Privacy Policy
TailorTalents respects your privacy and processes personal data in line with the EU General Data Protection Regulation (GDPR) and the Belgian Act of 30 July 2018. This policy explains what personal data we collect through this website, why, who we share it with, how long we keep it, and the rights you have over it.
1. Who we are and how to contact us
The data controller for personal data processed via this website is Apro BV, operating under the trade name TailorTalents, with registered office at Burgemeester Michel Du Tré-straat 13, 9250 Waasmunster, Belgium. Company number / BTW number: BE 0773.466.716 (RPR Gent, afdeling Dendermonde).
For any privacy-related question, request to exercise your rights, or complaint, you can reach us at:
- Email: info@tailortalents.be
- Postal: Apro BV (TailorTalents), Burgemeester Michel Du Tré-straat 13, 9250 Waasmunster, Belgium
- Phone: +32 495 30 45 90
We have not appointed a Data Protection Officer (DPO) — our processing activities do not meet the thresholds in Article 37 GDPR. The contact above is the responsible privacy point of contact.
2. What this policy covers
This policy applies to personal data processed in connection with our website at tailortalents.com and its locale-specific variants (/nl, /fr, /en). It covers visitors, prospects who use the contact form, and people whose contact details we hold for B2B commercial relationships.
Personal data processed under a separate signed contract with a client (delivery routes, recipient details, install schedules) is governed by that contract and any data-processing agreement attached to it. This website policy does not override those terms.
3. Personal data we collect
Data you provide directly
- Contact form submissions: name, role, company, email, phone, message contents
- Email correspondence and call notes initiated by you
- Information you submit when applying for a role (CV, motivation, contact details)
Data collected automatically
- Server logs: IP address, user agent, requested URL, timestamp, response status (security and operational purpose)
- Strictly necessary cookies (see our Cookie Policy)
- Aggregate, non-identifying usage data (page-view counts) where available
We do not currently use marketing or analytics cookies. If we add such tools (e.g. GA4), this policy and our Cookie Policy will be updated and a consent banner introduced before any non-essential cookie fires.
4. How and why we use your data
Purposes and legal bases
| Processing activity | Legal basis (Art. 6 GDPR) |
|---|---|
| Replying to a contact-form submission and qualifying the lead | Pre-contractual measures at the data subject's request (Art. 6(1)(b)) and legitimate interest in B2B prospecting (Art. 6(1)(f)) |
| Sending a quote and following up on a B2B sales conversation | Pre-contractual measures (Art. 6(1)(b)) |
| Performing a delivery, installation or service contract | Contract performance (Art. 6(1)(b)) |
| Invoicing, accounting, statutory record-keeping | Legal obligation (Art. 6(1)(c)) — Belgian accounting and tax law |
| Sending direct-marketing emails | Consent (Art. 6(1)(a)) — opt-in required, opt-out always available |
| Server logs and IT-security measures | Legitimate interest in operational security (Art. 6(1)(f)) |
| Recruitment (job applications) | Pre-contractual measures (Art. 6(1)(b)) and consent for retention beyond the selection process |
Where we rely on legitimate interest, we have carried out a balancing test that weighs our interest in B2B commercial relationships against your reasonable expectations and rights. You can request a copy of this assessment at the contact above.
5. Who we share your data with
We share personal data only with categories of recipients that are necessary to deliver our services or comply with a legal obligation. Concretely:
- Hosting and cloud infrastructure: Amazon Web Services (AWS) and Microsoft Azure
- Email: Amazon WorkMail
- Accounting and invoicing: our accountant under a strict confidentiality engagement
- Transport and installation subcontractors, only when they are needed to perform a delivery or install you have ordered
- Public authorities, when required by Belgian law
Each external processor that handles personal data on our behalf operates under a written data-processing agreement (Article 28 GDPR) that requires them to act only on our instructions and to apply appropriate security measures.
6. International transfers
Some of our processors are based outside the European Economic Area, in particular in the United States. Where this is the case, we rely on:
- The EU–US Data Privacy Framework (DPF) where the recipient is DPF-certified (Amazon Web Services, Microsoft, Amazon WorkMail are all DPF-certified) — Adequacy Decision (EU) 2023/1795 of 10 July 2023
- European Commission Standard Contractual Clauses (SCCs) where the recipient is not DPF-certified, supplemented by appropriate technical and organisational measures
You can request a copy of the safeguards we apply to a specific transfer at the contact above.
7. How long we keep your data
| Category | Retention period |
|---|---|
| Lead-gen contact data (no contract signed) | Up to 12 months after the last interaction, then deleted or anonymised |
| Quote / RFQ data (no contract signed) | 1 year after the quote expires; archive metadata kept up to 5 years |
| Active commercial contracts | 10 years after the end of the contract (Belgian Civil Code limitation) |
| Invoicing and accounting records | 7 years (Article III.86 Code of Economic Law and Belgian VAT/income-tax law) |
| Server logs | 6–12 months |
| Marketing-email subscribers | Until withdrawal of consent + reasonable deletion lag |
| Job applications | End of selection + 6 months, or 2 years with consent |
8. How we protect your data
We apply technical and organisational measures appropriate to the risk: TLS encryption in transit, access control on a need-to-know basis, written confidentiality engagements with staff and processors, and a defined incident-response procedure for any suspected personal-data breach. We will notify the Belgian APD within 72 hours of becoming aware of a notifiable breach (Article 33 GDPR) and inform affected data subjects without undue delay where the breach is likely to result in a high risk to their rights and freedoms (Article 34 GDPR).
9. Your rights and how to exercise them
Under the GDPR you have the following rights with respect to personal data we hold about you:
- Right of access — request a copy of the personal data we hold (Art. 15)
- Right to rectification — ask us to correct inaccurate or incomplete data (Art. 16)
- Right to erasure — ask us to delete your data, subject to applicable retention obligations (Art. 17)
- Right to restriction — ask us to limit processing in certain circumstances (Art. 18)
- Right to data portability — receive a machine-readable copy of data you provided to us under consent or contract (Art. 20)
- Right to object — object at any time to processing based on our legitimate interest, including an absolute right to object to direct marketing (Art. 21)
- Right to withdraw consent — at any time, where processing is based on consent, without affecting prior lawful processing (Art. 7(3))
- Right not to be subject to a decision based solely on automated processing producing legal or similarly significant effects on you (Art. 22) — we do not currently make such decisions
To exercise any of these rights, contact us at info@tailortalents.be. We will respond within one month and may extend this by two months for complex requests, in which case we will tell you why. We may ask for proof of identity to make sure we are dealing with the right person.
10. Right to lodge a complaint with the Belgian APD
If you believe our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données — APD/GBA):
- Drukpersstraat 35 / Rue de la Presse 35, 1000 Brussels, Belgium
- Phone: +32 (0)2 274 48 00
- Email: contact@apd-gba.be
- Web: gegevensbeschermingsautoriteit.be / autoriteprotectiondonnees.be
We would be glad to address any concern with you directly first — but you can also approach the APD without contacting us, and at any time.
12. Children
Our services are directed at businesses, not at children. We do not knowingly collect personal data from persons under 16 (the Belgian age of digital consent under Article 7 of the Act of 30 July 2018 is 13, but our services are not directed at minors).
13. Changes to this policy
We may update this policy to reflect changes in our processing activities, in technology, or in applicable law. The version number and 'Last updated' date at the top of this page reflect the current version. Material changes that affect your rights will be communicated through this website and, where appropriate, by direct notice.
14. Contact
Questions about this policy or about how we handle your personal data? Email info@tailortalents.be or write to Apro BV (TailorTalents), Burgemeester Michel Du Tré-straat 13, 9250 Waasmunster, Belgium.
Need anything else?
If something here is unclear or you want to exercise one of your rights, just send a short email to info@tailortalents.be. We try to keep this policy in plain language — if a section confuses you, that is on us, and we will rewrite it.

