1. Privacy Policy

This Privacy Policy governs the collection, storage and use of personal information collected by Oncocare BV (hereinafter referred to as ‘Moksi’), either via our webshop at https://moksi.care (“Website”) or during the sale of the cosmetic products (hereinafter referred to as ‘Products’) provided by Moksi for data subjects acting as employees, customers, suppliers, or in any other way professionally linked to Moksi. This Privacy Policy will provide details about the personal information we collect, how and why we use personal information and data subject’s rights in relation thereto. 

Please read this Privacy Policy carefully. It explains why and how we collect information, what the Privacy rights are and our obligations. We keep your data as safe and secure as reasonably possible in strict compliance with applicable data protection laws, in particular the General Data Protection Regulation 2016/679 of 27 April 2016 (‘GDPR’).

1.1 Who we are

The limited liability company Oncocare BV (hereinafter referred to as ‘Moksi’) is registered with the Belgian Crossroads Bank for Enterprises under number 0793.458.119 (RPM Mechelen) and its registered office is located at Auwegemvaart 151, bus 1, 2800 Mechelen.

email: info@moksi.company

As a data controller in the sense of article 4 GDPR of personal data, we respect the right to privacy and will only process personal information which is provided to us in accordance with applicable data protection laws, which include:

1. the General Data Protection Regulation (Regulation 2016/679) (“GDPR“);
2. the Act of 30 july 2018 on the protection of natural persons with regard to the processing of personal data;
3. any additional national legislation and (iii) other applicable privacy laws.
   

 

2. The personal information we collect about you

When accessing and browsing the Website (including when you submit personal information to us through data entry fields on the Website) or during the use of our services, we may collect the following information (“personal data”):

• Identification data:  To provide our Products, Moksi collects the following identification data including, but not limited e-mail address and contact details when registering such information via our Website. Other possible information we may at any point in time is the full name (first and last name), e-mail address, country of residence, telephone number, national register number, bank account number and any other information necessary for management of orders.
• Health data: To provide content in the form of marketing materials, Moski asks consent from Customers to share their experiences when using our Products. The sharing of their experiences may include health data related to cancer treatment. The  processing of health data of is only used to create marketing materials, more specifically and limited to blogs, for marketing purposes.
• Financial data: We collect the following financial data including, but not limited to company information, bank account numbers and other related financial information necessary to carry out the execution of the agreement.
• Cookies: This covers data on when accessing the Website, any personalized settings, and browsing behaviour. We collect this information through automated means when browsing the Website. For Analytical Cookies, in order to improve our Services, consent will be asked to the use such cookies through a Cookie Banner. All non-analytical Cookies are necessary to optimize navigation and the browsing experience. For more information see our Cookie Policy.
  
  

IP addresses of Website visitors are also collected but are only used for statistical and reporting purposes as further described in Moksi’s Privacy Policy. IP addresses will not be linked to any personal information.

We only collect the necessary personal data and do not process personal information in any way, other than specified in this Privacy Policy.

 

3. For which purposes and on which legal basis we process personal data

We (or third-party data processors acting on Moksi’s behalf) may collect, store and use personal data listed above for the following purposes:

3.1 Purposes of the processing of personal data

Purpose of processing activities	Legal Ground
The offering of the Products of Moksi	Necessary for the execution of the agreement; Legal Obligation
The processing of health data of customers to create marketing materials for marketing purposes	Consent
Improving the provision of its Products and/or Services	Legitimate interests
Improving the Website	Legitimate interests
Commercial marketing (emails, social media, invitations to events)	Legitimate interests
Sending of the newsletter	Consent
Analytical cookies (Google Analytics)	Consent
Functional cookies	Legitimate interests
Accounting administration (expense notes and invoicing)	Necessary for the execution of the agreement; Legal obligation
Supplier management (including procurement)	Necessary for the execution of the agreement
Compliance with legal obligations	Legal Obligation

 

3.2 Legal basis for the processing of personal data

We base the processing of personal data on one or more of the following legal grounds:

• consent: consent may be requested in connection with the use of personal data for certain purposes; If the processing is based on consent, data subjects have the right to withdraw consent this processing at any time, without this affecting the lawfulness of the processing based on the consent before its withdrawal. In case consent has been given to receive newsletters and advertising, this can be withdrawn by adjusting the account settings or using the “unsubscribe” link in this communication. In such a case consent can be withdrawn at any time;
• to be able to execute an agreement correctly: in case the data subject is a customer, we must be able to process certain personal data in order to deliver the Products to its destination;
• for the realization of a legitimate interest: Moksi may process data in order to function as a company and to fulfill its corporate purpose. Moksi strives to maintain a fair balance between the need to process data and the preservation of the privacy rights and freedoms, including the protection of privacy.
• Because of a legal obligation: Moksi may need to process certain personal data for legal obligations or in order to abide social and/or tax legislation.

 

4. What are the privacy rights?

4.1 Access, rectification, erasure, portability and objection rights

When personal data is processed, data subjects have the following rights:

1. Right to access: the right to access the data that we process. This also includes the right to ask a copy and to ask for information about the data retention period and the purposes of the processing;
2. Right to update: the right to request us to update or correct any outdated or inaccurate personal data that we hold;
3. Right to erasure: right to erasure and restriction of processing of personal data within the boundaries specified in the privacy legislation;
4. Right to transfer: Right to request that we transfer personal data to a third party within the limits specified in the privacy legislation;
5. Right to restrict: restrict the processing of personal data if you were to object to the processing or to the accuracy of the processed data or if you wish to retain certain personal data in the context of a possible claim while Moksi no longer needs the data in the light of the purposes mentioned above;
6. Right to oppose: in case Moksi processes personal data for its legitimate interests, you have the right to oppose such processing; in this case Moksi may only proceed with the processing of personal data if compelling legitimate grounds apply and after careful consideration of your interests and the interests of Moksi;
7. Right to complain: You always have the right to file a complaint with the supervisory authority, namely the Belgian Data Protection Authority;
8. Right to object: if your personal data are processed for direct marketing you have the right to object to such processing and Moksi must further refrain from processing your personal data for these purposes. Moksi will then cease the processing unless there are compelling legitimate grounds. For example, you can object to the processing of your personal data after a non-successful application. In such case, Moksi will immediately erase your personal data and stop any further processing.
   
   

If you wish to exercise any of the above rights, please contact us:

• by postal mail: Oncocare BV, Auwegemvaart 151, bus 1, 2800 Mechelen;
• via e-mail: info@moksi.company
  
  

This request must always be accompanied by either proof of identity or proof of a valid connection to the use of our products or services. If we have reason to doubt the identity or valid connection of the natural person making the request, we are entitled to request additional information necessary to confirm the identity or connection to our products/services.

If Moksi has already anonymised your information, we will inform you that we are unable to comply with the exercise of your rights except when you, with a view to exercising your rights, provide additional data that make it possible for us to identify you.

Within 1 month after the submission of the request, you will be informed of the follow-up by our Privacy Officer.

No automated decision-making, including profiling, is used in the processing of Personal Data. Automated decisions are defined as decisions about individuals that are based solely on the automated processing of data and that produce legal effects or that significantly affect the individuals involved.

 

4.2 Right to lodge a complaint

In the event of a conflict concerning the processing of your personal data, you can contact us:

• By postal mail: Oncocare BV, Auwegemvaart 151, bus 1, 2800 Mechelen;
• By email at: info@moksi.company

You can also lodge a complaint to the Belgian Data Protection Authority For additional general information regarding the protection of Personal Data, please contact the Data Protection Authority (DPA) with address at 1000 Brussels, Drukpersstraat 35, tel: 02/274.48.00 or via e-mail contact@apd-gba.be (www.gegevensbeschermingsautoriteit.be).

If Moksi receives a request to exercise any of the above-mentioned right, Moksi might request additional information to verify the validity and valid connection to our services before acting on the request. This is to ensure that the data subject is the rightful person and to ensure the confidential treatment and protection of personal data.

5. How we share personal data

Except in the cases specified below we will not disclose, sell or rent your personal data to any third party. We may only share personal data with (affiliated) companies who perform data processing activities on our behalf.

We may disclose personal information with third parties where we are required to do so (i) by applicable law, (ii) by a governmental body, (iii) by a law enforcement agency or (iv) in connection with an investigation of suspected or actual fraudulent or illegal activity.

In accordance with the principles set out below, we will delete personal data once it is no longer required to fulfil the purposes outlined in this Privacy Policy, unless their retention would remain required for other fundamental purposes, including but not limited to complying with our legal obligations, handling claims and resolving disputes.

For the retention period of any cookies used on this Website we refer to our Cookie Policy.

In the context of the selection & recruitment process the following stakeholders might have access to personal data: HR, your envisaged hierarchic superior(s), the IT department and auditors on a strict ‘need-to-know’ basis for the purposes described above.

Moksi may change its corporate structure by changing the legal form via a merger or via acquisitions and sale. In such transactions, Personal Data will be transferred in accordance with this Privacy Policy and applicable data protection laws.

Anonymous data, on which the GDPR is not applicable, can always be passed on, whether or not for commercial purposes.

 

6. How long do we keep your personal data?

Moksi will not store personal data beyond the time necessary for the performance of the purposes for which the data is processed.

The starting point for storing personal data is the legal retention period. Such a period is often up to 10 years after the end of an agreement or 5 years after the last processing for which the information was originally obtained. If the law does not prescribe a period, the archiving may be shorter. The storage may also be longer we have to be able to use the data for proof purposes in a legal procedure.

The personal data will be retained for the following subsequent periods:

Categories of Documents	Data Retention Period
Accounting documents	10 years, counting from 1st of January of the year following the closure of the financial year.
Personal data gathered during the sale of our Products	5 years, counting from the day following the end of the contract.
Corporate documents	5 years, counting from the creation or loss of relevance in case of documents that are or remain in force for an indefinite period.
Fiscal documents	10 years, counting from 1st of January following their date.
Social documents	5 years, counting from the day following the end of the contract.
Supplier documents	10 years, counting from the day following the end of the contract.
Insurance documents	10 years, counting from the notification of the insured fact to the insurance institution.

 

7. How do we protect personal data?

Moksi has taken appropriate technical and organisational measures to safeguard and protect personal data, against unauthorized or unlawful processing and against accidental destruction, loss, access, misuses, damage and any other unlawful forms of processing of the personal data in our possession.

It is permitted to collect non-personal and anonymous data when the Website is visited and to anonymize personal data. This data does not allow to identify an individual person and this data may be shared with third parties, including for statistical purposes.

You also have an important role to play in securing your personal data, e.g. by keeping your PC up-to-date and keeping your login data confidential and secure.

8. Updates to our Privacy Policy

This Privacy Policy may be updated periodically to reflect changes in our personal data practices.

We will post a prominent notice on our Website as a notification of any significant changes to our Privacy Policy and indicate at the top of the notice the date at which it was last amended.

If one or more clauses from this Privacy Policy are declared partially or completely null and void or non-binding by judicial intervention, this will not affect the validity of the other clauses or the validity of the entire Privacy Policy. If the clause(s) in question wish to be amended or replaced, the amended or new clause must be as closely aligned as possible with the clause(s) declared void or non-binding.

The failure to demand strict compliance with the provisions of this Privacy Policy shall not be construed as any waiver or rejection thereof.

Any dispute or claim relating to the processing of personal data and the Privacy Policy or any data mentioned herein is governed by Belgian law and falls under the exclusive jurisdiction of the courts and tribunals of Mechelen (Belgium).

Latest update done on: 10 November 2023

 

9. How to contact us?

If you have any questions or comments about this Privacy Policy or about how we collect, store and use your personal information, or if you would like to exercise your rights, or to update the information we have about you or your preferences, please contact us here:

E-mail:              info@moksi.company

Post:                Oncocare BV, Auwegemvaart 151, bus 1, 2800 Mechelen.

 

10. Transfers of personal data

Personal data in the EU is protected by the General Data Protection Regulation, but other countries may not have necessary the same standards on privacy or protection of personal data.

Personal data will only be processed for internal use for the purposes described above. We do not rent or sell Personal Data to third parties, yet only use Personal data for our own purposes.

Within Moksi Personal data is only made available to its staff on a ‘need to know’ basis.

Moksi may transfer the personal data to the following (categories of) recipients:

• Processors providing statistical research and analysis;
• Processors who provide hosting of this Website and related databases;
• Processors and data controllers who acts as subcontractors in the performance of the Services;
• Companies affiliated with Oncocare BV.
  
  

Personal data may be processed outside the European Economic Area. Moksi will ensure that appropriate or appropriate safeguards are taken, such as a transfer based on an EU Adequacy Decision or based on EU Standard Contractual Clauses. Data subjects can obtain a copy of the guaranteed measures upon written request by sending a mail to info@moksi.company.