Privacy Policy

Effective Date: 01/01/2025
CMD Group SRL (“CMD Group”, “we”, “our”, “us”) is committed to ensuring the protection and confidentiality of your personal data. This Privacy Policy explains how we collect, process, and protect your information when you visit our website: www.cmdgroup.be, in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Belgian laws.

By accessing and using our website, you accept the terms of this Privacy Policy.

1. Data Controller

The data controller responsible for processing your personal data is:

CMD Group SRL
Boulevard Léopold III 5
1030 Schaerbeek, Belgium
Email: info@cmdgroup.be
Company number: BE 1015.598.908

2. Types of Personal Data We Collect

We may collect and process the following categories of personal data:

a) Automatically collected (“Device Information”)

IP address
Browser type and version
Time zone and language preferences
Pages visited, referral source, interactions on the site
Cookies (see our Cookie Policy)

b) Information you voluntarily provide

First and last name
Email address
Phone number
Organization/company name
Country or city of residence
Any personal data you submit through forms, newsletter subscriptions, or direct communication

We do not collect any special categories of data (e.g. health data, political opinions) through this site.

3. Legal Basis for Processing

We process your personal data under the following legal grounds:

Consent (Art. 6(1)(a) GDPR): For newsletter subscriptions or contact forms
Contractual necessity (Art. 6(1)(b)): To respond to inquiries or manage business relationships
Legitimate interests (Art. 6(1)(f)): For website performance, analytics, and security
Legal obligations (Art. 6(1)(c)): Where required by law

We will never use your data for profiling, automated decision-making, or resale without your explicit consent.

4. Purpose of Data Collection

We collect and process personal data for the following purposes:

To operate, monitor, and improve our website
To respond to contact or partnership requests
To manage newsletter subscriptions (if opted in)
To ensure website security and prevent misuse
To comply with legal or regulatory obligations

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies for basic functionality, analytics, and to enhance your user experience. You can accept, refuse, or manage cookies at any time via your browser settings. For more information, refer to our Cookie Policy.

6. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes described above or to comply with legal requirements.

Contact inquiries: Retained for up to 12 months
Newsletter subscribers: Until you unsubscribe
Technical logs: Up to 6 months for security audits

We review and delete unnecessary data regularly.

7. Sharing of Personal Data

We do not sell your personal data. We may share your data with:

Authorized internal staff of CMD Group
IT service providers (e.g. web hosting, email platforms) under data processing agreements
Government authorities or regulators, when legally required

All third-party processors are GDPR-compliant and contractually bound to confidentiality.

8. International Data Transfers

Some third-party service providers may process data outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place, such as:

EU Standard Contractual Clauses (SCCs)
Service providers certified under the EU-U.S. Data Privacy Framework (if applicable)

You may request a copy of the safeguards by contacting us at info@cmdgroup.be.

9. Your Rights Under GDPR

You have the following rights under the GDPR:

Right of access – to know what personal data we hold about you
Right to rectification – to correct inaccurate or incomplete data
Right to erasure – to request deletion of your personal data
Right to restrict processing – to limit how we use your data
Right to data portability – to receive your data in a portable format
Right to object – to stop certain processing activities
Right to withdraw consent – at any time, without affecting prior lawful processing

To exercise your rights, email us at info@cmdgroup.be. We will respond within 30 days.

You also have the right to file a complaint with the Data Protection Authority:
https://www.dataprotectionauthority.be

10. Security Measures

We apply appropriate technical and organizational measures to protect personal data, including:

HTTPS encryption
Firewalls and server hardening
Restricted access to personal data
Regular data backups and audits

However, please note that no online system can be guaranteed 100% secure.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the content or privacy practices of those websites. We recommend you review their privacy policies before submitting any personal data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the “Effective Date” listed above. We encourage you to review it periodically.

13. Contact Us

For any questions about this Privacy Policy or how your data is handled, contact us:

CMD Group SRL
Boulevard Léopold III 5
1030 Schaerbeek, Belgium
📧 info@cmdgroup.be