CandyCard processes personal data in accordance with this privacy statement. For further information, questions or comments regarding our privacy policy, please visit

Processing purposes

CandyCard collects and processes the personal data of customers for customer and order management (e.g. customer administration, follow-up of orders/deliveries, invoicing, solvency monitoring, profiling and sending marketing and personalized advertising).

Legal basis(s) of the processing

Personal data will be processed on the basis of article 6.1. (b) necessary for the execution of an agreement) and (f) necessary for the promotion of our legitimate interest in undertaking the General Data Protection Ordinance. Insofar as the processing of personal data takes place on the basis of Article 6.1. a, the customer has the right to withdraw the consent given at any time. 

Transfer to third parties

If it is necessary for the accomplishment of the stated purposes, the customer's personal data will be shared with other companies directly or indirectly linked to CandyCard or with any other partner of CandyCard; CandyCard guarantees that these recipients will take the necessary technical and organizational measures for the protection of the personal data. 

Storage period

The personal data processed for customer management purposes will be kept for the time necessary to comply with legal requirements (e.g. in the field of accounting). 

Rights of access, rectification, deletion, restriction, objection and transferability of personal data

The customer has the right to access his personal data at any time and to have them corrected if they are inaccurate or incomplete, to have them removed, to have their processing restricted and to object to the processing of personal data concerning him on the basis of article 6.1 (f), including profiling on the basis of these provisions. In addition, the customer has the right to obtain a copy (in a structured, common and machine-readable form) of his personal data and to have the personal data forwarded to another company. In order to exercise the above rights, the customer is requested to: adjust the settings of his customer account; and/or send an e-mail to the following e-mail address:

You must add a copy of your identity document or equivalent data (if requested by us and permitted by law). If the request is made by someone other than you, without providing evidence that the request is made lawfully in your name, the request will be refused. 

Direct Marketing

The customer has the right to object, free of charge, to any processing of his personal data for the purpose of direct marketing. 


The Client has the right to lodge a complaint with the Commission for the Protection of Privacy (Press Office 35, 1000 Brussels -