Privacy policy

1. Preamble

The protection of your privacy is essential to Acar'Up Consumer Health (hereinafter also referred to as "We"). Acar'Up Consumer Health intends to inform you, in a transparent way, about how your data is processed and protected when you transmit it to us.

Acar'Up Consumer Health undertakes to process your personal data only in accordance with the relevant regulations, in particular the European Data Protection Regulation 2016/679 (hereinafter also referred to as "DPRR").

The purpose of this privacy policy is therefore to inform you, among other things, about:

Personal Data that Acar'Up Consumer Health may collect;
The reasons (purposes) for which Acar'Up Consumer Health uses/processes your personal data;
The people with whom Acar'Up Consumer Health may share your personal data;
The retention periods of your personal data;
The security measures implemented by Acar'Up Consumer Health;
Your rights relating to your personal data and the steps to be taken to exercise these rights.

2. Who is the data controller?

Acar'Up Consumer Health sprl
Clos Chapelle aux Champs, 30
1200 Brussels, Belgium
Tel: (+32) 2.880.62.60
E-Mail: info@acarup.com
Web: www. exaller.com
(Director: Mr. Benjamin Tillier)
VAT: BE 0567.583.523

3. Why do we process your personal data (the purposes)?

3.1 Improvement and management of our website:

3.1.1. What personal data?

Cookies Management: All relevant information can be found in our cookie policy.

Access data (logfiles): Date and time of visit; Page(s) consulted; Quantity of data consulted; IP address; Reference URL; Browser type; Browser version; User's operating system; Internet service provider; etc. / This type of information is collected anonymously and is analyzed by Acar'Up Consumer Health only for statistical purposes.

3.1.2 Who is concerned?

All users of our website.

3.1.3 Why?

Adapt the content of our website (based on your habits/preferences of use);
Offer you a more personalized and simplified navigation experience (based on your habits/preferences of use).

3.1.4 On what legal basis?

Consent: indeed, we have set up an "opt-in" system on our website. In this way, we obtain your consent prior to the placement of cookies on your device. In addition, we invite you to review our cookie policy for more information on this subject (such as the type of cookies used and the lifetime of these cookies).
Our legitimate interest: access data and certain cookies are essential to the proper functioning of our Website. It is in our legitimate interest to use this type of technology to best manage our website. Under no circumstances will the data collected for this purpose be processed for any other incompatible purposes.

3.2 Customer Management

3.2.1 What personal data?

Identification and contact data: Name; First name; Age; Date of birth, Sex; E-mail address; Telephone number, mobile phone number; Home address; Country of residence; etc.
Family status: Marital status; Dependants; etc
Financial identification data: Bank account number; Account details; etc.

Contains "sensitive" personal data?

Yes.
Why? In order to be able to offer you products / services adapted to your state of health, we collect some of your medical data or data relating to your state of health or your pathologies.
What types of data? Frequency and intensity of your allergic symptoms (runny or blocked nose, cough, sneezing, tingling or tickling in the nose, eyes or throat, etc.); Consequences of allergic symptoms (examples: sleep disorders, etc.); Family history; Type of treatments already used; Diagnosis made;

Any other medical data or data relating to your state of health or pathologies that you consider it useful to provide us with.

You are clearly informed each time that your medical data is being collected.
We do not process any of your medical data without your explicit prior consent.
The security measures implemented by Acar'Up Consumer Health:
- We implement appropriate confidentiality measures for the processing of this type of data.
- We do not share them with anyone other than our partners who are responsible for presenting our products / services to you. The latter are subject to strict confidentiality measures.
Under no circumstances do we use this data for any purpose other than to promote our medical products/services or for therapeutic purposes.

3.2.3 Who is concerned?

Our customers;
Our prospects.

3.2.4 Why?

Ensure effective communication with you: some of your personal data simply allows us to communicate with you. Please note that this correspondence data may, in compliance with the relevant legal provisions, be shared with our service providers or with the competent public authorities.
Keep you informed of our products/services: if you are already an Acar'Up Consumer Health customer, we may, unless you object, use your personal data to contact you for commercial purposes.
Management of our accounting and invoicing: for example, your bank identification data and address are essential to manage our invoicing.
Ensure effective communication with our independent service providers: we communicate only the data they need to carry out their mission. For example, a person who calls you to track an order must have access to your name, phone number and the type of symptoms you have.

3.2.5 On what legal basis?

The processing of some of your personal data is necessary for the fulfilment of a contract between you and us, or for pre-contractual steps to offer you our services.
Legal obligation: for example, we process your data in order to invoice you, in accordance with our legal obligation.
Your consent: The processing of your "sensitive" personal data is only carried out after your consent has been obtained.

3.3 Management of our marketing activities and newsletter

3.3.1 What personal data?

Identification and contact data: Name; First name; Title; Address; Telephone / mobile number; E-mail address.
“Downloads" section: You are likely to provide us with the following information: How you have been informed about our products; Whether you have already used our products or not yet; Allergic people in your family. We draw your attention to the fact that the latter type of data is considered as "sensitive" within the meaning of the GDPR. We only process this data if you provide us with your explicit consent to do so. For more information on the processing of your medical data, we invite you to consult the section "Sensitive persons data? "of our privacy policy.
User testimonials: Subject to your consent, we may publish the following information on our website for the purpose of promoting our products: Last name; First name; Picture of you; Your allergic symptoms, severity, history, diagnosis; Your municipality of residence; Telephone number; Your testimony about the use of our products.

3.3.2 "Sensitive" personal data?

Yes, potentially, if you authorize us to process your medical data or data relating to your state of health or your pathologies.
Why? In order to be able to offer you products / services adapted to your state of health, we collect some of your medical data or data relating to your state of health or your pathologies.
What types of data? Frequency and intensity of your allergic symptoms (runny or blocked nose, cough, sneezing, tingling or tickling in the nose, eyes or throat, etc.); Consequences of allergic symptoms (examples: sleep disorders, etc.); Family history; Type of treatments already used; Diagnosis made;

Any other medical data or data relating to your state of health or pathologies that you consider useful to provide us with.

You are clearly informed each time that your medical data is being collected.
We do not process any of your medical data without your explicit prior consent.
We implement appropriate confidentiality measures for the processing of this type of data.
We do not share them with anyone other than our partners who are responsible for presenting our products / services to you. The latter are subject to strict confidentiality measures.
Under no circumstances do we use this data for any purpose other than to promote our medical products/services or for therapeutic purposes.

3.3.3 Who is concerned?

Our customers;
Our prospects.

3.3.4 Why?

We use this data to promote our products / services and to develop our activities as effectively as possible.

3.3.5 On what legal basis?

Your consent: The processing of your personal data is only carried out after your consent has been obtained.

3.4 Allergic Assessment Management

3.4.1 What personal data?

Identification data: Name; First name; Telephone; Title; Email address.
Medical / sensitive data ? Frequency and intensity of your allergic symptoms (runny or blocked nose, cough, sneezing, tingling or tickling in the nose, eyes or throat, etc.); Consequences of allergic symptoms (examples: sleep disorders, etc.); Family history; Type of treatments already used; Diagnosis made;

Any other medical data that you consider useful to provide us.

3.4.2 Who is concerned?

Any person completing our evaluation form and consenting to the processing of their data.

3.4.3 Why?

Your identification data allows us to send you the result of your evaluation.
Your medical data is necessary to carry out the evaluation and to offer you products and/or services adapted to your health.

3.4.4. On what legal basis?

Your consent.

4. Data retention policy

Acar'Up Consumer Health undertakes to keep your personal data only as long as necessary for the purpose concerned.

However, some of your personal data is kept for a longer period of time required by law and for the time necessary to process any litigation proceedings.

In addition, you will find all information about the lifetime of our cookies in our cookie policy.

In the event that the processing of your data is based on your consent, you are able to withdraw your consent at any time by contacting us at the following address: privacy@acarup.com.

5. The people with whom we share your data

For one or more of the purposes described above, we may, always in your interest and subject to compliance with the relevant legal obligations, share your personal data with:

Our subcontractors;
The competent supervisory authorities;
Government authorities;
Courts and tribunals;
The people for whom you authorize us to share your data.

6. Transfer of your data to third countries

The transfer of your data outside the European Economic Area is mainly due to the location of some of our subcontractors.

Indeed, in order to offer you a quality service, we have decided to outsource certain operations to specialized service providers who have real expertise in their fields. Some of these providers are based outside the European Economic Area.

How are these data transfers managed?

Regardless of the countries where our subcontractors are located, we always select them with the greatest care. This is particularly the case with regard to the way your data is secured. These subcontractors only act on instructions from Acar'Up Consumer Health and do not use your data at any time for anything other than the performance of the services we entrust to them. A contract is systematically concluded between Acar'Up Consumer Health and the selected subcontractors.

When our service providers are established outside the European Economic Area, we are committed to selecting them as a priority in countries whose legal framework provides a satisfactory level of security.

Where this is not possible, we regulate these transfers through appropriate legal mechanisms, including the signature of standard contractual clauses specifically provided for this type of transfer or self-certification to Privacy Shield (the latter mechanism being valid only for service providers based in the United States).

7. Protecting your data

We use a range of technical and organisational measures necessary to protect your personal data in order to limit the risks of destruction, loss, modification, access or unauthorised processing, including physical, electronic and management measures to ensure the security, accuracy and updating of your personal data. These measures include:

Education and training of our relevant staff to ensure that they are aware of our privacy obligations when processing personal data.
Administrative and technical controls to restrict access to personal data on a need-to-know basis.
Technological security measures, including firewalls, encryption of certain data and antivirus software.

8. Your rights

You have a number of rights. Indeed, you have, subject to the scope of the relevant legal provisions, the right:

To obtain a list of the personal data we hold about you (right of access).
To request that we update the personal data we hold about you or correct personal data that you consider incorrect or incomplete (right of rectification).
Subject to the conditions contained in Article 17 of the GDPR, to request the deletion, as soon as possible, of personal data concerning you (right to be forgotten).
To request, subject to compliance with the legal provisions to which we are subject, that we delete the personal data we hold about you, or that we limit the way we use this personal data (right of limitation).
To withdraw your consent to the processing of your personal data, insofar as such processing is based on consent (right to withdraw consent).
To receive a copy of the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit them to a third party, insofar as the processing is based on your consent or on a contract (right to portability).
To oppose the processing of your personal data (right of opposition).
Except in certain specific cases, the right not to be the subject of a decision based exclusively on automated processing, including profiling, which produces legal effects concerning you or which significantly affects you in a similar way (automated individual decision, including profiling).
If you are not satisfied with the way we handle your personal data, you have the right to file a complaint with the supervisory authority of your jurisdiction. If you wish to be referred to the appropriate supervisory authority, please contact us as indicated below (right to file a complaint with the competent supervisory authority).

If you wish to exercise any of your rights or file a complaint, please send us a written, dated and signed request, with a copy of your identity card, to the following address privacy@acarup.com and/or to the following physical address:

Acar'Up sprl
Clos Chapelle aux Champs 30
1200 Brussels, Belgium

In general, you will receive a response within 30 days.

9. Changes to this Privacy Policy

We may change or amend this Privacy Policy from time to time. Due, in particular, to legislative changes, the development of new services or a change in the way we process personal data.

In order to keep you informed of any changes to this Privacy Policy, we will change the revision date at the top of the page. The new modified or amended privacy policy will apply as of that date. Therefore, we encourage you to periodically review this Privacy Policy to be informed of any changes.

10. Contact us for more information

If you need any additional information regarding Acar'Up Consumer Health's use of your personal data or if you would like a PDF version of this privacy policy, please do not hesitate to contact us at privacy@acarup.com.