PRIVACY POLICY Updated on June 4, 2021

1. Parties and Subject Matter

van ammers bv (hereinafter“VAN AMMERS BV” or the“Data Controller”) Brasschaatsteenweg 268D, 2920 Kalmthout, Belgium

VAT ID: be0810525466 Email:beboomerang Phone: +32487518618

VAN AMMERS has adopted this Privacy Policy, which is intended to provide Users with transparent information about the website hosted at the following address:beboomerang(hereinafter the“Site”), and about how personal data is collected and processed by VAN AMMERS.

The term "User" refers to any user, whether a natural person or a legal entity, who visits the Site or interacts with the Site in any way.

In its capacity as the data controller, VAN AMMERS determines all technical, legal, and organizational measures, as well as the purposes, for the processing of Users’ personal data. VAN AMMERS undertakes to take all necessary measures to ensure that the processing of personal data is carried out in accordance with the Act of July 30, 2018, on the protection of natural persons with regard to the processing of personal data (hereinafter the“Act”) and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (i.e., the General Data Protection Regulation (GDPR); hereinafter the“Regulation”).

VAN AMMERS is free to select a natural or legal person to process users’ personal data at its request and on its behalf (hereinafter the “Processor” or “Subcontractor”). Where applicable, VAN AMMERS undertakes to select a Processor that provides sufficient guarantees regarding the technical and organizational measures for the processing of personal data, in accordance with the Act and the Regulation.

1

2. Processing of Personal Data

Users’ use of the Site may result in the collection of personal data. The processing of this data by VAN AMMERS, in its capacity as Data Controller, or by service providers acting on behalf of and for the account of VAN AMMERS, is carried out in accordance with the Act and the Regulation.

Personal data is processed by VAN AMMERS, in accordance with the purposes listed below, using the following methods:

stored in the database, used only to contact you if requested.

3. Purpose of the processing of personal data

In accordance with Article 13 of the Regulation, the purposes of the processing of personal data are communicated to the User. Those purposes are as follows:

To contact the applicant

4. Personal data that may be processed

The User agrees that, while visiting and using the Site, VAN AMMERS may collect and process the following personal data:

We will only contact you if you have requested it.

VAN AMMERS collects and processes this personal data in accordance with the terms and principles described in this Privacy Policy.

5. Consent

By accessing and using the Site, the User declares that he or she has read and given his or her free, specific, informed, and unambiguous consent to the processing of his or her personal data. This agreement relates to the content of this Privacy Policy.

Consent is given through the positive and active action by which the User has checked the box for the privacy policy in the "hypertext link." This consent is an essential condition for performing certain actions on the Site or for enabling the User to enter into a contractual relationship with VAN AMMERS. Any agreement between VAN AMMERS and a User regarding the services and goods offered on the Site is subject to the User’s acceptance of the Privacy Policy.

The User agrees that the Data Controller may collect and process his or her personal data, in accordance with the terms and principles set forth in this Privacy Policy, that he or she provides on the Site or in connection with the services offered by VAN AMMERS for the purposes stated above.

The User has the right to withdraw this consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on the prior consent.

6. Retention period for Users’ personal data

In accordance with Article 13(2) of the Regulation, the Data Controller shall retain personal data only for as long as is reasonably necessary to achieve the purposes for which they are processed.

In all cases, this period shall not exceed two years.

7. Recipients of Data and Disclosure to Third Parties

Personal data may be disclosed to VAN AMMERS’ employees, staff, subcontractors, processors, or suppliers, provided that adequate safeguards are in place to ensure the security of the data and provided that they collaborate with VAN AMMERS in marketing products or providing services. They act under the direct authority of VAN AMMERS and are specifically responsible for the collection, processing, or outsourcing of this data.

In all cases, the recipients of the data and those to whom the data is disclosed comply with the terms of this Privacy Policy. VAN AMMERS ensures that they process this data only for the intended purposes and in a discreet and secure manner.

If the data is to be disclosed to third parties for direct marketing or prospecting purposes, the User will be informed in advance so that he or she may give prior and explicit consent to this use of personal data.

8. Users' Rights

The User may exercise their rights at any time by sending an email to the following address:beboomerang, or by sending a letter by mail, accompanied by a copy of their ID card, to the following address: Brasschaatsteenweg 268D, 2920 Kalmthout, Belgium.

a. Right of access

In accordance with Article 15 of the Regulation, VAN AMMERS guarantees the User’s right of access to their personal data. The User has the right to access this personal data and the following information:

● the categories of personal data concerned;

● the recipients or categories of recipients to whom the personal data have been or will be disclosed;

● if the recipients are located in third countries or are international organizations, the appropriate or suitable safeguards;

● if possible, the proposed retention period for personal data or, if this is not possible, the criteria used to determine this period;

● the existence of automated decision-making, including profiling, as referred to in Article 22(1) and (4) of the Regulation, and, at least in such cases, relevant information regarding the underlying logic, as well as the significance and the expected consequences of such processing for the data subject.

The Data Controller may charge a reasonable fee based on the administrative costs associated with providing additional copies requested by the User.

If the User submits this request electronically (e.g., via email), the data will be provided in electronic form and for general use, unless the User requests otherwise.

A copy of the data will be provided to the User no later than one month after receipt of the request.

b. Right to rectification

VAN AMMERS guarantees the User the right to rectify and delete personal data.

In accordance with Article 16 of the Regulation, incorrect, inaccurate, or irrelevant data may be corrected or deleted at any time. The User should first make the necessary changes themselves via their user account, unless such changes cannot be made independently, in which case the request may be submitted to VAN AMMERS.

In accordance with Article 19 of the Regulation, the controller shall notify each recipient to whom the personal data have been disclosed of any rectification of the personal data, unless such rectification proves impossible or involves disproportionate effort. The controller shall provide the data subject with information about these recipients if the data subject so requests.

c. Right to erasure

The User has the right to have their personal data erased as soon as possible in the cases specified in Article 17 of the Regulation.

If the controller has made the personal data public and is required to erase it pursuant to the preceding paragraph, the controller shall, taking into account available technology and the cost of implementation, reasonable measures, including technical measures, to inform other controllers processing such personal data that the data subject has requested those controllers to erase the link to such personal data or a copy or reproduction thereof.

The two preceding paragraphs do not apply to the extent that such processing is necessary:

● the exercise of the right to freedom of expression and information;

● to comply with a legal obligation to process data under Union law or the law of the Member State to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;

● the establishment, exercise, or defense of legal claims.

In accordance with Article 19 of the Regulation, the controller shall notify each recipient to whom the personal data have been disclosed of any erasure of personal data or any restriction on their processing, unless such notification proves impossible or involves a disproportionate effort. The controller shall provide the data subject with information about these recipients if the data subject requests it.

d. Right to restrict processing

The User has the right to restrict the processing of their personal data in the cases specified in Article 18 of the Regulation.

In accordance with Article 19 of the Regulation, the controller shall notify each recipient to whom the personal data have been disclosed of any restriction on the processing carried out, unless such notification proves impossible or involves a disproportionate effort. The controller shall provide the data subject with information about these recipients if the data subject requests it.

e. Right to data portability

In accordance with Article 20 of the Regulation, Users have the right to receive their personal data from VAN AMMERS in a structured, commonly used, and machine-readable format. Users have the right to transmit this data to another controller without VAN AMMERS preventing this, in the cases provided for in the Regulation.

When the User exercises his or her right to data portability pursuant to the preceding paragraph, he or she has the right to have personal data transferred directly from one controller to another, to the extent that this is technically feasible.

Exercising the right to data portability does not affect the right to erasure. This right does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

The right to data portability does not affect the rights and freedoms of third parties.

f. Right to object and automated individual decision-making

The User has the right at any time to object to the processing of his or her personal data on the grounds of his or her specific situation, including the automated processing of data by VAN AMMERS. In accordance with Article 21 of the Regulation, VAN AMMERS will no longer process personal data unless there are legitimate and compelling reasons for the processing that override the interests, rights, and freedoms of the User, or for the establishment, exercise, or defense of legal claims.

When personal data is processed for marketing purposes, the User has the right at any time to object to the processing of personal data concerning him or her for such marketing purposes, including profiling to the extent that it relates to such marketing.

If the data subject objects to the processing for marketing purposes, the personal data will no longer be processed for that purpose.

g. Right to file a complaint

The User has the right to file a complaint regarding the processing of their personal data by VAN AMMERS with the Data Protection Authority responsible for the Belgian territory.

For more information, visit the website: https://www.gegevensbeschermingsautoriteit.be/.

Complaints may be submitted to the following addresses:

Data Protection Authority Drukpersstraat 35, 1000 Brussels Tel. +32 2 274 48 00 Fax. +32 2 274 48 35 Email: contact@apd-gba.be

The User may also file a claim for an injunction with the presiding judge of the court of first instance in their place of residence.

9. Cookies

The Site uses cookies to distinguish between Site users. This allows us to provide users with a better browsing experience and to improve the Site and its content. The purposes and methods of using cookies are described in this article.

a. General Principles

A "cookie" is a file that is temporarily or permanently stored on the User's device when viewing the Site, for use during a subsequent visit. Cookies allow the server to recognize the User's device.

Cookies may also be installed by third parties with whom VAN AMMERS collaborates.

Some of the cookies used by VAN AMMERS are necessary for the proper functioning of the Site, while others are needed to enhance the User’s experience.

The User can customize or disable cookies.

By using the Website, the User expressly consents to the use of cookies as described in this section.

b. Types of cookies and their intended purposes

VAN AMMERS uses various types of cookies on the Site:

● Technical cookies: these are necessary for the Site to function, enable the transmission of data entered by the User, and are intended to facilitate the User’s navigation;

● Analytical and audience cookies: These cookies enable the recognition of the User and are used to count the number of Users of the Website over a given period. Because they also track browsing behavior, they are an effective way to improve the User’s browsing experience by displaying suggestions and offers that may be of interest to the User. They also enable VAN AMMERS to identify and correct any bugs on the Site;

● Functional cookies: These cookies make it easier to use the Site by saving certain preferences you have selected (such as your username or language).

c. Cookie retention period

Cookies are stored for the time necessary to achieve their intended purpose. The cookies that may be stored on the User’s hard drive and their retention periods are as follows:

1 year

d. Managing cookies

If the User does not want the Website to place cookies on their hard drive, they can easily manage or delete them by adjusting their browser settings. Depending on the browser’s settings, the User can also receive a notification whenever a website uses cookies and thus decide whether to accept or reject them.

If the User disables certain cookies, he acknowledges that the Site may not function optimally. Some parts of the Site may be unavailable or only partially usable.

If the User wishes to manage and/or delete certain cookies in this way, they can do so via the following link(s):

For users using a browser:

● Internet Explorer: http://windows.microsoft.com/en-us/windows-vista/block-or-allow-cookies

● Microsoft Edge: http://windows.microsoft.com/en-gb/windows-10/edge-privacy-faq

● Chrome: https://support.google.com/accounts/answer/61416?hl=fr

● Firefox: https://support.mozilla.org/fr/kb/activer-desactiver-cookies-preferences

● Safari: https://support.apple.com/kb/ph21411?locale=fr_CA

10. Limitation of the Data Controller’s Liability

The website may contain links to other third-party websites that are not affiliated with VAN AMMERS. VAN AMMERS is not responsible for the content of these sites or their compliance with the Regulation and the Act.

The legal guardian must give his or her express consent for a minor under the age of 16 to disclose personal information or data through the Site. VAN AMMERS strongly encourages legal guardians of minors to promote responsible and safe use of the internet. The Data Controller cannot be held liable for the collection and processing of personal information and data from minors under the age of 16 whose consent is not effectively covered by that of their legal guardians, nor for inaccurate data—particularly regarding age—entered by minors. Under no circumstances will personal data be processed by the Data Controller if the user indicates that he or she is under 16 years of age.

VAN AMMERS is not liable for any loss, damage, or theft of personal data, particularly as a result of viruses or cyberattacks.

11. Safety and Security

The Data Controller implements technical and organizational measures to ensure an appropriate level of security for the processing and collection of data. These security measures depend on the costs of implementation, taking into account the nature, context, and purposes of the processing of personal data.

The Data Controller uses standard encryption technologies within the IT sector when transferring or collecting data on the Site.

12. Changes to the Privacy Policy

Beboomerang the right to amend this Privacy Policy to comply with applicable legal obligations. Users are therefore encouraged to review the Privacy Policy regularly to stay informed of any changes or updates. Such changes will be posted on the Site or sent via email to ensure their enforceability.

13. Governing Law and Jurisdiction

This Privacy Policy is governed exclusively by Belgian law. Any dispute shall be submitted to the courts of the judicial district in which VAN AMMERS has its registered office.

14. Contact

For any questions or complaints regarding this privacy policy, the User may contact the Data Controller at the following address:beboomerang.

***

Home deliveries by address:

Van Ammers bv processes personal data solely for the purpose of organizing and carrying out home deliveries on behalf of its clients. The data processed is limited to the information necessary for proper delivery, such as name and address details. This data is shared exclusively with logistics partners involved in carrying out the delivery. Van Ammers bv takes appropriate technical and organizational measures to protect personal data against loss, unauthorized access, or misuse and does not retain personal data longer than necessary for the execution of the assignment.

‍

‍

5

‍