Privacy Policy
Last modified on June 30, 2025.
First and foremost, we are delighted that you have chosen to use the website of Le Pain Quotidien (the "Website"). We make every reasonable effort to ensure that you do not have to worry about the protection of your Personal Data when using the Website.
In this privacy statement, we inform you about how we use the Personal Data you provide to us during the use of the Website.
We may ask you to share certain Personal Data with us, including but not limited to your first name, last name, and email address (identification data).
We only collect the Personal Data that is necessary to inform you about the Website and related services, to perform an agreement with you, to communicate with you, to exercise our legitimate interest, and to comply with a legal obligation to which we are subject.
We base this on the legal grounds of the agreement, our legitimate interest, and, in some cases, your consent (see also Article 2).
The processing of your Personal Data is subject to this privacy statement. If you have any questions about this privacy statement and/or the processing of your Personal Data by the Controller, you can contact us.
By providing Personal Data, you are deemed to have acknowledged the use of your Personal Data in accordance with this privacy statement.
1. Definitions
"Affiliated Company" means a company affiliated with the Company to the extent that it meets the conditions of an "affiliated company" within the meaning of article 1:20 of the Belgian Code of Companies and Associations.
“Brunchco 21” means Brunchco 21 NV, a company organized and existing under Belgian law, with registered office at 1000 Brussels (Belgium), Havenlaan 86C and registered with the Crossroads Bank of Enterprises under number 0747.485.166.
"Website" means the "Le Pain Quotidien" website, www.lepainquotidien.com/az/en/
"Company" means FBCO LLC, with registered office at 3 Rasul Rza street, Sabail District AZ1095, Baku, Azerbaijan, acting as Controller in this context.
"Controller" means the natural or legal person who alone or jointly with others determines the purposes (the "why") and means (the "how") of processing Personal Data, as defined in General Data Protection Regulation 2016/679. The Company will qualify as the Controller with respect to the Personal Data processed through the Website.
"Personal Data" means any information relating to an identified or identifiable natural person (also referred to as "data subject").
"Processor" has the meaning as defined in the General Data Protection Regulation 2016/679, which processes Personal Data on behalf of the Controller. Brunchco 21 will qualify as the Processor with respect to the Personal Data processed through the Website.
2. Qualifications of the parties
In the context of the use of the Website, we inform you that the Website and its subpages are operated by Brunchco 21, who processes personal data on behalf of the Company. In this respect, Brunchco 21 acts as a data processor, following the instructions and purposes determined by the Company, which qualifies as the data controller under the General Data Protection Regulation 2016/679.
3. Processing purposes and legal bases
In the context of the Website, we collect and process various categories of Personal Data, including identity and contact information. These data may relate to you in your capacity as a customer or a visitor of the Website. We process the following Personal Data:
General Personal Data:
- First and last name
- Address details
- Phone number
- Email address
- Interaction data
- IP address (to the extent that we can identify you)
- Other Personal Data that you provide to us or that we receive from third parties in the context of our services
The legal bases for this processing are the performance of the agreement, our legitimate interests and, in some cases, your consent.
Specifically, we may use the Personal Data we collect for the following purposes:
• to identify you as a user of the Website;
• to enable you to use the Website and its functionalities and services;
• to provide you with our services and to execute any agreements;
• to process and handle any complaints or requests;
• to assist us in evaluating and improving the Website and all related products or services;
• for direct marketing purposes;
• for internal purposes, including business administration and archival purposes;
• to comply with legal, administrative, and accounting obligations.
4. The confidentiality of your Personal Data
Whenever you provide Personal Data to us, we will treat this information in accordance with the provisions of this privacy statement and the legal obligations relating to the processing of Personal Data, including the General Data Protection Regulation (GDPR) 2016/679.
We implement appropriate procedures to secure and protect the Personal Data we collect through the Website or electronic communication. In this way, we commit ourselves, to the extent reasonably expected, to prevent illegal processing of Personal Data and unintentional loss or destruction of your Personal Data. However, despite these precautions, we cannot guarantee that your Personal Data will be protected if this data is transmitted or communicated outside the contact form on the Website through insecure channels or in another manner.
We seek to optimize the security of your Personal Data by limiting access to your Personal Data to individuals on a "need-to-know" basis (for example: only the Data Controller and her employees, staff, and subcontractors who require your Personal Data for the purposes as described in article 2 will have access to the data).
5. How do we collect your Personal Data and how long will it be retained?
Data collection
We collect your Personal Data - without limitation - in the following cases:
(i) when you visit the Website;
(ii) when you enter into an agreement with us;
(iii) when you call us, email us, or correspond with us in any other way than through the Website.
We avoid the collection of Personal Data that is not relevant for the purposes as set out in article 2.
We may combine the Personal Data we collect with information provided to us by third parties, provided this is compatible with the purposes for which the data was originally collected. We will inform you of the types of Personal Data, as well as the source and purpose of this Personal Data. We process this Personal Data in accordance with this privacy statement.
Data Retention
We will not retain and process your Personal Data longer than necessary for the purposes of processing.
Customer data and supplier or subcontractor data will, in any case, be deleted from our systems after a period of 7 (seven) years following the termination of the agreement, unless there is an ongoing dispute in which the Personal Data is still required.
Personal Data of employees will be deleted immediately and no later than five years after the termination of the employment relationship, except for Personal Data that we are required to retain based on specific legislation or in the event of an ongoing dispute where the Personal Data is still necessary.
Personal Data of applicants will be deleted after the relevant position has been filled, no later than 1 (one) month after the end of the application process, or after a period of 1 (one) year after consent was obtained to contact applicants about future job opportunities.
Other data will not be retained for more than 2 (two) years after the last meaningful contact with you, unless explicit consent has been obtained to retain this data for a longer period.
6. Transfer of Personal Data?
We will not transfer any Personal Data to third parties located outside the European Economic Area. Exceptions may include subcontractors or employees who (i) are located in a country that the European Commission or the Minister of Justice recognizes as having an adequate level of protection for the processing of Personal Data, or (ii) store the Personal Data in accordance with the Standard Contractual Clauses of the European Commission, thus ensuring an adequate level of security for the processing of Personal Data.
Furthermore, we will not transfer Personal Data to other parties within the European Economic Area without your consent, unless:
(i) the transfer is necessary to allow affiliated companies, employees, agents, or subcontractors to provide a service or perform a task on our behalf, which is necessary for the execution of the contract we have with you or within the scope of our legitimate interest (including, but not limited to, providing marketing support, conducting market research, or providing customer service);
(ii) it is required by law.
Any transfer of Personal Data to a recipient as listed above shall be in accordance with the provisions of the General Data Protection Regulation 2016/679.
We shall ensure that measures are taken to prevent the recipients from using the Personal Data for purposes other than those listed in Article 2 and that these recipients have implemented sufficient technical and organizational measures to protect this data.
In order to ensure the security of the Personal Data, we shall always enter into a data processing agreement with the aforementioned recipients of the Personal Data or, where applicable, Standard Contractual Clauses as provided by the European Commission.
Finally, we shall take all necessary precautions to ensure that our employees and staff who have access to the Personal Data process it solely in accordance with this privacy statement and the legal obligations under the General Data Protection Regulation 2016/679.
7. Rights of data subject
Under both Belgian and European legislation on the protection of Personal Data, you have the rights described below. If you wish to exercise any of these rights, you must send us a written request.
If there is no reasonable certainty about your identity, we may request that you send a copy of the front of your identity card showing only your first and last name.
Are there any costs involved? You can exercise your rights free of charge, unless your request is manifestly unfounded or excessive, in particular due to its repetitive nature. In that case, we have the right and the choice – in accordance with the relevant legislation – to (i) charge you a reasonable fee (in which case the administrative costs for providing the requested information or communication and the costs associated with taking the requested actions will be taken into account), or (ii) refuse to act on your request.
In what format will I receive a response? When you submit your request electronically, the information will be provided electronically where possible, unless you request otherwise. In any case, you will receive a concise, transparent, intelligible, and easily accessible response from us.
When will I receive a response? We will respond as soon as possible and in any case within one month of receiving your request. Depending on the complexity of the requests and the number of requests, this period may be extended by another month if necessary. In case of an extension of the deadline, we will inform you within one month of receiving the request.
The right of access to Personal Data
You have the right to instruct us to provide all Personal Data we hold about you, provided that the rights of other individuals are not affected.
You also have the right to receive a free copy of the processed data in an understandable form. The Company may request a reasonable fee to cover its administrative costs for any additional copies you request.
The right to rectification of Personal Data
You have the right to promptly correct incomplete, incorrect, inappropriate, or outdated Personal Data.
To keep your data up to date, we ask you to inform us of any changes, such as a change of address or a change of email address. These changes can be communicated via the relevant tools.
The right to erasure of Personal Data
You have the right to have your Personal Data erased without undue delay in the following cases:
• when it is no longer necessary to retain the Personal Data for the purposes for which it was collected or otherwise processed;
• when it is required by law;
• in case of withdrawal of consent for consent-based processing;
• for processing intended for direct marketing; and
• if the Personal Data has been processed unlawfully.
However, there are certain general exclusions to the right to erasure. These general exclusions include cases where processing is necessary:
• for the exercise of the right to freedom of expression and information;
• to comply with a legal obligation; or
• to establish, exercise, or defend legal claims.
The right to restrict the processing of Personal Data
In the following cases, you have the right to restrict the processing of your Personal Data:
• to challenge the accuracy of your Personal Data;
• when the processing is unlawful, but you do not want the Personal Data to be erased; or
• if you object to the processing of your Personal Data, pending verification of that objection.
If processing is restricted on this basis, we may continue to store your Personal Data. However, we will only process the data with your explicit consent to establish, exercise, or defend legal claims, to protect the rights of another natural or legal person, or for reasons of significant public interest.
The right to object
You have the right to object to our processing of your Personal Data in the following cases:
• if we process your Personal Data for direct marketing purposes (including profiling for these purposes) based on our legitimate interest; and
• due to your specific situation (your particular personal circumstances).
The right to data portability
If you wish to exercise your right to data portability, we will transfer the Personal Data in a structured, commonly used, and machine-readable format to a data controller of your choice.
The right to withdraw consent
To the extent that the legal basis for our processing of your Personal Data is your consent, you have the right to withdraw that consent at any time. However, such withdrawal will not affect the lawfulness of processing that occurred before the withdrawal.
The right to lodge a complaint with a supervisory authority
You can contact the Data Protection Authority at any time by sending an email to contact@apd-gba.be or by submitting a written request to the Data Protection Authority, located at 1000 Brussels (Belgium), Drukpersstraat 35. You have the option to appeal to the competent court.
8. Referral to third parties
The Website may contain links to other websites that are not operated by us. While we make every effort to ensure that the references on the Website only lead to websites that have corresponding security and confidentiality standards, we are in no way responsible for the protection and confidentiality of Personal Data, including data you provide on other websites after leaving the Website.
We emphasize the importance of exercising caution and consulting the privacy statement applicable to the respective website before providing personal data.
9. Amendments
We reserve the right to modify this privacy statement at any time by publishing a new version on the Website.
We recommend that you consult the Website regularly to verify whether you agree to any changes to this privacy statement.
In any case, you will be informed by email of any changes to this privacy statement, to the extent that we have your email address.
10. Cookies
We use "cookies" whenever you use the Website. A "cookie" is information sent to your device via the server and stored on the device's hard drive. Cookies help us recognize your device when you use the Website. This enables us to make the processing more user-friendly and provide you with personalized service.
For more information, please refer to our cookie statement, which can be found on our Website.