D&L Concepts
- This privacy policy (“Privacy Policy”) governs the processing of your personal data in connection with your use of our Website (the “Website”) and the services associated with it (collectively referred to as the “Services”). This processing is carried out by D & L Concepts as the data controller, with its registered office at Saffierstraat 5/11, 2200 Herentals (“we”, “us”), registered with the Crossroads Bank for Enterprises (KBO) under number 0865.337.988, in accordance with the applicable legislation on the protection of personal data.
- If you have any questions about this Privacy Policy or about how we process your data, please contact info@dlconcepts.be
- By using our website or services, you confirm that you have read this Privacy Policy carefully and agree to it without reservation. We reserve the right to amend this Privacy Policy from time to time at our discretion. Any such amendments will be communicated via the Website.
- “Cookies” or similar technologies may be used as part of the website or the services. Cookies are text files that are stored on a device’s hard drive and contain certain information, including, in some cases, personal data. For more information about the use of cookies, please consult our cookie policy.
- This Privacy Policy was last updated on 03/09/2026.
What data we process and why
1. When you use the website and/or services, we process the following personal data relating to you:
- When? Use of services, contacting us, requesting a quote, use of the website
Which data? Identification data
Why (purpose)? Processing your enquiry
Legal basis? Legitimate interest
Retention period? Up to 2 years after last contact. If you become a customer, the retention periods for customer data set out below apply - When? Customer data (contract, invoicing)
Which data? Identification & invoicing details
Why (purpose)? Performance of the contract, accounting obligations
Legal basis? Performance of the contract/Legal obligation
Retention period? 7 years, in accordance with the statutory accounting retention obligation - When? Subscribing to the newsletter, downloading white papers, requesting leaflets or information
Which data? Identification data
Why (purpose)? Sending related information and updates
Legal basis? Consent
Retention period? Until you unsubscribe, or automatically after 3 years without interaction (opening, clicking) - When? Applying for a job (via a vacancy or unsolicited application)
Which data? Identification details, CV, cover letter
Why (purpose)? Assessment of your application
Legal basis? Pre-contractual measures/legitimate interest
Retention period? Up to 1 year after completion of the application process, unless you give your explicit consent to remain in our talent pool for longer
2. In principle, we obtain the personal data mentioned above directly from you. In addition to the purposes mentioned above, we may also process your personal data:
- To provide you, in a personalised and efficient manner, with information about products and services you request, whether via the website, email, telephone or social media channels.
- To ensure we provide an accurate service.
- For direct marketing purposes; in other words, to be able to provide you with targeted communications, promotions, offers and other advertisements from us. We always ask for your consent for this.
- To carry out statistical analyses to improve our Website and/or Services, or to develop new products or services.
- To pass on to the police or judicial authorities as evidence of possible criminal offences, or if there are reasonable grounds to suspect an unlawful act or criminal offence committed through your use of the Website or the Services.
- In the context of a potential merger with, acquisition of or by, or demerger by a third party. If this third party is located outside the European Economic Area, we will ensure appropriate safeguards as described below.
3. If and when your registration on the website or your use of the website or services may be regarded as (a) a breach of our terms and conditions or property rights, (b) a threat to the security or integrity of our services, (c) a risk to the Website, Services or systems of ours or our subcontractors as a result of viruses, malware or any other form of malicious code, or (d) is in any way illegal, unlawful, discriminatory or offensive, we may process your data in the interests of ourselves, our partners or third parties.
Do we share your data
- We use the following external data processors to provide you with the best possible website and service:
- External data processors
- Odoo: CRM/ERP system for customer management and business operations
- Google Analytics: website statistics and user analytics
- Plausible: website statistics and usage analysis
- Mailchimp: sending newsletters and related communications
- Combell: hosting provider, responsible for hosting our website and the associated data.
- In addition, we may use advertising and tracking platforms (such as Google Ads, Meta Ads or LinkedIn Ads) for remarketing and conversion tracking. This processing is carried out using cookies, for which we ask for your consent. Further details on which specific tools we use and how you can manage your preferences can be found in our cookie policy.
- We ensure that all our data processors may only process your personal data on our behalf and on the basis of a data processing agreement.
- External data processors
- We do not disclose your personal data to third parties in a way that allows you to be identified, unless this is necessary to provide the services, without your explicit consent.
- We may transfer anonymised data to other organisations, which may use this data to improve products and services.
Where do we process data
- In principle, we and our external data processors process your identifiable personal data within the European Economic Area (EEA).
- If data is nevertheless transferred to a country outside the EEA, we ensure appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses, or a valid adequacy decision by the European Commission for the country in question. You can request further information on this simply by contacting us via info@dlconcepts.be.
- We may transfer anonymised data to organisations outside the EEA, as this data is no longer considered personal data.
How we process data
- We process only the personal data necessary to achieve the purposes set out in this policy, in a lawful and transparent manner, and keep it as accurate and up-to-date as possible.
- Your personal data will be retained for the periods set out in the table above, or until you withdraw your consent for processing operations based on consent. Withdrawing your consent may mean that you can no longer make full use of the website or services.
- We take appropriate technical and organisational measures to protect your personal data against unauthorised access, theft, loss, manipulation or destruction. Access by our staff or that of our data processors is granted only on a need-to-know basis and is subject to strict confidentiality obligations.
Your rights regarding personal data
- Right of access: you have the right to request access to all personal data we process about you.
- Right to rectification: you have the right to request that incorrect or inaccurate personal data be rectified free of charge.
- Right to withdraw consent: you have the right to withdraw any consent previously given for the processing of your personal data at any time by sending an email to info@dlconcepts.be.
- Right to restriction: you may ask us to restrict the processing of your personal data if (a) you contest the accuracy of that data, (b) the processing is unlawful, or (c) the data is no longer required for the stated purposes, but you still need it for legal proceedings.
- Right to object: you have the right to object to the processing of your data on serious and legitimate grounds. Where the processing relates to direct marketing, you have the right to object to this at any time, free of charge and without having to provide a reason.
- Right to data portability: where your data is processed on the basis of consent or a contract, and this is done by automated means, you may receive your data in a structured, commonly used format.
- How to exercise these rights: send your request to info@dlconcepts.be, clearly stating which right you wish to exercise. To verify your identity, we may ask you to provide additional information that is proportionate to the request. We will never ask you to send a full copy of your identity card by email; if identity verification is required, this will be carried out using a more secure, less intrusive method. We will process your request as soon as possible, and at the latest within thirty (30) days of receipt.
- Right to complain: if you have a problem with the way we process your personal data, please feel free to contact us first. If you are not satisfied with our response, you may lodge a complaint with the Data Protection Authority (GBA), Drukpersstraat 35, 1000 Brussels, via gegevensbeschermingsautoriteit.be.
