Login Register
Discover stores

Privacy policy

Privacy Policy

The website https://cosh.eco (hereinafter the ​“Website”) is provided by:

COCREATE GOOD LIFE BVBA (hereinafter referred to as ​“COSH!”, ​“We” and ​“Us”)

Bergjesbos 19
8310 Bruges
Belgium
VAT BE0697.686.059

E‑mail: info@cosh.eco
Phone number: +32 477 55 32 91

Do not hesitate to contact us should you have any privacy-related questions. We promise you a quick answer!

1. Why this statement?

Every person who visits the Website (hereinafter the ​“Visitor”) as well as every person who uses our services (hereinafter the ​“User”) almost inevitably provides certain personal data. These personal data constitute information that allows us to identify you as a real person, whether or not we actually do so. You are identifiable as soon as it is possible to create a direct or indirect link between the personal data and you as a natural person. The Visitor and the User are also referred to jointly hereinafter as the ​“Data Subject”.

We use and process your personal data in accordance with the GDPR and other relevant legal provisions. Any reference in this Privacy Statement to the GDPR is a reference to the Regulation of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation).

Through this Privacy Statement, every Data Subject is informed of the processing activities that COSH! may carry out with their personal data. COSH! reserves the right to modify this Privacy Statement at any time. Any substantial modification will be clearly communicated to the Data Subject. We recommend that the Data Subject regularly consult this document.

2. Who processes your personal data?

2.1. Controller

COSH! alone or in cooperation with others, determines which personal data are collected, as well as the purposes and means of processing these personal data. Consequently, COSH! is a ​“controller” within the meaning of the GDPR.

COSH! has taken appropriate technical and organizational measures to protect the personal data of its Visitors and Users. COSH! uses a variety of appropriate security technologies and procedures to protect your personal data from unauthorized access, use or disclosure. COSH! ensures that the personal data submitted is securely stored in a controlled environment.

2.2. Processor(s).

COSH! relies on carefully selected ​“data processors” to process Visitors’ and Users’ personal data. A processor is a natural person or legal entity that processes personal data at the request of or on behalf of the Controller. The processor is obliged to ensure the security and confidentiality of personal data. The processor always acts in accordance with the instructions of the Controller.

COSH! uses the following categories of ” processors “:

  • Companies we have engaged for marketing purposes;
  • Companies we have engaged for ICT ‑technical support and hosting purposes;
  • Companies we have engaged for administrative purposes (e.g. CRM system);
  • Companies we have engaged for analytical purposes.

In order to ensure optimal protection of Data Subjects’ personal data, COSH! has made the necessary contractual arrangements with the above-mentioned data processors to ensure that they apply the same high standards as COSH!

A transfer of personal data to a processor outside the European Economic Area (EEA) can only take place to countries that the Data Protection Authority in Belgium has determined offer the same adequate level of protection or, if this would not be the case, insofar as COSH! has made the necessary contractual arrangements with this processor, taking into account the standard provisions as imposed by the Data Protection Authority in Belgium.

3. On what legal basis are your personal data processed?

In accordance with the GDPR, we process personal data on the following legal grounds:

  • Based on the performance of agreements;
    or on the basis of complying with legal or regulatory provisions;
  • Based on our legitimate interest to respond to information requests from Visitors and Users;
  • Based on our legitimate interest to send promotional offers (direct marketing) to our Users;
  • Based on express consent for sending promotional offers (direct marketing) to Visitors.

4. What personal data are processed?

COSH undertakes to collect and process only those personal data that are relevant and necessary for the purposes for which they are processed.

How much and which personal data COSH! collects about you depends on your use of the Website and/​or our services. The collection of personal data continues to increase with more intensive use of our Website and our (online) services. In general, Users will disclose more personal data than Visitors. Specifically, we process the following categories of personal data:

Users:

  • Personal identification data (name, first name, address);
  • Contact data (phone number and email address);
  • Personal data (gender, age, date and place of birth, nationality);
  • Other data (beliefs, preferences,…).

These personal data are collected when the User uses our service or our survey. Other personal data may be collected at a later time.

Visitors:

  • Personal identification data (name, first name);
  • Contact data (email address);
  • Electronic Identification Data (cookies, IP address);
  • These personal data are collected when you visit our Website and in particular when you fill out and submit our contact form.

5. For what purposes are your personal data used?

The processing of your personal data is essential for the proper functioning of the Website and for the related services. The collection of personal data expands as the Data Subject makes more intensive use of our Website and our (online) services.

The processing is carried out exclusively for the following well-defined purposes:

users:

  • Management: administration, support and complaint monitoring.
  • Personalized marketing and advertising. 
In this case, the User always has the right to unsubscribe from this.

visitors:

  • Responding to requests for information via the contact form on the Website;
  • Personalized marketing and advertising if the Visitor has expressly consented to this. In this case, the Visitor is free to withdraw his/​her consent at any time.

Furthermore, the Personal Data of the Data Subject may also be used for the following purposes:
  • Management of disputes.
  • Protection against fraud and infringements.

In addition, we use cookies to recognize (the IP address of) Visitors and provide them with a personalized user experience, to remember their technical choices and to detect and correct any errors on the Website. Please refer to our Cookie Policy for more information on how we use cookies.

When visiting the Website, some data is collected for statistical purposes. Such data are necessary to optimize the use of our Website. These data are: probable place of consultation, hour and day of consultation, which pages were visited, etc. In order to optimally protect your privacy, this data is always anonymized.

The Data Subject always provides the personal data to COSH! himself and can thus exercise a certain control. COSH! reserves the right to suspend or cancel certain operations if the required personal data are missing, incorrect or incomplete.

6. Who receives your personal data?

Your personal data will be processed solely for internal use within COSH! Your personal data will not be sold, transferred or communicated to third parties, except if you have given us your explicit prior consent or if the transfer is necessary for the execution of the agreement or is required by law.

7. How long do we keep your personal data?

Your personal data will be kept as long as necessary to fulfill the purposes for which they were collected. They will be deleted from our database when they are no longer needed to pursue these purposes or if the Data Subject validly exercises the right to delete the personal data.

8. What are your rights?

8.1. Guarantee of lawful and secure processing of personal data.

Your personal data will always be processed for legitimate purposes, as set out in Article 5.

They will be collected and processed in an appropriate, relevant and proportionate manner, and will not be kept longer than necessary to achieve the purposes set.

8.2. Right of access

If you can prove your identity, you obtain the right to obtain information about the processing of your personal data. Thus, you have the right to obtain access to the purposes of the processing, the categories of personal data, the categories of recipients to which the personal data are sent, the criteria that determine the period of data retention and the rights you can exercise with respect to your personal data.

8.3. Right to rectification of personal data.

Inaccurate or incomplete information can be corrected. One can also contact us with a request for amendment.

8.4. Right to erasure of your personal data

You also have the right to obtain the deletion of your personal data in the following cases:

  • Your personal data is no longer needed for the purpose for which it was collected;
  • You revoke your consent to the processing of your personal data and there is no other legal basis for processing your personal data;
  • You lawfully object to the processing of your personal data;
  • Your personal data are processed unlawfully;
  • Your personal data must be deleted on the basis of a legal obligation.
  • The deletion of personal data is mainly related to visibility; it is possible that the deleted personal data may remain stored temporarily.

8.5. Right to restriction of processing

In some cases, you have the right to request restrictions on the processing of your personal data. This is especially true in case of a dispute regarding the accuracy of personal data, if the personal data are necessary in the context of legal proceedings or for the time necessary for COSH! to establish that you can validly exercise your right to erasure.

8.6. Right to object

You have the right to object at any time to the processing of your personal data for direct marketing purposes, profiling purposes or purposes arising from the legitimate interests of the controller. COSH! will stop processing your personal data unless COSH! can demonstrate that there are compelling legal reasons for processing your personal data that take precedence over your right to object.

8.7. Right to data portability

You have the right to obtain the personal data provided to COSH! in a structured, common and machine-readable form. In addition, you have the right to transfer this personal data to another controller, unless this is technically impossible.

8.8. Right to withdraw your consent.

You have the right to withdraw your consent at any time, for example if you have given it as a Visitor for direct marketing purposes.

9. How can you exercise your rights?

If you wish to exercise your rights, you must send a written request and proof of identity via registered mail to COSH!, Bergjesbos 19, 8310 Bruges or via e‑mail to info@cosh.eco. We will reply as soon as possible, no later than one (1) month after receiving your request.

10. Possibility to file a complaint

If you have comments or complaints about the way in which we handle your personal data, we request that you first report these to us. That way we can come to an amicable solution in mutual consultation.

If, after this notification, you are still not satisfied with the processing of your personal data by COSH, you have the right to lodge a complaint with the competent supervisory authority (for Belgium: https://​www​.gegevensbeschermingsautoriteit​.be/ ).