Privacy Policy — Fluesco SRL

This policy explains which personal data Fluesco SRL collects on fluesco.com, why, how long it is kept, with whom it is shared and what your rights are (General Data Protection Regulation — GDPR — and the Belgian Act of 30 July 2018). English translation of the French version; in case of discrepancy, the French text prevails.

1. Data controller

The data controller is Fluesco SRL, Grand Pré 4a, 4690 Glons (Belgium), company number 0628.502.491, info@fluesco.com, +32 (0) 479 92 02 03. Fluesco has not appointed a data protection officer; any question about your data can be sent to info@fluesco.com with the subject “Personal data”.

2. Data collected, purposes and legal bases

Fluesco collects only the data needed for each purpose. No sensitive data is requested.

Situation	Data	Purpose	Legal basis
Creating an account	surname, first name, e-mail, password (encrypted), company and VAT number (business customers)	account management, order history	performance of the contract
Order	billing and delivery addresses, telephone, products ordered, amounts	processing, delivery, invoicing, after-sales service	performance of the contract; legal obligation (accounting)
Payment	card or account details, entered directly with Stripe; Fluesco receives only a transaction ID and the last 4 digits	collection, fraud prevention	performance of the contract; legitimate interest (fraud)
Bank transfer	account holder's name, IBAN, reference	reconciliation of the payment	performance of the contract
Contact form, e-mails, telephone	identity, contact details, content of the request	answering the request, quotations	pre-contractual measures; legitimate interest
Newsletter	e-mail	sending commercial information	consent (withdrawable at any time via the unsubscribe link)
Browsing the website	IP address, browser, pages visited, cookies (section 6)	operation of the website, security, statistics	legitimate interest (necessary cookies); consent (statistics and third-party content)
Complaints and disputes	exchanges, case documents	handling complaints, legal defence	legitimate interest; legal obligation

Mandatory fields are marked in the forms; without them, the order or request cannot be processed. Fluesco makes no automated decisions producing legal effects concerning you.

3. Recipients and processors

Your data is never sold. It is shared only with the service providers needed to fulfil your order or operate the website, bound to Fluesco by a data processing agreement under Article 28 of the GDPR:

Provider	Role	Data transferred
Stripe Payments Europe Ltd (Ireland)	payment by card, Bancontact, Apple Pay, Google Pay, Link	payment data, amount, e-mail, billing address
bpost and other carriers chosen at checkout	delivery	name, delivery address, telephone, e-mail (parcel tracking)
Infomaniak Network SA (Switzerland)	hosting of the website and backups	all website data, encrypted in transit
Icecat N.V. (Netherlands)	enriched product content (“Product Story”), loaded only with your consent	IP address, product pages visited, Google Analytics cookies (section 6)
Manufacturers and distributors	warranty, replacement or on-site service	identity, contact details, serial number, description of the defect
Accountant, legal advisers, authorities (FPS Finance)	legal and accounting obligations, defence of Fluesco's rights	invoices and case documents

Data may also be disclosed to the authorities where the law requires it.

4. Retention periods

Data	Period
Customer account	as long as the account is active, then 3 years after the last login or order; deletion on request at any time
Orders, invoices and accounting records	7 years from the end of the financial year (Code of Economic Law and VAT legislation)
Warranty and after-sales data	duration of the legal or commercial warranty, plus 1 year
Contact requests and quotations without follow-up	1 year
Newsletter	until unsubscription
Technical server logs (IP addresses)	12 months maximum
Cookies	see section 6

After these periods, data is deleted or anonymised, unless ongoing proceedings require it to be kept.

5. Transfers outside the European Union

Data is hosted in Europe (Infomaniak, Switzerland — a country recognised as adequate by the European Commission). Stripe processes payments from Ireland; some of its processing may take place in the United States under the EU–US Data Privacy Framework and the European Commission's standard contractual clauses. The audience-measurement cookies loaded by Icecat (Google Analytics) may involve a transfer to the United States under the same framework; they are activated only with your consent.

6. Cookies and trackers

A cookie is a small file placed on your device by the website you visit. Strictly necessary cookies are placed without consent; the others only after your agreement through the banner shown on your first visit, which you can change at any time via the “Cookie settings” link in the footer.

Cookie	Issuer	Purpose	Duration	Category
PHPSESSID	fluesco.com	browsing session	session	necessary
PrestaShop-*	fluesco.com	basket, login, language, currency	20 days	necessary
cookie-perms	fluesco.com	remembers your consent choices	12 months	necessary
__stripe_mid, __stripe_sid, machine_identifier, private_machine_identifier	Stripe	fraud prevention during payment	1 year / session	necessary
_ga, ga*	Google Analytics, loaded by Icecat Product Story	audience measurement of enriched content	13 months	statistics (consent)
crossDomainAuth, SId, ULocation	Icecat	operation of enriched content	session / 12 months	third-party content (consent)

You can also refuse or delete cookies in your browser settings; some features of the website (basket, login, payment) will then no longer work.

7. Your rights

You have the following rights over your data:

access: obtain a copy of the data Fluesco holds about you;
rectification: correct inaccurate or incomplete data (directly in your account for most of it);
erasure: request the deletion of your data, except data Fluesco is legally required to keep (invoices);
restriction and objection: request that processing be frozen or object to it on grounds relating to your situation, and object at any time to direct marketing;
portability: receive the data you provided in a structured, machine-readable format;
withdrawal of consent: at any time, without affecting earlier processing.

To exercise these rights, write to info@fluesco.com or to Fluesco SRL, Grand Pré 4a, 4690 Glons, stating your request; proof of identity may be requested in case of doubt. Fluesco replies within one month, extendable by two months for complex requests.

If you believe your rights are not being respected, you may lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, +32 (0)2 274 48 00, contact@apd-gba.be, dataprotectionauthority.be.

8. Security, minors and changes

The website is served over HTTPS; passwords are stored in hashed form; payment data never passes through Fluesco's servers. Access to data is limited to the people who need it for their work, and the website is backed up regularly. In the event of a data breach presenting a risk to you, Fluesco informs you and the Data Protection Authority within the statutory time limits.

The website is intended for persons aged 18 and over; Fluesco does not knowingly collect data from minors.

This policy may be updated to reflect changes to the website or to the law; the date at the top indicates the latest version. Significant changes are announced on the website. For any question: info@fluesco.com.