LEGAL · VERSION 1.1
Privacy Policy
How VDS Consultoria BV processes personal data when you visit this website or contact us.
Effective date: 15 October 2026 · Version: 1.1
1. Who we are
VDS Consultoria BV (“VDS Consultoria”, “we”, “us”) is the controller of the personal data described in this Privacy Policy.
- Registered address: Boslaan 19, 2820 Bonheiden, Belgium
- Enterprise/VAT number: BE 0896.505.771
- Privacy contact: contact@vdsconsultoria.com
- Website: www.vdsconsultoria.com
This policy applies to personal data processed when you visit our website or contact us through it. Processing performed for clients during a consultancy engagement may also be governed by contractual terms and separate notices.
2. Personal data we collect
Depending on how you use the website, we process the following categories:
- Contact and enquiry data: your name, email address, subject and message. These fields are required in the contact form. Telephone number and company name are optional.
- Professional and business data: your organisation, role and information about a proposed project or service requirement when you include it in your message.
- Technical and security data: IP address, access date and time, requested page, referrer, browser and device information, and security or diagnostic events generated when the website is used.
- Cookie and preference data: the technical session identifier and, if optional technologies are introduced later, your consent choices and related evidence.
Please do not submit health data, biometric data, political or religious beliefs, national-register numbers, criminal-offence data, or confidential personal data about another person through the contact form unless we have specifically requested it through an appropriate secure channel.
3. Purposes, legal bases and retention
| Purpose | Legal basis | Retention |
|---|---|---|
| Receive, assess and answer a request for services, prepare a proposal, or take steps you request before a possible contract. | GDPR Article 6(1)(b), steps requested before entering a contract. | Up to 24 months after the last substantive contact if no engagement begins. Relevant records are transferred to the client file if an engagement begins. |
| Answer partnership, supplier, media or other genuine business enquiries. | GDPR Article 6(1)(f), our legitimate interest in receiving and responding to business communications. | Up to 24 months after the last substantive contact. |
| Operate, troubleshoot and protect the website and communications against misuse, fraud and security incidents. | GDPR Article 6(1)(f), our legitimate interest in maintaining the availability, integrity and security of our systems. | Technical and security logs are normally retained for up to 12 months, unless a longer documented hold is needed to investigate an incident or protect legal rights. |
| Record and apply technical session and cookie preferences. | GDPR Article 6(1)(f) for strictly necessary operation. Optional technologies, if introduced, will rely on consent under Article 6(1)(a). | The current technical session cookie lasts up to 7 days. Any optional technology will have its own published lifetime. |
| Comply with a specific legal obligation. | GDPR Article 6(1)(c). | For the period required by the applicable EU or Belgian law. |
| Establish, exercise or defend legal claims. | GDPR Article 6(1)(f), our legitimate interest in protecting our legal rights. | Until the applicable claim period expires and, if a claim is made, until it is finally resolved. |
We do not use personal data for a new incompatible purpose without first meeting the applicable legal requirements and providing additional information where required.
4. Is providing personal data mandatory?
The contact form marks name, email address, subject and message as required. We need these fields to receive, understand and answer your enquiry. If you do not provide them, you may be unable to submit the form or we may be unable to respond. Telephone number and company name are optional.
5. Recipients and service providers
Access is limited to VDS Consultoria personnel and contractors who need the data for the purposes described above and are subject to appropriate confidentiality duties.
Where necessary, we may share data with:
- website hosting, infrastructure, content-delivery, backup and security providers;
- email, contact-form, communication and business-system providers;
- professional advisers such as lawyers, accountants, auditors and insurers; and
- courts, regulators, law-enforcement bodies or other public authorities where disclosure is required or authorised by law.
This website does not load fonts, scripts or other resources from third-party servers: the fonts and the animation code are hosted on our own server, so your browser contacts only our server when you visit. We require suppliers acting as processors to be bound by data-processing terms meeting GDPR Article 28. We do not sell personal data.
6. International transfers
Some technical suppliers may process personal data, or permit support access, from countries outside the European Economic Area. We permit such transfers only where a valid GDPR Chapter V mechanism applies, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, together with supplementary measures where appropriate. You may request information about the safeguard applicable to your data and, where available, a copy by contacting contact@vdsconsultoria.com.
7. Cookies and similar technologies
The website uses a strictly necessary session_id cookie for technical operation and session management. It is an HTTP-only first-party cookie and currently lasts up to 7 days. It is not used for advertising.
The website also sets a first-party frontend_lang cookie that remembers your chosen language and lasts up to one year. If you use the animation switch on the site, your on or off choice is stored in your browser's local storage on your own device and is not sent to us.
At the effective date of this policy, we do not intentionally use non-essential analytics or marketing cookies on this website. We will not activate a non-essential cookie, pixel or similar technology before obtaining consent where Belgian law requires it. If that changes, we will provide a cookie settings tool and an updated cookie table describing each provider, purpose and lifetime.
8. Your data-protection rights
Subject to the conditions and limits in the GDPR, you may have the right to:
- request confirmation and access to your personal data;
- correct inaccurate data and complete incomplete data;
- request erasure or restriction of processing;
- receive eligible data in a structured, commonly used, machine-readable format and transmit it to another controller;
- withdraw consent at any time, without affecting processing that was lawful before withdrawal; and
- lodge a complaint with a competent supervisory authority.
Right to object: where we rely on legitimate interests, you may object at any time on grounds relating to your particular situation. We will stop the processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed for legal claims. If data are processed for direct marketing, you may object at any time and we will stop that processing.
To exercise a right, email contact@vdsconsultoria.com or write to VDS Consultoria BV, Boslaan 19, 2820 Bonheiden, Belgium. Please identify the right and processing concerned. If we reasonably need to verify your identity, we will request only the additional information necessary for that purpose.
We will respond without undue delay and in principle within one month. Where permitted by the GDPR, this may be extended by up to two further months because of complexity or the number of requests. We will tell you within the first month if an extension is needed. Requests are normally free of charge, subject to the rules for manifestly unfounded or excessive requests.
You may lodge a complaint with the Belgian Data Protection Authority:
- Address: Rue de la Presse 35, 1000 Brussels, Belgium
- Complaint information: Belgian DPA complaint portal
9. Automated decision-making
We do not use personal data covered by this website policy for solely automated decisions, including profiling, that produce legal effects or similarly significantly affect you.
10. Security
We implement technical and organisational measures designed to provide a level of security proportionate to the risks of the processing. No method of transmission or storage is completely secure. We review safeguards in light of the data, processing context, available technology, implementation costs and risks to individuals.
11. Children
This website and our consultancy services are not directed to children. We do not knowingly collect children’s personal data through the website. If you believe a child has provided personal data, contact us so we can assess and address it.
12. Changes to this policy
We may update this policy when our processing or legal obligations change. The version and effective date appear at the top. Where required, we will provide appropriate notice before a material change takes effect.
VDS Consultoria BV · Boslaan 19, 2820 Bonheiden, Belgium · VAT/BTW BE 0896.505.771 · contact@vdsconsultoria.com