Article 1 – Liability
Woud Law S.à r.l., whose registered office is located at 40 rue Glesener, L-1630 Luxembourg, Grand Duchy of Luxembourg and registered with the Luxembourg Register of Commerce and Companies under number B274753 (“Woud”) is the “controller”. In other words, Woud determines the purpose and means of processing personal data.
Article 2 – Personal Data
When you use our services and applications, we may obtain personal data about you. In particular in the following cases:
- you register on our website, on a social media platform or in a point of sale, for example when you place an order, when you buy a product from or become a member of Woud or when you contact our customer service;
- you register for our contests or updates.
We may obtain the following personal data about you:
- your customer data (for example, surname, first name, username, password for your Woud account, delivery address, e-mail address, telephone number, billing data, purchase history, payment methods used, contact history with customer service);
- other personal data, such as your username on a social media, your date of birth or the data you provide to us when you register for a contest or promotional action.
Article 3 – Purposes of the processing operation
Woud will use your personal data for the following general purposes:
- In order to be able to provide you with the service you have requested
We collect certain personal data about you in order to be able to provide you with the service you have requested (for example, your personal details for your registration as a member, your billing data in order to be able to invoice you correctly or the profile data of your Woud account with regard to your use of our website).
- In order to meet certain legal obligations
In some cases, we are required by law to collect and retain certain personal data about you. Thus, in certain circumstances, we are legally obliged to issue an invoice and keep it (for example in the case of a distance sale). Therefore, we will ask you to provide us with your billing information.
In addition, it is possible in rare cases that Woud may be forced to disclose your personal data following a court decision or in order to comply with mandatory legislation or regulations. Woud will always try to inform you, unless this is not possible due to legal obligations.
- In order to detect and combat fraud and infringements
We carry out various controls in the context of detecting and combating fraud and breaches. This way, we can determine if a payment has been accepted before delivering a product to the customer.
- In order to improve our services and processes
We evaluate our services and processes based on your contacts with our employees. In order to improve these services and processes, we also carry out trend analyses based on anonymised and aggregated data.
Direct marketing and prospecting
If you have given us permission, we have the right to use your data for prospecting purposes. You may withdraw this authorisation at any time, without stating reasons and free of charge, for example by clicking on the unsubscribe link at the bottom of each promotional e-mail or by contacting Woud or by e-mail at email@example.com.
Article 4 – Transfer to third parties
Woud undertakes not to sell, rent or distribute your personal data or make them available to third parties for commercial purposes, except in the cases mentioned above or with your prior consent.
In the event of a reorganization or transfer – in whole or in part – of Woud’s activities, your data may then be transmitted to other entities or third parties through which Woud’s operational activities will then be carried out, in whole or in part. We will try to inform you in advance.
Article 5 – Duration of processing
We do not keep your personal data for longer than necessary to achieve the purpose for which we collect them. Their storage period may vary depending on the purpose for which we intend them. For example, Woud is subject to the legal obligation to keep invoices issued for 10 years. In addition, we believe that it is legally necessary to retain certain data as evidence in the event of a dispute for a maximum period of 10 years.
Unless a longer storage period is legally required, we delete or anonymize your data 10 years after your last contact with Woud.
Article 6 – Your rights and their exercise
- Access rights
You have the right at any time and free of charge to be informed of the personal data we process about you and to obtain additional information on this subject.
- Right of rectification, deletion and limitation of processing
You are free to share or not your personal data with Woud. In addition, you have the right to ask us to correct or complete your personal data. You also have the right to request the deletion of this data. In this case, you must take into account the fact that some products and services can no longer be offered to you. Thus, in the event of loss of your proof of purchase, we will no longer be able to determine whether the legal warranty period has expired or not. You may also request that the processing of your personal data be limited.
- Right of opposition
You have a right to object to the processing of your personal data for serious and legitimate reasons. You also have the right to object to the use of your personal data for prospecting purposes. In such a case, it is not necessary for you to justify your request. To do so, click on the link at the bottom of our promotional emails or contact us at firstname.lastname@example.org.
- Right to free data portability
You have the right to request that your personal data that we process be obtained in a structured, commonly used and machine-readable format and/or transferred to another controller.
- Right to withdraw your authorization
Provided that the processing is subject to your prior authorisation, you have the right to withdraw this authorisation. To do so, click on the link at the bottom of our promotional emails or contact us by email at email@example.com.
- Exercise of your rights
You can also exercise your rights in writing through us, by contacting us by post (Attention: Woud, 40 rue Glesener, L-1630 Luxembourg) or by e-mail (firstname.lastname@example.org). If you exercise your rights in writing, we ask you to attach a copy of the front of your identity card to your request. We will only use this copy for the purpose of verifying your identity.
- Access rights
Article 7 – Automated Decision Making and Profiling
In principle, we will not use your personal data for profiling or automated decision-making purposes. We may maintain an individual profile about you, for the sole purpose of serving you better by providing you with personalized products and offers.
Article 8 – Right to file a complaint
If you wish to file a complaint about the way we process your personal data, you may at any time contact our data protection officer at email@example.com. We will do our best to solve your problem.
You can also file a complaint with the Luxembourg Commission for the Protection of Privacy: Commission nationale pour la protection des données, avenue du Rock’n’Roll, L-4361 Esch-sur-Alzette, Tel: +352 26 10 60 1, Fax: +352 26 10 60 29.
Article 9 – Security and confidentiality
We have put in place various technically and organisationally appropriate security mechanisms to prevent the destruction, loss, alteration or modification of collected personal data as well as unauthorised access to such data, their erroneous communication to third parties or their submission to any other form of unauthorised processing.
Woud cannot under any circumstances be held liable for any damage – direct or indirect – resulting from the misuse or unauthorised use of your personal data by a third party.
We would also like to remind you that you are solely responsible for the use of the website from your computer, your IP address and using your identifiers as well as for the confidentiality of this data. We recommend that you take all necessary preventive security measures, including preventing unauthorized access to your username and password.
Article 10 – Access by third parties
We do not share your personal data with third parties for commercial purposes.
In order to be able to process your personal data, we make this data accessible to our employees and to companies we have mandated. We guarantee an equivalent level of protection by subjecting these companies to enforceable contractual obligations.
Article 11 – Contact
- by e-mail: firstname.lastname@example.org
- by post: To the attention of Woud – Data Protection Officer, 40, rue Glesener, L-1630 Luxembourg.