Privacy Policy

Updated on October 3rd, 2024


POMA Studio (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used, and disclosed by POMA Studio.

This Privacy Policy applies to our website, and its associated subdomains (collectively, our “Service”) alongside our application, POMA Studio. By accessing or using our Service, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy and our Terms of Service.

Definitions and key terms

To help explain things as clearly as possible in this Privacy Policy, every time any of these terms are referenced, are strictly defined as:

  • Cookie: small amount of data generated by a website and saved by your web browser. It is used to identify your browser, provide analytics, remember information about you such as your language preference or login information.

  • Data Controller: when this policy mentions “Data controller”, “we,” “us,” or “our,” it refers to POMA Studio, (Boulevard Clovis 17, 1000 Brussels, Belgium), which is responsible for your information under this Privacy Policy.

  • Country: where POMA Studio or the owners/founders of POMA Studio are based, in this case is Belgium.

  • Customer: refers to the company, organization or person that signs up to use the POMA Studio Service to manage the relationships with your consumers or service users.

  • Device: any internet connected device such as a phone, tablet, computer or any other device that can be used to visit POMA Studio and use the services.

  • IP address: Every device connected to the Internet is assigned a number known as an Internet protocol (IP) address. These numbers are usually assigned in geographic blocks. An IP address can often be used to identify the location from which a device is connecting to the Internet.

  • Personnel: refers to those individuals who are employed by POMA Studio or are under contract to perform a service on behalf of one of the parties.

  • Personal Data: any information that directly, indirectly, or in connection with other information — including a personal identification number — allows for the identification or identifiability of a natural person.

  • Service: refers to the service provided by POMA Studio as described in the relative terms (if available) and on this platform.

  • Website: POMA Studio’s site, which can be accessed via this URL: poma-studio.com

  • You: a person or entity that is registered with POMA Studio to use the Services.

Where and when do we collect Personal Data?

We collect the Personal Data that you submit to us.

What information do we collect?

We collect information from you when you visit our Service, register on our site, place an order, subscribe to our newsletter, respond to a survey or fill out a form providing us with the following data:

  • Names

  • Email Addresses

Purposes and legal bases of the Personal Data processing

Your Personal Data may be processed by us on the basis of:

1 - Necessity for the performance of the contract or for taking steps prior to the conclusion of the contract (Article 6(1)(b) of the GDPR), separately for the purposes of:

  • providing you with our Service;

  • to use the contact form;

  • to allow access to materials related to the topics covered on the Service;

2 - The applicable laws imposing certain obligations on the Data Controller, including accounting and tax laws (Article 6(1)(c) of the GDPR), for the purpose of ensuring compliance with the Data Controller’s legal obligations, including with respect to record-keeping , compliance, or audit and for archiving and accounting purposes;

3 - The legitimate interest of the Data Controller (Article 6(1)(f) GDPR), separately for the purpose of:

  • marketing of the products and services of the Data Controller or its partners, where the Data Controller's legitimate interest is to conduct direct marketing of its own products and services as well as its partners

  • use of the contact form provided by the Data Controller on the Service, where the Data Controller's legitimate interest is to take care of the Service users and answer user’s questions;

  • analytical and statistical purposes, where the Data Controller's legitimate interest is to improve the quality of the Service provided and functionalities made available;

  • defense against possible claims, where the legitimate interest of the Data Controller is the investigation or defense of claims.

Your activity on our social media profiles

We proceed with your Personal Data when you visit our LinkedIn, Instagram, and/or TikTok profiles. Such data is processed exclusively in connection with maintaining said profile, including for the purpose of providing information about the Data Controller’s activities and promoting various events and services, as well as for analytical and statistical purposes – the legal basis for such processing the Data Controller’s legitimate interests (Article 6(1)(f) of the GDPR) which is promoting its own brand, analysing the preferences and activities of users visiting the profile in order to improve the functionalities implemented and services provided.

 The information above does not apply to the processing of personal data by the controller for the LinkedIn, Instagram, or TikTok site.


How do we use your email address?

By submitting your email address, you agree to receive emails from us. We do not send unsolicited commercial emails, because we hate spam as much as you do. Email addresses submitted only through the order processing page will be used for the sole purpose of sending you information and updates pertaining to your order. If, however, you have provided the same email to us through another method, we may use it for any of the purposes stated in this Policy. Note: If at any time you would like to stop receiving future emails from us, you can contact us by email: hello@poma-studio.com. In case of a newsletter, we include detailed unsubscribe instructions at the bottom of each email.

The recipients of your Personal Data

Your Personal Data recipients may be entities that process Personal Data on behalf of us i.e. our authorised employees and associates or our subcontractors and contractors in the performance of the contract, as well as auditing entities and public authorities.

 

Do we share your Personal Data?

We may share your Personal Data, with third parties involved in data processing on the basis of Personal Data processing agreements on our behalf and only for the purpose and to the extent necessary to achieve the aforementioned purposes. This includes but is not limited to, IT services or other service providers on our behalf to ensure the proper functioning of the Service.

 

How long do we keep your Personal Data?

We will only keep your Personal Data for the period necessary to fulfill the purpose for which they are stored or for as long as we are legally required to do so, in particular until the statute of limitations for possible claims or the expiry of any legal obligations, including those concerning the retention of accounting documents.

In the case of the processing of Personal Data for the provision of the newsletter service, the use of training registration forms and the provision of access to materials related to the topics covered on the Service, your Personal Data will be processed for the period necessary for the provision of this Service, until you opt out of it.

 Where Personal Data is processed on the basis of your consent, your data will be stored until you withdraw it. At any time, it is possible to withdraw the consents you have given. The withdrawal of consent to processing will not affect the lawfulness of the processing carried out before its withdrawal.

In the case of the processing of your Personal Data on the basis of the legitimate interest of the Data Controller, we will stop processing your Personal Data earlier if you successfully object to the processing or – in case we process your Personal Data for marketing purposes – when you simply object to it.

Your rights

Right of access to Personal Data

You have the right to obtain information regarding the Personal Data we hold about you, including a copy of that Personal Data.

 

Right of rectification

You have the right to request the rectification of your Personal Data which is inaccurate. Taking into account the purposes of the processing, you have the right to request the completion of incomplete Personal Data, including by providing an additional statement.

 

Right to erasure

You have the right to request the erasure of your Personal Data held by us in the following cases:

·      your personal data is no longer necessary for the purposes for which it was collected,

·      you have withdrawn the consent on which the processing is based and there is no other legal basis for the processing,

·      you have objected to the processing and there are no overriding legitimate grounds for the processing or the objection relates to the processing for direct marketing purposes,

·      the personal data have been unlawfully processed,

·      the personal data must be erased in order to comply with a legal obligation under EU or national law,

·      the Personal Data were collected in connection with the offering of information society services as referred to in Article 8(1) of the GDPR.

 

Right to data portability

You have the right to receive, in a structured, commonly used, machine-readable format, the Personal Data concerning you that you have provided to us, where the processing of such data is based on consent or contract and by automated means.

If you request that this data be sent to another data controller, this will be done, provided that this is technically possible.

 

Right to restrict data processing

You have the right to request that the processing of your Personal Data be restricted, in the following cases:

·      you question the accuracy of your Personal Data for a period of time allowing us to check the accuracy of the data,

·    the processing is unlawful and you object to the erasure of the Personal Data, requesting instead that the use of the Personal Data be restricted,

·     we no longer need the Personal Data for the purposes of the processing, but you need the data to establish, assert or defend your claims,

·    you have lodged an objection under Article 21(1) of the GDPR to the processing until it is determined whether the legitimate grounds on the part of the controller override the grounds for the objection.

 

Right to object to processing

If your Personal Data is processed on the basis of a legitimate interest of the Data Controller, you have the right to object at any time to the processing, in accordance with Article 21 of the GDPR.

 

Right to withdraw consent

You have the right to withdraw the consent you have given for the processing of your Personal Data at any time. The withdrawal of your consent to processing will not affect the lawfulness of the processing carried out before the withdrawal.

If you wish to exercise your rights please send us an email to: hello@poma-studio.com or by post to: Boulevard Clovis 17, 1000 Brussels, Belgium.

The security of your Personal Data is a priority for us, however, you have also right to submit a complaint to the President of the Office for Personal Data Protection.

How can I update or correct my Personal Data?

Customers have the right to request the restriction of certain uses and disclosures of Personal Data as follows. You can contact us in order to (1) update or correct your Personal Data, (2) change your preferences with respect to communications and other information you receive from us, or (3) delete Personal Data maintained about you on our systems (subject to the following paragraph), by cancelling your account. Such updates, corrections, changes and deletions will have no effect on other information that we maintain, or information that we have provided to third parties in accordance with this Privacy Policy prior to such update, correction, change or deletion. To protect your privacy and security, we may take reasonable steps (such as requesting a unique password) to verify your identity before granting you profile access or making corrections. You are responsible for maintaining the secrecy of your unique password and account information at all times.

If you are an end user and wish to update, delete, or receive any information we have about you, you may do so by contacting the organization of which you are a customer.

Governing Law

This Privacy Policy is governed by the laws of Belgium without regard to its conflict of laws provision. You consent to the exclusive jurisdiction of the courts in connection with any action or dispute arising between the parties under or in connection with this Privacy Policy except for those individuals who may have rights to make claims under Privacy Shield, or the Swiss-US framework.

The laws of Belgium, excluding its conflicts of law rules, shall govern this Agreement and your use of the website. Your use of the website may also be subject to other local, state, national, or international laws.

By using POMA Studio or contacting us directly, you signify your acceptance of this Privacy Policy. If you do not agree to this Privacy Policy, you should not engage with our website, or use our services. Continued use of the website, direct engagement with us, or following the posting of changes to this Privacy Policy that do not significantly affect the use or disclosure of your personal information will mean that you accept those changes.

Your Consent

We've updated our Privacy Policy to provide you with complete transparency into what is being set when you visit our site and how it's being used. By using our POMA Studio, registering an account, or making a purchase, you hereby consent to our Privacy Policy and agree to its terms.

Links to other websites

This Privacy Policy applies only to the Service. The Service may contain links to other websites not operated or controlled by POMA Studio. We are not responsible for the content, accuracy or opinions expressed in such websites, and such websites are not investigated, monitored or checked for accuracy or completeness by us. Please remember that when you use a link to go from the Services to another website, our Privacy Policy is no longer in effect. Your browsing and interaction on any other website, including those that have a link on our platform, is subject to that website’s own rules and policies. Such third parties may use their own cookies or other methods to collect information about you.

Cookies

We may use "Cookies" to identify the areas of our website that you have visited. A Cookie is a small piece of data stored on your computer or mobile device by your web browser.

We use technical, analytical, and functional cookies on the Service.

We use technical cookies to provide users with content and functionalities available on the Service and to improve the quality of such services. The legal basis for the processing of users’ personal data is that such processing is necessary for the performance of the contract on the Service’s use (Article 6(1)(b) GDPR).

We use analytical cookies on the Service only if a user grants prior consent to their use. These cookies allow the Data Controller to analyse how users use the Service and are intended to improve the Service’s performance. The legal basis for the processing of users’ personal data is the pursuit of the Controller’s legitimate interests (Article 6(1)(f) GDPR) which interests are improving the Service based on the analysis of user activity, based on their consent.

We use functional cookies to remember settings that adjust the website to your choices (e.g., in terms of your chosen language), including being used to personalize functionalities available during your visit. The legal basis for the processing of users’ personal data is the pursuit of the Controller’s legitimate interests (Article 6(1)(f) GDPR) which interests are adjusting the Service to user preferences, based on their consent.

Users may grant their consent to the use of analytical and functional cookies separately by using the cookie consent mechanism (the ‘Manage cookie consents’ pop-up, displayed in the browser window) during their visit to the Data Controller’s website. Users can manage consents given (i.e., withdraw or grant consent) by calling up the pop-up by clicking on the white banner displayed at the bottom right corner of the Service.

Cookies typically contain the name of their website of origin, the length of time they are stored on a terminal device, and a unique number. For more information on cookies, please visit: allaboutcookies.org.

Users can also delete cookies at any time, depending on the browser, through its settings. Information on how to do this on various browsers can be found at:

  1. Google Chrome

  2. Mozilla Firefox

  3. Safari

  4. Internet Explorer.

Remarketing Services

We may use remarketing services. What Is Remarketing? In digital marketing, remarketing (or retargeting) is the practice of serving ads across the internet to people who have already visited your website. It allows your company to seem like they're “following” people around the internet by serving ads on the websites and platforms they use most.

Payment Details

In respect to any credit card or other payment processing details you have provided us, we commit that this confidential information will be stored in the most secure manner possible.

Changes to our Privacy Policy

We may change our Service and policies, and we may need to make changes to this Privacy Policy so that they accurately reflect our Service and policies. Unless otherwise required by law, we will notify you (for example, through our Service) before we make changes to this Privacy Policy and give you an opportunity to review them before they go into effect. Then, if you continue to use the Service, you will be bound by the updated Privacy Policy. If you do not want to agree to this or any updated Privacy Policy, you can delete your account.

Third-Party Services

We may display, include or make available third-party content (including data, information, applications and other products services) or provide links to third-party websites or services ("Third- Party Services").

You acknowledge and agree that POMA Studio shall not be responsible for any Third-Party Services, including their accuracy, completeness, timeliness, validity, copyright compliance, legality, decency, quality or any other aspect thereof. POMA Studio does not assume and shall not have any liability or responsibility to you or any other person or entity for any Third-Party Services.

Third-Party Services and links thereto are provided solely as a convenience to you and you access and use them entirely at your own risk and subject to such third parties' terms and conditions.

Contact us

In matters concerning personal data protection, you can contact us via email: hello@poma-studio.com