MAC PED SRL, trading under the name « Wooly Pâtisserie », attaches great importance to the protection of your privacy. This policy explains what personal data we collect, why, how long we keep it and which rights you may exercise.
It is drawn up in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and with the Belgian law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
1. Data controller
- MAC PED SRL, trading name « Wooly Pâtisserie »
- Rue de l'Église 100, 1150 Woluwe-Saint-Pierre, Belgium
- Company number (CBE): 0588.984.493
- E-mail: info@woolypatisserie.pro
- Telephone: +32 (0)497 55 15 20
For any question relating to your personal data, write to us at info@woolypatisserie.pro.
2. Data we collect
2.1 Data you provide to us
- Account creation: surname, first name, e-mail address, password (stored in encrypted form)
- Order: delivery and billing address, telephone number, requested delivery date, collection shop, order comments
- Payment: bank card data is processed directly by our payment provider and is neither stored nor accessible on our servers
- Contact: the information communicated through our contact form or by e-mail
- Newsletter: your e-mail address, if you consent to it
- Product reviews: pseudonym and content of the review, if you post one
2.2 Data collected automatically
- IP address, browser type, operating system, pages viewed, date and time of connection
- Cookies and similar technologies — see our cookie policy
3. Purposes and legal bases
| Purpose | Legal basis (art. 6 GDPR) |
|---|---|
| Process and deliver your orders, manage your customer account | Performance of the contract (art. 6.1.b) |
| Answer your requests and provide after-sales service | Performance of the contract or legitimate interest (art. 6.1.b / 6.1.f) |
| Issue and keep invoices, comply with our accounting and tax obligations | Legal obligation (art. 6.1.c) |
| Send our newsletter and our commercial offers | Consent (art. 6.1.a) |
| Prevent fraud and secure the online shop | Legitimate interest (art. 6.1.f) |
4. Retention periods
- Customer account: for the lifetime of the account, then 3 years after your last order or login
- Orders and invoices: 7 years from the close of the accounting year, in accordance with Belgian legal obligations
- Newsletter: until you withdraw your consent, then deletion within 30 days
- Contact requests: 2 years from the last exchange
- Cookies: 13 months maximum — see the cookie policy
At the end of these periods, your data is deleted or irreversibly anonymised.
5. Recipients of your data
Your data is neither sold, nor rented, nor exchanged. It is accessible to authorised Wooly Pâtisserie staff and transmitted only to the processors necessary for the performance of the service:
- A2 Hosting, Inc. — website hosting, servers located in the Netherlands
- Stripe Payments Europe, Ltd. — secure processing of online payments
- Our carriers, for home deliveries
- Our e-mail sending provider, for order confirmations and the newsletter
Your data may also be communicated to the competent authorities where the law obliges us to do so.
6. Transfers outside the European Union
Our data is hosted within the European Union. Where a processor is led to process data outside the Union, that transfer is governed by the European Commission's standard contractual clauses or by an adequacy decision.
7. Security
We implement appropriate technical and organisational measures to protect your data: encryption of communications (HTTPS/TLS), password encryption, access control, regular backups and updating of software components.
8. Your rights
In accordance with Articles 15 to 22 of the GDPR, you have the following rights:
- Right of access: obtain confirmation that your data is being processed and receive a copy of it
- Right to rectification: have inaccurate or incomplete data corrected
- Right to erasure: request the deletion of your data, subject to our legal retention obligations
- Right to restriction: request the temporary freezing of a processing operation
- Right to object: object to a processing operation based on our legitimate interest, and at any time to direct marketing
- Right to portability: receive your data in a structured, machine-readable format
- Right to withdraw your consent: at any time, without affecting the lawfulness of processing already carried out
To exercise these rights, write to us at info@woolypatisserie.pro or by post to MAC PED SRL, Rue de l'Église 100, 1150 Woluwe-Saint-Pierre. Proof of identity may be requested in the event of reasonable doubt. We will answer you within one month.
9. Complaint
If you consider that the processing of your data constitutes a breach of the GDPR, you may lodge a complaint with:
Data Protection Authority
Rue de la Presse 35, 1000 Brussels
Tel.: +32 (0)2 274 48 00
contact@apd-gba.be — autoriteprotectiondonnees.be
10. Amendment of this policy
We may amend this policy to reflect changes in our processing operations or in the applicable regulations. The applicable version is the one published on this page.
Use of YouTube API Services
Wooly Pâtisserie (MAC PED SRL) uploads its own videos to its YouTube channel using an internal tool that relies on the YouTube API Services.
By using our services, you agree to be bound by the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy.
What data is involved
This tool is used solely to publish our own videos on our own channel. It does not read any data from your YouTube account, does not display any YouTube content on our website, and does not collect, store or share any visitor personal data through the API. Only the channel owner's account is involved.
Data deletion and revoking access
The only access token retained is the channel owner's. It is stored locally on a company computer and never shared with a third party. You may revoke applications' access to your Google data at any time from your Google account permissions page. For any request to delete data concerning us, write to info@woolypatisserie.pro; we reply within thirty days.