Privacy policy
This policy explains how SANTORO ENERGIE SRL collects, uses and protects your personal data when you visit https://santoro-energie.com, place an order or get in touch with us. It is based on the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and applicable Belgian law.
Article 1 – Data controller
The data controller is SANTORO ENERGIE SRL, a private limited liability company under Belgian law, with its registered office at Rue de Presles 127 (VP), 6280 Gerpinnes, Belgium, registered with the Crossroads Bank for Enterprises under number 1023.309.913 (VAT BE 1023.309.913). For any question about your data: contact@santoro-energie.com.
Article 2 – Data we collect
We only collect the data needed for the purposes described below:
- Identification and contact data: first name, last name, e-mail address, delivery and billing addresses, and company name and VAT number for business customers;
- Order data: products ordered, amounts, order number, order form, payment information (date, amount and payment status), invoice, delivery tracking, and return or warranty requests;
- Correspondence data: the content of messages sent by e-mail or through our contact form, and any photos you send us for after-sales support;
- Browsing data: IP address, browser type, pages visited and cookie identifiers, as described in our cookie policy.
You can order without creating a customer account, so we do not store any username or password. We do not collect any special categories of data within the meaning of Article 9 GDPR.
Article 3 – Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Processing your order, sending the order form by e-mail, delivery, returns, warranty and after-sales support | Performance of a contract (Art. 6(1)(b) GDPR) |
| Invoicing and bookkeeping | Legal obligation (Art. 6(1)(c) GDPR) |
| Answering your enquiries | Pre-contractual steps or our legitimate interest in replying (Art. 6(1)(b) and (f) GDPR) |
| Website security and prevention of fraud and abuse | Legitimate interest (Art. 6(1)(f) GDPR) |
| Running the shopping cart and remembering your preferences | Legitimate interest and strictly necessary cookies |
| Audience measurement and online advertising | Consent (Art. 6(1)(a) GDPR), collected through the cookie banner |
| Establishing, exercising or defending legal claims | Legitimate interest (Art. 6(1)(f) GDPR) |
Data required to place an order is marked as mandatory; without it, we cannot process your order. We do not make decisions based solely on automated processing that produce legal effects concerning you.
Article 4 – Recipients and processors
Your data is accessed by authorised Santoro Energie staff. Where strictly necessary, it may be shared with the following categories of recipients:
- carriers handling delivery and the collection of returns;
- the public OpenStreetMap mapping service (Nominatim), which receives only the postcode and city entered in order to suggest pickup points, with no name, e-mail or order content;
- our website hosting provider;
- our technical service providers, in particular for sending e-mails;
- our accountant;
- Google, for audience measurement and advertising, only if you have given your consent;
- administrative or judicial authorities, where required by law.
Our processors act on our instructions under a contract that complies with Article 28 GDPR and are bound by confidentiality and security obligations. We never sell or rent out your data.
Article 5 – Transfers outside the European Union
Some service providers may process data outside the European Economic Area. Such transfers are covered by an adequacy decision of the European Commission or by the standard contractual clauses it has adopted, supplemented by additional safeguards where needed.
Article 6 – Retention periods
- Orders and invoicing: 10 years, in line with Belgian accounting and tax obligations;
- Contact requests: 3 years from our last exchange;
- Browsing data and cookies: for the periods stated in our cookie policy.
Once these periods have expired, the data is deleted or anonymised, unless we need to keep it to defend our rights in a dispute.
Article 7 – Security
We take appropriate technical and organisational measures to protect your data against loss, unauthorised access, alteration or disclosure, including encrypted connections (HTTPS), access restricted to authorised persons, regular updates and backups. If a data breach is likely to put your rights at risk, we will notify the competent authority and, where required, the people concerned.
Article 8 – Your rights
Under the GDPR, you have the following rights:
- the right of access to your data and to obtain a copy of it;
- the right to rectification of inaccurate or incomplete data;
- the right to erasure, within the limits of our legal obligations;
- the right to restriction of processing;
- the right to object, in particular to processing based on legitimate interest;
- the right to data portability for data you have provided to us;
- the right to withdraw your consent at any time, without affecting the lawfulness of prior processing.
To exercise these rights, e-mail us at contact@santoro-energie.com. If we have reasonable doubts, we may ask you to confirm your identity. We will reply within one month; this may be extended by two further months for complex requests, in which case we will let you know.
If you believe your rights have not been respected, you can lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be, https://www.autoriteprotectiondonnees.be.
Article 9 – Cookies
This website uses cookies that are necessary for it to work and, only with your consent, audience measurement and advertising cookies. Full details are given in our cookie policy. You can change your choice at any time: manage my cookie preferences.
Article 10 – Minors
Our shop is intended for adults. We do not knowingly collect data about children under 13.
Article 11 – Changes to this policy
We may update this policy to reflect changes to our services or to the law. The version in force is the one published on this page. If we make significant changes, we will inform you in an appropriate way.
Article 12 – Contact
For any question about this policy or how we handle your data, e-mail us at contact@santoro-energie.com or use our contact form. See also our legal notice.