Privacy Policy

Last updated: August 20, 2026

This notice applies to the processing activities described below and is regularly updated through the website. We recommend that you consult this page regularly.

1. Who Are We?

This Privacy Statement applies to the website www.caribel.be and the services provided by Caribel.

Hereinafter referred to as “Caribel”, “we”, “us”, or “our”.

Caribel acts as the data controller for personal data processed in connection with bodywork repairs, claims management, vehicle damage assessments, customer management, quotations, service delivery, and website management.

For questions regarding this Privacy Statement or the processing of personal data, you may contact us via the contact form available at www.caribel.be/contact or through the contact details listed above.

2. Scope

This Privacy Statement applies to:

• Visitors to our website
• Current and former customers
• Prospective customers
• Individuals who contact us
• Individuals requesting a quotation
• Individuals making an appointment for bodywork repairs
• Individuals using our services
• Insurance companies, brokers and assessment offices with whom we cooperate
• Suppliers and business partners

3. What Personal Data Do We Process?

Depending on your relationship with Caribel and the services you use, we may process the following categories of personal data.

Identification and Contact Data

1. First name
2. Last name
3. Title or salutation
4. Address details
5. Postal code
6. City or municipality
7. Email address
8. Telephone number or mobile number
9. Identification data or driving licence
10. VAT number (for business customers)
11. Company name
12. Type of vehicle usage (private, lease, or company vehicle)
13. Leasing company or fleet partner (where applicable)

Vehicle Data

1. Licence plate number
2. Vehicle Identification Number (VIN)
3. Vehicle make and model
4. Mileage
5. Technical vehicle information
6. Repair and maintenance history
7. Damage information
8. Photographs of vehicle damage
9. Assessment and expert report information
10. File reference numbers
11. Information regarding completed repair work

Information Collected Through Forms and Communications

1. Contact requests
2. Quotation requests
3. Repair requests
4. Appointment details
5. Communications relating to damage claims
6. Comments or additional information provided voluntarily

Financial and Administrative Data

Where necessary for the performance of a contract:

1. Billing information
2. Payment information
3. Accounting records
4. Insurance information
5. Leasing company or fleet management information

Technical Data

While using our website, certain technical data may be processed automatically, including:

1. IP address
2. Browser type
3. Device information
4. Pages visited
5. Date and time of visits
6. Cookie information (see Section 10)
7. Interaction data relating to our website

4. Sources of Personal Data

We obtain personal data directly from you or in the course of providing our services.

Personal data may be collected through:

• Forms available on our website
• Email communications or telephone calls
• Visits to our premises
• Appointment bookings
• Repair work carried out by Caribel
• Cookies and website analytics tools

In certain cases, we may receive personal data from third parties when this is necessary for the provision of our services.

Such third parties may include:

• Insurance companies
• Insurance brokers
• Loss adjusters and assessment offices
• Leasing companies
• Fleet managers
• Garages
• Vehicle manufacturers
• Vehicle importers

5. Why Do We Process Your Personal Data?

We process personal data only for specific purposes and based on a valid legal basis in accordance with Article 6 of the General Data Protection Regulation (GDPR).

If a processing activity is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. With Whom Do We Share Your Personal Data?

We do not sell your personal data to third parties.

We only share personal data when this is necessary for the provision of our services, the performance of an agreement, compliance with a legal obligation, or when you have provided your consent.

Personal data may be shared with:

Service Providers and Processors

• IT service providers
• Hosting providers
• Software providers
• Accounting and tax advisors
• Administrative service providers

Business Partners

Where necessary for the provision of our services, personal data may be shared with:

• Insurance companies
• Insurance brokers
• Loss adjusters and expert offices
• Leasing companies
• Fleet managers
• Subcontractors
• Vehicle manufacturers and importers

Marketing and Analytics Tools

Subject to your consent, personal data or technical data may be processed by:

• Google
• Meta

Public Authorities

Where we are legally required to do so, personal data may be disclosed to competent public authorities, supervisory authorities, judicial authorities, or law enforcement agencies.

Where required by law, we enter into data processing agreements with our external processors.

7. International Transfers of Personal Data

Some of our technology partners may process personal data outside the European Economic Area (EEA).

This may include services provided by: Google, Meta.

Where personal data is transferred outside the European Economic Area, we ensure that appropriate safeguards are implemented in accordance with applicable data protection legislation, including the use of Standard Contractual Clauses approved by the European Commission or other legally permitted transfer mechanisms.

8. Retention Periods

We do not retain personal data longer than necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

As a general rule, we apply the following retention periods:

When personal data is no longer required, it will be deleted or anonymised.

9. Your Rights

In accordance with applicable data protection legislation, including the GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request erasure of your data (“right to be forgotten”)
• Request restriction of processing
• Request data portability
• Object to the processing of your data
• Withdraw your consent at any time

You may exercise these rights by contacting the relevant office using the contact details provided in this Privacy Statement.

We may request additional information to verify your identity before processing your request.

10. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Cookies are small text files that are placed on your device when you visit our website.

We use:

• Strictly necessary cookies
• Analytics cookies
• Marketing cookies

Analytics and marketing cookies are only placed after you have provided your consent, unless a legal exception applies.

You can find more information about the cookies used, their purposes, retention periods, and how to manage your preferences in our separate Cookie Policy.

You can change your cookie preferences at any time through the cookie settings available on our website.

11. Data Security

We implement appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, unwanted disclosure, alteration, or destruction.

These measures include, among others:

• Secure network connections
• Access controls
• Password protection
• Restricted employee access
• Regular system updates
• Monitoring of security incidents

Although we take reasonable steps to protect personal data, no system can guarantee complete security.

12. Complaints and Supervisory Authority

First Step: Contact Us

If you have any questions or believe that your data protection rights have been infringed, please contact us first.

It is our responsibility to assist you and ensure that all relevant questions are addressed.

Please refer to the contact details provided in the final section of this Privacy Statement.

We will work with you to resolve your questions and concerns as efficiently as possible.

Next Step: Data Protection Authority

If you remain dissatisfied and believe that we have not handled your data protection rights appropriately as the data controller, you have the right to lodge a complaint with your local Data Protection Authority (DPA).

As our headquarters are located in Belgium, you may contact the:

Belgian Data Protection Authority (DPA):https://www.dataprotectionauthority.be

For a list of European data protection authorities, please consult: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en

13. Changes to this Privacy Statement

We may amend this Privacy Statement from time to time. The most recent version will always be available on our website and other relevant platforms.

We recommend reviewing this page regularly to stay informed of any updates.

14. Contact Details

Please contact your direct contact person at Caribel first.

If you have questions about the processing of your personal data, please contact your direct contact person at Caribel. They are best placed to understand your situation and assist you.

You may also contact us regarding privacy-related matters via: sales@caribel.be.

To verify your identity, we may request additional information.

We will process your request in accordance with the GDPR and will generally respond within one month of receipt.