Privacy Policy
Last updated: August 20, 2026
This notice applies to the processing activities described below and is regularly updated through the website. We recommend that you consult this page regularly.
Contents
- 1. Who Are We?
- 2. Scope
- 3. What Personal Data Do We Process?
- 4. Sources of Personal Data
- 5. Why Do We Process Your Personal Data?
- 6. With Whom Do We Share Your Personal Data?
- 7. International Transfers of Personal Data
- 8. Retention Periods
- 9. Your Rights
- 10. Cookies and Similar Technologies
- 11. Data Security
- 12. Complaints and Supervisory Authority
- 13. Changes to this Privacy Statement
- 14. Contact Details
1. Who Are We?
This Privacy Statement applies to the website www.caribel.be and the services provided by Caribel.
Caribel NV
- Legal entityCaribel NV
- Registered officeSchaarbeeklei 245, 1800 Vilvoorde, Belgium
- Company numberBE0817.219.654
- General contactcaribel.be/contact
- E-mailsales@caribel.be
- Telephone+32 2 254 84 30
Hereinafter referred to as “Caribel”, “we”, “us”, or “our”.
Caribel acts as the data controller for personal data processed in connection with bodywork repairs, claims management, vehicle damage assessments, customer management, quotations, service delivery, and website management.
For questions regarding this Privacy Statement or the processing of personal data, you may contact us via the contact form available at www.caribel.be/contact or through the contact details listed above.
2. Scope
This Privacy Statement applies to:
- Visitors to our website
- Current and former customers
- Prospective customers
- Individuals who contact us
- Individuals requesting a quotation
- Individuals making an appointment for bodywork repairs
- Individuals using our services
- Insurance companies, brokers and assessment offices with whom we cooperate
- Suppliers and business partners
3. What Personal Data Do We Process?
Depending on your relationship with Caribel and the services you use, we may process the following categories of personal data.
Identification and Contact Data
- First name
- Last name
- Title or salutation
- Address details
- Postal code
- City or municipality
- Email address
- Telephone number or mobile number
- Identification data or driving licence
- VAT number (for business customers)
- Company name
- Type of vehicle usage (private, lease, or company vehicle)
- Leasing company or fleet partner (where applicable)
Vehicle Data
- Licence plate number
- Vehicle Identification Number (VIN)
- Vehicle make and model
- Mileage
- Technical vehicle information
- Repair and maintenance history
- Damage information
- Photographs of vehicle damage
- Assessment and expert report information
- File reference numbers
- Information regarding completed repair work
Information Collected Through Forms and Communications
- Contact requests
- Quotation requests
- Repair requests
- Appointment details
- Communications relating to damage claims
- Comments or additional information provided voluntarily
Financial and Administrative Data
Where necessary for the performance of a contract:
- Billing information
- Payment information
- Accounting records
- Insurance information
- Leasing company or fleet management information
Technical Data
While using our website, certain technical data may be processed automatically, including:
- IP address
- Browser type
- Device information
- Pages visited
- Date and time of visits
- Cookie information (see Section 10)
- Interaction data relating to our website
4. Sources of Personal Data
We obtain personal data directly from you or in the course of providing our services.
Personal data may be collected through:
- Forms available on our website
- Email communications or telephone calls
- Visits to our premises
- Appointment bookings
- Repair work carried out by Caribel
- Cookies and website analytics tools
In certain cases, we may receive personal data from third parties when this is necessary for the provision of our services.
Such third parties may include:
- Insurance companies
- Insurance brokers
- Loss adjusters and assessment offices
- Leasing companies
- Fleet managers
- Garages
- Vehicle manufacturers
- Vehicle importers
5. Why Do We Process Your Personal Data?
We process personal data only for specific purposes and based on a valid legal basis in accordance with Article 6 of the General Data Protection Regulation (GDPR).
| Purpose of Processing | Legal Basis |
|---|---|
| Handling contact requests via the website, email or telephone | Pre-contractual measures |
| Scheduling, confirming and managing appointments | Pre-contractual measures and performance of a contract |
| Preparing and following up quotations | Pre-contractual measures |
| Performing vehicle bodywork repairs | Performance of a contract |
| Managing damage claim files | Performance of a contract |
| Communicating with customers, insurers and experts | Performance of a contract |
| Managing insurance and assessment files | Performance of a contract |
| Managing customer records and service delivery | Performance of a contract |
| Invoicing, accounting and tax obligations | Legal obligation |
| Handling disputes, complaints and legal proceedings | Legitimate interest |
| Securing buildings, systems and websites | Legitimate interest |
| Preventing fraud, misuse and security incidents | Legitimate interest |
| Analysing website usage and improving user experience | Consent |
If a processing activity is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
6. With Whom Do We Share Your Personal Data?
We do not sell your personal data to third parties.
We only share personal data when this is necessary for the provision of our services, the performance of an agreement, compliance with a legal obligation, or when you have provided your consent.
Personal data may be shared with:
Service Providers and Processors
- IT service providers
- Hosting providers
- Software providers
- Accounting and tax advisors
- Administrative service providers
Business Partners
Where necessary for the provision of our services, personal data may be shared with:
- Insurance companies
- Insurance brokers
- Loss adjusters and expert offices
- Leasing companies
- Fleet managers
- Subcontractors
- Vehicle manufacturers and importers
Marketing and Analytics Tools
Subject to your consent, personal data or technical data may be processed by:
- Meta
Public Authorities
Where we are legally required to do so, personal data may be disclosed to competent public authorities, supervisory authorities, judicial authorities, or law enforcement agencies.
Where required by law, we enter into data processing agreements with our external processors.
7. International Transfers of Personal Data
Some of our technology partners may process personal data outside the European Economic Area (EEA).
This may include services provided by: Google, Meta.
Where personal data is transferred outside the European Economic Area, we ensure that appropriate safeguards are implemented in accordance with applicable data protection legislation, including the use of Standard Contractual Clauses approved by the European Commission or other legally permitted transfer mechanisms.
8. Retention Periods
We do not retain personal data longer than necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.
As a general rule, we apply the following retention periods:
| Data Type | Retention Period |
|---|---|
| Contact requests | Maximum 3 years |
| Quotation requests | Maximum 5 years |
| Appointments, customer files and damage claim files | Duration of the agreement plus applicable statutory limitation periods |
| Expert assessment and insurance files | Duration of the file plus applicable statutory limitation periods |
| Invoices and accounting records | 10 years in accordance with applicable legislation |
| Analytics data | According to the retention period of the analytics tools used |
When personal data is no longer required, it will be deleted or anonymised.
9. Your Rights
In accordance with applicable data protection legislation, including the GDPR, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request erasure of your data (“right to be forgotten”)
- Request restriction of processing
- Request data portability
- Object to the processing of your data
- Withdraw your consent at any time
You may exercise these rights by contacting the relevant office using the contact details provided in this Privacy Statement.
We may request additional information to verify your identity before processing your request.
10. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Cookies are small text files that are placed on your device when you visit our website.
We use:
- Strictly necessary cookies
- Analytics cookies
- Marketing cookies
Analytics and marketing cookies are only placed after you have provided your consent, unless a legal exception applies.
You can find more information about the cookies used, their purposes, retention periods, and how to manage your preferences in our separate Cookie Policy.
You can change your cookie preferences at any time through the cookie settings available on our website.
11. Data Security
We implement appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, unwanted disclosure, alteration, or destruction.
These measures include, among others:
- Secure network connections
- Access controls
- Password protection
- Restricted employee access
- Regular system updates
- Monitoring of security incidents
Although we take reasonable steps to protect personal data, no system can guarantee complete security.
12. Complaints and Supervisory Authority
First Step: Contact Us
If you have any questions or believe that your data protection rights have been infringed, please contact us first.
It is our responsibility to assist you and ensure that all relevant questions are addressed.
Please refer to the contact details provided in the final section of this Privacy Statement.
We will work with you to resolve your questions and concerns as efficiently as possible.
Next Step: Data Protection Authority
If you remain dissatisfied and believe that we have not handled your data protection rights appropriately as the data controller, you have the right to lodge a complaint with your local Data Protection Authority (DPA).
As our headquarters are located in Belgium, you may contact the:
Belgian Data Protection Authority (DPA):https://www.dataprotectionauthority.be
For a list of European data protection authorities, please consult: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en
13. Changes to this Privacy Statement
We may amend this Privacy Statement from time to time. The most recent version will always be available on our website and other relevant platforms.
We recommend reviewing this page regularly to stay informed of any updates.
14. Contact Details
Please contact your direct contact person at Caribel first.
If you have questions about the processing of your personal data, please contact your direct contact person at Caribel. They are best placed to understand your situation and assist you.
You may also contact us regarding privacy-related matters via: sales@caribel.be.
To verify your identity, we may request additional information.
We will process your request in accordance with the GDPR and will generally respond within one month of receipt.