Your privacy is our priority: at Nchem we believe that your privacy is important and should be protected, which is why we would like to tell you what we do for you. As part of our business and legal obligations, we collect and process a certain amount of personal data and we do everything we can to protect it. This privacy notice has been prepared in compliance with the GDPR.
- Responsible
Nchem (hereinafter “we”) shall act as controller. This privacy notice defines both the personal data to be processed and the purpose and the legal and technical means of the processing.
Nchem BVBA
Steenweg op Blaasveld 107C
B-2801 Heffen-Mechelen
Belgium
Managing Director: Niels Van Opstal
Phone: +32 480 665 229
Email: info@nchem.eu
VAT: BE08 4906 3962
Nchem develops and produces specialty additives, regulating imperfections for natural wax-based candles. Located in the Flemish part of Belgium, in the middle between Antwerp (20km) and Brussels (20km).
2. Some definitions
In this notice, we use the terms below to mean the following:
- The user: Any natural or legal person who wishes to consult our website and whose data may be collected and who enters or comes into a (contractual) relationship with us of any kind.
- The data controller: the natural person, legal entity, government body, department or other body that establishes the purpose and means of processing personal data, alone or with others.
- The processor: the natural person, legal person, government body, department or other body which processes personal data at the request of the controller. The processor always acts in accordance with the instructions of the controller and is under an obligation to ensure the security and confidentiality of the data.
- ‘Personal data’: in view of the application under the European Regulation 2016/679 on the protection of personal data, also known as the General Data Protection Regulation (GDPR),
- By ‘personal data’ we mean any information relating to an identified or identifiable natural person (the data subject).
- An identifiable person is any natural person who can be identified directly or indirectly on the basis of an identifier such as a name, an identification number, location data, an online identifier or one or more factors characteristic of the physical, physiological, genetic, mental, economic, cultural or social entity of that natural person.
- ‘Privacy Legislation’: the European Regulation of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation or GDRP).
- ‘Telecommunications Act’: law imposing various provisions on electronic communication (referred to as: Telecommunications Act).
- ‘Electronic Communication Act’: implementation of the Telecommunications Act in Article 129 of the Electronic Communication Act of 13 June 2005.
3. Data controller and data processor
The controller is Nchem. The controller defines which personal data will be processed and also the legal and technical means used to ensure this processing.
The following service providers may act as a processor of your Personal Data as further defined in this notice:
| Name of Processor | Processing Activity |
| Zoho.com | Website hosting Customer database |
4. General principles applicable to the processing
Principle of lawfulness and fairness:
We pay particular attention to compliance with the general principles applicable to the processing of your data and respect for your privacy. We want to guarantee that the processing will be carried out in a legal and transparent manner.
Limitation to what is necessary and accuracy:
We will strictly limit ourselves to collecting data that is necessary for the purposes required. We endeavour to collect accurate data to the extent reasonably possible.
Limiting retention over time:
We will limit the retention of data over time by ensuring that it is destroyed or anonymised once the processing is complete or the purposes have been achieved. The cookies installed are specifically time-limited according to their use or type.
Security of your data:
We take the security of your data very seriously and do everything in our power to ensure their integrity and confidentiality.
5. Category of personal data we collect
- E-mail address
- First Name, Last Name
- Phone
- Shipping and billing address for order deliveries
- Bank and financial details for orders
- Online identification (IP address, location data, cookies, media usage)
6. Purpose and lawfulness of processing
Nchem attaches great value to the protection of your privacy and personal data. Nchem will use your data exclusively in accordance with GDPR.
| Personal Data | Purpose | Processing Ground |
| e-mail address | Order fulfillment Direct marketing Customer Service and replying to unsolicited info requests | Necessity for contract execution Informed Consent |
| name | Order fulfillment | Necessity for contract execution |
| phone | Order fulfillment Customer Service and replying to unsolicited info requests | Necessity for contract execution Informed Consent |
| Shipping/billing address | Order fulfillment | Necessity for contract execution |
| Financial data | Order fulfillment | Necessity for contract execution |
| Online ID | Website traffic monitoring | Legitimate Interest (site operation) |
7. Duration
We will remove your personal data from our databases as soon as they are no longer needed to fulfil the purposes set out in point 6. In addition, we will delete your personal data when you have correctly exercised your right to the deletion of your personal data.
An exception to the above rule concerns the legal obligations that rest on us, for example in the context of invoicing.
8. Data storage
We will store your data at Zoho.comonly for as long as the purposes for which we process your data require it or in accordance with our legal obligations.
Of course, if you properly exercise your right to be forgotten, we will also delete your personal data.
9. Your rights
We would like to make you aware of your rights regarding the protection of your data:
- Right of access to collected data: you have the right to request a copy of the personal data we collect and information about how we use that data.
- Right of correction: you have the right to ask us to correct and/or complete your personal data if it is incorrect or incomplete.
- Right to be forgotten: subject to compliance with certain legal conditions, you may request the deletion of your data;
- If the data collected are no longer required to achieve the purposes and aims of the processing for which they were collected.
- If the processing was based solely on your consent without any other legal basis for the processing and you wish to withdraw your consent.
- If you want to raise a legitimate objection to the processing of your data.
- If your data have been processed unlawfully.
- If a legal obligation indicates that your personal data must be deleted.
- Right to restriction of processing: you have the right to request restriction of processing in certain cases;
- You dispute the accuracy of certain data:
- The processing of your data is unlawful:
- Your personal data are required for legal proceedings.
- Right to object to processing: you have the right to object to the processing of your personal data for direct marketing or profiling purposes. Your personal data will no longer be processed unless the controller has compelling legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject.
- Right to data portability: you have the right to obtain the personal data processed by us in a structured, customary and machine-readable form. In addition, you also have the right to transfer these data to another controller or to have them transferred to us if this is technically possible.
- Right to withdraw your consent: You have the right to withdraw your consent at any time if your consent is the basis for lawful processing.
- This does not preclude the processing being based on criteria other than your consent, in which case the absence or otherwise of your consent would have no impact (if the processing is based on compliance with a legal obligation or the performance of a contract between the individual and us for example).
- Withdrawing your consent does not affect the legitimacy of the processing carried out when your consent was validly obtained.
In the event of a request from you, we undertake to reply within a maximum of one month. You can contact us at info@nchem.eu or +32 480 665 229.
In the event that you consider it necessary, you can file a complaint with the supervisory authority. Filing a complaint with the Data Protection Authority has no bearing on the intervention of a civil court.
10. data transfer and geographical scope
Nchem is located in Belgium; however, it is possible that data may be transferred to countries outside the European Union.
As a consequence of Article 44 of GDPR, any transfer of personal data outside the EU is only possible if an adequate level of protection is guaranteed in the country concerned. The European Commission has been mandated to carry out an assessment of the level of protection in a given country, territory, region or even international organisation. If this level of protection is considered adequate, the data can be transferred.
Nchem guarantees that it will not process or store data in countries that do not apply an adequate level of protection, except in the following cases:
- if the interested party has expressly accepted the proposed transfer, after having been informed of the risks inherent to this transfer in the absence of a finding of adequacy and adequate safeguards;
- if the transfer is necessary for the performance of a contract between the data subject and the controller or for the performance of pre-contractual measures taken at the request of the data subject;
- if the transfer is necessary for the conclusion or performance of a contract entered into in the interest of the data subject between the controller and another natural or legal person;
- if the transfer is necessary for important reasons of public interest;
- if the transfer is necessary for the establishment, exercise or basis of legal claims;
- if the transfer is necessary for the protection of the vital interests of the data subject or of other persons, if the data subject is not physically or legally able to give their consent;
- if the transfer is made from a register which is intended, under Union or Member State law, to provide information to the public and which may be consulted by any person or by any person who can demonstrate a legitimate interest, but only if in this case the conditions for consultation laid down in Union or Member State law are met.
Nchem will not sell, rent, distribute or otherwise make your personal data commercially available to third parties, except as stated in this statement or unless with your prior consent.
In the event of a total or partial reorganisation or transfer of activities of Nchem, this may mean that your data will be transferred to new entities or third parties through which the business of Nchem is wholly or partly carried out. We will endeavour to inform you of this in advance.
11. Complaints
You can always file a complaint by sending a written request via e-mail to info@nchem.eu. We undertake to comply with your request within one month.
You also have the option of submitting a complaint to the supervisory authority.
Data Protection Authority
Rue de la Presse 35
1000 Brussels, Belgium