1. The identity of the data controller
SPRL Lasercut Lab is a limited liability company organised under Belgian law, with its registered office at Avenue Albert 13, 1190 Brussels, Belgium and registered with the Crossroads Bank for Enterprises under number BE 0538 798 178 (hereinafter “Lasercut Lab”, “we”, “us/our”).
The purpose of this Privacy Policy (the “Policy”) is to set out how we handle the personal data (“Data”) of our customers, or representatives of our customers, prospects, suppliers, job applicants, and partners (the “Data Subjects”, “you”, “your”) that we collect or that you provide to us (e.g. by visiting our website www.inkutlab.com (“Website”). Please read the following carefully to understand how we will use your information.
The Policy applies to all processing by Lasercut Lab of your Data. It forms part of our terms and conditions www.inkutlab.com/conditions-generales and applies to you when you access or use our Services (as defined therein). If you choose not to provide the Data we request, we may not be able to provide you with all of our Services.
You may contact the privacy manager at the same address as above, or by email at privacy@inkutlab.com.
2. Commitment to data protection
Lasercut Lab is committed to using its best efforts to make its Data processing activities compliant with applicable data protection legislation, including Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “GDPR”) and the Law of 30 July 2018 on the protection of individuals with regard to the processing of personal data, as amended, supplemented or replaced from time to time (“Data Protection Laws”).
3. What categories of data do we collect and for what purposes (purposes) data
We process the following categories of Data, in particular for the purposes described below:
Your electronic identification data (IP address, electronic identifiers, etc.), for the implementation of our IT support, detection and prevention of fraud and computer security breaches, improving our Websites to ensure that content is presented in the most effective manner for you and your computer/device ;
Your business address and contact details such as your name, address, telephone number, email address to contact you for direct marketing purposes, with your consent where applicable, to invite you to events, to provide you with appropriate, personalised marketing content that may be of interest to you;
Your personal identification data (surname, first name, postal address, date of birth, etc.) for the management of your customer file or prospect file, the implementation of our customer support, our IT support, our business development service (in particular when implementing satisfaction surveys);
Your professional identification data (professional function, professional address, etc.), for the management of the supplier file and the management of our relations with our suppliers;
Your professional data (skills, qualifications, experience, driving licence data, etc.), to review and assess your application when you apply via our Websites, or a third party site (e.g. LinkedIn);
Your bank details (bank account numbers etc.) for billing purposes;
Data relating to your use of our Websites (pages viewed, links clicked, time spent on a page, etc.), processed in aggregate and solely for the purpose of improving the user experience on our Websites;
Video recordings of you, processed only in connection with the surveillance of our buildings and sites by security cameras and to the extent permitted by applicable law;
We may also process certain special categories of Data where processing is necessary for the establishment, exercise or defence of legal claims; to carry out corporate reorganisations; to conduct internal and external audits; and to manage disputes with customers, suppliers and other data subjects.
4. basis for legitimacy
The provision of your Data may be necessary :
The execution of a contract to which you are a party or the execution of pre-contractual measures taken at your request;
To comply with a legal obligation applicable to Lasercut Lab (for example, in terms of invoicing, fraud detection, taxation, etc.);
For the purposes of the legitimate interests pursued by Lasercut Lab (or a data recipient) provided that these interests prevail over your fundamental rights and freedoms (for example, in relation to securing our computer systems, carrying out corporate restructuring operations, etc.).
In some cases, we will ask you for your prior, free and informed consent before processing some of your personal data (e.g. the use of your email address for marketing purposes if you are not yet a customer of ours, etc.).
Lasercut Lab does not subject data subjects to decisions based exclusively on automated processing that produces legal effects concerning them or affects them in a similarly significant way.
Possible consequences of not providing your Data could include our inability to fulfil our obligations under a contract or a breach by us of one or more obligations under applicable laws (e.g. accounting, tax or financial laws).
5. Cookies
Our Websites use cookies. They help us, among other things, to provide you with a good experience when you browse our Websites and also enable us to improve it. For more information on cookies and the reasons why we use them, please refer to our Cookie Policy.
6. Data sources
Depending on the nature of your relationship with us, we may collect your Data in several ways:
When you visit our Websites;
When Data is provided directly by you or collected with your permission;
When you contact us directly by email, telephone, post, message (instant messaging applications), via our Websites, or otherwise;
We also collect information on third party sites (e.g. Facebook, Instagram, etc.) when, for example, you provide a review/comment on our products and services.
7. Recipients
We may pass on your Data to the following recipients:
Our internal departments if and to the extent necessary to fulfil certain legal obligations or to safeguard our legitimate interests. This may be the case, for example, for internal administrative purposes. This includes the coordination of services to our customers, the central provision of internal services, etc.
Our legal advisors and/or lawyers (including debt collection agencies) in connection with corporate restructuring or litigation;
External service providers related to the operation and maintenance of information systems processing your Data (these providers only have access to the Data to perform their tasks);
External service providers in connection with the management of our commercial relationship with you (for example, for certain advertising services or the conduct of our customer surveys. If we use service providers, this is always within the limits and in compliance with Data Protection Laws;
Recruitment-related service providers;
Government entities authorised to access and/or obtain your Data in accordance with applicable law;
Courts and tribunals in the event of a dispute involving you;
Law enforcement authorities in the event of a finding or suspicion of a crime involving you in accordance with or as required by applicable law.
We will also disclose information to third parties:
in the event of the purchase or sale of a business or assets, we reserve the right to disclose your Data to the seller or buyer of that business or assets; in such transactions, if Lasercut Lab (or any of its assets) is purchased by a third party, its customer information will be one of the transferred assets;
if we are under a duty to disclose or share your Data in order to comply with a legal obligation or to protect the rights, property, or safety of Lasercut Lab, our customers, or others. This includes sharing information with public authorities (including law enforcement and judicial authorities) in the event of, for example, a cyber incident;
if necessary to achieve any of the purposes described in section 3 of this Policy.
8. Subcontractors
We take appropriate steps to ensure that our subcontractors process your Data in accordance with Data Protection Laws.
We ensure that our subcontractors undertake, among other things, to process your Data only on our instructions, not to engage another subcontractor without our consent, to take appropriate technical and organisational measures to ensure the security of your Data, to ensure that persons authorised to access your Data are subject to confidentiality obligations, to return and/or destroy your Data at the end of their services, to comply with audits, and to provide us with assistance in following up on your requests to exercise your rights in relation to your Data.
9. Transfers outside the European Economic Area
Lasercut Lab will not transfer your Data outside the European Economic Area (“EEA”). However, if this should be the case, Lasercut Lab will take the following precautions:
The country to which the Data is transferred has received an adequacy decision from the European Commission under Article 45 of the GDPR; or
The establishment of a written agreement containing the standard data protection clauses adopted by the European Commission under Article 47 of the GDPR; or
The transfer is based on binding corporate rules (Article 47 GDPR), an approved Code of Conduct (Article 40 GDPR), an approved certification mechanism (Article 42 GDPR), an approved transfer agreement (Article 46(3) GDPR), data protection clauses adopted by the Data Protection Authority (Article 46(2) GDPR).
If you would like more information about Lasercut Lab’s safeguards for Data transfers, please contact us by email at: privacy@inkutlab.com.
10. Retention
We ensure that your Data is kept for no longer than is necessary for the purposes for which it is processed.
Lasercut Lab uses the following criteria to determine the duration of the retention of the Data according to the context and the purposes of each of the processes:
The date of the end of your commercial relationship with Lasercut Lab;
The sensitivity of the Data;
Security reasons (for example, the security of our information systems);
In the context of any current or future legal proceedings, including any request for disclosure by a court or competent authority;
Guidelines issued by competent authorities (e.g. the European Data Protection Supervisor, the Belgian Data Protection Authority, etc.);
Our contractual rights and obligations in relation to the Data concerned;
Limitation periods under the applicable law(s);
Our legitimate interests in processing where we have carried out balancing tests ;
Unless:
the processing of your Data is necessary in connection with actual or potential litigation (e.g. we need the information to establish or defend legal claims); in which case we will retain your Data until such litigation is concluded; and/or
retention is necessary to enable us to comply with any legal or regulatory obligation (e.g. for tax purposes), in which case we will retain your Data for as long as is necessary for that obligation.
11. Rights in relation to your data
Subject to the Data Protection Laws, you have certain rights in relation to the Data we hold about you. These rights can be exercised by contacting us in accordance with section 14 below:
The right to be informed. You have the right to be informed in a clear, transparent and easily understandable way about how we use your Data and your rights. That is why we provide you with all this information in this Policy;
The right of access. You have the right to access the Data we hold about you. This is because we want you to be aware of the information we hold about you and we want to give you the opportunity to check that we are processing your data in accordance with Data Protection Laws;
The right to restrict processing. You have the right, in certain circumstances, to “block” or discontinue further use of your Data. Where processing is restricted, we are still entitled to retain your Data, but we can no longer use it;
The right to rectification. If your Data is inaccurate or incomplete, you have the right to request rectification;
The right to erasure. You have the right to have your Data erased. However, the right to erasure (or the “right to be forgotten”) is not absolute and is subject to specific conditions. We may retain your Data to the extent permitted by applicable law, and in particular where its processing remains necessary for compliance with a legal obligation to which Lasercut Lab is subject or for the establishment, exercise or defence of legal claims;
The right to file a complaint. You have the right to lodge a complaint about the way we handle or process your Data with the national data protection authority (contact details for other national data protection authorities are available here). For Belgium this is : The Data Protection Authority, Rue de la Presse 35, 1000 Brussels, +32 (0)2 274 48 00, contact(at)apd-gba.be, https://www.autoriteprotectiondonnees.be/ ;
The right to withdraw your consent. If our processing of your Data is specifically based on your consent, you have the right to withdraw your consent at any time. This includes the right to withdraw your consent to receive newsletters, promotional e-mails and other marketing communications from us. To do this you can (1) select the “unsubscribe” option where available, or (2) contact us;
The right to data portability. You have the right to receive from us, in certain circumstances, your data in a structured, commonly used and machine-readable format so that you can re-use it for your own purposes in separate services;
The right to object to the processing. You have the right to object to certain types of processing, including processing for direct marketing purposes (for example, where the processing is based on Lasercut Lab’s legitimate interests and, taking into account your particular circumstances, your interests or fundamental rights and freedoms prevail). You can object to this by contacting us;
The right not to be subject to automated individual decision making. You have the right to object to a fully automated decision i.e. a decision where there is no human intervention that (effectively) contributes to the decision and therefore cannot change the decision. Lasercut Lab does not make fully automated decisions about data subjects;
Please note, however, that we may retain some information, for example, for legal or administrative purposes.
To exercise the above requests, please send us an e-mail with “data protection request” in the subject line. We will respond to your request as soon as possible. In the event that we need more than one month to respond to your request (from receipt), we will keep you informed.
12. Data security
We take appropriate technical and organisational measures to ensure a level of security appropriate to the risks associated with the processing of your Data.
Lasercut Lab will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your Data.
As the Website is hosted on the OVH platform, your Data is notably kept via the data storage, databases and general applications of WordPress. This Data is stored on secure servers behind a firewall.
13. Updating of the policy
Lasercut Lab reserves the right to update this Policy from time to time. Any future changes we make to our Policy will be posted on this page. Please check back frequently for updates or changes. Your continued use of our Websites following the posting of changes to the Policy constitutes your acceptance of those changes.
In the event of any conflict or inconsistency between any provision of this Policy and any provision of any other Lasercut Lab policy or document relating to the processing of Data, the provision of this Policy shall prevail.
This Policy was last updated on 02/02/2021.
14. How can you contact us?
If you have any questions or comments regarding this Policy, you may send them in writing to the following address For the attention of the legal department of Lasercut Lab, Avenue Albert 13, 1190 Brussels, Belgium, or by e-mail to “hello@inkutlab.com”.
