The present version is a translation given for information purposes only. Only the original french or dutch versions are binding.

Personal data protection policy charter

Welcome to the website (henceforth the ‘website’). By connecting to or browsing through the website, you agree you have read, understood and accepted, without limitations or reservation, the personal data and cookies management policy (henceforth the ‘policy charter’) and our terms and conditions of use. Please note that other terms and conditions and personal data protection policies apply to other TotalEnergies company websites, and Circle K Belgium recommend you read them carefully.

The policy aims to inform you of the rights and freedoms you can exercise in relation to Circle K Belgium management of your personal data. It also describes the measures that Circle K Belgium takes to protect these data.

Circle K Belgium is the ‘data controller’ with responsibility for processing the personal data used to manage the website. These processing operations are carried out in accordance with the applicable local law.

1 Purpose of processing and types of data collected

When you visit the website, you may need to provide Circle K Belgium items of personal data, such as your first name and surname, to use the services available.

Circle K Belgium processes your personal data to help you access the services of its websites, to facilitate the navigation on its websites, to manage your possible requests via contact forms or other channels, or to manage its business relations.

Circle K Belgium may collect items of your personal data for external communication purposes to answer your requests for information and to learn more about your expectations. In our online forms, the mandatory fields are marked with an asterisk. If you do not provide answers to the mandatory questions, Circle K Belgium will not be able to provide you with the service(s) requested.

Your personal data will later not be processed in a manner incompatible with the purposes described in this policy charter or the collection forms. Your data is stored according to the needs of Circle K Belgium and the legal requirements. Circle K Belgium keeps the personal data during the time needed to process and for the purpose they were collected for and for any other purpose permitted and related, or as required by the law. For example, Circle K Belgium can keep the data for the purposes of executing a contract five (5) years after the end of the last order placed in this frame, after which Circle K Belgium will no longer consider the data subject as a customer and will destroy their data, without prejudice to the legal obligations of Circle K Belgium, and its legitimate interest in keeping this data for a longer period (infra).

The retention period of your personal data are detailed below according to the two (2) main purposes of personal data processing of Circle K Belgium:

Treatment n° 1 : management of customer’s data for contract implementation, including billing, credit management, etc.Your data is kept for a maximum of five (5) years from when the last order placed with Circle K Belgium or the expiry of the current contract, and may be, where appropriate, kept in intermediate archives for the applicable limitation period, subject to a legal obligation to preserve or the legitimate interest of Circle K Belgium to keep this data for a longer period.

Treatment n° 2 : management of various customers’ requests, complaints and incidents.Your data is retained as long as the request, complaint or incident has not been fully processed and closed, subject to a legal obligation to preserve or the legitimate interest of Circle K Belgium to keep this data for a longer period.

2 Legal basis of storage of data collected

The data processing carried out by Circle K Belgium is based primarily on its legitimate interest, the existence and implementation of a contract, a legal obligation or even a consent.

The legitimate interest of Circle K Belgium requires that it may process your personal data to provide you the services of this website and to respond to your requests or, for example, for the purposes of its fraud prevention policy.

The existence and good implementation of a contract with Circle K Belgiumrequires the processing of personal data, otherwise the contract cannot be executed.

Some personal data may also be necessary to enable Circle K Belgium to fulfil its legal obligations, particularly in relation to the tax administration. Otherwise, Circle K Belgium will not be able to process your request and Circle K Belgium will be in violation of the law.

Consent is necessary, for example, to send commercial communications or to allow Circle K Belgium to process some of your requests. Failing your consent, some of your requests cannot be processed. You have the right to withdraw your consent any time without jeopardizing the treatment(s) of previous actions, by writing to the following address: Circle K Belgium – privacy, rue de commerce 93, 1040 bruxelles or via diplomatic cards’ contact form.

3 Profiling

Circle K Belgium implements automated decision making, necessary to allow us to personalize external communications, write relevant and adapted content and create tailor-made promotional offers. This automated decision-making is based on the behavioural analysis of the consumer on the website after explicitly marking his/her agreement (cf. Cookies), the analysis of the information provided by the consumer during his/her visit and/or his/her purchasing process or the analysis of the consumer's purchasing criteria, such as quality, quantity, frequency, etc. The consequences are a better knowledge of the consumer and a better communication.

4 Recipients of data

Your personal data may be communicated to one or more of the data controller's departments or to Circle K companies and one or more partners, independent distributors or subcontractors for the proper implementation of the contract, for targeted correspondence or for purposes of analysis and surveys.

5 Data transfers

Any transfer of data to a country outside the european economic area shall be carried out in accordance with the applicable regulations and in such a way as to protect your data appropriately.

For the purposes of the services provided on this website, your data such as your surname, first name, e-mail address, postal address, telephone number, etc., may be transferred to recipients located outside the European Union. For this reason, the Circle K company has adopted the ‘binding corporate rules’ (henceforth the ‘bcr’) governing intra-group transfers of personal data originating in the European economic area.

For data transfers not covered by the bcr, to countries outside the european economic area, other guarantees are provided to ensure adequate data protection.

If you like more information on Circle K Belgium's bcr please click here . For information on other measures to ensure adequate protection please write to the contact address below (infra).

6 Data security and confidentiality

The data controller takes appropriate steps to preserve the security and confidentiality of your personal data, including to prevent them from being distorted, damaged or disclosed to unauthorized third parties.

7 Your rights

In accordance with current regulations, you have the right to access, correct, delete and object to the use of your personal data. You also have a right of opposition prior to the commercial prospection under the conditions of the applicable regulations. You can ask for your personal data to be sent to you and you have the right to give instructions for the use of your personal data after your death. You can also ask for restriction of the data and/or make a claim to the data protection authority (the belgian data protection agency). Please use the contact form to make your request or send it to the following address: Circle K Belgium – Privacy: Boulevard Anspach 1, box 2, 1000 Bruxelles.