PRIVACY POLICY

ARA NV – Transfer Print www.ara-transferprint.com

Last update: November 19, 2025

1. Introduction and scope

ARA NV (hereinafter “we,” “us,” “ARA” or “the Company”) respects your privacy and treats your personal data with the utmost care. This privacy policy describes how we handle your personal data in accordance with the General Data Protection Regulation (AVG/GDPR) and Belgian privacy legislation.

This policy applies to all personal data we collect through our website ara-transferprint.com, through email correspondence, telephone contact, quote requests, orders and other business communications.

2. Controller

The controller responsible for processing your personal data is:

ARA NV

Textile Street 27

8790 Waregem

Belgium

CBE number: [to be filled in].

E-mail: info@ara-transferprint.com

Website: www.ara-transferprint.com

3. What personal data do we collect?

Depending on your interaction with us, we may collect and process the following categories of personal data:

Category	Data
Id.	Name, first name, gender, position within your company
Contact details	E-mail address, phone number, (business) address
Company data	Company name, CBE number, VAT number, sector
Transaction Data	Order information, quote requests, billing information, payment information
Technical data	IP address, browser type, device information, website usage (via cookies)
Communications data	E-mail correspondence, phone calls, instant messages, feedback

4. How do we collect personal data?

We collect personal data in a variety of ways:

• Provided directly by you: when you fill out our contact form, request a quote, place an order, or contact us
• Automatic collection: via cookies and similar technologies when you visit our website
• From third parties: through business contacts, trade shows, networking events, or publicly available sources
• During business contact: via email, phone, video calls or face-to-face meetings

5. Purposes and legal basis of processing.

We process your personal data only for legitimate and specific purposes. Below is an overview:

Target	Legal Basis	Retention period
Handling quote requests and orders	Execution of agreement	7 years (legal requirement)
Customer management and customer service	Contract performance and legitimate interest	Duration of relationship + 3 years
Accounting and billing	Legal obligation	7 years
Marketing and newsletters	Consent or legitimate interest	Until withdrawal of consent
Improving website and services	Legitimate interest	2 years
Security and fraud prevention	Legitimate interest	As long as necessary
Compliance with legal obligations	Legal obligation	According to law

6. With whom do we share your data?

We never sell your personal data to third parties. We share your data with third parties only when necessary for the purposes described in this policy:

6.1 Categories of recipients

• Service providers: IT service providers, web hosting companies, email service providers, accountants
• Logistics partners: shipping and transport companies for delivery of orders
• Financial institutions: payment processing banks
• Professional advisors: lawyers, accountants, insurers
• Government agencies: when required by law

6.2 Processor agreements

We enter into processor agreements with all third parties who process personal data on our behalf, in which strict agreements are made regarding the protection of your data.

6.3 Transfer outside EU/EEA

In principle, we process your data within the European Economic Area (EEA). If we use service providers outside the EEA, we provide appropriate safeguards such as standard contractual clauses approved by the European Commission.

7. How do we secure your data?

We take the protection of your personal data very seriously and have implemented appropriate technical and organizational measures:

• SSL/TLS encryption for secure data transfer
• Secure servers and firewalls
• Access control and authorization (only authorized personnel have access)
• Regular backups
• Secure storage of physical documents
• Staff training on data protection
• Regular review and update of security measures

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

8.1 Right of access

You have the right to know whether we process personal data about you and to receive a copy of that data.

8.2 Right of correction

You have the right to have inaccurate or incomplete personal data corrected or completed.

8.3 Right to erasure (right to oblivion)

You have the right to have your personal data deleted, unless we have a legal obligation to retain it (for example, for accounting purposes).

8.4 Right to restriction of processing

You have the right to request that we restrict the processing of your personal data.

8.5 Right to transferability

You have the right to receive your personal data in a structured, common and machine-readable format and to transfer that data to another organization.

8.6 Right to object

You have the right to object to the processing of your personal data, in particular when the processing is based on legitimate interest or for direct marketing purposes.

8.7 Right to withdraw consent

Where processing is based on consent, you have the right to withdraw this consent at any time. This does not affect the lawfulness of the processing prior to the withdrawal.

8.8 How can you exercise your rights?

You can exercise your rights by contacting us at:

E-mail: info@ara-transferprint.com

In writing: ARA NV, Textielstraat 27, 8790 Waregem

We will process your request within one month. In complex cases, we may extend this time limit by up to two months, in which case we will notify you.

9. Cookies and tracking

For detailed information on our use of cookies and similar technologies, please refer to our separate Cookie Policy.

10. Minors

Our services are aimed at business customers (B2B). We do not knowingly collect personal data from individuals under the age of 16. If you suspect that we have inadvertently collected data from a minor, please contact us.

11. Links to other websites

Our website may contain links to third-party websites. We are not responsible for the privacy policies or content of these external websites. We encourage you to read the privacy policies of these websites.

12. Automated decision-making and profiling.

We do not use automated decision-making or profiling that legally affects you or similarly significantly affects you.

13. Changes to this privacy policy.

We reserve the right to change this privacy policy. The most recent version is always available on our website. In the event of significant changes, we will notify you via our website or by email.

We encourage you to review this privacy policy periodically to be aware of any changes.

14. Data breach

Despite our security measures, a data breach can never be completely ruled out. In the event of a data breach that is likely to pose a high risk to your rights and freedoms, we will inform you in accordance with GDPR requirements and notify the competent regulator (Data Protection Authority).

15. Complaints

If you have a complaint about the way we process your personal data, please contact us. We will take your complaint seriously and do our best to resolve it.

You also have the right to file a complaint with the supervisory authority:

Data Protection Authority (GBA).

Printing Press Street 35

1000 Brussels

Tel: +32 2 274 48 00

Website: www.gegevensbeschermingsautoriteit.be

16. Contact

For questions about this privacy policy or the processing of your personal data, please contact us:

ARA NV

Textile Street 27

8790 Waregem, Belgium

E-mail: info@ara-transferprint.com

Website: www.ara-transferprint.com

17. Applicable law

This privacy policy is governed by Belgian law. Any disputes arising out of or in connection with this privacy policy shall be submitted to the competent courts of Kortrijk.