01 Data Controller
The entity responsible for processing your personal data is:
| Company | ProHacktiv SRL |
| Address | Rue Obecq 36, 1410 Waterloo, Belgium |
| VAT | BE 1012.864.496 |
| Privacy contact | dpo@prohacktiv.io |
02 Data Collected & Purposes
| Context | Data Collected | Legal Basis | Retention |
|---|---|---|---|
| Contact form | Name, professional email, company, role, message | Legitimate interest Art. 6.1.f GDPR | 3 years from last contact |
| AI Readiness Diagnostic | Email, diagnostic answers, maturity scores | Consent Art. 6.1.a GDPR | 3 years from last contact |
| Training Academy registration | Name, email, company, training level, billing info | Contract performance Art. 6.1.b GDPR | 7 years (billing); 3 years (contact) |
| Cookies & Local Storage | Consent choice, auth tokens | Necessary / Consent Art. 6.1.f GDPR | See Cookie Policy |
03 Data Recipients
Your data is never sold to third parties. It may be shared with:
- Our technical sub-processors (hosting provider, form handler) — all bound by GDPR-compliant Data Processing Agreements
- Competent authorities when required by applicable law
- Professional advisors (lawyers, accountants) under strict confidentiality obligations
All sub-processors are contractually required to implement appropriate technical and organisational security measures.
04 International Transfers
ProHacktiv SRL prioritises service providers hosted within the European Union or European Economic Area. Where a transfer outside the EU/EEA is necessary, it will be governed by one of the following appropriate safeguards:
- European Commission Standard Contractual Clauses (SCCs)
- An adequacy decision by the European Commission
- Binding Corporate Rules (where applicable)
05 Your GDPR Rights
In accordance with Articles 15–22 of the GDPR, you have the following rights regarding your personal data:
Obtain a copy of the personal data we hold about you (Art. 15)
Correct inaccurate or incomplete data (Art. 16)
Request deletion of your data in certain circumstances (Art. 17)
Restrict how we process your data (Art. 18)
Receive your data in a structured, machine-readable format (Art. 20)
Object to processing based on legitimate interest (Art. 21)
Withdraw consent at any time without retroactive effect (Art. 7.3)
Not be subject to solely automated decision-making (Art. 22)
To exercise any of these rights, send a written request to: dpo@prohacktiv.io. We will respond within 30 days.
06 Contact & Complaints
For any question regarding the processing of your personal data, contact us at: dpo@prohacktiv.io
You also have the right to lodge a complaint with the Belgian Data Protection Authority (DPA):
Rue de la Presse 35, 1000 Brussels, Belgium
www.dataprotectionauthority.be