Deze versie is alleen voor referentie, alleen de Nederlandse versie is rechtsgeldig.

1. Introduction and data controller information

DevBiz ("we," "our," or "us") is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and Belgian data protection laws.

Data controller details

• Company: DevBiz
• Address: Walstraat 70, 8020 Oostkamp, Belgium
• Email: privacy@devbiz.eu
• Phone: +32 451 02 41 42
• VAT Number: BE1022.925.574

Data Protection Officer (DPO)

For any questions regarding data protection, you can contact our Data Protection Officer at: dpo@devbiz.eu

2. Information we collect

2.1 Personal Information

We may collect the following personal information:

• Name and contact information (email, phone number)
• Company information
• Project requirements and specifications
• Communication history

2.2 Technical Information

We automatically collect certain technical information when you visit our website:

• IP address and location data
• Browser type and version
• Operating system
• Pages visited and time spent
• Referring website

3. Purposes and legal basis for data processing

3.1 Contract performance

We process your data to provide web development services and fulfill our contractual obligations.

Legal Basis: Article 6(1)(b) GDPR - Contract performance

3.2 Legitimate interest

We process data for our legitimate interests in improving our services, website functionality, and business operations.

Legal basis: Article 6(1)(f) GDPR - Legitimate interest

3.3 Consent

We process data for marketing communications only with your explicit consent.

Legal basis: Article 6(1)(a) GDPR - Consent

3.4 Legal obligation

We process data to comply with legal obligations, including tax and accounting requirements.

Legal basis: Article 6(1)(c) GDPR - Legal obligation

4. Legal basis for processing

We process your personal data based on the following legal grounds:

• Contract: To fulfill our contractual obligations
• Legitimate interest: To improve our services and website
• Consent: For marketing communications
• Legal obligation: To comply with applicable laws

5. Data sharing and disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• With your explicit consent
• To comply with legal obligations
• To protect our rights and safety
• With trusted service providers who assist in our operations

6. Data security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

7. Your rights

Under GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Portability: Request transfer of your data
• Objection: Object to processing of your data
• Restriction: Request limitation of processing

8. Data retention periods

8.1 Contract data

Contract-related data: 7 years (legal requirement for business records)

8.2 Marketing data

Marketing communications data: 3 years from last contact or until consent withdrawal

8.3 Website analytics

Website analytics data: 26 months (Google Analytics standard)

8.4 Technical data

Technical logs and security data: 12 months

8.5 Data deletion

Upon expiration of retention periods, data is securely deleted or anonymized. You may request earlier deletion of your data by contacting us.

9. Cookies

Our website uses cookies to enhance your browsing experience. For detailed information about our use of cookies, please see our Cookie Policy.

10. International transfers

Your personal data is processed within the European Economic Area (EEA). If we need to transfer data outside the EEA, we ensure adequate protection measures are in place.

11. Automated decision-making and profiling

We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.

If this changes in the future, we will inform you and obtain your consent where required.

12. Children's privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16.

If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.

13. Data breach notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Belgian Data Protection Authority (APD) within 72 hours of becoming aware of the breach.

If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.

For significant changes, we will provide additional notice through email or prominent website announcements.