asUgo Consulting ("asUgo", "we", "us", "our"), established at Avenue des Communautes 110, 1200 Brussels, Belgium, is the data controller for the personal data described in this notice. It explains how we collect, use, share and protect your personal data when you visit our website (www.asugoconsulting.com) and interact with us, and the rights you have under the GDPR and Belgian data protection law. 

For any privacy question, or to exercise your rights, contact our Data Protection Officer (DPO) at dataprotection@asugoconsulting.com. 

2. Information we collect 

• Contact and identification data you provide (name, professional email, phone number and the content of your message). 

• Professional data where you interact with us on behalf of an organisation (job title, company name and business contact details). 

• Website and technical data (IP address, browser and device information, and usage and analytics data where you consent to analytics cookies). 

• Client and prospect contact data held in our CRM (names and professional contact details of individual representatives of the organisations we work with, and our interaction history). 

• Cookies and similar technologies (see Section 8). 

3. How we use your information and our legal basis 

• Responding to your enquiries and managing our business relationship: our legitimate interests (Art. 6(1)(f)), or steps prior to a contract (Art. 6(1)(b)). 

• Delivering our services and managing the contract with our clients: performance of a contract (Art. 6(1)(b)). 

• Analytics and non-essential cookies: your consent (Art. 6(1)(a)), which you can withdraw at any time. 

• Marketing and relationship management with professional contacts: our legitimate interests (Art. 6(1)(f)), subject to your right to object. 

• Legal, accounting and tax obligations: compliance with a legal obligation (Art. 6(1)(c)). 

• Protecting our website, systems and users: our legitimate interests in security (Art. 6(1)(f)). 

4. Who we share it with 

We share personal data only with parties that need it and under appropriate data processing agreements: 

• Service providers that support our website and operations: P4X SA (website hosting), Microsoft (our Microsoft 365 environment) and Salesforce (our CRM platform). 

• Public authorities where we are legally required to disclose data, or to protect the rights, property or safety of asUgo, our clients or others. 

• In the event of a merger, acquisition or sale of assets, your data may be transferred as part of that transaction, subject to this notice. 

We do not sell your personal data, and we do not carry out automated decision-making that produces legal or similarly significant effects. 

5. International transfers 

We process and store personal data within the European Economic Area (EEA) and do not transfer it outside the EEA. Where a provider could involve a transfer, we ensure an appropriate safeguard under Chapter V of the GDPR (for example an adequacy decision or Standard Contractual Clauses) is in place. 

6. How long we keep it 

We keep personal data only for as long as necessary for the purposes described, or to meet legal and accounting obligations: 

• Contact enquiries: 1 year. 

• Website analytics data: at most 13 months. 

• CRM contact data: up to 3 years after the last interaction, unless a contractual relationship requires longer. 

7. Your rights 

You have the right to access, rectify or erase your personal data, to restrict or object to processing, and to data portability, and to withdraw consent where processing is based on it. 

To exercise your rights, contact the DPO at dataprotection@asugoconsulting.com. We respond within one month. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country of your residence or where the matter arose. In Belgium this is the Gegevensbeschermingsautoriteit / Autorite de protection des donnees (Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be). 

8. Cookies and tracking technologies 

Our website uses strictly necessary cookies, and, only with your consent, analytics cookies. You can accept, refuse or change your choices at any time through the cookie banner or your browser settings. Refusing non-essential cookies does not affect access to the site. 

9. Data security 

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, use or disclosure, in line with our information security management system. No security measure is completely impenetrable, but we work continuously to keep your data safe. 

10. Children's privacy 

Our services are not intended for individuals under the age of 16, and we do not knowingly collect personal data from children under 16. If we become aware that we have, we will delete it. 

11. Changes to this notice 

We may update this notice from time to time to reflect changes in our practices or legal requirements. We will publish the updated version on our website with a revised date and, where the change is significant, inform you. 

12. Contact us 

asUgo Consulting, Avenue des Communautes 110, 1200 Brussels, Belgium. Privacy contact (DPO): dataprotection@asugoconsulting.com.