PRIVACY POLICY

Privacy is very important to us. We want to inform our (potential) customers, suppliers and business partners as much as possible, respect their privacy and control what happens to their data. Below you will find our policy regarding the collection, storage, use, communication and disclosure of your personal data.

Orac would like to emphasize that it is always trying to act in accordance with the 2016 EU regulation on the protection of individuals with regard to the processing of personal data concerning the free movement of such data and repealing Directive 95/46 / EC.

SCOPE

This privacy statement applies to every visit to and use of the website (www.oracdecor.com) as well as to all (commercial) relations (and the data exchange that may be associated with this) between Orac and its (potential) customers, suppliers and / or business partners..

IDENTITY OF THE RESPONSIBLE FOR PROCESSING

ORAC nv (or one of its sister- or daughter companies) (hereinafter referred to as "Orac"), with registered office at 8400 Oostende, Biekorfstraat 32 and registered with the Crossroads Bank for Enterprises under number 0407.323.091 is responsible for the processing of your personal data. The person responsible for the processing is the person who determines the purpose and the means (the 'what', the 'how' and the 'why') of the processing of the personal data.

Orac can be contacted by post, phone +32 (0)59 80 32 52, e-mail info@oracdecor.com or by filling in a contact form on our website.

Specifically with regard to the privacy policy, the following persons may also be contacted:

An Vandamme

Data Protection Coordinator

dataprotection@oracdecor.com

Tel: +32 (0)59 80 32 52

PERSONAL DATA

Personal data is all data that makes it possible to identify someone. This includes, but is not limited to, data such as name, address, user name, company name, e-mail address and telephone number, but also other information such as IP address, information about the business sector and so on.

The information we collect depends on the context of your interaction with us, the way in which you contact us and the information that you provide.

Orac limits at all times the amount of personal data that is requested to do what is necessary to provide a qualitative service.

The following personal data can be processed by us:

• Information communicated by you when placing an order, when requesting a quote, when filling out the contact form on the website, when registering for the newsletter, when creating an account on www.oracdecor.com, when visiting our offices or exhibition stand, when exchanging business cards or with any other form of contact (e.g. by telephone, e-mail, post, visiting, LinkedIn, Facebook, Pinterest, Instagram or Twitter) or communicated by a commercial partner of Orac in the context of a collaboration:

1. Contact details :

• Name
• First name
• E-mail address
• Phone number (fixed/mobile)
• Fax number
• Residential address
• Company address
• Function and capacity
• Company name

2. Personal charactaristics: sex

OBJECTIVE AND LEGAL GROUND

This data is collected for prospecting, customer and supplier management and the processing of orders and deliveries, including the preparation of a quotation, delivery or an order form. It is also used for accounting and invoicing as well as various functionalities on the website (download images, create a wish list ...). This information can also be used for marketing purposes and for our Hello Customer feedback platform.

The legal ground for the processing of this personal data is the (potential) execution of an agreement. Providing the above personal information is a necessary condition to contact Orac and to possibly conclude an agreement. If you do not provide this information, it is impossible for Orac to contact you and thus enter into a contract.

When this data is used solely to communicate with Orac employees, the legal ground for this processing is the legitimate interest in offering high-quality customer service and product support.

If the personal data is also used for marketing purposes, the legal ground is either the legitimate interest of Orac to inform existing customers about relevant products or permission granted by the customer to receive marketing information. There will always be a possibility for the customer to unsubscribe.

When this personal data is used for our Hello Customer Platform, the legal ground is the legitimate interest of Orac to receive feedback on its products and services and thus to improve or optimize the service. Moreover, the option to unsubscribe is always offered.

3. References

Passwords and username when creating an account on www.oracdecor.com.

OBJECTIVE AND LEGAL GROUND

This personal data is kept with a view to creating an account on www.oracdecor.com and with a view to the security of your account.

The legal ground for the processing of this personal data is the execution of an agreement as well as the legitimate interest of Orac since it is impossible for Orac to create an account in a secure manner without this data. The communication of this information is therefore mandatory if you wish to create an account.

• Information that is communicated when applying for a job: Curriculum Vitae

OBJECTIVE AND LEGAL GROUND

In order to process your application, it is necessary that you provide the above information. Failure to provide this information will result in Orac not being able to handle your application.

The legal ground for the processing of this personal data is the execution of an agreement and the legitimate interest of Orac to check the capacities of the person concerned in function of the vacancy.

If the Curriculum Vitae contains special categories of personal data (such as nationality, health data, criminal records, national register number, data on sexual life, political opinions, membership of a trade union, ...) then the legal ground for processing is permission from you for processing this data.

• Data collected automatically when visiting the Website (Cookies)
• IP-address
• Browser
• Operating system
• External website that referred to Orac
• Pages on www.oracdecor.com that you have visited
• Date and time at which you visited the pages on www.oracdecor.com

OBJECTIVE AND LEGAL GROUND

The use of Cookies is to make the website easily accessible and to improve the quality of the service.

The legal ground of this processing is based on permission. For more information about this please consult our 'Cookie Policy' (see below).

METHOD OF COLLECTING DATA

This personal data is collected in the context of:

• Placing an order
• Requesting a quote
• Completing the contact form on the website
• Registering for the newsletter
• Creating an account
• The exchange of business cards
• Any other form of correspondence or contact (eg by telephone, e-mail, post, LinkedIn, Instagram, Facebook)
• Visiting the website (via Cookies including Google Analytics, Hotjar feedback option)
• A visit to Orac's offices or exhibition stand
• A collaboration with a commercial partner (official distributors, customers, ...)
• A job application

PURPOSES OF PROCESSING

The personal data mentioned above is processed by us for the following purposes:

• Prospect, customer and supplier management (draw up (potential) customer, partner and supplier lists))
• Communication with the person concerned
• Processing orders and deliveries
• The preparation of a quotation, delivery or order form
• Satisfaction survey
• Accounting and invoicing
• Making the website easily accessible
• Qualitative services and optimization
• Marketing purposes, including direct marketing
• Applications

If Orac uses your personal data with direct marketing in mind, you always have the right to oppose this by means of a simple request (possibility to 'unsubscribe').

For each objective, the legal basis for processing can be one of the following :

• Your free permission for the processing
• In the context of the preparation or execution of a contract
• To comply with legal obligations
• When we have a prevailing legitimate interest, in which case we strive for a balance between that interest and respecting your privacy

If the legal basis of the processing is based on your free consent, you always have the right to withdraw that consent at any time. This can be done through a simple request addressed to Orac via the contact details stated in this Privacy Policy under 'Identity of the person responsible for the processing.

We only collect and use your personal data for the above purposes unless we receive your unambiguous and free permission to use your personal data for other purposes or unless the processing is necessary to comply with an obligation imposed by a regulation, a law, a decree or decision.

RETENTION PERIOD

Unless a longer retention period is required or justified (i) by complying with a limitation period or expiration period provided for by law or (ii) by complying with another legal obligation, your data will not be stored for longer than is necessary for the purposes for which the data has been collected, as described in this Privacy Policy under 'Purposes of the processing'.

CATEGORIES RECEIVERS PERSONAL DATA

The processed personal data is only and in accordance with this Privacy Policy communicated to the following recipients /

• Responsible for the processing and its subsidiaries (sister- and daughter companies)
• The person concerned
• Processors, who are called upon for a specific assignment (eg. a mailing agency, IT service providers) or who act as commercial partners (official distributors, transport companies, suppliers)

The aforementioned processors act exclusively on behalf of Orac. Orac can submit the following guarantees regarding data processing by these processors:

• Orac has made clear arrangements in its agreement with these third parties regarding the quality of the data processing in accordance with the obligations imposed by the relevant privacy legislation;
• The third parties may only use the data for the purposes as determined by Orac and in accordance with this Privacy Policy;

Notwithstanding the foregoing, it is possible that Orac must disclose your personal data:

• To the competent authorities (i) when Orac is obliged to do so by law or in the context of legal proceedings and (ii) to indemnify and defend our rights
• When Orac or almost all of its assets are taken over by a third party, in which case your personal data will be one of the transferred assets

RIGHTS OF THE PERSON CONCERNED

As a person concerned you have a number of rights that you can exercise in respect of Orac. If you wish to exercise one of these rights, please contact us using the contact details described in this Privacy Policy under 'Identity of the person responsible for processing.'.

The rights you have are the following:

- right of access no later than one month after receipt of the request

- right of adjustment or rectification of wrong data

- right to objection if you do not agree with the way we process your personal data

- the right to transfer data, ie the right to obtain your personal data in a structured, current and machine-readable form in order to transfer it to third parties.

- right to be forgotten (erasure)

- right to restriction of processing

In principle, you can exercise these rights free of charge. For this you must send a request with a copy of your identity card to us, this to prevent any unauthorized disclosure of your personal data.

If your request is manifestly unfounded or excessive, we can charge you a reasonable fee for the administrative costs associated with your request or we can refuse your request. Moreover, you can exercise these rights only once every six months.

In any case, we will always inform you of the follow-up given to your request within a period of one month at the latest.

SECURITY

All information is stored in a secure environment. This information is not accessible to the public. Within Orac, only persons authorized to do so have access to the personal data, and only if that data is relevant to fulfill their assignment.

TRANSFER TO THIRD COUNTRIES

Any transfer of personal data outside the European Economic Area (EEA) to a recipient who has his domicile or registered office in a country that is not covered by an adequacy decision, issued by the European Commission, will be governed by provisions of a transfer agreement, which (i) will contain standard contractual clauses as defined in the 'Decision of the European Commission of 5 February 2010 (Decision 2010/87 / EC)'; or (ii) is based on any other mechanism under the privacy laws or any other regulations concerning the processing of personal data.

In the case of Orac, it is possible that a transfer is made to third countries. If you wish, you can receive more information about the country to which the transfer of your personal data takes place and the appropriate measures that have been taken. You can contact us for this.

CHILDREN

We ask people under the age of 16 not to communicate personal data to Orac unless consent has been obtained from parent (s) or guardian (s). If we discover that we have collected personal information from a person under the age of 16, we will delete this information as soon as possible.

COMPLAINTS

If you disagree with the way Orac collects, uses and / or processes your personal data, you can of course contact us.

You also have the possibility to submit a complaint to the supervisory authority, which you can contact via the following information:

Gegevensbeschermingsautoriteit

Drukpersstraat 35 1000 BRUSSEL

Tel: +32 (0)2 274 48 00

Fax: +32 (0)2 274 48 35

E-mail: commission@privacycommission.be

STAY INFORMED OF ADJUSTMENTS

Orac may change this Privacy Policy from time to time, for example as a result of market evolutions and new processing activities. We therefore invite you to always consult the latest version of this policy on our website. Of course, we will inform you in advance via our websites or other current communication channels of any change in content and we ask you when the law requires your prior permission for our (new) processing activities

COOKIE POLICY

Orac uses cookies on its website (https://www.oracdecor.com). This cookie policy (hereafter "Cookie Policy") informs you as a visitor about the use of this cookie..

You are not obliged to accept all cookies. Accepting cookies is not a condition for visiting the website. However, you run the risk that certain applications of our website will not function optimally when refusing cookies.

What is a Cookie?

Cookies are small (text) files. When visiting websites of Orac, small (text) files are saved on, or access is obtained to (earlier) Orac (text) files on your devices (computer, tablet, mobile phone etc). If you, as a user, surf the same website in the future, the data stored in the cookies can be retrieved by the website to inform the website of previous activities of the user. Cookies work as a kind of memory for the website.

Cookies can be placed by Orac itself ("first party cookies") and by third parties ("third party cookies"). In addition, they can be temporary ("session cookies", these cookies disappear when you close your browser session), or permanent ("permanent cookies", these cookies are permanently placed on your device).

There are different types of cookies:

• Many of the cookies, the so-called functional session cookies , are used to make your site visit go smoothly. For example, cookies are used to provide services or to save settings, such as storing your preferences, remembering and passing on information that you enter during the login process.
• The strictly necessary cookies >. These cookies are, as the name suggests, strictly necessary to enable you to surf the website, or to use certain functionalities.
• There are also trackingcookies. These are cookies that track and trace your behavior on the website, to offer you, for example, personalized advertisements based on your surfing behavior.
• Then there are the analytical cookies / performance cookies. These cookies are used to generate statistics on the surfing behavior of visitors to a website. In this way a more optimal user experience can be offered. For example, these cookies analyze the duration of visits, the number of visitors, the pages of the website that are most visited, the order, ...
• Finally “third party cookies”exist. As indicated above, these are cookies that are placed on our website by third parties. For the cookies placed by these third parties, you should consult the relevant statements that these parties provide on their own websites.

Which Cookies do we use?

Name cookie	Type	Duration	Purpose	Data	Party
PHPSESSID (sessie cookie)	Essential cookie	session	This cookie allows communication between web server and browser and temporarily saves information from your session.	Used to keep information about every visit to the website and thus enable the core functionality of the website. This cookie does not contain personal information, and only applies to the duration of the visit. As soon as a user closes the web browser, this cookie is deleted.	Own cookie
__utma (Google Tag Manager)	Analytical cookie	2 years	Distinguishing unique users and sessions	This cookie keeps track of how many times you have been on the site, when you were there for the first time, and when it was the last time.	Third party cookie
__utmc (Google Tag Manager)	Analytical cookie	Session	Works together with the __utmb cookie to identify new sessions of returning visitors	__utmc sets the time when a visitor leaves the website	Third party cookie
__utmz (Google Tag Manger)	Analytical cookie	6 months	Identifies the source you have directed to our website	In the __utmz cookie all data is stored about where the visitor came from. So which search engine you used, with which word you searched, on which website you clicked a link, ...	Third party cookie
__utmb (Google Tag Manager)	Analytical cookie	30 min	Determines new sessions and visits	In __utmb the time is set when a visitor enters the website	Third party cookie
__utmt_UA-240610-3 (Google Tag Manager)	Analytical cookie	10 min	Delays the request speed and ensures that data collection on sites with a lot of traffic is limited.	To process user requests and generate statistics about the website traffic.	Third party cookie
IDE (doubleclick.net)	Marketing cookie	1 year	Registers and reports the actions of a user after they have seen or clicked on an advertisement, with the aim of measuring the efficiency.	Used by Google DoubleClick to register and report the interaction of website users after they have viewed or clicked on an ad. The objective is to measure the effectiveness of the advertisement and to show targeted advertisements to the users.	Third party cookie
_pinterest_cm	Marketing cookie	1 year	This cookie ensures that you can share our website pages via Pinterest, through the 'share' button.	Used by Pinterest to record and report the interaction of the website users after they have viewed or clicked on an advertisement	Third party cookie
lang	Functional cookie	End of browser session	This cookie remembers the language choice of the user	The language	Own cookie
Datr, fr, uvc, uid, bku, ouid, na_tc, loc, mus, na_id, reg_ext_ref, sb, reg_fb_ref, reg_fb_gate, wd	Marketing cookie	Session and will be saved max. 2 years	Creates a user profile to show relevant ads on Facebook. These cookies are for social media profiles and relevant advertisements.	Used by Facebook to record and report the interaction of website users after they have viewed or clicked on an advertisement	Third party cookie
_atuvc	Marketing cookie		These cookies are placed by third parties to be able to share the page on social network sites	It contains the number of times a page is shared.	Third party cookie

How can I manage these Cookies?

At the beginning of your visit to our website you have the possibility to accept or to decline cookies by means of a bar at the bottom of each page.

If you want to manage your cookie settings afterwards, you can do this via your browser settings of your respective browsers (Chrome, Firefox, Internet Explorer, Safari, ...) or by permanently deleting your "browsing history".

• Cookie settings Chrome: https://support.google.com/accounts/answer/61416?co=GENIE...

• Cookie settings Internet Explorer: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies

• Cookie settings Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer

Changes

Orac reserves the right to update this Cookie Policy and thus change it unilaterally. It is therefore recommended to regularly consult the website and this Cookie Policy. As soon as a new Cookie Policy takes effect, your consent regarding the use of cookies will be requested again.

Contact details

ORAC nv

Biekorfstraat 32

8400 Oostende

Belgium

Tel.: +32 (0)59 80 32 52

E-mail: dataprotection@oracdecor.com