Privacy Policy
1. Introduction
SRI Group BV processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Belgian Data Protection Act of 30 July 2018. This Privacy Policy explains how we collect and process personal data.
2. Data Controller
SRI Group BV acts as Data Controller for website visitors, contact form submissions, business inquiries, and commercial communications.
3. Categories of Personal Data
We may collect: name, company name, email address, phone number, job title, IP address, technical usage data, and information voluntarily submitted.
4. Purpose of Processing
We process personal data for responding to inquiries, performing contracts, business communication, service delivery, legal compliance, and website security and analytics.
5. Legal Basis
Processing is based on contractual necessity (Art. 6(1)(b) GDPR), legitimate interest (Art. 6(1)(f) GDPR), consent (Art. 6(1)(a) GDPR) where required, and legal obligation (Art. 6(1)(c) GDPR).
6. Data Retention
Personal data is retained only as long as necessary for contractual obligations, legal compliance, and legitimate business purposes.
7. Data Sharing
We do not sell personal data. Data may be shared with hosting providers, IT service providers, and legal or regulatory authorities where required. All service providers are bound by confidentiality and data protection obligations.
8. International Transfers
Where data is transferred outside the European Economic Area, appropriate safeguards are implemented in accordance with GDPR.
9. Data Subject Rights
You have the right to access, rectification, erasure, restriction, objection, and data portability. Requests can be sent to: management@sri-group.eu.
10. Security Measures
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure or destruction.
11. Complaints
You may lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit).