Privacy Statement

1. Collection and processing of personal data

WeWed SRL (hereinafter "WeWed") attaches great importance to privacy and the protection of personal data. We only process personal data that is necessary for our activities, the operation of our website, the management of our relations with potential vendors and partners, and communication with users and prospects.

When processing personal data, we always comply with Regulation (EU) 2016/679 ("GDPR") and applicable Belgian privacy law.

We receive your personal data when:

• you visit our website;
• you contact us via a form, email or phone;
• you sign up to a newsletter, waiting list or launch communication;
• you come forward as a vendor wishing to be listed or contacted;
• you interact with us at events (e.g. trade fairs, professional meetings).

Where required by law, we ask for your consent before collecting and processing certain personal data.

As part of its activities, WeWed is the controller of your personal data.

This Privacy Statement informs you about the data we process, the purposes, retention periods and how you can exercise your rights.

2. What personal data do we process?

We only process personal data necessary to achieve our purposes (see section 3).

In practice, we may process the following categories:

• Identification data, e.g. surname, first name;
• Contact details, e.g. email, phone, location (city/region);
• Professional data, notably for vendors or potential partners: business name, type of services, area of activity, information shared during contact or pre-onboarding;
• Data on your interactions with us via our website, forms, emails, calls or event exchanges;
• Technical data such as IP address, logs, browsing data and cookies (see section 10);
• Images or visual content, where applicable, when you take part in events or communications (subject to applicable rules).

We do not solicit sensitive data within the meaning of the GDPR and ask you not to share such information.

3. For what purposes do we process your personal data?

We process your personal data for the following purposes: contacting you, providing the information you request, managing vendor and partner relationships, ensuring proper site operation and improvement, and communicating about the project.

Marketing communications are sent only with your prior, free, specific, informed and unambiguous consent, which you may withdraw at any time.

4. On what basis do we process your personal data?

Under Article 6 of the GDPR, we process your data on the following bases: pre-contractual measures or contract performance, legitimate interest, consent, and legal obligation.

You may withdraw your consent at any time, without affecting the lawfulness of prior processing.

5. How long do we keep your data?

We keep your personal data no longer than necessary for the purposes for which it was collected, unless a legal obligation or defence of our rights requires otherwise.

As a guideline:

• Contact data and requests: up to 24 months after the last contact;
• Vendor and partner data: up to 36 months after the last exchange;
• Newsletter data: until unsubscription;
• Technical data and logs: for a limited period for security purposes;
• Litigation data: for the duration of the dispute and applicable limitation periods.

6. To whom do we transmit your personal data?

We only share your personal data when necessary to achieve the purposes described in section 3.

7. Record of processing activities

We maintain a record of processing activities in accordance with Article 30 of the GDPR, listing all processing operations, purposes, categories of data, recipients, retention periods and security measures.

8. Security policy

We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access, alteration or disclosure.

These measures include in particular:

• access controls;
• securing systems and communications;
• contractual agreements with our providers;
• awareness training for authorised personnel.

In the event of a personal data breach presenting a risk to the persons concerned, we will comply with GDPR notification obligations.

9. Your rights and how to exercise them

Under the GDPR you have the following rights:

• right of access;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to object;
• right to data portability;
• right to withdraw your consent at any time.

You may exercise your rights by contacting the Data Protection Officer (details below). If you believe your rights are not respected, you may lodge a complaint with the Data Protection Authority.

10. Cookies and similar technologies

Our site uses cookies and similar technologies to ensure it works properly, improve its performance and, where applicable, analyse its use.

On your first visit, an information banner lets you manage your preferences.

11. Adaptation of the privacy statement

WeWed may adapt this Privacy Statement to reflect legal, technical or functional changes to its activities.

The most recent version is always published on the site.