Privacy policy

1. Introduction

Agisko BV places great importance on the protection of personal data and respecting the privacy of its customers, partners, employees, and other stakeholders. In this privacy statement, we explain how we collect, use, secure personal data and the rights of the individuals involved.

This privacy statement applies to:

(potential) customers
suppliers and business partners
website visitors
applicants and employees
other persons who are in contact with Agisko BV

Agisko BV processes personal data in accordance with the General Data Protection Regulation (GDPR) and the Belgian law of 30 July 2018 concerning the protection of natural persons.

2. Identity of the data controller

Data controller
Agisko BV
Junostraat 21/bus 2
2600 Antwerp
Belgium

Contact
Email: infosec@agisko.be

Data Protection Officer (DPO)
Michel Petillion
Email: infosec@agisko.be
Phone: +32 3 246 22 20

3. What personal data do we process?

Depending on the purpose of processing, Agisko BV may process the following categories of personal data:

identification data (name, address, email address, phone number)
professional data (position, employer, business contact details)
contractual and administrative data
billing and payment data
communication data
technical and log data (such as IP address, browser information, log files)
data about website usage

Agisko BV does not process special categories of personal data unless legally required or with the explicit consent of the data subject.

4. Purposes and legal basis of processing

Personal data is processed solely for specific, explicitly stated, and legitimate purposes, including:

execution and management of contracts
customer and supplier management
communication and support
compliance with legal obligations
security of information systems and networks
improvement of services and internal processes

Processing always takes place based on one or more valid legal grounds:

performance of a contract
legal obligation
legitimate interest
consent of the data subject (where applicable)

5. Processing register (summary)

Agisko BV maintains an internal register of processing activities in accordance with Article 30 of the GDPR.

This register includes, among other things:

the purposes of processing
the categories of data subjects and personal data
the legal basis for processing
the categories of recipients
retention periods
applied technical and organizational security measures
information about any transfers outside the European Economic Area

The processing register is maintained internally, regularly evaluated, and updated.
For additional information, contact can be made via infosec@agisko.be.

6. Retention periods

Agisko BV does not retain personal data longer than necessary for the purposes for which they were collected, unless a longer retention period is legally required. Retention periods are set in internal retention schedules and procedures.

7. Recipients of personal data

Agisko BV shares personal data only:

with employees who need it to perform their duties
with processors who provide services on behalf of Agisko BV

Processor agreements are concluded with all processors in accordance with the GDPR. They may only process personal data according to our instructions and under appropriate security measures.

Personal data is not sold and not shared for direct marketing by third parties.

In certain cases, Agisko BV may be legally obliged to share data with competent authorities. In such cases, it is always verified whether a valid legal basis exists.

8. Transfer to third countries

If personal data is transferred outside the European Economic Area (EEA), Agisko BV ensures appropriate safeguards, such as standard contractual clauses or other protective mechanisms in accordance with the GDPR.

9. Security of personal data

Agisko BV takes appropriate technical and organizational measures to protect personal data against:

unauthorized or unlawful processing
loss, destruction or damage
unauthorized access

These measures are regularly evaluated and adjusted where necessary, according to the principles of privacy by design and privacy by default.

10. Rights of data subjects

Data subjects have, under the conditions of the GDPR, the following rights:

right to information
right of access
right to rectification
right to erasure
right to restriction of processing
right to data portability
right to object
right to withdraw consent (if applicable)

A request can be submitted via infosec@agisko.be.

Agisko BV responds no later than one month after receiving the request.

If a request is manifestly unfounded or excessive, it may be refused or a reasonable fee may be charged.

11. Automated decision-making and profiling

Agisko BV does not make decisions based solely on automated processing that have legal or significant effects on data subjects, unless permitted by law or with explicit consent.

12. Cookies

The use of cookies and similar technologies on the Agisko BV website is described separately in the cookie policy, which is accessible via the website.

13. Complaints

If you have a complaint about the processing of your personal data, you can first contact us via infosec@agisko.be.

You also have the right to file a complaint with the Data Protection Authority:

Data Protection Authority
Drukpersstraat 35
1000 Brussels
Tel: +32 (0)2 274 48 00
Email: contact@apd-gba.be

14. Changes to this privacy statement

Agisko BV reserves the right to change this privacy statement. The most recent version is always available via the website. In case of significant changes, additional information will be provided if necessary.