CAA Media SRL, with registered office at Jan Van Rijswijcklaan 228, 2020 Antwerp, Belgium, is the IP holding company of the ICONYC Group and the owner and operator of www.iconyc.cc (the "Website"). CAA Media SRL and the independently incorporated subsidiary entities of the ICONYC Group (together the "ICONYC Group") recognise the importance of maintaining the confidentiality, integrity, and security of your personal data ("Personal Data").

This Privacy Policy informs you how any Personal Data you provide through this Website — as well as any Personal Data provided in connection with ICONYC Group products or services — will be processed in compliance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR"), the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data, and any specific local regulations applicable to data processing outside the European Union.

CAA Media SRL does not itself sell products or execute commercial transactions through this Website. Where a commercial transaction is concluded, the applicable ICONYC Group subsidiary entity — identified to you at the point of purchase — acts as a separate and independent data controller for the personal data it processes in connection with that transaction.

During normal operation, the computer systems and software procedures used to operate this Website automatically collect certain technical data (log files). The transmission of such data is inherent to the use of internet communication protocols. This information is not collected in order to be associated with identified individuals; however, due to its nature, it could allow users to be identified through processing and integration with data held by third parties. Such information includes IP addresses or domain names of devices used to visit the Website, URIs (Uniform Resource Identifiers) of requested resources, time and method of requests, file size of server responses, numerical server status codes, and parameters relating to the user's operating system and environment. This data is used solely to obtain anonymous statistical information on Website use and to ensure its correct operation.

This Website uses cookies and similar tracking technologies to ensure efficient operation and to improve our services. Cookies are small text files sent to your device by the websites you visit and stored to be recognised on subsequent visits. For full information on the types of cookies used, how to disable them, and how to withdraw consent, see our Cookie Policy.

CAA Media SRL and the applicable ICONYC Group subsidiary entity collect and process Personal Data that you directly and voluntarily provide through this Website when you: place online orders; register an account; subscribe to our newsletter; or contact our Client Service. Such data includes, for example, your first and last name, postal address, email address, telephone number, and date of birth. Where you voluntarily send an email through or to this Website, we collect your email address in order to respond to your request, as well as any additional Personal Data contained in your message.

Your Personal Data may be processed for the following purposes, each with its applicable legal basis under GDPR:

To respond to your requests and manage your relationship with the ICONYC Group.
Legal basis: Article 6(1)(b) GDPR — processing necessary for the performance of a contract or to take steps at your request prior to entering into a contract.

To fulfil your online purchase orders and perform all related management activities, including administrative management of the contract, delivery of goods, payment processing, management of claims and disputes, and fraud prevention; and to comply with applicable legal or regulatory obligations.
Legal basis: Article 6(1)(b) GDPR — performance of a contract; and Article 6(1)(c) GDPR — compliance with a legal obligation. The applicable data controller for this purpose is the ICONYC Group subsidiary entity that concludes your transaction, not CAA Media SRL.

To conduct individual or group studies, surveys, statistical or market research on your preferences with regard to our products, in order to offer you a personalised service and promote activities that may interest you.
Legal basis: Article 6(1)(a) GDPR — your prior express consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To contact you and send you, by post, telephone, email, or other electronic means, information and promotions including commercial communications, newsletters, advertising material, catalogues, and invitations to events related to ICONYC Group products and services.
Legal basis: Article 6(1)(a) GDPR — your prior express consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Your Personal Data will be processed by suitable electronic, automated, and computerised tools, or manually and on paper, exclusively for the purposes for which it was collected, and with appropriate technical and organisational measures to ensure its security and confidentiality.

Your Personal Data will be processed only by duly authorised personnel of the applicable data controller acting under their respective job duties. Personal Data may also be processed by third parties acting as data processors on behalf of the applicable data controller, where necessary and proportionate for the above purposes. Such third parties include, for example, service providers, carriers, IT maintenance providers, payment processors, and suppliers appointed to carry out promotional campaigns for ICONYC Group products and services.

If you consent to processing for purposes (c) and (d) above, your data may be shared with relevant ICONYC Group subsidiary entities (inside and outside the European Union) strictly for those consented purposes. All such sharing will be subject to appropriate security and confidentiality measures as required by applicable law.

The provision of your Personal Data is optional. However, if you wish to place a purchase order, receive information on ICONYC Group products and services, contact our Client Service, or use other services offered through this Website, you will need to complete all mandatory fields of the relevant forms. Failure to provide mandatory data may mean that the relevant service cannot be provided to you.

Processing of your Personal Data for purposes (c) and (d) above is subject to your prior express consent. If you do not provide consent, we may not be able to offer you a personalised service or send you commercial information on ICONYC Group products and events.

You may withdraw your consent to the processing of your Personal Data at any time by: writing to CAA Media SRL at Jan Van Rijswijcklaan 228, 2020 Antwerp, Belgium; sending an email to privacy@iconyc.cc; using the "unsubscribe" link in any commercial electronic communication; or using any other procedure made available to you. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Where necessary and proportionate, your Personal Data may be processed on behalf of the applicable data controller by third-party entities acting as data processors, including:

• independently incorporated ICONYC Group subsidiary entities, where necessary to fulfil a service or transaction you have requested;
• companies, consultants, and professionals providing advisory, consulting, or related services instrumental to data processing.

As the ICONYC Group operates internationally and uses global services, your Personal Data may be transferred to countries outside the European Union. Any such transfer will be carried out in compliance with GDPR Chapter V requirements, including, where applicable, by means of Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other appropriate safeguards to ensure an equivalent level of data protection.

Your Personal Data will not be sold, used for third-party advertising purposes, or disclosed to unknown persons under any circumstances.

Your Personal Data will be processed and stored for as long as required to fulfil the purposes for which it was collected, and in accordance with the retention periods prescribed by applicable law, or until you withdraw your consent where processing is consent-based. After the applicable retention period has expired, your Personal Data will be automatically and permanently erased or rendered anonymous.

In practice, retention periods vary by purpose: data processed for order fulfilment and legal compliance is typically retained for 10 years in accordance with Belgian statutory requirements; data processed for marketing purposes is retained until you withdraw consent or request erasure; and technical log data is retained for a limited period for security and operational purposes only.

For personal data collected through the general operation of this Website — including browsing data, newsletter subscriptions, and general enquiries — the data controller is CAA Media SRL, Jan Van Rijswijcklaan 228, 2020 Antwerp, Belgium. Contact: privacy@iconyc.cc.

For personal data processed in connection with a commercial transaction concluded through this Website, the data controller is the relevant independently incorporated ICONYC Group subsidiary entity identified to you as the seller at the point of purchase and confirmed in your Order Confirmation. Each subsidiary entity is independently and solely responsible for the personal data it processes in connection with its own transactions. CAA Media SRL is not a data controller for transaction data processed by subsidiary entities.

Where you have provided consent for marketing and profiling purposes (purposes c and d above), the data controller is CAA Media SRL, which manages the ICONYC Group customer database on behalf of the group. Contact: privacy@iconyc.cc.

Under Articles 15 to 21 of the GDPR, you have the following rights in relation to your Personal Data:

To exercise any of the above rights, contact the applicable data controller as identified in section 7 of this Privacy Policy. Requests will be handled without charge and within the timeframes prescribed by the GDPR (ordinarily within one month, extendable by a further two months where requests are complex or numerous).

For any request relating to your Personal Data, this Privacy Policy, or the exercise of your rights, contact the applicable data controller as identified in section 7. CAA Media SRL reserves the right to amend this Privacy Policy at any time. The Privacy Policy currently in force is the version published on this Website.