---

1. Who we are (Data Controller)

This privacy policy applies to the processing of personal data by:

NormNest BV
Aalterseweg 80, 9910 Aalter, Belgium
VAT number: BE1026.379.764
E-mail: info@normnest.eu
Phone: +32 9 424 01 18

NormNest BV is responsible for the processing of your personal data as described in this policy. If we work with external parties (such as CloudCom BV for technical/administrative support), this will be done under a valid data processing agreement.

---

2. What personal data do we collect?

Depending on your interaction with our services, we may collect:

• Identification data: name, company, job title, phone number, e-mail address
• Contact details: postal address, e-mail address
• Technical data: IP address, browser type, device type, pages visited
• Form data: content of contact forms, event registrations
• Cookie data: see our cookie policy for detailed information

We do not collect sensitive personal data unless legally required or with your explicit consent.

---

3. How do we collect your data?

• When you fill in forms on our website
• When you contact us directly via e-mail or phone
• Automatically through cookies and similar technologies
•  

---

4. Why do we process your data? (Purposes + legal basis)

Purpose	Legal basis
Responding to questions submitted via contact form	Legitimate interest or consent
Sending quotes or information about our services	Consent
Sending invitations to events	Consent
Improving the website and user experience	Legitimate interest
Complying with legal obligations	legal obligation

---

5. Who has access to your data?

We only share your data with:

• Internal employees who need it to perform their duties
• External service providers such as hosting companies, e-mail platforms, IT support providers (e.g., CloudCom BV, if applicable)
• Government authorities if legally required (e.g., tax authorities)
•  

If personal data is processed outside the European Economic Area, we ensure appropriate safeguards, such as the EU Standard Contractual Clauses.

---

6. Data retention

We do not keep your personal data longer than necessary:

Data type	Retention period
Contact requests	Max. 2 years after resolution
Newsletter subscriptions	Until unsubscribed
Client data	Max. 5 years after last contact/assignment
Analytical data (cookies)	See cookie policy

You can always request earlier deletion of your data.

---

7. Data security

We take appropriate technical and organisational measures to protect your personal data, including:

• SSL encryption on our website
• Secured servers and firewalls
• Access restrictions on a need-to-know basis
• Regular back-ups
•  

---

8. Your rights under GDPR

You have the right to:

• Access your personal data: You may request to see what data we hold about you.
• Rectify incorrect data: You may request correction of inaccurate data.
• Erase your data: You may request deletion of your data.
• Restrict processing
• Object to processing
• Data portability
• Withdraw your consent (if processing is based on consent)
•  

How to exercise your rights: send an e-mail to info@normnest.eu with a clear description of your request.
We will respond within 30 days.

---

9. Complaints

If you are dissatisfied with how we handle your data, please contact us first.
You also have the right to lodge a complaint with:

Data Protection Authority (Belgium)
Drukpersstraat 35, 1000 Brussels
contact@apd-gba.be
www.dataprotectionauthority.be

---

10. Changes to this Privacy Policy

We may update this policy from time to time. The latest version will always be available on this page. For significant changes, we will notify you actively.

---

11. Contact

For questions or requests regarding this policy:

NormNest BV
Aalterseweg 80, 9910 Aalter, Belgium
E-mail: info@normnest.eu
Phone: +32 9 424 01 18