Privacy Policy
1. Data Controller
The data controller for the processing of your personal data is:
- CRYOSTRAL BV
- Kernenergiestraat 19 Bus A6
- 2610 Wilrijk, Antwerp, Belgium
- info@cryostral.be
- +32 473 22 17 18
CRYOSTRAL processes personal data in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the applicable Belgian privacy legislation.
2. Which personal data do we process?
We process personal data that you provide to us directly, for example when you:
- fill in a contact form on our website;
- contact us by phone or by email;
- submit a quote request, site visit request or assignment;
- subscribe to our newsletter (if applicable).
The categories of personal data that we may process are:
| Category | Examples | Source |
|---|---|---|
| Identification data | Name, job title, company name | Provided directly by you |
| Contact details | Email address, phone number, postal address | Provided directly by you |
| Technical data | IP address (temporarily, via web server and Google Fonts), browser type | Automatically, during website visit |
| Communication data | Content of emails, quote requests, questions | Provided directly by you |
CRYOSTRAL verwerkt no special categories of personal data (such as health data, race, religion or political beliefs).
3. Purposes and legal bases
We process your personal data exclusively for specified, explicitly described and legitimate purposes:
| Purpose | Legal basis (GDPR art. 6) | Explanation |
|---|---|---|
| Handling your contact request, quote or assignment | Performance of a contract (art. 6.1.b) or legitimate interest (art. 6.1.f) | To be able to answer you and offer our services |
| Management of the customer and supplier relationship | Performance of a contract (art. 6.1.b) | Invoicing, planning, follow-up of assignments |
| Legal obligations | Legal obligation (art. 6.1.c) | Accounting and tax retention obligations |
| Direct marketing (email newsletter) | Consent (art. 6.1.a) or legitimate interest (art. 6.1.f) | Only if you subscribed for this; you can unsubscribe at any time |
| Website analysis and improvement | Legitimate interest (art. 6.1.f) | Improvement of user experience; we currently use no analytical cookies |
4. Transfer to third parties
CRYOSTRAL never sells your personal data to third parties. We may share your data with:
- IT service providers and hosting partners: for the management of our website infrastructure and email systems, bound by data processing agreements;
- Google LLC: your IP address may be processed temporarily when loading Google Fonts (see our cookie policy);
- Accounting and legal advisors: insofar as necessary for compliance with legal obligations;
- Government authorities: when we are legally required to do so.
If data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards in accordance with Chapter V of the GDPR (standard contractual clauses or adequacy decision).
5. Retention periods
We do not store your personal data longer than necessary for the purposes for which it was collected, taking legal retention obligations into account:
- Contact requests and quotes without follow-up: maximum 2 years after last contact;
- Customer data and assignments: 7 years after termination of the agreement (Belgian accounting retention obligation);
- Job applications (if submitted): maximum 6 months, unless you give consent for longer retention;
- Newsletter subscriptions: until unsubscribe + 1 year for proof of consent;
- Cookie consent data: 12 months (see cookie policy).
6. Your rights as a data subject
Under the GDPR, you have the following rights regarding your personal data:
- Right of access (art. 15 GDPR): you can request which personal data we process about you;
- Right to rectification (art. 16 GDPR): have incorrect or incomplete data corrected;
- Right to erasure (art. 17 GDPR): "the right to be forgotten" — deletion of your data, insofar as no legal retention obligation applies;
- Right to restriction of processing (art. 18 GDPR);
- Right to data portability (art. 20 GDPR): receive your data in a structured, commonly used format;
- Right to object (art. 21 GDPR): object to processing based on legitimate interest, including direct marketing;
- Right to withdraw consent (art. 7 paragraph 3 GDPR): withdraw consent for processing at any time, without affecting the lawfulness of processing before withdrawal.
To exercise one of the above rights, send a request to info@cryostral.be with a clear description of your request. We respond within 30 calendar days. We may ask you to confirm your identity to prevent misuse.
7. Right to lodge a complaint with the supervisory authority
If you believe that we do not process your personal data correctly, you have the right to lodge a complaint with the competent supervisory authority:
- Data Protection Authority (DPA)
- Drukpersstraat 35, 1000 Brussels
- www.gegevensbeschermingsautoriteit.be
- contact@apd-gba.be
- +32 2 274 48 00
8. Security of personal data
CRYOSTRAL takes appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. Our website uses HTTPS encryption. Access to personal data is limited to employees who need this data to perform their duties.
In the event of a personal data breach that entails a risk to your rights and freedoms, we will notify you and the DPA in accordance with GDPR requirements.
9. Automated decision-making and profiling
CRYOSTRAL does not use automated decision-making or profiling that has legal effects for you or otherwise significantly affects you.
10. Cookies and tracking technologies
Our website uses cookies. For a detailed explanation of which cookies we place and how you can manage your preferences, we refer to our cookie policy.
11. Links to other websites
Our website may contain links to third-party websites. CRYOSTRAL is not responsible for the content or privacy policy of these external websites. We recommend that you consult the privacy policy of every website you visit.
12. Changes to this privacy policy
We may update this privacy policy following changes in our processing activities, new legislation or case law. The most recent version is always available on this page. In the event of significant changes, we will inform you via our website or by email (if you are a customer).
13. Contact details
For questions, comments or requests regarding this privacy policy or the processing of your personal data, you can contact:
- CRYOSTRAL BV
- Kernenergiestraat 19 Bus A6, 2610 Wilrijk, Antwerp
- info@cryostral.be
- +32 473 22 17 18