This privacy policy governs the collection, storage and use of personal data collected by Bruno Schwartz - Spacebloom, a company operating under the laws of Belgium, registered at the Crossroads Bank for Enterprises under number BE0751969536 (hereinafter referred to as “Spacebloom”, “We”, “us” or “our”), through Spacebloom’s website: www.spacebloom.co (“Site”), web app (“Platform“) and the services offered by Spacebloom (the “Services”).

​

This privacy policy provides You as a User, aged 18 or over (“You”, “your” or the “User”) with details about the personal data We collect from you, how and why We use your personal data and your rights to control personal data We hold about you. Please read this privacy policy carefully. If You do not agree to this privacy policy in its entirety, You must refrain from using the Site, Platform and Services.

We respect your right to privacy and will only process personal information You provide to us in accordance with applicable data protection laws, and in particular with the General Data Protection Regulation (Regulation 2016/679) (“GDPR”).

​

This privacy policy may be modified, for example, in connection with new features of the Site, Platform and the Services or to comply with new legal, contractual or administrative obligations. We therefore recommend that You regularly consult this privacy policy. Important changes will be announced via e-mail.

​

This privacy policy was last updated on October 5, 2023. Please check back regularly to keep informed of updates to this privacy policy.

​

1. Who we are

Spacebloom acts as a data ‘controller’ under the data protection laws and as such Spacebloom is responsible for the collection, storage and use of your personal data.

If You have any questions about how We collect, store and use your personal data, or if You have any other privacy-related questions, please contact us at legal@spacebloom.co.

We do not and will not knowingly collect information from any unsupervised child under the age of 18. If You are under the age of 18, You may not use the Platform and Services.

​

2. The personal data we collect about You

When You register, access, log-into, browse and use the Site, Platform and/or Services, We may collect the following information from You:

• Contact details (e.g. name, e-mail address, telephone number, date of birth) - All Users

• Account data (e.g. user name, account credentials) - All Users

The above personal data is directly obtained from You when registering on the Platform or on the Site.

​

Professional and financial data

• Service data (e.g. legal status, VAT or company registration number, etc.) - Users that are a client of the service

• Activity type - Users that voluntarily provide information to make use of additional services

The above personal data is directly obtained from You by entering it into the Site, Platform and/or Services.

 

Publicly Available data

• Business contact information, address, email address, phone number - All Users

The above personal data is obtained from other sources like public databases.

 

Other data

• Correspondence data voluntarily provided information (i.e. requests, questions, conversations) - Users that voluntarily provide information

The above personal data is directly obtained from You when You ask us questions, initiate a conversation with us and use third party services. We may disclose your enquiry data to one or more of those selected third party suppliers of services identified on this privacy policy for the purpose of providing and improving our Services and communicating with you.

​

Automated Data collection

• The type of browser, the operating system You are using, your IP address, information related to user and web traffic - All Users

• Log data - All Users

The above personal data is directly obtained from You when You use the Site, Platform and/or Services.

​

3. How and why we may store and use your information

Spacebloom (or third party data processors acting on our behalf) may collect, store and use your personal information listed above for the following purposes, listed below.

​

3.1 Legal obligation

Spacebloom is bound by a number of legal and regulatory obligations that require the processing of your personal data. These obligations may imply that We collaborate with the relevant authorities and/or with third parties and, where appropriate, provide them with some of your data in light of:

• the obligation to respond to the official requests of the various competent authorities (e.g. in the field of data protection, consumer protection, etc.), whether Belgian or foreign; and

• the obligation to respond to requests from competent judicial authorities.

 

3.2 Use of the Platform

Spacebloom collects some personal data from You to make the Site, Platform, and Services available to You and to provide You with content which is tailored to your individual situation. Specifically, to:

• assist You in the online registration process, in providing information about our services and terms of use;

• the management of your User account;

• provide You with the services relating to the Platform and/or Services that You request;

• connect You with partners;

• evaluate your eligibility for marketing offers, products and services; and

• answer your questions and requests and provide You with support, including when You interact with our chatbot, or request a demo/free trial.

Spacebloom collects certain personal data that it obtains from You for the performance of the contract with You or based on your consent. Without your personal data, We cannot provide You with our services.

​

3.3 Legitimate interests

Spacebloom also processes your personal data for the realization of its legitimate interests. To that end, Spacebloom strives to maintain a balance between the need to process data and respect for your rights and freedoms, including the protection of privacy.

Your data is processed for:

• the retaining of evidence (archiving);

• the operation, evaluation and improvement of the quality of services rendered to Users;

• the management of our communications with You;

• facilitate the functionality of the Platform and the Site;

• the preparation of studies, models (risk, marketing and others) and statistics, using techniques of anonymization and/or pseudonymization of the persons concerned;

• the use of cookies to improve the Platform and the Site (see Cookie policy);

• the recognition, exercise, defense and preservation of Spacebloom’s rights; and

• processing your requests.

We may use automated and manual (human) methods to process your personal data by using artificial intelligence (AI), e.g. Open AI API, to provide You with valuable personalized advice, recommendations and experiences.

​

3.4 Direct Marketing

• We may use your personal data to assess Your eligibility for and offer You or promote products and services which we think may interest You; and

• where You have given us your consent, to disclose your personal information to carefully chosen third parties so that they may contact You (including by SMS and e-mail) with products and services which may interest You.

 

However, We respect your right to control your personal data, and You can unsubscribe from such marketing messages at any time by using the link provided in the business message or contact us by e-mail at: legal@spacebloom.co.

​

We will not disclose, sell or rent your personal information to any third party unless You have consented to this. If You do consent but later change your mind, You may contact Us and We will cease any such activity.

​

4. Data Subjects rights

As a User of the Site, Platform and/or Services, You have the following rights:

• the right to access: You have the right to ask us to provide You with copies of personal data that We hold about You at any time. You have the right to access the following information:

  a) For what purpose We process your personal data and what its categories are.

  b) Who the recipients and processors of your personal data are.

  c) How long your personal data will be saved and if this time cannot be determined, then the use criteria to determine this time.

  d) Which personal data You may request removal or processing restrictions for and object to such processing.

  e) About the right to file a complaint with the supervisory authority.

  f) About personal data sources, unless they have been obtained from you.

  g) Whether automatic decision-making or profiling takes place automatically.

 

If You ask for it, We will provide You with copies of your processed personal data. If You require additional copies, You may be charged for the costs incurred. If You request it in electronic form, copies will be provided in electronic form if You do not request it in another way. However, We have the right to require verification of your identity to verify that this information regarding your personal data does not reach an unauthorized person.

​

We will try to provide You with this information as soon as possible, depending on the range of information You require.

​

• the right to rectification: You have the right to ask us to update and correct any out-of-date or incorrect personal information that We hold about You free of charge;

• the right to withdraw your consent: where the processing is based on your consent, You have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;

• the right to erasure: You have your right to have your personal data permanently deleted. We are not always obliged to delete your personal data at your request. This right only applies if the conditions of article 17 of the GDPR have been met;

• the right to restrict processing: You have the right to require us to restrict the processing of your personal data. This allows You to freeze our use of your personal data without deleting it. We are not always obliged to limit the processing of your personal data at your request. This right only applies if the conditions of article 18 of the GDPR have been met.

• the right to data portability: To the extent that the legal basis for our processing of your personal data is consent, and such processing is carried out by automated means, You have the right to receive your personal data from us in a structured, commonly used and machine-readable format. This allows You to easily transfer, copy or move personal data from one controller to another. However, this right does not apply where it would adversely affect the rights and freedoms of others. You also have the right to have your personal data transferred directly to another controller, if this is technically possible;

• the right to object to processing: You have the right to object to the processing of your personal data. We are not always obliged to accept your objection. This right only applies if We process your personal data on grounds relating to the legitimate interests pursued by us or by a third party. We will be allowed to continue to process your personal data if We can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims; and

• the right to withdraw your consent: You have the right to withdraw your consent when the processing of your personal data takes place on the basis of your consent. Withdrawal of your consent does not affect the lawfulness of the processing based on consent before withdrawal.

 

If You wish to exercise any of the above rights, please write to us by e-mail at legal@spacebloom.co including a supporting identity document to allow us to validate and treat your request.

​

• The right to complain to a supervisory authority: You have the right to lodge a complaint with the competent supervisory authority.

• In Belgium You can submit a complaint to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit - Autorité de protection de des données), either by mail at the Rue de la Presse 35, 1000 Brussels or by e-mail at commission@privacycommission.be or by phone at +32 2 274 48 00).

 

5. How long does Spacebloom retain your personal data?

In accordance with the principles set out below, We will delete personal data once it is no longer required to fulfil the purposes outlined in this Privacy Policy, unless their retention would remain required for other fundamental purposes, including but not limited to complying with our legal obligations, handling claims and resolving disputes. This means We may keep different information for different periods.

If You would like to find out how long We keep your personal data for a particular purpose You can contact us by e-mail at: legal@spacebloom.co.

​

For the retention period of any cookies used on this Site We refer to our Cookie Policy.

​

Cookies

For further information on the cookies used in connection with the Website, we refer to our Cookie Policy.

 

Security

Spacebloom has taken appropriate technical and organisational measures to safeguard the personal information that you provide us with, against unauthorized or unlawful processing and against accidental destruction, loss or damage.

 

Data breaches are detected by an array of potential triggers:

• Customer complaint, as described in the previous chapter.

• Abnormal activity, identified by log monitoring solutions

In case of breach, all credentials are revoked and renewed, including:

• platform authentication tokens

• database authentication credentials

• system administrator authentication credentials

• backup encryption keys if required

 

6. Who has access to your personal data?

Third parties potentially accessing your personal can only access the information they have been specifically authorized for by Spacebloom. This ensures limited and targeted data exposure to authorized parties. Access rights are tailored to restrict data availability to relevant and authorized individuals or entities.

​

Cloud Infrastructure provider

We utilize cloud infrastructure services from reputable providers to securely store and manage your data.

• We make use of Bubble to manage and host the Platform.

• We make use of Wix to host the Site.

 

Marketing and Analytics

We engage marketing and analytics service providers to optimize our marketing efforts and gain insights into User interactions. These providers help us analyze data trends and improve our services:

• Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of the Site, Platform and Services. Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Site. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network. You can opt-out of having made your activity on the Sites available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js and dc.js) from sharing information with Google Analytics about visits activity. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy.

• Hotjar is a web analytic services that tracks website traffic to show Us how You are using our Site and collect feedback.

​

Social Media

We make use of social media plugins to direct You to our social media channels and to allow You to interact with our content. These social media channels include Instagram and LinkedIn. In the event You click such link, such social media service provider may collect personal data about You and may link this information to your existing profile on such social media.

We are not responsible for the use of your personal data by such social media service provider. In such case, the social media service provider will act as controller. For your information only, We have included the relevant links to these social media privacy policies (which may be changed from time to time by the relevant service provider):

– Instagram: https://help.instagram.com/155833707900388

– LinkedIn: http://linkedin.com/legal/privacy-policy

​

Open AI

For specific purposes, Spacebloom may share certain data with OpenAI to facilitate the functionality of the Site and Platform and the performance of the Services. When You use our Site, Platform and/or Services, We may process your requests, messages, or other content by utilizing OpenAI.

The specific data shared will be determined in accordance with our legitimate interests, taking into consideration the needs of our services and the optimal utilization of OpenAI’s services, while respecting the principles of data minimization and privacy protection. We will ensure that any data shared with OpenAI is done so in compliance with applicable data protection laws.

• OpenAI is developed and maintained by OpenAI Inc., and any data You provide while using our Platform and Services may be transferred and processed by OpenAI to facilitate the provision of their services to us. For more details regarding OpenAI’s privacy practices, We encourage You to review their Privacy Policy available at: https://openai.com/policies/privacy-policy.

 

Other sub processors

- Wix Payments (https://wix.com/about/terms-of-payments - United States), Adyen B.V. (https://www.wix.com/about/us-wixpayments-tou - Netherlands), and Stripe (https://stripe.com/legal/connect-account#translation - Ireland) for payment processing.

- OpenAI (US) for the extraction of text and structured data from documents, large language model processing.

 

Other third parties

• (sub)contractors for assisting us in fulfilling the purposes listed above;

• our accountants, auditors, lawyers or similar advisers when We ask them to provide us with professional advice; and

• the competent authorities, judicial, police or administrative authorities if We are under a duty to disclose or share your personal data in order to comply with any legal obligation, a binding decision of an administrative authority or a court order.