2. Processing of personal data

The use of the Site by the Users can lead to the collection of personal data. The processing of this data by Unbox, in its capacity as Controller or by service providers acting in the name and on behalf of Unbox, is carried out in accordance with the Law and the Regulation.

Personal data is processed by Unbox, in accordance with the purposes set out below, using the following methods:

• use of the Site
• use of mobile app
• when contacting via the contact form
• when contacted by email
• when contacted by phone

3. Purpose of the processing of personal data

In accordance with Article 13 of the Regulation, the purposes of the processing of personal data are communicated to the User. Those purposes are the following:

• handle and, if necessary, respond to your inquiry, report or request
• to respond to sending you newsletters, personalized marketing or sending information via email

4. Personal data that may be processed

The User agrees that, during the visit and use of the Site and mobile app, Unbox Universe collects and processes the following personal data:

• name
• address
• email
• phone number
• log files (IP address, date and duration of your visit, your browser, your operating system)
• location data, if you choose to give it to us. Most mobile devices allow you to control or disable the use of location services by any application on your mobile devices “settings” menu
• details of any information, feedback or other matter you give us by phone, email, post or via social media
• your account details, such as username and login details;
• your activities on, and use of, our website and mobile app
• information about the services we provide to you;
• your contact history, purchase history and saved items;
• information about how you use our website and mobile app and technology systems;
• your responses to surveys, competitions and promotions;
• information you provide during an exchange or other exchange based content that you generate or is connected to your account as a result of an exchange you are involved in.

Unbox collects and processes this personal data in accordance with the terms and principles described in this Privacy Policy.

5. Consent

By accessing and using the Site or mobile app, the User declares that he/she has read and given his/her free, specific, informed, and unambiguous consent to the processing of his/her personal data. This agreement relates to the content of this Privacy Policy.

By accessing and using the Site or mobile app, The User agrees that the Controller, in accordance with the terms and principles set forth in this Privacy Policy, collects and processes his/her personal data that he/she provides on the Site or in connection with the services offered by Unbox for the purposes stated above.

The User has the right to withdraw this consent at any time. The withdrawal of consent does not affect the lawfulness of the processing based on the prior consent.

6. Retention period of Users’ personal data

In accordance with Article 13(2) of the Regulation, the Controller shall only retain the personal data for as long as is reasonably necessary to achieve the purposes for which they are processed.

This duration shall in all cases not exceed 10 years.

7. Recipients of data and disclosure to third parties

Personal data can be passed on to employees, staff, subcontractors, processors, or suppliers of Unbox insofar as adequate data security guarantees are provided and insofar as they cooperate with Unbox for the marketing of the products or the provision of services. They act under the direct authority of Unbox, and are in particular responsible for collecting, processing or outsourcing this data.

In all cases, the recipients of the data and those to whom the data is disclosed comply with the contents of this Privacy Policy. Unbox ensures that they only process this data for the intended purposes and in a discreet and secure manner.

If the data would be provided to third parties for direct marketing or prospecting purposes, the User will be informed in advance so that he or she can give prior and explicit consent to this use of personal data.

8. Data Protection Officer (DPO)

The role of the DPO is to ensure the correct implementation of and compliance with national and supranational provisions on the collection and processing of personal data.

You can contact the DPO as follows:

Email: DPO@unboxuniverse.com

Letter: addressed to DPO UNBOX, Sint-Aldegondiskaai 36, 2000 Antwerp, Belgium.

9. Rights of Users

The User may exercise his/her rights at any time by sending a message by e-mail (accompanied by proof of identity) to the following address: DPO@unboxuniverse.com, or a letter by post (accompanied by a copy of his/her identity card) to the following address: Sint-Aldegondiskaai 36, 2000 Antwerp, Belgium.

a. Right of access
In accordance with Article 15 of the Regulation, Unbox guarantees the User's right to access his personal data. The User has the right to access this personal data and the following information:

• the categories of personal data concerned;
• where the recipients are established in third countries or international organizations, the appropriate or appropriate safeguards;
• if possible, the proposed storage period for personal data or, if not possible, the criteria by which this period will be determined;
• the existence of automated decision-making, including profiling, as referred to in Article 22(1) and (4) of the Regulation and, at least in such cases, relevant information on the underlying logic, as well as the importance and expected consequences of such processing for the data subject.

The Controller may claim a reasonable fee based on administrative costs for additional copies requested by the User.

If the User submits this request electronically (e.g., via e-mail address), the data will be provided in electronic form and for general use, unless the User requests otherwise.

The copy of the data will be communicated to the User no later than one month after receipt of the request.

b. Right of rectification
Unbox guarantees the right to rectification and deletion of personal data to the User.

In accordance with Article 16 of the Regulation, incorrect, inaccurate, or irrelevant data can be corrected or deleted at any time. The User first makes the necessary changes himself from his User account, unless these cannot be made independently, in which case the request can be addressed to Unbox.

In accordance with Article 19 of the Regulation, the controller shall notify any recipient to whom the personal data have been disclosed of any rectification of the personal data, unless such rectification proves impossible or involves a disproportionate effort. The controller shall provide the data subject with information about these recipients if the data subject so requests.

c. Right to erasure
In the cases mentioned in Article 17 of the Regulation, the User has the right to obtain the deletion of his personal data as soon as possible.

Where the Controller has disclosed the personal data and is required to erase them pursuant to the previous paragraph, the Controller shall, considering the technologies available and the costs of implementation, take reasonable measures, including technical measures, to inform other controllers processing such personal data that the data subject has requested by such controllers to erase the link with such personal data or a copy or reproduction thereof.

The two preceding paragraphs shall not apply insofar as such processing is necessary:

• exercising the right to freedom of expression and information;
• to comply with a legal obligation to process under Union law or Member State law to which the controller is subject, or to carry out a task of general interest or in the exercise of official authority vested in the controller;
• the establishment, exercise, or defense of legal claims.

In accordance with Article 19 of the Regulation, the controller shall notify any recipient to whom the personal data have been disclosed of any erasure of personal data or restriction on their processing, unless such disclosure proves impossible or involves a disproportionate effort. The controller shall provide the data subject with information about these recipients if the data subject so requests.

d. Right to restrict processing
The User has the right to a restriction of the processing of his personal data in the cases referred to in Article 18 of the Regulation.

In accordance with Article 19 of the Regulation, the controller shall inform any recipient to whom the personal data have been disclosed of any restriction on the processing carried out, unless such disclosure proves impossible or involves a disproportionate effort. The controller shall provide the data subject with information about these recipients if the data subject so requests.

e. Right to data portability
In accordance with Article 20 of the Regulation, Users have the right to receive their personal data from Unbox in a structured, commonly used, and machine-readable format. Users have the right to transfer this data to another controller without Unbox preventing this, in the cases provided for in the Regulation.

When the User exercises his right to data portability under the previous paragraph, he has the right to have personal data transferred directly from one controller to another, insofar as this is technically possible.

The exercise of the right to data portability does not affect the right to erasure. This right shall not apply to processing which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller.

The right to data portability does not affect the rights and freedoms of third parties.

f. Right to object and automated individual decision-making
The User always has the right to object to the processing of his/her personal data due to his/her specific situation, including the automation of data by Unbox. In accordance with Article 21 of the Regulation, Unbox will no longer process personal data, unless there are legitimate and compelling reasons for the processing that override the interests and rights and freedoms of the User, or for the establishment, exercise or defense of legal rights.

When processing personal data for prospecting purposes, the User has to the right to object at any time to the processing of the personal data concerning him for such prospecting purposes, including profiling insofar as it relates to such prospecting.

Where the data subject objects to the processing for the purpose of prospection, the personal data will no longer be processed for that purpose.

g. Right to complain
The User has the right to lodge a complaint regarding the processing of his personal data by Unbox, with the Data Protection Authority competent for the Belgian territory. More information can be found on the website: https://www.gegevensbeschermingsautoriteit.be/.

Complaints may be filed at the following addresses:

Data Protection Authority Drukpersstraat 35, 1000 Brussels
Tel. + 32 2 274 48 00
Fax. + 32 2 274 48 35
E-mail: contact@apd-gba.be
The User may also file an action for cessation with the President of the Court of First Instance of his place of residence.

10. Cookies

The Site or mobile app uses cookies to distinguish Users from the Site or mobile app. This makes it possible to provide Users with a better browsing experience and an improvement of the Site and its content. The purposes and methods of cookies are included in this article.

a. General principles
A "Cookie" is a file that is temporarily or permanently placed on the User's device when viewing the Site or mobile app for the purpose of a subsequent connection. Thanks to cookies, the server recognizes the User’s device.

Cookies may also be installed by third parties with whom Unbox cooperates.

Some of the cookies used by Unbox are necessary for the proper functioning of the Site or mobile app, others are necessary to improve the User's experience.

By using the Website or mobile app, the User expressly agrees to the management of cookies as described in this article.

b. Types of cookies and purposes pursued
Different types of cookies are or can be used by Unbox on the Site or mobile app:

• Technical cookies: these are necessary for the operation of the Site or mobile app, enable communication of the data entered and are intended to facilitate the User's navigation;
• Analytical and audience cookies: these cookies allow User recognition and are used to count the number of Users of the Website or mobile app over a given period. Because they also indicate browsing behavior, they are an effective way to improve the User's browsing experience by displaying suggestions and offers that may be of interest to the User. They also allow the Unbox to identify and correct any bugs on the Site or mobile app;
• Functional cookies: these cookies facilitate the use of the Site or mobile app by retaining certain choices entered (e.g., username or language);
• Tracking cookies: Unbox Universe uses tracking cookies via Google Analytics, to measure the interaction of users with the content of the Site and to produce anonymous statistics. These statistics allow the Unbox Universe to improve the Site. Google supports the explanation of these cookies at the following address: http://www.google.nl/intl/en_uk/policies/privacy/.

c. Cookie retention period
Cookies are stored for the time necessary to achieve the intended purpose. The cookies that may be stored on the User's hard drive and the storage period are as follows:

For strictly necessary cookies, which are essential for the functioning of our website and mobile app, we retain them for the duration of your session. For performance cookies, which help us understand how you use our website, we retain them for up to one year. For functional cookies, which store your preferences and allow us to personalize your experience, we retain them for up to two years.

You have the right to control the use of cookies on our website through your browser settings. You can accept or reject all cookies or choose to receive a notification when a cookie is placed on your device. Please note that some features of our website may not work properly if you choose to reject cookies

d. Management of cookies
If the User does not want the Website or mobile app to place cookies on his hard drive, he can easily manage or delete them by adjusting his browser settings. The programming of the browser also allows the User to receive a notification as soon as a website uses cookies and thus decide whether to accept or reject them.

If the User disables certain cookies, he accepts that the Site may not function optimally. Some parts of the Site may not be usable or may be partially usable.

If the User wishes to manage and/or delete certain cookies in this way, he/she can do so via the following link(s):

For Users with a browser:

• Internet Explorer: http://windows.microsoft.com/en-us/windows-vista/block-or-allow-cookies
• Microsoft Edge: http://windows.microsoft.com/en-gb/windows-10/edge-privacy-faq
• Chrome: https://support.google.com/accounts/answer/61416?hl=fr
• Firefox: https://support.mozilla.org/fr/kb/activer-desactiver-cookies-preferences
• Safari: https://support.apple.com/kb/ph21411?locale=fr_CA

If the User refuses to allow the use of Google Analytics cookies, he or she is invited to configure his or her browser to do so on the following website: http://tools.google.com/dlpage/gaoptout.

11. Limitation of the Controller's liability

The website or mobile app may contain links to other third-party websites that are not linked to Unbox. The content of these sites and compliance with the Regulations and the Law are not the responsibility of Unbox.

The holder of parental authority must give his or her express consent to the minor under the age of 18 to disclose personal information or data through the Site. Unbox strongly encourages individuals who exercise parental authority over minors, to promote responsible and safe use of the Internet. The Controller cannot be held liable for the collection and processing of personal information and data from minors under the age of 18 whose consent is not effectively covered by that of their legal parents, nor for incorrect data – particularly with regard to age - entered by minors. Under no circumstances will personal data be processed by the Controller if the user indicates that he/she is under 18 years of age.

Unbox is not responsible for loss, damage, or theft of personal data, especially due to the presence of viruses or following computer attacks.

12. Safety and security

The Controller shall implement technical and organizational measures to ensure an appropriate level of security for the processing and collection of data. These security measures depend on the implementation costs related to the nature, context and purposes of the processing of personal data.

The Controller uses standard encryption technologies within the IT sector when transmitting or collecting data on the Site or mobile app.

13. Modification of the Privacy Policy

Unbox reserves the right to change this Privacy Policy to comply with legal obligations in this regard. The User is therefore requested to regularly consult the Privacy Policy to be informed of any changes and modifications. Any such changes will be posted on the Site to ensure enforceability.

14. Applicable law and competent court

This Privacy Policy is governed exclusively by Belgian law. Any dispute will be brought before the courts of the judicial district of Antwerp.

15. Contact

For any question or complaint regarding this Privacy Policy, the User may contact the Controller at the following address: DPO@unboxuniverse.com.