using the social buttons on Facebook, Google+1, Twitter & Co. in which the user can confirm the text before sending it.

Our users can share the content of this site on social networks in accordance with data protection regulations, without complete browsing profiles being created by the network operators.

Analytics tools and advertising
Analysis / Web statistics

In order to optimise our web pages, we use the web tracking tool “Matomo” (formerly “Piwik”). IP addresses are immediately anonymised by Matomo, so identification of visitors is not possible. The anonymous statistical data is stored separately from any personal data you may have provided and does not allow any conclusions to be drawn about a specific person.

You can object to tracking by clicking on the following link.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses “cookies”. These are text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookies about your use of this website is generally transmitted to and stored by Google on servers located in the United States.

Google Analytics cookies are stored on the basis of Art. 6(1)(f) GDPR. The site operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

IP anonymisation

We have activated the IP anonymisation function on this website. As a result, your IP address will be truncated by Google within member states of the European Union or other states party to the Agreement on the European Economic Area before being transmitted to the United States. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.

Browser plugin

You can refuse the use of cookies by selecting the appropriate settings in your browser, but please note that if you do so you may not be able to use all the functions of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

For more information on how Google Analytics uses user data, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Order data processing

We have concluded a contract with Google for order data processing and we fully apply the strict requirements of the competent data protection authorities when using Google Analytics.

Google Analytics demographic characteristics

This website uses the “demographic characteristics” function of Google Analytics. This makes it possible to create reports that contain statements about the age, gender and interests of site visitors. This data comes from Google’s interest-based advertising and from third-party visitor data. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account, or generally prohibit the collection of your data by Google Analytics, as described in the section “Objection to data collection”.

Plugins and tools
YouTube

Our website uses plugins from the YouTube page operated by Google. The site is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which pages of our site you have visited.

If you are logged in to your YouTube account, you allow YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of an attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

You will find more information on the processing of user data in YouTube’s privacy policy at: https://policies.google.com/privacy.

Vimeo

Among others, we use the provider Vimeo to embed videos. Vimeo is operated by Vimeo, LLC, whose registered office is at 555 West 18th Street, New York, New York 10011.

On some of our web pages we use plugins from the provider Vimeo. If you call up the pages of our website that are equipped with such a plugin, a connection to the Vimeo servers is established and the plugin is displayed. The Vimeo server is thereby informed of which web pages you have visited. If you are logged in as a Vimeo member, Vimeo will assign this information to your personal user account. When you use the plugin, for example by clicking the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and by deleting the corresponding Vimeo cookies.

Further information on data processing and Vimeo’s privacy policy is available at https://vimeo.com/privacy.

Google Web Fonts

This page uses web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

As the web fonts are embedded locally, no call to Google is necessary, and therefore no data is exchanged in order to display the locally installed Google font. The use of Google Web Fonts is in the interest of a uniform and attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

If your browser does not support web fonts, a standard font will be used by your computer.

For more information on Google Web Fonts, see https://developers.google.com/fonts/faq and Google’s privacy policy: https://www.google.com/policies/privacy/.