Privacy Statement
Last updated: 04/09/2026
At Datatrust Associates ((“we”, “us”, “our”), we believe that every individual has the right to control the use/processing of their own personal information, and that their privacy and data protection must be respected. We limit the processing of personal information, and try only to work with other organisations who share the same values. We will not use personal information that you provide to us in any manner inconsistent with the purposes for which you provided it to us and inform you about this purpose and its processing.
Both privacy and the security of your information are important to us. For the processing activities described in this Privacy Statement, Data Trust Associates acts as the data controller within the meaning of the General Data Protection Regulation (“GDPR”). Please read our Privacy Statement to understand our practices with respect to your information
CATEGORIES OF PERSONAL DATA WE PROCESS
We may record your IP address and use it to help improve our website and gather demographic information about users of our website. We use your information to personalise your experience and to analyze usage.
Depending on your interaction with us, we may also process the following categories of personal data:
- Identification data: name, company name
- Contact data: email address, telephone number
- Technical data: IP address, browser type, device information
- Communication data: emails, contact form messages
- Professional data: CVs, employment history, qualifications
- Contractual data: information related to business relationships
We do not intentionally collect special categories of personal data unless required and lawful.
PURPOSE OF PROCESSING
We process personal data only for specific and legitimate purposes, including:
- Responding to inquiries and communications
- Managing contractual and pre-contractual relationships
- Providing newsletters, updates, or event information
- Improving website performance and security
- Recruitment and personnel selection
- Complying with legal and regulatory obligations
LEGAL BASIS FOR PROCESSING
Under Article 6 GDPR, we rely on one or more of the following legal bases:
- Consent (Art. 6(1)(a))
For newsletters, events, and recruitment where consent is required. - Contractual necessity (Art. 6(1)(b))
To enter into or perform contracts with clients, partners, or contractors. - Legal obligation (Art. 6(1)(c))
For accounting, tax, or regulatory compliance. - Legitimate interests (Art. 6(1)(f))
For website security, service improvement, fraud prevention, and business continuity.
These interests are carefully balanced against your rights and freedoms.
COOKIES
Our website uses cookies to ensure proper functioning and to improve user experience.
- Strictly necessary cookies are required for basic website operation.
- Analytical cookies may be used to understand how visitors interact with our website.
Cookies relate to data that are saved locally on your computer’s hard drive when visiting websites. Cookies can be used to deliver content specific to your interests, analyse how visitors interact with our website, and for other purposes. You are not required to accept cookies.
DATA RECIPIENTS AND PROCESSORS
We use data processors who are third parties who provide elements of services for us (e.g. data hosting services,…). We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share the personal information (they are processing on our behalf) with any organisation apart from us. They will hold it securely and process/retain it for the period we instruct taking confidentiality requirements into account.
In some circumstances however we are obliged to share information as required by law, to protect against imminent harm to the rights, property or safety of Data Trust Associates, its users or the general public.
INTERNATIONAL TRANSFERS
We may transfer personal data to recipients located outside the European Economic Area (EEA).
Where such transfers occur, we ensure appropriate safeguards in accordance with Chapter V GDPR, including European Commission adequacy decisions and/or Standard Contractual Clauses (SCCs).
You may request further information about these safeguards by contacting us.
EXTERNAL LINKS
As an information resource you may find external links on our site. These sites are owned and maintained by external companies (controllers), over which the Data Trust Associates has no control, and who are not covered by this privacy Statement.
EMAIL ADDRESSES & PHONE NUMBERS
If you have chosen to subscribe to a Data Trust Associates newsletter or event, we will retain your email address and/or phone number. When you send comments, questions, suggestions, or feedback via email, and include an email address and/or contact information, we may use this information to respond to you.
Once unsubscribed we will contain your personal data for no longer than 6 months. Customer (contact) information will be retained for no longer than 5 years after the end of the contract and/or negotiations.
Contact information of contractors will be retained no longer than 2 years after the end of the consent or the contract. Data Trust Associates will not sell or disclose your contact information to any third parties.
RECRUITMENT & CANDIDATES
When you apply for a position with Data Trust Associates, or when we consider you for a potential position, we may process personal data such as your contact details, CV, employment history, qualifications, professional profile information and interview notes.
We may collect this information directly from you or, where applicable, from recruitment agencies, employee referrals, LinkedIn or other publicly available professional sources.
We process this information for recruitment and personnel selection purposes, including assessing your suitability for a position, communicating with you and taking steps prior to entering into an employment contract. Depending on the circumstances, the processing is based on pre-contractual necessity, our legitimate interests or your consent.
If you are not selected, we may retain your recruitment data for up to one year for recruitment administration and, where necessary, for the establishment, exercise or defence of legal claims. If we wish to retain your profile for future opportunities beyond this period, we will ask for your consent. You may withdraw your consent at any time.
If you are hired, relevant recruitment data may become part of your employee record and will thereafter be processed in accordance with our HR privacy arrangements.
We do not make recruitment decisions based solely on automated processing.
YOUR RIGHTS
Data Trust Associates will endeavour to keep your personal information accurate. If you require access to personal information we hold on you, wish to amend an inaccuracy, have your information deleted from our files or wish to execute any of your other rights under GDPR (art. 12-23) then please contact us at info@datatrustassociates.com. We respond within one month, as required by law.
AUTOMATED DECISION-MAKING AND PROFILING
We do not engage in automated decision-making or profiling within the meaning of Article 22 GDPR.
RELEVANT DATA PROTECTION AUTHORITY
In case you would have a complaint or specific questions – you can contact the relevant data protection authority (BE):
https://www.gegevensbeschermingsautoriteit.be/
Gegevensbeschermingsautoriteit
Drukpersstraat 35, 1000 Brussel
- +32 (0)2 274 48 00
- +32 (0)2 274 48 35
- contact(at)apd-gba.be
CONTACT US
Hospitaalplein 11/2,
2018 Antwerpen
+32 3 808 53 09
CHANGES TO THIS POLICY
Since this policy may change over time as we modify or expand our website, we suggest that you check back from time to time in order understand how we treat your information.
