Privacy Statement

1. Definitions

Controller: the party responsible for processing personal data, as described in article 3.

Website: the website on which you entered your personal data.

User, you or your: any natural person who enters personal data on the website.

Interactive use: use of the website in which you enter personal data, for example through forms or account registration.

GDPR: the General Data Protection Regulation, which sets out rules for the protection of personal data within the EU.

2. Scope

This privacy statement applies to every visit to and use of the website. By entering personal data, the user confirms having read and accepted the contents of this statement. Changes to this privacy statement may be made without prior notice. We recommend consulting this statement regularly.

3. Controller

The website is owned and managed by UWish-IT VOF, Weidenstraat 13, 8520 Kuurne, Belgium, company number BE0754862314.

Contact person: Aaron Tytgat. Reachable by telephone on +32 56 44 88 47 or by email: info@uwish-it.be.

Under the GDPR, UWish-IT VOF is considered the ‘controller’ of personal data.

4. Legal Bases and Purposes of Processing

We process your personal data only for specific, legitimate purposes and on the basis of the following legal grounds:

4.1. Account Registration and Management of Customer Accounts

To create and manage a customer account we collect your name, email address and password.

Legal basis: Performance of a contract – creating and managing your account is necessary to provide you with the services of our webshop.

4.2. Order Processing and Delivery of Products

When you make a purchase we collect your name, delivery address, telephone number and payment information in order to complete your order and ship the products.

Legal basis: Performance of a contract – these data are necessary to process and deliver the order.

4.3. Customer Service and Support

To handle questions and complaints we store the data you provide by email or chat, such as your name, contact details and information about your order.

Legal basis: Legitimate interest – we have a legitimate interest in helping you with questions or problems and in improving our customer service.

4.4. Direct Marketing (Newsletters and Offers)

If you give your consent, your email address is used to send newsletters and promotional offers. You can unsubscribe at any time.

Legal basis: Consent – you receive marketing information only with your explicit consent, and you can withdraw that consent at any time.

4.5. Analysis of Website Use

We collect data about your use of the website, such as pages visited and click behaviour, through cookies and analytics tools. These data are used to improve the performance of the website.

Legal basis: Legitimate interest – the data collected help us optimise the website and your user experience.

4.6. Legal Obligations

For administrative and legal purposes, such as tax returns or fraud checks, we may be required to retain certain data.

Legal basis: Legal obligation – we retain data where this is required by law, for example for accounting and fraud control.

5. Data Retention Periods

We retain your data only for as long as necessary for the purposes described or as required by law:

• Account data: retained for as long as your account is active or until you delete it.
• Order and invoice data: retained in accordance with the statutory period of 7 years.
• Direct marketing data: retained until you unsubscribe from marketing communications.
• Analytics reports and cookies: retained for six months, unless determined otherwise by the tools used, after which data are anonymised or deleted.

6. Recipients or Categories of Recipients of Data

Personal data are shared with third parties only where this is necessary for the provision of our services:

• The user themselves (access via their account);
• The controller (UWish-IT VOF);
• External payment service providers for payments;
• Transport companies for the shipment of products.

These parties process data in accordance with this privacy statement and only for the agreed purposes.

7. Security Measures

Your data are processed and stored securely using the following measures:

• Firewall and secure server: the CMS has its own firewall, and data are stored on a secure server in the Netherlands.
• Encryption and access restrictions: sensitive data are encrypted during transmission and storage, and are accessible only to authorised persons such as the website administrator and the owner of the webshop.
• Back-ups: daily back-ups are secured and stored at an external location in Belgium, where they are periodically overwritten.

8. Cookies and Managing Preferences

Our website uses cookies to improve your user experience. Users can manage their cookie settings through their browser or through the settings on the website. Cookies and analytics data are used only for functional and analytical purposes and can be disabled by users.

9. Rights of the User

You have the following rights in relation to your personal data:

• Right of access: you have the right to know which personal data we process about you.
• Right to rectification: you can have inaccurate or incomplete data corrected.
• Right to erasure: you can request the deletion of your data, subject to statutory retention obligations.
• Right to restriction of processing: you can temporarily restrict the processing of your data.
• Right to object: you can object to processing for specific purposes, such as direct marketing.
• Right to data portability: you can request to receive your data in a structured format.

Data erasure: for data deletion requests you can send a message to info@uwish-it.com. Only data required by law, such as invoice information, are retained after an erasure request.