1. Introduction

This Privacy Policy explains how dosanova ("we," "us," or "our") collects, uses, discloses, and protects your personal data when you visit our website and use our services. This policy has been drafted in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Belgian Data Protection Authority implementation requirements, and other applicable privacy laws.

We are committed to protecting your privacy and ensuring transparency in our data processing activities. Please read this policy carefully to understand your rights and how we handle your personal information.

2. Controller Information

Data Controller:
Dosanova bv
Klijtstraat 52
8870 Izegem
Belgium

Contact Information: 
Email: info@Dosanova.com
Phone: +32 (0)51 800 750
Website: www.dosanova.com

3. Personal Data We Collect

3.1 Information You Provide Directly
We may collect the following personal data when you:

• Contact us through forms or email
• Subscribe to our newsletter
• Request information about our services
• Apply for positions with our company

Categories of data:

• Name and contact information (first name, last name, email address, phone number)
• Professional information (company name, job title, industry)
• Communication preferences
• Any other information you choose to provide in communications

3.2 Information Collected Automatically
When you visit our website, we automatically collect certain information through cookies and similar technologies:

Technical Data:

• IP address (anonymized where possible)
• Browser type and version
• Operating system
• Device information
• Website usage data (pages visited, time spent, click behavior)
• Referral source

Analytics Data:
We use Google Analytics 4 (GA4) to collect:

• Session duration and frequency
• Geographic location (country/region level)
• Website navigation patterns
• Conversion tracking data

3.3 Lead Information Data
We use Leadinfo services to identify business visitors to our website:

• Company information based on IP address
• Business contact details from publicly available sources
• Professional profiles of business visitors
• Website interaction patterns for business users

4. Legal Basis for Processing
We process your personal data based on the following legal grounds under Article 6 of the GDPR:

4.1 Consent (Article 6(1)(a))

• Newsletter subscriptions
• Marketing communications
• Non-essential cookies and tracking technologies
• Analytics and lead tracking

4.2 Contract Performance (Article 6(1)(b))

• Providing requested information about our services
• Managing business relationships
• Processing inquiries and support requests

4.3 Legitimate Interests (Article 6(1)(f))

• Website security and fraud prevention
• Analyzing website performance for improvement
• Business development and lead generation
• Internal administrative purposes

Our legitimate interests are balanced against your privacy rights and we only process data where this balance favors processing.

4.4 Legal Obligation (Article 6(1)(c))

• Compliance with tax and accounting requirements
• Responding to legal requests from authorities

5. How We Use Your Personal Data
We use your personal data for the following purposes:

5.1 Communication and Service Provision

• Responding to your inquiries and requests
• Providing information about our services
• Sending newsletters (with your consent)
• Managing business relationships

5.2 Website Analytics and Improvement

• Understanding how visitors use our website
• Improving website functionality and user experience
• Analyzing traffic patterns and popular content
• Technical troubleshooting and security

5.3 Lead Generation and Business Development

• Identifying potential business opportunities
• Understanding visitor demographics and interests
• Personalizing content and offerings
• Sales and marketing activities

5.4 Legal and Administrative Purposes

• Maintaining business records
• Complying with legal obligations
• Protecting our rights and interests

6. Data Sharing and Third Parties

6.1 Third-Party Service Providers
We share personal data with the following categories of processors:

Google Analytics 4:

• Purpose: Website analytics and performance measurement
• Data shared: Anonymized usage data, IP addresses, device information
• Data Processing Agreement: In place with Google LLC
• Location: Data may be processed in the United States with appropriate safeguards

Leadinfo B.V.:

• Purpose: Business visitor identification and lead generation
• Data shared: IP addresses, website usage patterns
• Data Processing Agreement: In place with Leadinfo B.V.
• Location: Netherlands (EU)

IT Service Providers:

• Purpose: Website hosting, maintenance, and security
• Data shared: Technical data as necessary for service provision
• Location: Belgium (EU)

6.2 International Transfers
Some of our service providers may transfer your data outside the European Economic Area (EEA). When this occurs, we ensure adequate protection through:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Additional technical and organizational safeguards

7. Cookies and Tracking Technologies

7.1 Types of Cookies We Use

Essential Cookies (No consent required):

• Session management cookies
• Security cookies
• Load balancing cookies

Analytics Cookies (Consent required):

• Google Analytics cookies
• Performance measurement cookies

Marketing Cookies (Consent required):

• Lead tracking cookies
• Advertising and retargeting cookies

7.2 Cookie Consent Management
We use a cookie consent banner to obtain your consent for non-essential cookies. You can:

• Accept all cookies
• Reject non-essential cookies
• Customize your preferences by category
• Withdraw consent at any time through our cookie settings

7.3 Managing Cookie Preferences
You can manage cookies through:

• Our cookie preference center (accessible via footer link)
• Your browser settings
• Industry opt-out tools for advertising cookies

8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

8.1 Retention Periods

• Contact and Inquiry Data: 3 years from last contact
• Newsletter Subscriptions: Until unsubscribed plus 1 month
• Analytics Data: 26 months (Google Analytics retention setting)
• Lead Information:2 years from last website visit
• Legal/Tax Records: 7 years (Belgian legal requirement)
• Technical Logs: 12 months maximum

8.2 Deletion Process
We have implemented automated deletion processes where possible and conduct regular data audits to ensure compliance with retention schedules.

9. Your Privacy Rights
Under the GDPR, you have the following rights regarding your personal data:

9.1 Right of Access (Article 15)
You can request information about what personal data we process and obtain a copy of that data.

9.2 Right to Rectification (Article 16)
You can request correction of inaccurate or incomplete personal data.

9.3 Right to Erasure (Article 17)
You can request deletion of your personal data in certain circumstances.

9.4 Right to Restrict Processing (Article 18)
You can request that we limit how we process your personal data in certain situations.

9.5 Right to Data Portability (Article 20)
You can request to receive your personal data in a structured, machine-readable format.

9.6 Right to Object (Article 21)
You can object to processing based on legitimate interests or for direct marketing purposes.

9.7 Right to Withdraw Consent (Article 7)
Where processing is based on consent, you can withdraw it at any time.

9.8 Exercising Your Rights
To exercise any of these rights, please contact us using the details in Section 2. We will respond within one month, though this may be extended in complex cases.

10. Data Security
We implement appropriate technical and organizational measures to protect your personal data:

10.1 Technical Safeguards

• SSL/TLS encryption for data transmission
• Secure hosting infrastructure
• Regular security updates and patches
• Access controls and authentication
• Data backup and recovery procedures

10.2 Organizational Measures

• Privacy by design principles
• Staff training on data protection
• Regular security assessments
• Incident response procedures
• Vendor security requirements

11. Data Breach Notification
In the event of a personal data breach that poses risks to your rights and freedoms, we will:

• Notify the Belgian Data Protection Authority within 72 hours
• Inform affected individuals without undue delay when required
• Document and investigate the breach
• Take measures to mitigate risks

12. Children's Privacy
Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such data, we will delete it promptly.

13. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will:

• Post the updated policy on our website
• Update the "Last Updated" date
• Notify you of material changes via email (if we have your contact information)
• Obtain new consent where required by law

14. Complaints and Supervisory Authority
If you have concerns about our processing of your personal data, you can:

Contact us directly:
Email: info@dosanova.com
Phone: +32 (0)51 800 750

File a complaint with the supervisory authority:
Belgian Data Protection Authority (APD/GBA) 
Rue de la Presse 35 / Drukpersstraat 35 
1000 Brussels, Belgium 
Email: contact@apd-gba.be 
Phone: +32 2 274 48 00 
Website: dataprotectionauthority.be

15. Google Analytics 4 Specific Information

15.1 Data Processing Details

• Data Controller: Dosanova bv
• Data Processor: Google LLC
• Processing Purpose: Website analytics and performance measurement
• Legal Basis: Consent (for analytics cookies)
• Data Retention: 26 months
• Data Transfer: Data may be transferred to the United States

15.2 Data Collected by Google Analytics

• Page views and session data
• User demographics (age, gender - when available)
• Interest categories
• Device and browser information
• Geographic location (country/region)
• Traffic sources and referrals

15.3 Your Controls

• Opt out via our cookie consent banner
• Use Google Analytics Opt-out Browser Add-on
• Enable "Do Not Track" in your browser settings

16. Leadinfo Specific Information

16.1 Data Processing Details

• Data Controller: Dosanova bv (for customer data)
• Data Processor: Leadinfo B.V.
• Processing Purpose: Business lead identification and generation
• Legal Basis: Legitimate interests (business development)
• Data Retention: 2 years from last visit

16.2 Data Sources
Leadinfo uses publicly available business databases to match IP addresses with company information, including:

• Company registries
• Professional directories
• Publicly available contact information
• Business websites and social media

16.3 Opt-Out Options
If you wish to opt out of Leadinfo tracking:

• Contact us at info@dosanova.com
• Visit Leadinfo's opt-out page at: leadinfo.com/en/opt-out
• We will exclude your IP address from future tracking

17. Consent Management

17.1 Obtaining Consent
We obtain consent through:

• Clear, prominent cookie banners
• Specific opt-in checkboxes for newsletters
• Separate consent for different processing purposes
• Plain language explanations

17.2 Consent Requirements
Our consent mechanisms ensure that consent is:

• Freely given (no forced consent)
• Specific (separate consent for different purposes)
• Informed (clear information provided)
• Unambiguous (clear affirmative action required)

17.3 Withdrawing Consent
You can withdraw consent at any time:

• Through our cookie preference center
• By unsubscribing from newsletters
• By contacting our privacy team
• Via account settings (where applicable)

18. Contact Information
For any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

Dosanova Privacy Team 

Email: info@dosanova.com
Phone: +32 (0)51 800 750
Address: Klijstraat 52, 8870 Izegem, Belgium

Response Time: We aim to respond to all privacy inquiries within 5 business days.

Effective Date: June 30, 2025 

Last Updated: July 9, 2025