Privacy Policy

What this policy covers

This policy covers the personal data we process when you visit this website, use our contact form, email or call us, or apply for a job with us.

It does not cover the data we process on behalf of our clients, such as the payroll and personnel data of their employees. For that data we act as a processor and the arrangements in the agreement with that client apply.

We comply with the General Data Protection Regulation (GDPR) and with the Belgian Act of 30 July 2018 on the protection of personal data.

If you are an employee of one of our clients and have a question about your payroll or personnel data, please address it to your employer. We may only answer on their instruction, and we pass your question on to them.

Who processes your data

The controller for everything set out in this policy is:

Which data we process and why

We collect no more than what you give us yourself, plus the technical data needed to deliver the page to you, and an anonymous count of visits and clicks.

• Contact form: your name, email address, phone number if you fill it in, the subject you pick and your message, plus the language of the page and the time of sending. We use these to answer your question and, if it comes to that, to prepare a working relationship. Legal basis: if your question is about a possible working relationship, these are the steps preceding a contract at your request (article 6.1.b GDPR); if it is not, we rely on our legitimate interest in answering visitors' questions (article 6.1.f GDPR).
• Email and phone: whatever you provide us through those channels, for the same purpose and on the same legal basis.
• Job applications: your CV, your motivation and anything else you send along, in order to assess your application. Legal basis: the steps taken at your request prior to entering into an employment contract.
• Technical data: your IP address, your browser type and the page requested are processed by our hosting provider in order to deliver and secure the website. We do not keep visitor logs ourselves and we do not link that data to you as a person. Legal basis: our legitimate interest in a working and secure website (Article 6.1.f GDPR).
• Your cookie choice: if you ever made a choice in a cookie banner, that choice is stored in a cookie on your own device. We do not keep it on our servers. See the cookie policy.
• What is required and what is not: we need your name, email address, subject and message in order to reply. Without them we cannot handle your question. Your phone number is optional.
• Data that does not come from you: if someone mentions you in a message, or a candidate gives you as a reference, we process your name, role and business contact details. We let you know within one month, unless you already know, and you can object.

What we do not do

This website carries no third-party analytics or advertising software. We do not follow you across other websites, and there is no pixel or tag from an advertising network.

• No profiling and no automated decision-making.
• No sale or rental of your data to third parties.
• No newsletter or commercial mailing because you asked us a question, unless you request it yourself.
• No fonts, maps or videos from third-party servers. Everything the page loads comes from our own domain, so your visit is not reported to third parties.

Who receives your data

Your data stays within our office. Beyond that, only the service providers we need in order to work have access, and only to the extent that they need it:

Data processing agreements are in place with these parties: they may only use your data on our instructions. Where a service provider would process data outside the European Economic Area, this happens on the basis of the European Commission's standard contractual clauses or an equivalent safeguard. Apart from that, we only pass on your data where the law obliges us to. Microsoft may access it for support and security purposes from a country outside the European Economic Area; that happens under the same standard contractual clauses. You can request a copy of those safeguards through our email address.

• Amazon Web Services: the hosting of this website and the delivery of the contact form by email. Storage and delivery run in the EU Stockholm region.
• Microsoft: our mailboxes, where your message arrives.
• Our IT service provider, for the maintenance of the website.

How long we keep data

We do not keep data longer than is needed for the purpose for which we received it.

• Contact requests that do not lead to a working relationship: up to two years after the last contact.
• Contact requests that do lead to a working relationship: together with the client file, according to the periods that apply to that file.
• Job applications: up to six months after the end of the procedure. If we want to keep your application on file longer for a future vacancy, we ask your consent for that.
• Your cookie choice: six months on your own device, or shorter if you delete it yourself. After that we ask again.

Your rights

You may inspect your data, have it corrected or have it erased. You can have the processing restricted, object to processing based on our legitimate interest, and request your data in a readable format. If you gave us your consent, you can withdraw it at any time; what happened before that remains valid.

Ask us through the contact details at the top of this page. We reply within one month. If your request is complex, we may extend that period by two months and we will tell you so. If there is any doubt about who is making the request, we first ask for proof of identity, because we do not hand over data to the wrong person.

Send questions about this statement and about your rights to the email address at the top of this page. They go straight to the managing director.

Filing a complaint

If you are not satisfied with the way we handle your data, tell us first and we will sort it out. You can also file a complaint directly with the supervisory authority, the Belgian Data Protection Authority:

Security

The website runs entirely over a secure connection (https) and the contact form is sent encrypted to our mailbox. Access to that mailbox is limited to the staff handling your question.

Do not send us sensitive documents through the form, such as health data, a national register number or employees' payslips. A web form is not the right channel for that. Ask us for a secure alternative and we will arrange it.

Changes

Legislation and working methods change, so this policy may change too. The date at the top states when it was last amended. In the event of a major change, we inform the people whose data we process.