Privacy policy

The controller is :

COMPO Benelux nv
Venecolaan 56, B-9880 Aalter
Telefoon : +32(0)9/311 00 00
E-Mail: compo@compo.be

You can reach our company's data protection officer at the above address using the keywords DATA PROTECTION or using the following email contact: privacy@compo.be.

We process personal data in accordance with the provisions of the EU's General Data Protection Regulation (GDPR).

1. To fulfil contractual obligations (Article 6(1.)(b) GDPR)
   The processing of data can take place in the context of executing contracts with you as our customer or in order to implement pre-contractual measures.
2. In the balancing of interests (Article 6(1.)(f) GDPR)
   If required, we can process your data beyond the actual fulfilment of the contract to safeguard our or a third party's legitimate interests. Examples: reviewing and optimising the processes of requirements analysis for the purpose of direct customer contact; advertising or market and opinion research insofar as you have not objected to the use of your data; asserting legal claims and defence in the event of legal disputes; safeguarding IT security and IT operations within the company, and measures to control business processes and develop services and products
3. Based on your consent (Article 6(1.)(a) GDPR)
   Once you have agreed to the processing of personal data for specific purposes (e.g. for marketing purposes, receipt of newsletters), the legitimacy of such processing shall be deemed to be given based on your consent.
4. Based on legal requirements (Article 6(1.)(c) GDPR) or in the public interest (Article 6(1.)(e) GDPR)
   In addition, we are subject to various legal obligations, i.e. statutory requirements (e.g. tax laws). The purposes of processing include the fulfilment of fiscal inspection and reporting requirements, and much more.

2.1. Provision of the website and creation of log files

Each time our website is accessed, our system automatically collects data and information from the accessing computer. The following data are collected:
information about the browser type and the version used;

• the user's operating system;
• the user's internet service provider;
• the user's ip address;
• date and time of access;
• websites from which the user's system accesses our website, and websites accessed by the user's system via our website.

The data are also stored in the log files of our system. These data are not stored together with other personal data of the user. The legal basis for the temporary storage of data in log files are our legitimate interests. Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. To do this, the user's IP address must be kept for the duration of the session. Storage in log files takes place to ensure the functionality of the website. In addition, the data are used to optimise the website and to ensure the security of our IT systems. An evaluation of the data for marketing purposes does not take place in this instance.

The data are deleted immediately when no longer required for the purpose of collection. In terms of data collection for the provision of the website, this is the case when the respective session has ended.

Data collection for the provision of the website and data storage in log files is essential for the operation of the website. Consequently, the user has no opportunity to opt out.

Cookie notices are provided by Cookiebot.

2.3. Newsletter

You may subscribe to a free newsletter on our website. In this instance, data are transmitted to us from the input mask when registering for the newsletter. We request the following details for this:

• user's email address
• title
• first name
• last name
• postcode

In addition, the following data are collected during registration:

• recipient list ID
• ID of opt-in process
• opt-in source
• opt-in status ID
• IP address of opt-in activation/confirmation
• timestamp of opt-in activation/confirmation

As part of the registration process, your consent will be obtained and you will be referred to this Data Privacy Statement for the processing of the data. To ensure that your registration proceeds correctly, an opt-in process will be started after your initial newsletter registration. You will receive an email requesting that you confirm your registration. The legal basis is your consent according to Article 6(1.)(a) GDPR. You will then be managed as an active recipient. Data records for incomplete opt-in processes will be deleted automatically after 30 days.

Your email address is collected in order to deliver the newsletter. In conjunction with your newsletter registration, we will also store your IP address and the timestamps of your registration/deregistration along with the respective confirmation. This is done so that we can track and prove your registration at a later stage. The legal basis for this storage is a legitimate interest for the purposes of Article 6(1.)(f) GDPR, where the legitimate interest is evidence of registration/deregistration.  Other personal data are collected as part of the registration process for the purpose of preventing misuse of the services or the email address provided.

If you no longer wish to receive our newsletter, you can object to its receipt at any time and unsubscribe accordingly. If you click the link contained in every newsletter, you will then be guided through the deregistration process. To delete your personal data, please send an email to privacy@compo.be.

We carry out individual user tracking in order to be able to send you interest-related information in the future. Among other things, we monitor whether the newsletter has been opened and which links are clicked on. In this way, we are able to make our newsletters more individual and interesting. The legal basis for using this user tracking is the user's consent (Article 6(1.)(f). You can object to this tracking at any time by clicking on the separate link provided in each mail or by contacting us through other channels. The information will be stored for as long as you have been subscribed to our newsletter. Furthermore, this tracking is not possible in case you have by default deactivated the display of images in your e-mail program. In this case, the newsletter may not be displayed in full or you may not be able to use all the functions.

2.4. COMPO Advice

On our website, we offer you the opportunity to register with the Club for Plant Whisperers, which involves providing personal data.

The Club for Plant Whisperers presents salespeople in the plant protection sector with a broad range of activities, training opportunities and information on the topic of plant protection. You can test and enhance your knowledge in this area. The content of the Club for Plant Whisperers is also a useful tool when you prepare for the certificate of competence examination. As a registered user, you can also participate in our bonus programme. 

The data entered in the input mask as part of the registration process are transmitted to and stored by us. The following data are collected as part of the registration process:

• first and last name
• road, postcode, town/city and country
• email address
• date of birth
• market in which the person works
• road, postcode, town/city and country of market
• district manager

In addition, the following data are stored at the time of registration:

• date and time of registration
• membership number
• points status
• bonuses ordered
• date and time of training registration
• date and time of training deregistration
• verification code

These data will not be passed on to third parties unless doing so is necessary for the proper performance of the service ordered. Personal data will be passed on to the relevant examination board for the acquisition of the certificate of competence in plant protection. This is required for the examination to be carried out by the board and for the certificate of competence to be issued. Personal data will be passed on to the relevant regional authorities with regard to renewing the certificate of competence in plant protection, if such continued education has been completed through us.

You give your consent to the processing of these data as part of the registration process. The legal basis for processing your data, when consent is provided, is Article 6(1.)(a) GDPR.

For the use of personal data for other purposes (in particular, for advertising purposes), COMPO will always seek your explicit consent before collecting such information. You need to register to receive the content and services offered in the Club for Plant Whisperers. Personal data are collected during registration so as to prevent a misuse of services.

The data are deleted immediately when no longer required for the purpose of collection. This is the case for data collected during the registration process if registration on our website is revoked or altered.

As a user, you may cancel your registration at any time. Furthermore, you may have the data stored about you modified at any time. To delete the account, please send an email to privacy@compo.be.

We will then delete all the data specified by you, unless statutory retention periods prevent us from doing so. You can change the data stored by you at any time by navigating to the 'My Profile' tab in the restricted member area of the site.

2.5. Participation in prize games and product tests

On our website, we offer you the opportunity to register for prize games, product tests and other competitions (referred to hereinafter as 'promotions') by providing personal data. Here, the data are entered in an input mask and then transmitted to us and stored. The data are only forwarded to service providers that support us in the fulfilment of the aforementioned purposes.

The following data are collected as part of the registration process:

• title
• first name
• last name
• email address
• road
• building number
• postcode
• city
• prize game question

In addition, the following data are stored at the time of registration:

• quiz ID
• date and time of registration

You give your consent to the processing of these data as part of the registration process. The legal basis for processing your data, when consent is provided, is Article 6(1.)(a) GDPR.

You may cancel your registration at any time. You may also have the data stored about you modified at any time. The data are deleted immediately when no longer required for the purpose of collection. This is the case for data collected during the registration process if the promotion has ceased or the statutory retention periods have expired. As a user, you may opt out of the promotion at any time. To do this, please send an email to privacy@compo.be. We will then delete all the data specified by you, unless statutory retention periods prevent us from doing so.

2.6. Contact form and email contact

Our website contains contact forms that can be used for electronic communication. If you make use of this option, then the data entered in the input mask will be transmitted to us and stored. Such data include:

• first name
• last name
• email address
• postcode
• city
• phone number (queries)
• your message/question
• picture

As part of the sending operation, your consent will be obtained and you will be referred to this Data Privacy Statement for the processing of your data.

Alternatively, contact can be initiated using the email address provided. In this case, the personal data transmitted with your email address will be stored. Data will not be passed on to third parties in this instance. It will only be used for the purpose of processing the correspondence.

The legal basis for the processing of data with your consent is Article 6(1.)(a) GDPR. The legal basis for the processing of data transmitted when sending an email are our legitimate interests. If the email contact is geared towards the conclusion of a contract, then the additional legal basis for processing shall be Article 6(1.)(b) GDPR.

The processing of personal data in the input mask is for the sole purpose of facilitating communication. The legitimate interest also concerns the processing of data in the case of communication by email. The remaining personal data processed during the sending operation are used to prevent misuse of the contact form and to ensure the security of our IT systems.

The data will be deleted if no longer required for the purpose of its collection. This is the case for personal data entered in the input mask of the contact form and data sent by email if the respective correspondence with you, the user, has concluded. This is the case where circumstances make clear that the matter in question has been resolved. You may withdraw your consent to the processing of personal data at any time. You may object to the storage of your personal data at any time by sending us an email. Correspondence cannot be continued in such cases. To do this, please send an email to privacy@compo.be. All personal data stored during this period of communication will be deleted in such cases, unless statutory retention periods apply at the time.

2.7. Disclosure of personal data to service providers

When making use of the technical support services of our contract partners or during co-operation with our hosting partners, for example, it is possible that personal data may be viewed by these service providers.

We currently co-operate with the below service providers for the following reasons:

• xQueue: Email forwarder
  xQueue is an email marketing service provider based in Germany. We use this partner for sending newsletters (see section 2.4) and campaign emails, for example. xQueue data protection information can be found at: https://www.maileon.de/datenschutz/
• iQuer: Hosting
  iQuer is our Germany-based hosting partner. iQuer's data centres are located in Paderborn. You can access the data protection information here: https://www.iquer.net/impressum-und-datenschutz
• Nexum: Administrative, troubleshooting and support services
  Nexum is our IT consultant. The company is based in Germany. You can find the data privacy statement here: https://www.nexum.de/datenschutz.

If your data are processed by these service providers, it will normally only be data that you have made available to us, e.g. for making contact electronically or other reasons mentioned above.

The legal basis for the temporary processing of your data for the above purposes are our legitimate interests (Article 6(1.)(f) GDPR). We would not be able to provide you with the website and services offered if we did not co-operate with our service providers.

Processing the personal data enables us to continue corresponding with you by email and to offer and make available our website.

The data will be deleted if no longer required for the purpose of its collection. Accordingly, in the case of a support service, the data are deleted immediately after completion by the service provider. In this regard, please also note the information on the descriptions mentioned in section 2 concerning data processing, as well as the options of objection and disposal.

2.8 Use of Google Maps for postcode searches and calculating routes

We make use of the Google Maps service on this website. This makes it possible for us to display interactive maps directly on the website and enable you to use the map function easily.

When you visit this website, Google receives information that you have opened the corresponding subpage of our website. In addition, the following data are transmitted:

• IP address of querying computer;
• date and time of access;
• name and URL of retrieved file;
• website from which access is made (referrer URL), and the browser used and possibly your computer's operating system, as well as the name of your access provider.

This takes place regardless of whether or not Google has provided a user account that you are logged on with. If you have logged on at Google, your data will be directly associated with your account. If you do not wish for association with your profile on Google to take place, then you must log out before activating the button. Google stores your data in the form of usage profiles. It then uses the data for advertising, market research and/or the demand-driven design of its website. The main purpose of assessments like this (even for users not logged on) is to provide demand-driven advertising and to inform other social network users about your activities on our website. You have the right to object to the creation of such user profiles, which must be lodged with Google directly.

You have several rights concerning the information we hold about you. We would like to inform you that you have the right to:

• obtain confirmation that we are processing your personal data and request a copy of the personal data we hold about you;
• ask that we update the personal data we hold about you, or correct such personal data that you think is incorrect or incomplete;
• ask that we delete personal data that we hold about you, or restrict the way in which we use such personal data if you believe that there is no (longer a) lawful ground for us to process it;
• withdraw consent to our processing of your personal data (to the extent such processing is based on consent). Please note that such a withdrawal only applies to the future. Processing that has taken place prior to consent being given is not affected by this.;
• receive a copy of the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit such personal data to another party (to the extent the processing is based on consent or a contract);
• object to our processing of your personal data for which we use legitimate interest as a legal basis, in which case we will cease the processing unless we have compelling legitimate grounds for the processing (see also below under 6).

You have also the right to object at any time to the processing of personal data for direct marketing. If you do not want to continue receiving any direct marketing from us, you can contact us (see below) or click on the unsubscribe function in any such communication. In that event, the personal data shall no longer be processed for such purposes.

If you are unhappy with the way we have handled your personal data or any privacy query or request that you have raised with us, you have a right to complain to the Data Protection Authority (“DPA”) in your jurisdiction. If you would like to be directed to the appropriate DPA, please contact us.

Please contact our data protection officer to exercise your rights for queries in this regard.

In the context of our business relationship, you must provide such personal data as are required for the establishment and implementation of a business relationship and for the fulfilment of associated contractual obligations or for whose collection we are legally required. We would normally be forced to refuse conclusion of the contract or execution of the order or unable to continue implementing an existing contract and possibly have to terminate it without these data.

No. For the establishment and implementation of business relationships, at present, we do not use any fully-automated decision-making processes pursuant to Article 22 GDPR. Profiling does not take place.

Right to object based on an individual case

You have a permanent right to object – on grounds relating to your particular situation – to the processing of personal data concerning you, which is based on Article 6(1.)(e) GDPR (data processing in the public interest) and Article 6(1.)(f) GDPR (data processing based on legitimate interests). That also applies to profiling based on this provision within the meaning of Article 4(4) GDPR.

We shall no longer process your personal data if you lodge an objection, unless we can demonstrate compelling legitimate grounds for its processing, which override your interests, rights and freedoms or such processing is used for the establishment, exercise or defence of legal claims.

Recipient of the objection

The objection may be filed without any form requirement using the subject 'Objection' and specifying your name, address and date of birth, and should be sent to:

COMPO Benelux nv
Venecolaan 56, B-9880 Aalter
+32(0)9/311 00 00
privacy@compo.be

If you require information not contained in this Data Privacy Statement or if you would like to receive additional information at a later date, please contact our data protection officer, who will be pleased to assist.