Legal

Privacy Policy

TailorTalents respects your privacy and processes personal data in line with the EU General Data Protection Regulation (GDPR) and the Belgian Act of 30 July 2018. This policy explains what personal data we collect through this website, why, who we share it with, how long we keep it, and the rights you have over it.

Last updated6 May 2026·v1.0

1. Who we are and how to contact us

The data controller for personal data processed via this website is Apro BV, operating under the trade name TailorTalents, with registered office at Burgemeester Michel Du Tré-straat 13, 9250 Waasmunster, Belgium. Company number / BTW number: BE 0773.466.716 (RPR Gent, afdeling Dendermonde).

For any privacy-related question, request to exercise your rights, or complaint, you can reach us at:

  • Email: info@tailortalents.be
  • Postal: Apro BV (TailorTalents), Burgemeester Michel Du Tré-straat 13, 9250 Waasmunster, Belgium
  • Phone: +32 495 30 45 90

We have not appointed a Data Protection Officer (DPO) — our processing activities do not meet the thresholds in Article 37 GDPR. The contact above is the responsible privacy point of contact.

2. What this policy covers

This policy applies to personal data processed in connection with our website at tailortalents.com and its locale-specific variants (/nl, /fr, /en). It covers visitors, prospects who use the contact form, and people whose contact details we hold for B2B commercial relationships.

Personal data processed under a separate signed contract with a client (delivery routes, recipient details, install schedules) is governed by that contract and any data-processing agreement attached to it. This website policy does not override those terms.

3. Personal data we collect

Data you provide directly

  • Contact form submissions: name, role, company, email, phone, message contents
  • Email correspondence and call notes initiated by you
  • Information you submit when applying for a role (CV, motivation, contact details)

Data collected automatically

  • Server logs: IP address, user agent, requested URL, timestamp, response status (security and operational purpose)
  • Strictly necessary cookies (see our Cookie Policy)
  • Aggregate, non-identifying usage data (page-view counts) where available

We do not currently use marketing or analytics cookies. If we add such tools (e.g. GA4), this policy and our Cookie Policy will be updated and a consent banner introduced before any non-essential cookie fires.

4. How and why we use your data

Purposes and legal bases

Processing activityLegal basis (Art. 6 GDPR)
Replying to a contact-form submission and qualifying the leadPre-contractual measures at the data subject's request (Art. 6(1)(b)) and legitimate interest in B2B prospecting (Art. 6(1)(f))
Sending a quote and following up on a B2B sales conversationPre-contractual measures (Art. 6(1)(b))
Performing a delivery, installation or service contractContract performance (Art. 6(1)(b))
Invoicing, accounting, statutory record-keepingLegal obligation (Art. 6(1)(c)) — Belgian accounting and tax law
Sending direct-marketing emailsConsent (Art. 6(1)(a)) — opt-in required, opt-out always available
Server logs and IT-security measuresLegitimate interest in operational security (Art. 6(1)(f))
Recruitment (job applications)Pre-contractual measures (Art. 6(1)(b)) and consent for retention beyond the selection process

Where we rely on legitimate interest, we have carried out a balancing test that weighs our interest in B2B commercial relationships against your reasonable expectations and rights. You can request a copy of this assessment at the contact above.

5. Who we share your data with

We share personal data only with categories of recipients that are necessary to deliver our services or comply with a legal obligation. Concretely:

  • Hosting and cloud infrastructure: Amazon Web Services (AWS) and Microsoft Azure
  • Email: Amazon WorkMail
  • Accounting and invoicing: our accountant under a strict confidentiality engagement
  • Transport and installation subcontractors, only when they are needed to perform a delivery or install you have ordered
  • Public authorities, when required by Belgian law

Each external processor that handles personal data on our behalf operates under a written data-processing agreement (Article 28 GDPR) that requires them to act only on our instructions and to apply appropriate security measures.

6. International transfers

Some of our processors are based outside the European Economic Area, in particular in the United States. Where this is the case, we rely on:

  • The EU–US Data Privacy Framework (DPF) where the recipient is DPF-certified (Amazon Web Services, Microsoft, Amazon WorkMail are all DPF-certified) — Adequacy Decision (EU) 2023/1795 of 10 July 2023
  • European Commission Standard Contractual Clauses (SCCs) where the recipient is not DPF-certified, supplemented by appropriate technical and organisational measures

You can request a copy of the safeguards we apply to a specific transfer at the contact above.

7. How long we keep your data

CategoryRetention period
Lead-gen contact data (no contract signed)Up to 12 months after the last interaction, then deleted or anonymised
Quote / RFQ data (no contract signed)1 year after the quote expires; archive metadata kept up to 5 years
Active commercial contracts10 years after the end of the contract (Belgian Civil Code limitation)
Invoicing and accounting records7 years (Article III.86 Code of Economic Law and Belgian VAT/income-tax law)
Server logs6–12 months
Marketing-email subscribersUntil withdrawal of consent + reasonable deletion lag
Job applicationsEnd of selection + 6 months, or 2 years with consent

8. How we protect your data

We apply technical and organisational measures appropriate to the risk: TLS encryption in transit, access control on a need-to-know basis, written confidentiality engagements with staff and processors, and a defined incident-response procedure for any suspected personal-data breach. We will notify the Belgian APD within 72 hours of becoming aware of a notifiable breach (Article 33 GDPR) and inform affected data subjects without undue delay where the breach is likely to result in a high risk to their rights and freedoms (Article 34 GDPR).

9. Your rights and how to exercise them

Under the GDPR you have the following rights with respect to personal data we hold about you:

  • Right of access — request a copy of the personal data we hold (Art. 15)
  • Right to rectification — ask us to correct inaccurate or incomplete data (Art. 16)
  • Right to erasure — ask us to delete your data, subject to applicable retention obligations (Art. 17)
  • Right to restriction — ask us to limit processing in certain circumstances (Art. 18)
  • Right to data portability — receive a machine-readable copy of data you provided to us under consent or contract (Art. 20)
  • Right to object — object at any time to processing based on our legitimate interest, including an absolute right to object to direct marketing (Art. 21)
  • Right to withdraw consent — at any time, where processing is based on consent, without affecting prior lawful processing (Art. 7(3))
  • Right not to be subject to a decision based solely on automated processing producing legal or similarly significant effects on you (Art. 22) — we do not currently make such decisions

To exercise any of these rights, contact us at info@tailortalents.be. We will respond within one month and may extend this by two months for complex requests, in which case we will tell you why. We may ask for proof of identity to make sure we are dealing with the right person.

10. Right to lodge a complaint with the Belgian APD

If you believe our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données — APD/GBA):

  • Drukpersstraat 35 / Rue de la Presse 35, 1000 Brussels, Belgium
  • Phone: +32 (0)2 274 48 00
  • Email: contact@apd-gba.be
  • Web: gegevensbeschermingsautoriteit.be / autoriteprotectiondonnees.be

We would be glad to address any concern with you directly first — but you can also approach the APD without contacting us, and at any time.

11. Cookies and similar technologies

We currently use only strictly necessary cookies. The full list and details are in our separate Cookie Policy.

12. Children

Our services are directed at businesses, not at children. We do not knowingly collect personal data from persons under 16 (the Belgian age of digital consent under Article 7 of the Act of 30 July 2018 is 13, but our services are not directed at minors).

13. Changes to this policy

We may update this policy to reflect changes in our processing activities, in technology, or in applicable law. The version number and 'Last updated' date at the top of this page reflect the current version. Material changes that affect your rights will be communicated through this website and, where appropriate, by direct notice.

14. Contact

Questions about this policy or about how we handle your personal data? Email info@tailortalents.be or write to Apro BV (TailorTalents), Burgemeester Michel Du Tré-straat 13, 9250 Waasmunster, Belgium.

Need anything else?

If something here is unclear or you want to exercise one of your rights, just send a short email to info@tailortalents.be. We try to keep this policy in plain language — if a section confuses you, that is on us, and we will rewrite it.