Privacy Policy

1. Data Controller

GPC Gov SRL, Avenue Louise 54, 1050 Brussels.
BCE: BE0761509584.
Email: info@gpcgov.be

2. Data Collected

• Identification data (name, email, phone, company)
• Connection data (IP address, logs)
• Usage data (monitoring preferences, selected CPV codes)

3. Processing Purposes

• Provision and improvement of monitoring services
• Customer relationship management
• Sending notifications and alerts
• Invoicing
• Compliance with legal obligations

4. Legal Basis

• Contract performance (Art. 6.1.b GDPR)
• Consent (Art. 6.1.a GDPR) for marketing communications
• Legitimate interest (Art. 6.1.f GDPR) for service improvement

5. Data Retention

• Account data: duration of contract + 5 years
• Billing data: 7 years (Belgian legal obligation)
• Connection data: 12 months

6. Data Sharing

Data is not sold to third parties. It may be shared with:

• Technical service providers (hosting, email)
• Competent authorities if required by law

7. International Transfers

Data is hosted within the European Union. No transfers to third countries are made.

8. Security

GPC Gov implements appropriate technical and organisational measures:

• SSL/TLS encryption
• Restricted access
• Regular backups

9. Your Rights (GDPR)

Under the GDPR, you have the following rights: access, rectification, erasure, restriction, portability, objection.

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction
• Right to portability
• Right to object

To exercise your rights: info@gpcgov.be.

You may also lodge a complaint with the Belgian Data Protection Authority (DPA): www.autoriteprotectiondonnees.be.

10. Cookies

The site uses strictly necessary cookies. See the cookie banner for more information.

Measuring traffic on our website

We measure traffic on gpcgov.be ourselves, without any third-party tool and without placing a cookie or identifier on your device. We record the pages viewed, the links clicked, the language, the device type and the site you arrived from. The events of a single visit are linked by a technical fingerprint recomputed every day from your IP address and your browser: your IP address is never stored, and that fingerprint changes every night, which makes tracking from one day to the next impossible. This data is used solely to understand which pages are useful to our visitors and to improve the site — it is not sold, shared, or matched against your identity. Legal basis: our legitimate interest in knowing the audience of our own website. Retention period: 13 months.

Visits following one of our emails

If you reach our site by clicking a link in an email we sent you, or if you give us your details through a form, we link that day's visit to your name: we then know which pages you viewed during that visit, including before your click. This is used solely to know whether our messages were useful to you and to adapt our exchanges. The identification lasts only for the day: if you come back another day without using one of our links, you are anonymous again. A visitor who has received no message from us and leaves us no details is never identified. Legal basis: our legitimate interest in following up an existing business relationship. If you unsubscribe from our emails, we stop this identification immediately and delete the links already established between your name and your visits; the site's anonymous statistics are kept for 13 months.

11. Amendments

This policy may be amended at any time. The current version is the one accessible on the website.