Personal Data Protection Policy
This "Personal Data Protection Policy" document applies to any natural person (hereinafter "the Individuals") whose Personal Data may be processed by Legacio in accordance with the provisions of the General Data Protection Regulation (GDPR) adopted on 27 April 2016 by the European Parliament and the Council, and the law of 30 July 2018.
As part of your visit to our website, Legacio (hereinafter "we") collects your Personal Data in order to use it for various automated processing operations.
The processing of your personal data
Definitions
Personal data (hereinafter "Personal Data") refers to any information that may relate to an identified or identifiable natural person, directly or indirectly.
DPO The Data Protection Officer (DPO) is responsible for implementing compliance with the European data protection regulation within the organization that appointed them, for all processing carried out by that organization. DPO contact details: [email protected]
Data controller The data controller is the legal or natural person who determines the purposes and means of a processing operation. In practice and in general, this is the legal entity represented by its legal representative. The data controller is Legacio, a trademark of ENAOS BELGIUM SRL.
Our commitments
We process your Personal Data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, hereinafter referred to as the "GDPR".
We are committed to protecting your personal data. Only our authorized staff, trained in confidentiality rules, participate in operating the site.
In addition, Legacio implements appropriate technical and organizational measures to prevent the loss, misuse, alteration and deletion of your Personal Data. These measures are adapted to the sensitivity level of the data processed and the risk level presented by the processing or its implementation.
Should a breach of the security of your data occur, Legacio will inform you within the timeframes and in the manner specified by the applicable legal and regulatory provisions.
Article 13 of the said regulation requires us to inform you of the following elements:
- The identity and contact details of the data controller and, where applicable, of the controller's representative;
- The purposes of the processing for which the Personal Data is intended, as well as the legal basis of the processing;
- The recipients or categories of recipients of the Personal Data, if any;
- The retention period of the Personal Data or, where this is not possible, the criteria used to determine that period.
The personal data we process
We collect and process the following Personal Data:
| Personal Data collected | Purpose | Legal basis | Retention period |
|---|---|---|---|
| Data collected via the "Request a callback" and "Contact us" forms: first name, last name, phone number, reason for the request | Managing contact forms | Legitimate interest | 3 years from the last contact. Immediately in case of exercise of the right to object. |
| Data recorded when you browse our site: IP address | Managing visitors' browsing information | Legitimate interest | 1 year from collection. |
For more information on data processing through the use of cookies, you can consult our cookie policy.
Recipients of the personal data
The Personal Data collected on this site is intended primarily for Legacio, but may be shared with our partners.
The list of our partners, providers and processors likely to process your personal data is available in the table below.
| Partner / Provider / Processor | Purpose |
|---|---|
| Heroku (Salesforce, Inc.) | Hosting |
We ensure that all our partners and processors are subject to adequate Personal Data protection mechanisms compliant with the GDPR, and that data is processed only by authorized staff bound by a confidentiality clause or equivalent contractual document.
Exercising your GDPR rights
Right of access and rectification of your data
You have the right to obtain confirmation from the data controller as to whether or not Personal Data concerning you is being processed and, where it is, the right to access it and/or have it rectified (see Articles 15 and 16 of the GDPR).
Right to erasure of your data
In accordance with Article 17 of the GDPR, you have the right to request the erasure of your Personal Data as soon as possible, for certain reasons and under certain conditions which you may consult in that article.
Right to restriction of data processing
You have the right to request that we restrict the processing of your Personal Data in the cases provided for in Article 18 of the GDPR.
Right to object to data processing
In accordance with Article 21 of the GDPR, you have the right to object to processing of Personal Data concerning you when the processing is necessary for the legitimate interests pursued by the controller or a third party, unless overriding interests or the fundamental rights and freedoms of the data subject requiring protection of Personal Data prevail, particularly when the data subject is a child.
Right to data portability
You have the right to data portability of your Personal Data, which gives you the option of receiving the Personal Data you have provided to us in a structured, commonly used and machine-readable format, and of transmitting that data to another controller. The exercise of this right is subject to the conditions set out in Article 20 of the GDPR.
Right to withdraw your consent
In accordance with Article 7 of the GDPR, where processing is based on consent, you have the right to withdraw your consent at any time. This will end the processing of your data.
You may exercise your rights as follows: by sending your request to the following email address: [email protected], or by mail accompanied by a copy of an identity document addressed to the company Legacio at the following address: Rue Middelbourg 64a, 1170 Watermael-Boitsfort. You may also lodge a complaint with the competent authority.
Update
In order to comply with regulatory changes and reflect our practices, we reserve the right to modify this policy. We will publish any changes in this document; we recommend that you regularly consult our privacy policy.
Date of last update: 15/09/2026