General:
This privacy policy ("Privacy Policy") governs the processing of your personal data when using our website and related services (collectively referred to as the “Website”). This processing is carried out by ASTRA SWEETS NV as the data controller, with registered office at Bleukenlaan 18, 2300 Turnhout (“we”, “us”), registered in the Belgian Crossroads Bank for Enterprises under number 0432.549.427, in accordance with applicable data protection legislation.
Our Website uses cookies and similar technologies. Cookies are small text files placed on the hard drive of a device, containing certain information, sometimes including personal data. For more information regarding our use of cookies, please read our Cookie Policy.
This Privacy Policy may be amended from time to time. Any changes will be communicated via the Website. This Privacy Policy was last updated on 03/04/2025.
What data do we process and why?
When you use the Website, we process your personal data. This data may include:
-
IP address and cookies
-
Identification data (name, address, email, phone number, etc.)
-
Contact details
-
Curriculum vitae
The purposes of this processing and the corresponding legal bases are:
-
Use of the Website (consent and, where applicable, legitimate interest)
-
Contacting us (consent and, where applicable, legitimate interest)
-
Applying for vacancies (consent)
-
To provide you with information about products and services in a personalized and efficient manner via the Website, email, phone, or social media (consent)
-
To process your personal data in order to provide specific services to you (performance of a contract)
-
To collect statistics regarding the use of the Website (consent)
-
To improve the performance and appearance of the Website (consent and, where applicable, legitimate interest)
We generally do not share the personal data you provide via the Website with social media providers unless you have given your explicit consent.
In addition to the purposes stated above, we may process your personal data:
-
To share it with a financial institution or payment service provider to enable them to comply with their legal obligations.
-
To share it with police or judicial authorities as evidence of possible criminal offenses or if there are well-founded suspicions of an unlawful act or crime committed by you through your registration on or use of the Website or services.
Who we share data with
We do not transfer your personal data in an identifiable manner to third parties without your explicit consent unless required for the operation of the Website.
We may rely on third-party processors to provide the Website. We ensure that these processors are only allowed to process your personal data based on our written instructions. All external processors are selected with care to ensure the security and integrity of your personal data.
Where we process data
We and our external processors will only process your identifiable personal data within the European Economic Area (EEA).
We may transfer anonymized and/or aggregated data to organizations outside the EEA. If such transfer occurs, we will ensure adequate safeguards are in place to protect the security and integrity of your personal data, that all rights under applicable mandatory law are upheld, and that a legal protection mechanism is implemented.
How we process data
We make every effort to only process personal data necessary to fulfill the purposes outlined in this Privacy Policy. We will process your personal data lawfully, fairly, and transparently, and make reasonable efforts to keep it accurate and up to date.
Your personal data will only be processed for as long as needed to achieve the purposes mentioned in this Privacy Policy, or until you withdraw your consent. Note that withdrawal of consent may mean you are no longer able to use all or part of the Website.
We will implement appropriate technical and organizational measures to protect your personal data against unauthorized access, theft, accidental loss, manipulation, or destruction. Access to your personal data by our staff or that of our external processors is limited to a need-to-know basis and is subject to strict confidentiality obligations. However, you understand that no security system can be fully guaranteed, and we cannot be held liable for damages resulting from the unlawful use of your personal data by a third party.
We may process your data in the interest of ourselves, our partners, or third parties when your registration or use of the Website or services may be deemed (a) a breach of any applicable terms or third-party intellectual property rights, (b) a threat to the security or integrity of the services, (c) a danger to our Website or systems due to viruses, trojans, spyware, malware, or any other form of malicious code, or (d) otherwise illegal, unlawful, discriminatory, or offensive.
How long we store your data
The retention period varies depending on the service provided. We store your data:
-
As long as necessary to fulfill the purposes for which it was collected and processed;
-
In the case of job applications, your contact details will be retained for as long as needed to complete the recruitment process and deleted no later than 8 weeks after the end of the procedure, unless you give explicit consent to retain them for up to one year;
-
As long as needed to meet our legal, contractual, and business obligations.
Your rights
You have the right to request access to all personal data we process about you. Requests clearly aimed at causing nuisance or harm will not be handled.
You have the right to request free rectification of any incorrect or inaccurate personal data.
You have the right to withdraw your previously given consent for the processing of your personal data. You can withdraw your consent at any time by emailing us at info@astrasweets.com or info@my-frisia.com.
You have the right to request deletion of your personal data if you withdraw your consent. However, please note that a deletion request will be assessed in light of any legal or regulatory obligations or administrative or judicial orders that may prevent us from deleting the data. As an alternative to deletion, you may request that we restrict the processing of your personal data.
You have the right to object to the processing of your personal data if you can demonstrate serious and legitimate reasons related to your specific situation that justify such objection.
If your personal data is processed based on consent or a contract and the processing is carried out by automated means, you have the right to receive the data you have provided in a structured, commonly used, and machine-readable format, and, if technically feasible, to transmit it directly to another service provider. Technical feasibility is solely determined by us.
If you wish to exercise one or more of the above rights, please email your request to info@astrasweets.com or info@my-frisia.com. Your request should clearly state which right you wish to exercise and the reason for it. We will confirm receipt of your request promptly. If the request is valid, we will comply with it as soon as reasonably possible and no later than thirty (30) days after receipt. We may request additional proof of identity if necessary.
If you have a complaint about the processing of your personal data, you can always contact us at info@astrasweets.com or info@my-frisia.com.
If you are not satisfied with our response, you have the right to file a complaint with the relevant data protection authority. You can do so via the following links: the Dutch Data Protection Authority or the Belgian Data Protection Authority.
Data Protection Officer (DPO) contact details
HR Manager Lotte Vermeiren
-
Phone: +32 (0)14 44 35 20