The data collected on the site or in the app of La Grand Poste, and that you generate in the course of your use of the GRAND-POSTE services and the food market, are essentially personal data. GRAND-POSTE complies with the applicable legislation in this area as in all others. This is how:

 

WHY DO WE PROCESS YOUR DATA?

NAVIGATION ON OUR WEBSITE

You can visit our site, find out about our services and read our latest news without having to provide us with any personal information.

However, the use of certain cookies is necessary to browse our website. For more information on this, please see our cookie policy.

MANAGING YOUR ACCOUNT ONLINE OR ON THE APP

Purpose – Creating an account on our platform allows you to use any of our services or order food at the food market online or via the app. Through this account, you can view your recent orders, manage your billing addresses as well as change your password and account details.

Finally, the data you provide us is also processed in order to respond to your request and communicate with you about it.

Categories of data – These may include:

– Identification data (first name, last name, email address, age)

– Connection data (IP address, login, password…)

Legal basis – This data is necessary for the provision of the service requested, namely access to the purposes offered by the creation of an account. Therefore, this data is essential for the execution of our contract. Without it, we cannot carry out our mission.

Recipients of the data – Your data may also be processed by the host of our website and app or other IT service provider for the purposes strictly necessary to comply with the instructions we give them. They act as a subcontractor in this respect.

Retention period – The data you entrust to us is kept for 10 years after the end of our mission for tax and accounting reasons but also for liability reasons.

 

CASHLESS PAYMENT MANAGEMENT FOR CONSUMERS

Purpose – The data you provide us with is processed in order to provide a cashless payment method.

Categories of data – This may include your name, first name, e-mail address, date of birth, user ID and password, card ID, gamification stamps, logins, bank account, correspondence, etc.

Legal basis – All of this data is necessary for the execution of the cashless payment. Without it, we cannot carry out our mission. However, if you wish, you can pay for your purchases in the food market by debit or credit card, and no profile will be created and therefore no data processing will take place.

Data recipients – Your data may also be processed by the cashless payment service provider for the purposes strictly necessary to comply with the instructions we give them. They act as a subcontractor in this respect.

Duration – The collected data will be stored for 10 years after the execution of the service.

 

GAMIFICATION MANAGEMENT

Purpose – The data you provide us with is collected in order to carry out our contractual mission of building loyalty to the services of the food market and the Grand Post Office, to improve the shared and rented spaces and to animate the Grand Post Office community.

Categories of data – This may include your name, first name, login and password, logins, gamification stamps, correspondence etc.

Legal Basis – All of this data is necessary to offer our loyalty program to which you subscribe. Without it, we cannot carry out our mission.

Data Recipients – Your data may also be processed by the mobile application development service providers for the purposes strictly necessary to comply with the instructions we give them. They act as a subcontractor in this respect.

Duration – The collected data are stored for 10 years after the last services.

 

MANAGEMENT OF CONSUMER SERVICES

Purpose – Your geolocation data is collected in order to perform our contractual task of providing food and drinks by helping you navigate the food market and in order to perform our task of ensuring a high level of hygiene by pointing you to public toilets.

Categories of data – Internal geolocation data.

Legal basis – All these data are therefore essential for the execution of the agreement.

Recipients of the data – Your data may also be processed by the service providers of the mobile application development for the purposes strictly necessary to comply with the instructions we give them. They act as a subcontractor in this respect.

Duration – The data you entrust to us is stored for 24 hours.

 

MANAGEMENT OF SERVICES TO PROFESSIONALS

Purpose – The data you provide us with are processed in order to carry out our contractual mission of providing work space and/or meeting rooms and services and to communicate with each other in this respect, including the improvement of the common areas.

Categories of data – This may include your name, surname, image, profession, domicile or residence, telephone and fax numbers, e-mail address, date and place of birth, bank account number, app identifiers and/or badges, passwords, logins, geolocation, correspondence etc.

Legal basis – All these data are therefore essential for the execution of the agreement. Without it, we cannot carry out our mission.

Recipients of the data – Your data may also be processed by the service providers of the mobile application development for the purposes strictly necessary to comply with the instructions we give them. They act as a subcontractor in this respect.

Duration – The data you entrust to us is stored for 10 years after the last rental or services.

 

MANAGEMENT OF OUR CONTRACTUAL RELATIONSHIP

Purpose – Your contact and financial data is also used for the purposes of invoicing and collection of our services, or notification of changes to the Contract or the Data Protection Policy (including new purposes).

Categories of data – This may include your name, surname, image, occupation, domicile or residence, telephone and fax numbers, e-mail address, date and place of birth, bank account number, billing details, app IDs and/or badges, passwords, logins, geolocation, correspondence, etc.

Legal basis – This data is therefore essential for the execution of our contract. Without it, we cannot carry out our mission.

Recipients of the data – It is transmitted to the tax and social administrations and to our accountant. They could be transmitted to our council or to a bailiff in case of legal recovery.

Duration – We are obliged to keep this invoicing data until the end of our tax and accounting obligations, i.e. for 7 full fiscal years.

 

EVENT REGISTRATION AND PARTICIPATION

Purpose of processing – If you register to participate in an event organised by GRAND POSTE, then it is necessary for you to complete a registration form which contains certain data.

Categories of data – Your identification data to register for the event as well as your bank details (if the event is paid for) will be processed by GRAND POSTE if you participate in an event we organise. This may include your first and last name and your e-mail address. All of this data is essential. Without it, we cannot register you for the event and provide you with information about the event.

This data is collected directly from you when you fill out the registration form. The data you provide by filling out this form is processed in order to give you access to our event.

Legal basis – The data processed is essential for the performance of the contract under which GRAND POSTE organizes events for which you decide to register.

Recipients of the data – Your contact data may be passed on to the email or ticketing service provider that GRAND POSTE may use.

Retention period – The data may be kept for 10 years after the end of the contractual relationship.

 

PROMOTION OF OUR SERVICES

Purpose – If you are a customer of Grand-Poste and/or have subscribed to our newsletter, we process your data to inform you about our goods and services, news, events, etc.

Categories of data – Your contact data (name, first name, postal address, e-mail address) may be used to promote our services.

Legal basis – If you are not a customer of GRAND POSTE, you expressly consent to receive this newsletter.

For customers of GRAND POSTE, our legitimate interest in promoting our services justifies that we carry out operations of information or promotion of our services.

Recipients of the data – Your contact data is transmitted to an electronic mailing service. We keep your data for this purpose until you ask us to stop.

Retention Period – We will retain your contact data for this purpose until you ask us to stop.

You may notify us at any time that you no longer wish to receive advertisements. Simply email us at privacy@lagrandposte.be or click on the unsubscribe link at the bottom of any electronic communication we send you for this purpose.

 

MANAGING YOUR APPLICATION

Purpose of processing – You may submit an application for a job at GRAND POSTE. When you send us an unsolicited application or when you respond to a job offer, your data will be processed at your request in order to assess the possibility of a contractual relationship.

Categories of data – This may include your name, surname, nationality, photo, address, telephone number, email address, date and place of birth, CV, references and cover letter.

Legal basis – The processing of this information is necessary in order to take pre-contractual measures at the request of the data subject before entering into a contract.

Recipients of the data – These data will be transmitted to the employees of GRAND POSTE responsible for human resources in order to evaluate your application and to give you an answer.

Retention Period – The data you provide to us as part of an application will be deleted within 3 months of the end of the selection process.

 

SECURITY OF OUR OFFICES

Purpose – Your data is processed for and to the extent necessary to secure our infrastructure.

Categories of data – These are video surveillance images.

Legal basis – The entrances to the common areas and coworking spaces are filmed, based on our legitimate interest in ensuring the security of our offices. GRAND POSTE’s legitimate interest constitutes the legal basis for this processing, provided that the control measures are proportionate, subsidiary, in accordance with the regulations in force and with the provisions set out in these regulations.

Recipients of the data – The data may also be transferred to the competent police department upon request.

Duration – The video surveillance images are not kept for more than 30 calendar days.

 

MAINTENANCE OF OUR FACILITIES

Purpose – We process your data for the purpose of maintaining our IT facilities.

Categories of data – In the context of IT maintenance, data about you stored on our IT infrastructure may be processed.

Legal basis – Our legitimate interest in enabling the IT maintenance of our systems to ensure their proper functioning justifies the processing of your data.

Recipients of the data – Our subcontractors in charge of the IT infrastructure, of our management program, of the realization and maintenance of our website and extranet may have access to your data to the extent strictly necessary for the execution of their respective missions.

Duration – The data is processed only for the time necessary to carry out the planned maintenance operation.

 

INTERNAL SOCIAL NETWORK BETWEEN PROFESSIONALS

Purpose – The data that you communicate on the internal social network allows us to animate the community of the Grand-Poste.

Categories of data – It can be your name, first name, image, profession, telephone and fax numbers, e-mail address, geolocation, date of birth, bio, post etc.

Legal basis – All this data is necessary for the execution of the agreement. Without it, we cannot carry out our mission and you will not be able to access the social network. You will only be geolocated if you expressly agree.

Recipients of the data – This data is also processed by the provider of the social network in question.

Duration – The data you provide will be inactivated 1 year after the end of the agreement.

 

THIRD-PARTY SOCIAL NETWORKS

Purposes – The data you provide by visiting our pages on social networks are or could be processed jointly by the social network and the administrator of this page for the following purposes:

– the collection of certain data by means of cookies;

– the improvement by the social network of its advertising system;

– to obtain statistics on the page’s audience.

Categories of data – Data related to your account, data related to the sharing of content or communications you have with others.

Legal basis – This data will only be processed by the page administrator as part of its legitimate interest in obtaining statistics on visitors to its page in order to properly promote its page. The audience statistics established by the social network are only transmitted to the page administrator in an anonymized form.

Recipients of the data – These data are also processed by the provider of the social network in question.

Duration – This data is or could be processed as long as the page exists and you visit it.

The personal data usage policies of each social network can be found by clicking on the following links:

– Facebook and Instagram,

– Twitter,

– Youtube,

– Linkedin.

 

LOCATION OF YOUR DATA

Within the European Union – Your data is in principle only stored on servers located within the EU.

In case of transfer outside the European Union – Your data is only transferred to a country that does not offer an adequate level of protection for the sending of our newsletters and the ticketing of the events we organize. In this case, we may use subcontractors located outside the European Union. In these cases, we of course ensure that the recipients are obliged to comply with the same data protection standards as in the EU by means of appropriate contractual clauses and additional measures. You can obtain a copy of these guarantees on request.

 

WHAT ARE YOUR RIGHTS?

Information – This right is exercised through this document. If the data processed includes your staff’s data, you are responsible for making them aware of this document.

Access and rectification – You have the right to access your data and to have them rectified if necessary.

Objection – You may object to the processing of your data by us on the basis of our legitimate interest.

Withdrawing your consent – Where data is processed on the basis of your consent, you may withdraw that decision at any time, without calling into question the past processing.

Erasure – You may obtain the erasure of your data or the restriction of processing under the conditions set out in Articles 17 and 18 of the General Data Protection Regulation.

Portability – The data you have provided to us may be communicated to you or transmitted to third parties in electronic format.

 

WHO TO CONTACT?

The person responsible for processing your data (S.A. GRAND-POSTE, with registered office at 4000 Liège, rue Lambert Lombard, 3, registered with the Banque Carrefour des Entreprises under number 0894.938.621. (privacy@lagrandposte.be) is at your disposal for any questions or requests relating to the rights set out above.

If you would like more information, or if you wish to lodge a complaint, you can contact the Data Protection Authority (Rue de la Presse, 35 – 1000 Brussels, Tel. + 32 2 274 48 00 – https://www.autoriteprotectiondonnees.be/citoyen/agir/introduire-une-plainte)