Privacy Policy

17.04.2023

S.A. MAMMA ROMA GROUP (0889.618.078), with its registered office at Rue du Stordoir 61, 5030 Gembloux (hereinafter the “Company”) strives to protect personal data. We therefore take all the necessary action to protect the privacy of those who visit and use (hereinafter referred to as the “Users”) the Mamma Roma website (hereinafter referred to as “the Site”).

Users will find below the provisions regarding the processing of personal data, which apply during any visit to or use of the Site by the Users (hereinafter referred to as the “Privacy policy”).

1. General information

The Company processes personal data belonging to Users of the Site, for the purposes and within the limits of the Privacy policy, during any visit to or use of the Site.

When processing personal data, the Company shall comply with current laws and regulations, namely Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (hereinafter “the Regulation”).

In this respect, and pursuant to this Regulation, the Company:

  • Shall process the personal data set out and for the purposes given in Article 2, further to the prior, free and express consent of Users; and
  • Shall also process personal data to enable Users to use the Site and for the necessary and legitimate purposes set out in Article 3 of the Privacy policy.

By accessing and using the Site, Users are deemed to have read and accepted the Privacy policy.

2. Processing of personal data subject to prior consent of Users

By visiting or using the Site, for any reason whatsoever, the User expresses their free, individual, informed and unambiguous consent to expressly authorize the Company to process personal data pursuant to the Regulation, within the limits of and for the purposes set out below and without prejudice to the data processing stipulated in Article 3.

2.1. The Company processes the following personal data:

The Company processes the following personal data:

  1. Surname(s), first name(s), company name, postal address, email address, landline or mobile telephone number;
  2. data related to cookies, in accordance with Article 7.3;
  3. any other information that may be exchanged between the Company and the User, namely by email, during the User’s registration or use of the Site.

2.2. Data processing

The processing consists of collecting, recording, retaining, consulting, organizing, using and cross-referencing the personal data set out in Article 2.1.

2.3. Purposes for processing the personal data

The personal data is collected and processed by the Company for the following purposes:

  1. to send out information and make contacts, with a view to recruitment, on open positions with the Company and its operating subsidiaries.
  2. to carry out satisfaction surveys, statistical studies, trend analysis and market studies to improve our products and services, including in our operating subsidiaries;
  3. to carry out satisfaction surveys, statistical studies, trend analysis and market studies to improve our products and services, including in our operating subsidiaries;

3. Processing of personal data which is not subject to the Users’ prior consent

The Company shall also process the following personal data for the legitimate purposes set out below. This processing of personal data carried out by the Company does not require the Users’ consent under Article 6.1.f) of the Regulation.

3.1. Nature of the data processed

The Company processes the following personal data:

  1. Surname(s), first name(s), company name, postal address, email address, landline or mobile telephone number;
  2. any other information that may be exchanged between the Company and the User, namely by email, during the User’s registration or use of the Site.

3.2. The data processing

The processing consists of collecting, recording, retaining, consulting, organizing, using and cross-referencing the personal data set out in Article 2.1.

3.3. Legitimate purposes of the data processing

The Company will process the personal data set out in Article 3.1. for the legitimate purposes needed to allow the User to access and use the website.

4. User rights

Users may exercise their rights to request that their data be rectified, to object to it being processed and to limit the processing, according to the terms and within the limits set out below.

4.1. Right of access

The Company shall provide Users with the following information:

  • the name and contact details of the data controller:
  • the contact details for the data protection officer;
  • the personal data processed;
  • the purposes for which the personal data is being processed and the legal basis for this processing;
  • the recipients or categories of recipients of personal data, as appropriate;
  • if relevant, the fact that the data controller intends to transfer personal data to a country outside the European Union and either the fact that the European Commission has adopted an adequacy decision (or not). If such a decision has not been adopted, the Company transfers to the User the guarantees offered by the non-EU country and the resources in place for obtaining copies of the personal data;
  • The option to object to the automated processing of their data, including profiling, unless there are justified grounds requiring the Company to process this data, as well as the option to object to any processing of their personal data for marketing purposes.
  1. Users have the right to request to be provided with the information referred to in this Article and in Articles 2.1 and 3.1.
  2. Users can get a copy of the personal data processed. For every extra copy requested, the Company reserves the right to claim payment for any expenses incurred in this new request. These expenses shall be calculated on the basis of the administrative costs incurred in the request and shall not exceed 20 euros.
  3. Users shall have the right to access the information, or a copy thereof, in a structured format, such that the personal data is provided to them in a format that meets the technical standards in place when the request for access was made. This format shall therefore allow for automatic readability.

4.2. Right to request rectification

The Company guarantees and compels Users to update and rectify their personal data if this data becomes incorrect or incomplete.

4.3. Right to object to the processing of data

The Company allows Users to object to their personal data being processed in full or in part on the following grounds:

  • the data is inaccurate;
  • the processing is no longer required for the purposes for which the data was collected;
  • the User has withdrawn consent;
  • the data has been processed illegally.

In addition, the Company allows Users to object to:

  • the automatic processing of their data, unless there are justified grounds requiring the Company to perform this processing.
  • any processing of their personal data for marketing purposes, including profiling if it is linked to this marketing.

4.4. Right to be forgotten

The Company also undertakes to follow up any request to erase personal data (right to be forgotten), when:

  • the processing is no longer required for the purposes for which the data was collected;
  • the User has withdrawn consent;
  • the data has been processed illegally or must be erased pursuant to a legal obligation.
  • The User objects to the automatic processing of their data, such as profiling, and there are no justified grounds requiring the Company to perform this processing.
  • The User objects to the processing of their personal data for marketing purposes, if it is linked to this marketing.

4.5. Right to restriction of data processing

Users also have the right to restrict the Company’s processing of their personal data when:

  • the User believes the personal data to be inaccurate, whilst the Company checks the accuracy of the information;
  • the processing is illegal and the User does not wish for their data to be erased but requests to limit the processing thereof;
  • the User objects to automatic processing, including profiling, or to the processing of their personal data for marketing purposes and it is necessary to verify the legitimacy of the Company’s reasons for seeking to continue this processing;
  • The Company no longer requires the personal data processed but the data subject would like it to be held to establish, exercise or defend legal claims;

4.6. Transferring data to a data controller

Users may transfer the personal data processed by the Company to another data controller without objection from the Company.

For such a transfer to be technically possible, Users may ask the Company that it be performed directly by its data controller.

4.7. Terms and conditions

The rights recognized to the User must be exercised in accordance with the terms and conditions defined in Article 7.3. The Company shall respond to such requests for information within one (1) month.

4.8. Notification

The Company shall notify the User of any data that is erased or rectified in accordance with Article 4, unless such notification proves impossible or involves disproportionate efforts.
This notification shall be sent by letter or email, using the contact details provided by the User.

5. Location, retention and retention period of personal data

The Company retains Users’ personal data appropriately and securely in a form which enables it to be identified and made available.

The data is retained and hosted in Belgium. The Company provides all of the required or useful security assurances with regard to current technical standards.

Users’ personal data is retained by the Company for the purposes set out in Articles 2 and 3 for a period which does not exceed the time frame needed for the realization of the purpose of the processing, for all the purposes governed by Articles 2 and 3.

6. The Company’s responsibility – Data processing

6.1.

The Company ensures that the processing of personal data is carried out in a lawful, loyal and transparent manner with regard to the User concerned. Any data processing operation performed by the Company shall comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, and this Privacy policy.

The Company shall implement all reasonable and appropriate means to ensure the confidentiality, integrity and availability of the personal data it processes. These namely technical and organizational measures are explained in the data protection manual which may be obtained from the contact person detailed in Article 7.5.

6.2.

Users’ personal data is not sent to any third parties other than partners of the Company, except:

  • The data transfer is made mandatory by a law or regulation or when ordered by an administrative or judicial authority;
  • The data transfer proves necessary for the supply of online gaming and betting services, or maintenance services;
  • The User has consented to such a transfer;

The Company shall not be held liable for the processing of Users’ personal data by partners who supply their services in their own name and shall be liable for damage caused by processing personal data contrary to the Regulation.

To the extent the processing is carried out by a partner on behalf of the Company, they must comply with the Regulation and, therefore, keep a record of processing activities.

7. Other

7.1. Entire agreement – modification of the Privacy policy

The Privacy policy contains all of the contractual provisions binding Users, without prejudice to the legal terms of the Site of which they form an integral part. The legal terms of the Site shall remain applicable for any matters that do not relate to the Users’ personal data protection.
In addition, the Company reserves the right to modify the Privacy policy. Any updates are enforceable against Users once published on the Site. The Company undertakes to state the date on which the Privacy policy that appears on the Site was put online.

7.2. Contact – Information on the identity of the data controller and data protection officer

The Company may be contacted for any questions regarding the protection of Users’ personal data via the following:

The Company has also appointed a data protection officer in accordance with Article 37 of the Regulation cited above. This person may be contacted by email at .

7.3. Data protection authority

Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, the User has the right to request additional information or lodge a complaint with the Belgian data protection authority.

The contact details for the Belgian data protection authority are as follows:

Data protection authority

  • Address: Rue de la Presse, 35, 1000 Brussels, Belgium
  • Telephone: +32 2 274 48 00
  • Fax: +32 2 274 48 35
  • Email: