01 Data Controller
The entity responsible for processing your personal data is:
| Company | ProHacktiv SRL |
| Address | Rue Obecq 36, 1410 Waterloo, Belgium |
| VAT | BE 1012.864.496 |
| Privacy contact | dpo@prohacktiv.io |
02 Data Collected & Purposes
| Context | Data Collected | Legal Basis | Retention |
|---|---|---|---|
| Contact form | Name, professional email, company, role, message | Legitimate interest Art. 6.1.f GDPR | 3 years from last contact |
| AI Readiness Diagnostic | Name, professional email, company, role, company size, diagnostic answers, maturity scores; used to build your report, email you the PDF scorecard and prepare a follow-up call | Consent Art. 6.1.a GDPR | 3 years from last contact |
| Cookies & Local Storage | Consent choice, auth tokens | Necessary / Consent Art. 6.1.f GDPR | See Cookie Policy |
03 Data Recipients
Your data is never sold to third parties. It may be shared with:
- Our technical sub-processors, all bound by GDPR-compliant Data Processing Agreements:
- Scaleway SAS (France): website and backend hosting, and delivery of transactional emails such as your diagnostic scorecard
- HubSpot (EU data centre): contact form processing and customer relationship management
- Intuition Machines, Inc. (hCaptcha, United States): anti-spam verification on the free diagnostic report form; see International Transfers below
- Competent authorities when required by applicable law
- Professional advisors (lawyers, accountants) under strict confidentiality obligations
All sub-processors are contractually required to implement appropriate technical and organisational security measures.
04 International Transfers
ProHacktiv SRL prioritises service providers hosted within the European Union or European Economic Area. Where a transfer outside the EU/EEA is necessary, it will be governed by one of the following appropriate safeguards:
- European Commission Standard Contractual Clauses (SCCs)
- An adequacy decision by the European Commission
- Binding Corporate Rules (where applicable)
05 Your GDPR Rights
In accordance with Articles 15–22 of the GDPR, you have the following rights regarding your personal data:
Obtain a copy of the personal data we hold about you (Art. 15)
Correct inaccurate or incomplete data (Art. 16)
Request deletion of your data in certain circumstances (Art. 17)
Restrict how we process your data (Art. 18)
Receive your data in a structured, machine-readable format (Art. 20)
Object to processing based on legitimate interest (Art. 21)
Withdraw consent at any time without retroactive effect (Art. 7.3)
Not be subject to solely automated decision-making (Art. 22)
To exercise any of these rights, send a written request to: dpo@prohacktiv.io. We will respond within 30 days.
06 Contact & Complaints
For any question regarding the processing of your personal data, contact us at: dpo@prohacktiv.io
You also have the right to lodge a complaint with the Belgian Data Protection Authority (DPA):
Rue de la Presse 35, 1000 Brussels, Belgium
www.dataprotectionauthority.be