Privacy policy

Your privacy is of the utmost importance to us. This Privacy Notice explains how KICK AND RUSH NV (“K&R”, “we”, “us”, “our”) processes personal data when you interact with the Webshop Equipements & Services BIA (https://bia.kickandrush.com/), operated by K&R as vendor for Equipements & Services BIA.

Interactions include:

• visiting the Webshop;
• creating an account, registering for our newsletter, or buying something;
• communicating with us via phone, fax, chat, or e-mail.

Note: For information about cookies and social network plug-ins, please see our Cookie Policy.

1. General information

1.1. Your personal data is processed by Kick And Rush NV, Boulevard de l'Europe 123, 1300 Wavre, Belgium (VAT BE0457.855.935).

1.2. Capitalised terms are defined in this Notice.

1.3. References to laws include amendments and replacements.

1.4. K&R may amend this Privacy Notice; updates are communicated via the Webshop.

1.5. Regardless of your capacity, we process data to:

• prepare corporate transactions (legitimate interest);
• comply with legal obligations;
• respond to official requests from authorities;
• transfer data to authorities when reasonably suspected of illegal activity (legitimate interest).

2. You visit our Webshop or contact us

We collect technical and browsing information (IP, browser, OS, location, visited pages, time on site).

When contacting us, we collect identity details (name, email, address, phone, company if applicable), content of communications, and technical info.

We may also receive data from partners like Google. See their privacy policies for details.

K&R processes this data to:

• respond to queries;
• provide info about products/services;
• keep systems and data secure;
• analyse communication use;
• improve or develop services.

Processing is based on our legitimate interests.

3. You register or buy something on the Webshop

We collect identity details, communications, order, payment, invoicing data, and marketing preferences.

We process this to:

• create and manage accounts;
• process and deliver orders, invoicing and quality control;
• manage customer relationships;
• report internally and externally (e.g. to BIA);
• send marketing communications if consented.

Legal bases: contract necessity, legitimate interest, or consent (for marketing). Consent may be withdrawn at any time.

4. Recipients of the personal data

We share data with:

• Equipements & Services BIA (marketing purposes);
• authorities where required;
• third parties like Google (if cookies accepted);
• service providers (banks, IT support).

No transfers outside the EEA occur without proper safeguards (EU Standard Clauses).

5. Quality assurances

We only process data needed for the purposes above. Retention periods:

• Visitor data (no queries): 3 years
• Queries: 3 years
• Customer data: duration of relationship + 7 years
• Consent-based data: until consent withdrawn

K&R may profile you to personalise marketing.

We use technical/organisational security measures. Access is limited and confidential, though security cannot be guaranteed absolutely.

6. Your rights

You may request:

• access to your personal data (fees may apply for abusive repeat requests);
• rectification of inaccurate data (with proof);
• withdrawal of consent;
• deletion of data, subject to legal/contractual limits;
• restriction of processing under certain conditions;
• objection to processing (esp. direct marketing, always free);
• a machine-readable copy of your data (portability).

Requests: email privacy@kickandrush.com with signed proof of identity. We respond within 30 days.

Complaints may be lodged with your local Data Protection Authority or the Belgian DPA (www.gegevensbeschermingsautoriteit.be).