Privacy notice suppliers

Your privacy is important for us.

All personal data that we obtain in the context of our interactions with you as (a staff member of) a (prospective) supplier will be collected and processed in accordance with applicable data protection legislation, in particular the General Data Protection Regulation 2016/679 of 27 April 2016 (“GDPR”).

This privacy notice explains why and how we collect your personal data, the measures we take to protect your data and how long we retain your data.

The GDPR also grants you certain rights as a data subject.

Identity and contact details

The data controller for your personal data is one or more of the following legal entities within the EMPWR group of companies:

EMPWR Nutrition Group NV
Blue Tower 2
Sluisweg 2, bus 11
9000 Gent
Belgium
0637.861.112

EMPWR BV
Blue Tower 2
Sluisweg 2, bus 11
9000 Gent
Belgium
Enterprise number 0741.604.887

EMPWR d.o.o.
Industrijska 15,
35400 Nova Gradiška
Croatia
Enterprise number 030136406

If you have questions regarding the processing of your personal data, you can always contact us by email (privacy@empwrnutrition.com) or by letter to the postal address of EMPWR BV mentioned above (attn. Privacy).

Purposes and legal basis

We primarily collect your personal data because it is necessary to enter into a supplier contract and for the performance of that contract or, in case you are a contact person of a supplier, because we have a legitimate interest to organize our supplier management.

We may also need your personal data in order to comply with our legal obligations (for example, tax and accounting regulations) and in order to pursue our legitimate interests (for example, in case of a dispute or a corporate transaction). 

Categories of personal data

For the purposes mentioned above, we may collect and process the following personal data:

• identification data (such as, name, email address, phone number, postal address)
• employment data (such as, employer, function)
• financial data (such as, bank account)
• other information provided (for instance in correspondence with us)

We do not collect any sensitive data (i.e. personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health or data concerning a natural person's sex life or sexual orientation) or personal data relating to criminal convictions and offences.

Source of personal data

We obtain your personal data in the context of our interactions with you as (a staff member of) a (prospective) supplier. This includes interactions via our website, via email, by phone and during meetings and events. In certain circumstances we may also receive your data via other parties such as EMPWR affiliates.

Recipients of personal data

For the purposes mentioned above, we may have to provide your personal data to the following parties:

Our IT, cloud, software and other service providers may also have access to your personal data.

Transfer of personal data

Your personal data will not be transferred outside the European Economic Area without appropriate safeguards.

Retention period

We will delete or anonymize your personal data 10 years after the termination of the supplier contract (plus a verification period of 6 months).

For accountancy purposes, we store your personal data for up to 7 years plus a verification period of 6 months after the relevant financial year.

In case of a dispute or procedure before a court or similar judicial entity, we will delete or anonymize your personal data relating to this dispute or procedure 5 years after the termination of the dispute or procedure (plus a verification period of 6 months) provided that the partnership has been terminated. If the latter is not the case the 10 years retention period will apply.

We reserve the right to continue storing your personal data if a legal obligation or legitimate interest requires us to retain your personal data longer.

Rights

You can always contact us if you would like to:

• request access to or rectification of your personal data.
• request erasure of your personal data.
• request a restriction of the processing of your personal data.
• object to the processing of your personal data.
• request a transmission of your data.
• send us a complaint if you consider that we are not acting in accordance with applicable data protection legislation. You can also introduce a complaint with the supervisory authority.

The aforementioned rights can be exercised by email (privacy@empwrnutrition.com) or by letter to the postal address mentioned under point 1 for EMPWR BV. For identification purposes, we may ask you for further information or a copy of your identity card. We will grant you all rights to which you are entitled in accordance with the applicable regulations.

For those processing activities for which the legal basis is a legitimate interest, you can ask us more information about the balancing test that we have carried out in that context (for more information, see Purposes and legal basis).

Please also inform us when your personal data is not accurate or no longer up-to-date.

Automated decision-making

We do not engage in automated decision-making, including profiling.

Security

We have implemented appropriate technical and organizational measures to ensure the confidentiality of your personal data and protect your data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access.

Amendments

This privacy notice may be amended from time to time within the boundaries of applicable data protection legislation. You will always have access to the most current version via the website.