PRIVACY STATEMENT

Your personal data will be processed by Caractère plc (Korte Keppestraat 19, B-9320 Erembodegem, Aalst ), for customer management purposes based on the contractual relationship resulting from your request for a quotation/reservation and for direct marketing purposes (to offer you new products or services) based on our legitimate interest to do business. If you do not want us to process your data for direct marketing purposes, simply inform us at info@caractere.be. Through that address, you can also always ask what data we process about you and correct it or have it deleted, or request its transfer. If you do not agree with the way we process your data, you can contact the Belgian Data Protection Authority (Drukpersstraat 35, 1000 Brussels).

PRIVACY POLICY Caractère plc takes your privacy to heart and therefore takes all appropriate measures to protect your privacy in accordance with the Personal Data Protection Act with respect to the Processing of Personal Data and, as of 25 May 2018, the General Data Protection Regulation ("GDPR"), in both cases together with any legislation with which they are introduced or supplemented and any other applicable data protection or privacy legislation.

Caractère plc processes personal data in accordance with this privacy statement. For further information, questions or comments regarding our privacy policy, please contact us at info@caractere.be.

Processing purposes

Caractère plc collects and processes customers' personal data for customer and reservation management purposes (including customer administration, follow-up of quotation requests/reservations, invoicing, solvency follow-up and sending marketing and personalised advertising).

Legal ground(s) for processing

Personal data are processed based on Article 6.1 (a) (consent), (b) (necessary for the performance of a contract), (c) (necessary to comply with a statutory obligation), (f) (necessary for the fulfilment of our legitimate interest in doing business) of the General Data Protection Regulation.

To the extent that the processing of personal data takes place based on Article 6.1. a) (consent), the customer always has the right to withdraw the consent given.

Transfer to third parties

If this is necessary to achieve the predefined purposes, the customer's personal data will be shared with other companies of the group within the European Economic Area that are directly or indirectly associated with Caractère plc or with any other partner of Caractère plc; being hotels, airlines, car rental companies, ferries, local service providers,...

Caractère plc guarantees that these recipients will take the necessary technical and organisational measures to protect personal data.

Furthermore, Caractère plc will not disclose your data to other third parties without your prior consent unless Caractère plc is required to do so under a statutory provision or a court order. We are committed not to sell the acquired data to third parties for commercial purposes under any circumstances.

Retention period

Personal data processed for customer management will be kept for the period necessary to comply with legal requirements (including in the field of accounting).

Security We are committed to protecting the security of your data. We use a variety of security technologies and procedures to appropriately protect your data from unauthorised access, use or disclosure. For example, we store personal data you share with us on computer systems that have restricted access. No security system is guaranteed to be 100% secure. We therefore cannot guarantee the security of your data in an absolute manner and accept no liability for unauthorised access to it. By using the Services of Caractère plc or by providing data to us through any other means, you agree that we may communicate electronically with you about security, privacy and management issues related to your use of those services.

Right of access, rectification, erasure, restriction, objection and portability of personal data

Customers have the right to access their personal data at any time and may correct them (or have them corrected) if they are inaccurate or incomplete, have them deleted, restrict their processing and object to the processing of personal data concerning them based on Article 6.1 (f), including profiling on the basis of those terms.

In addition, the customer has the right to obtain a copy (in a structured, common and machine-readable form) of their personal data and to have the personal data transferred to another company.

In order to exercise the above rights, the customer is asked to:

• adjust his customer account settings himself; and/or
• send an e-mail to the following e-mail address: info@caractere.be.

Direct marketing

Customers have the right to object, free of charge, to any processing of their personal data for direct marketing purposes.

Complaint

The Customer has the right to file a complaint with the Belgian Data Protection Authority (Drukpersstraat 35, 1000 Brussels - commission@privacycommission.be).