Privacy policy
1. Introduction
Stadsbader NV attaches great importance to the lawful, correct, and transparent processing of personal data. Through this privacy notice, we aim to inform you about the collection and processing of your personal data.
We kindly ask you to read this privacy notice carefully, as it contains essential information about how your personal data is processed and the reasons for such processing.
2. Controller
- Name: Stadsbader NV
- Address: Kanaalstraat 1, 8530 Harelbeke
- Enterprise number: 0407.975.466
- Telephone number: 056 26 06 66
- E-mail: info@stadsbader.com
As the data controller, we make every effort to ensure that your personal data is processed in accordance with the General Data Protection Regulation (GDPR).
3. Scope
This privacy notice applies to all services we provide and all activities we carry out, except for our recruitment and selection procedures. For information regarding the processing of personal data of job applicants, we refer to the privacy notice available on our jobsite.
4. Personal data
Depending on your activities and your relationship with our company, we process your personal data because you make use of our services and/or because you provide it to us yourself.
We process, among others, the following categories of personal data:
• Identification and contact details
- First and last name
- Title / salutation
- Address
- Email address
- Telephone or mobile number
- Occupation and role
- Company name
- …
• Customer, supplier and subcontractor data
- Professional contact details
- Contractual information
- Financial details (bank account, invoicing, etc.)
- …
• Online data (when you visit our website)
- IP address
- IP‑based approximate geolocation
- Internet browser and device type
- Your activities on our website (e.g. click behaviour)
- …
To comply with specific legal obligations, you may be required to provide us with additional information for registration purposes (such as identification data, Limosan number, etc.).
Please note that you are responsible for the accuracy of all data you provide to us, and we rely on its correctness. If your data is no longer accurate or up to date, we kindly ask you to notify us.
You are not obliged to share your personal data with us, but you understand that certain services or collaborations may become impossible if you do not agree to the collection and processing of this data.
Our website does not intend to collect data from visitors under the age of 13, unless parental or guardian consent is provided or unless required by law. We cannot verify the age of visitors, and therefore encourage parents to be involved in their children's online activities to prevent data collection without parental consent.
For further information about the processing of your online data, we refer you to our Cookie Statement.
5. Processing purposes and legal basis
5.1. Customer data
As part of our services and activities, we collect and process the identification and contact details of our customers and clients, as well as their personnel, employees, agents, and other useful contact persons.
The purposes of this processing include the execution of agreements with customers, customer management, accounting, and direct marketing activities such as sending promotional or commercial information.
The legal bases for these processing activities are the performance of a contract, our legitimate interest, and/or compliance with legal and regulatory obligations.
5.2. Data of suppliers and subcontractors
We collect and process the identification and contact details of our suppliers and subcontractors, including their (sub)contractors, personnel, employees, agents, and other relevant contacts.
The purposes of this processing are the performance of a contract, supplier and subcontractor management, accounting, and direct marketing activities such as sending promotional or commercial information.
The legal bases are the performance of a contract, our legitimate interest, and/or compliance with legal and regulatory obligations.
5.3. Personnel data
We process personal data of our employees in the context of personnel management and payroll administration. Due to the specific nature of this processing, it is further detailed in our employee privacy policy.
5.4. Other data
In addition to the above categories, we also process data relating to other individuals such as potential new customers/prospects, useful contacts within our industry, expert contacts, network contacts, etc.
The purposes of this processing are related to our business operations, direct marketing, and public relations.
The legal bases are the performance of a contract and/or our legitimate interest.
6. Duration of processing
Personal data is kept and processed for the period necessary for the purposes of the processing and for the nature of the contractual or non‑contractual relationship we have with you.
Customer, supplier, and subcontractor data will in any case be deleted ten years after the termination of the agreement or project, except for personal data that must be retained longer under specific legislation or in the event of ongoing litigation requiring the data to be retained.
Financial data (such as invoicing and payment data) is retained for the legally required period of seven years in accordance with accounting obligations.
Marketing-related data is retained until you object to its processing, withdraw your consent, or for up to three years after the last relevant contact, in order to keep our communications up to date and relevant.
7. Rights
If you have questions regarding the way we process your personal data, you may contact us at gegevensbescherming@stadsbader.com.
In accordance with the GDPR, and depending on the applicable legal basis, you have the following rights:
A. Right of access
You have the right to request information about which personal data we process about you and for what purpose. We will provide you with a free copy. However, we may not be able to disclose all documents if doing so would compromise the rights and freedoms of others.
B. Right to rectification
You have the right to request correction or updating of your personal data if you believe it is incorrect or outdated. You may also request the completion of incomplete data.
C. Right to object
You may object to the processing of your personal data for serious and legitimate reasons. However, you cannot object to processing that is necessary to comply with legal obligations, to execute a contract, or to pursue our legitimate interests as long as the data is needed for these purposes.
D. Right to restriction of processing
You may request restriction of processing, for example while the accuracy of your personal data is being verified.
E. Right to erasure (“right to be forgotten”)
You may request the deletion of your personal data. However, we may not always be able to comply, for example if we are legally obliged to retain certain data.
F. Right to withdraw consent
If processing is based on your prior consent, you may withdraw that consent at any time.
G. Right to data portability
You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine‑readable format and to transmit it to another controller when the processing is based on consent or a contract.
H. Automated decision-making and profiling
We do not use fully automated decision‑making or profiling that produces legal effects concerning you or otherwise significantly affects you.
We will respond to your request within one month. In exceptional cases, this period may be extended to three months.
We strive to handle your request carefully and in accordance with applicable regulations. If you believe your rights have been violated, you can notify us by email at gegevensbescherming@stadsbader.com or by post at Kanaalstraat 1, 8530 Harelbeke.
You are always free to lodge a complaint with the Data Protection Authority (Drukpersstraat 35, 1000 Brussels – contact@apd-gba.be). You may also take legal action if you believe you have suffered damage as a result of the processing of your personal data.
8. Transfer to third parties
Certain personal data collected by us may be shared with third‑party service providers and possibly processed by them. This includes, for example, IT providers, auditors, and public authorities.
One or more of these third parties may be located outside the European Economic Area (EEA). Personal data will only be transferred to third countries that ensure an adequate level of protection.
Personal data may also be disclosed following a court order or to comply with specific legal obligations. We will make reasonable efforts to inform you in advance, although this may not always be technically or legally possible.
We will never sell your personal data or make it available for commercial use to direct marketing agencies or similar service providers without your prior consent.
9. Technical and organizational measures
We take appropriate technical and organisational measures to process your personal data securely and protect it against destruction, loss, alteration, unauthorised access, or accidental disclosure, as well as any other unauthorised processing.
These measures include, among others, limited access on a “need‑to‑know” basis, appropriate password and authentication policies, IT security (such as firewalls and antivirus solutions), encryption during transmission, physical security of our infrastructure, regular backups, etc.
We also require our processors to implement equivalent security measures.
Stadsbader NV cannot be held liable for any direct or indirect damage resulting from incorrect or unlawful use of your personal data by third parties.
10. Third-party access
Access to your personal data is granted only to employees, collaborators, agents, and contact persons who need the data in order to perform their tasks (“need‑to‑know” basis).
We ensure an equivalent level of protection by imposing contractual and organisational obligations consistent with this privacy notice.
11. Contact
If you have further questions or comments regarding the collection or processing of your personal data after reading this privacy notice, you may contact our Data Protection Officer via gegevensbescherming@stadsbader.com or by post at Kanaalstraat 1, 8530 Harelbeke.
Version: January 2026