Privacy policy - ArtyFacts VOF

Last updated: 11 June 2026

ArtyFacts VOF, a company under Belgian law with its registered office in Belgium (hereinafter "ArtyFacts", "we" or "us"), processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Belgian legislation.

This privacy policy describes how we collect, use, store and protect personal data.

1. Data controller

ArtyFacts VOF
Raasakker 32, 9880 Aalter
BE 1033.430.971
arty@artyfacts.club

ArtyFacts acts as the data controller for the processing of your personal data.

2. What personal data do we process?

2.1 Identification and contact details

  • Surname and first name
  • Address
  • Email address
  • Telephone number

2.2 Future data (if applicable)

  • Date of birth of the customer
  • Data of children (such as name and date of birth), provided solely by the customer

2.3 Supplied content

  • Drawings and creative documents
  • Digitised versions of this content

2.4 Technical data (website use)

  • IP address
  • Browser data
  • Cookies (see article 10)

3. Purposes of processing

We process personal data for the following purposes:

3.1 Contractual performance

  • Processing and managing orders
  • Shipping and returning boxes
  • Digitising drawings
  • Creating personalised products (such as photo books and calendars)

3.2 Customer management

  • Communication about orders
  • Answering questions

3.3 Marketing (optional)

  • Sending newsletters (if consent given)
  • Informing about new products and services

3.4 Website improvement

  • Analysis of use and optimisation of the website

4. Legal basis for processing

We process personal data on the basis of:

  • Performance of an agreement (article 6.1.b GDPR)
  • Consent (article 6.1.a GDPR), for among other things marketing and cookies
  • Legal obligations (article 6.1.c GDPR)
  • Legitimate interest (article 6.1.f GDPR), such as improving our services

5. Retention periods

We do not retain personal data longer than necessary.

  • Digital files (digitised drawings): maximum 1 year after processing
  • Physical drawings: maximum 6 months, unless returned earlier on request
  • Contact and billing data: up to 7 years in accordance with accounting obligations
  • Marketing data: until consent is withdrawn

After these periods expire, data is deleted or anonymised.

6. Processing of drawings and creative content

By supplying drawings:

  • the customer declares that he/she is entitled to share them
  • the customer gives consent to process them for creating products

The content is not used for other purposes without explicit consent.

7. Sharing of personal data

We only share personal data with third parties when necessary:

  • Shipping (logistics partners)
  • IT and hosting providers
  • Payment processors (if applicable)

With these parties we conclude, where required, data processing agreements (DPAs). We never sell personal data to third parties.

8. Transfer outside the European Economic Area (EEA)

If data is processed outside the EEA, we ensure appropriate safeguards (such as the European Commission's standard contractual clauses).

9. Security

We take appropriate technical and organisational measures, including:

  • Secure storage of digital files
  • Access control
  • Restriction of access to personal data

10. Cookies and tracking

Our website uses cookies.

10.1 Types of cookies

  • Necessary cookies: for the operation of the website
  • Analytical cookies: to analyse use
  • Marketing cookies: for personalised communication (if applicable)

10.2 Consent

Non-essential cookies are only placed after your consent via the cookie banner. You can adjust your preferences at any time.

11. Newsletter and marketing

If you subscribe to our newsletter:

  • we use your email address to send you updates and promotions
  • you can unsubscribe at any time via the "unsubscribe" link

We only send marketing communications:

  • with your consent, or
  • if permitted under an existing customer relationship (soft opt-in under Belgian law)

12. Rights of data subjects

You have the following rights:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to data portability
  • Right to object
  • Right to withdraw consent

You can exercise these rights via: arty@artyfacts.club

13. Complaints

You have the right to lodge a complaint with:

Data Protection Authority (Gegevensbeschermingsautoriteit – GBA)

Drukpersstraat 35, 1000 Brussels

www.gegevensbeschermingsautoriteit.be

14. Changes to this policy

We reserve the right to amend this privacy policy. The most recent version is always available on our website.