Last updated: 5 October 2026
Retail Projects Europe NV takes your privacy seriously. This privacy policy explains which personal data we collect through the website www.retail-projects.eu, why we do so, how long we keep it and what rights you have. We process personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and Belgian privacy legislation.
1. Who is responsible?
The data controller is:
Retail Projects Europe NV
De Lange Beemden 29, 3550 Heusden-Zolder, Belgium
Company (VAT) number: BE 0540.736.891
Email: info@retail-projects.eu
Phone: +32 11 49 52 67
For any question about this policy or about the processing of your data, you can reach us using these details.
2. What data do we process and why?
You can visit our website without providing any personal data. There are no user accounts and we do not send a newsletter. We only process data in the following situations.
2.1 Contact form
When you fill in the contact form, we process:
- your name and email address;
- your phone number and company name (optional);
- information about your project: type of project, location, desired timing and your message.
Purpose: to answer your request, discuss your project and, where applicable, prepare a quotation.
Legal basis: taking pre-contractual steps at your request (Art. 6(1)(b) GDPR) and our legitimate interest in responding to questions from (potential) customers (Art. 6(1)(f) GDPR).
The form is technically handled by an external form service acting as a processor on our behalf. This service forwards your message to our email address info@retail-projects.eu and does not use the data for its own purposes.
2.2 Contact by email or phone
If you contact us directly, we process the data you provide yourself (e.g. your name, contact details and the content of your message) to answer your question and, where applicable, to manage our business relationship with you or your company. Legal basis: pre-contractual steps, performance of a contract or our legitimate interest.
2.3 Job applications
If you send us a job application or CV, we use that data solely to assess your application and to contact you (pre-contractual steps). If your application is not successful, we delete your data, unless you give us permission to keep it for future vacancies.
2.4 Website visits and server logs
With every visit, our hosting provider’s servers automatically record technical data, such as your IP address, the date and time, the page requested and the type of browser. This is necessary to run the website securely and reliably and to prevent abuse (legitimate interest). These logs are used for those purposes only and are automatically deleted after a short period.
2.5 Visitor statistics (Google Analytics)
Only if you consent via the cookie banner do we use Google Analytics 4 to compile anonymised statistics on how the website is used (e.g. which pages are visited most). IP addresses are anonymised. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. More information is available in our cookie policy.
3. How long do we keep your data?
We do not keep personal data longer than necessary for the purpose for which it was collected:
- Contact requests and correspondence: as long as necessary to follow up on your request. If a request does not lead to a further relationship, we will in principle delete the data no later than two years after the last contact.
- Customers and suppliers: for the duration of the business relationship and thereafter for as long as the law requires (e.g. accounting and tax retention periods).
- Job applications: see section 2.3.
- Analytics data: in line with the retention period set in Google Analytics; the cookies themselves expire after two years at most.
4. Who do we share your data with?
We never sell or rent out your data. We only share it with service providers we need to run the website and our business, and only to the extent strictly necessary:
- Hosting: Sevalla, a service of Kinsta Inc., including a content delivery network (CDN) that delivers the website quickly and securely;
- Contact form: an external form service (processor);
- Email and IT: our email and IT service providers;
- Statistics: Google Ireland Ltd. (Google Analytics), only after your consent;
- external advisers (e.g. accountant or lawyer) and public authorities, where required by law.
We make agreements with our processors that safeguard the confidentiality and security of your data.
5. Transfers outside the European Economic Area
Some service providers (such as Kinsta Inc. and Google) are based in the United States or may process data there. In that case, transfers only take place with appropriate safeguards, such as the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission. You can request more information about this via info@retail-projects.eu.
6. Security
We take appropriate technical and organisational measures to protect your data against loss, unauthorised access or misuse. The website is static (no database or administration interface is publicly accessible) and is served exclusively over a secure connection (HTTPS). Anyone at our company with access to personal data is bound by confidentiality.
7. Your rights
You have the right to:
- access the personal data we process about you;
- have inaccurate or incomplete data rectified;
- have your data erased, unless we are legally required to keep it;
- have the processing restricted;
- receive your data in a structured, commonly used format or have it transferred to another party (portability);
- object to processing based on our legitimate interest;
- withdraw any consent you have given at any time, without affecting the lawfulness of processing carried out before the withdrawal.
You can exercise these rights free of charge by emailing info@retail-projects.eu or writing to our address (see section 1). If we have doubts about your identity, we may ask you for additional identification. We will reply within one month; for complex or numerous requests, this period may be extended by two months, in which case we will inform you.
We do not use automated decision-making or profiling.
8. Lodging a complaint
If you are not satisfied with the way we handle your data, please contact us first; we will gladly look for a solution together. You also always have the right to lodge a complaint with the supervisory authority:
Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données)
Rue de la Presse / Drukpersstraat 35, 1000 Brussels
www.dataprotectionauthority.be
9. Changes
We may update this privacy policy, for example when the website or the law changes. The most recent version is always available on this page, with the date of the last change at the top. See also our cookie policy and legal notice. Questions? Get in touch.



