Bruno Schwartz - Spacebloom (PP)
Rue Lannoy 4
VAT ID: BE0751969536
We respect your right to privacy and will only process personal information You provide to us in accordance with applicable data protection laws, and in particular with the General Data Protection Regulation (Regulation 2016/679) (“GDPR”).
1. Who we are
Spacebloom acts as a data ‘controller’ under the data protection laws and as such Spacebloom is responsible for the collection, storage and use of your personal data.
If You have any questions about how We collect, store and use your personal data, or if You have any other privacy-related questions, please contact us at email@example.com.
We do not and will not knowingly collect information from any unsupervised child under the age of 18. If You are under the age of 18, You may not use the Platform and Services.
2. The personal data we collect about You
When You register, access, log-into, browse and use the Site, Platform and/or Services, We may collect the following information from You:
Contact details (e.g. name, e-mail address, telephone number, date of birth) - All Users
Account data (e.g. user name, account credentials) - All Users
The above personal data is directly obtained from You when registering on the Platform or on the Site.
Professional and financial data
Service data (e.g. legal status, VAT or company registration number, etc.) - Users that are a client of the service
Activity type - Users that voluntarily provide information to make use of additional services
The above personal data is directly obtained from You by entering it into the Site, Platform and/or Services.
Publicly Available data
Business contact information, address, email address, phone number - All Users
The above personal data is obtained from other sources like public databases.
Correspondence data voluntarily provided information (i.e. requests, questions, conversations) - Users that voluntarily provide information
Automated Data collection
The type of browser, the operating system You are using, your IP address, information related to user and web traffic - All Users
Log data - All Users
The above personal data is directly obtained from You when You use the Site, Platform and/or Services.
3. How and why we may store and use your information
Spacebloom (or third party data processors acting on our behalf) may collect, store and use your personal information listed above for the following purposes, listed below.
3.1 Legal obligation
Spacebloom is bound by a number of legal and regulatory obligations that require the processing of your personal data. These obligations may imply that We collaborate with the relevant authorities and/or with third parties and, where appropriate, provide them with some of your data in light of:
the obligation to respond to the official requests of the various competent authorities (e.g. in the field of data protection, consumer protection, etc.), whether Belgian or foreign; and
the obligation to respond to requests from competent judicial authorities.
3.2 Use of the Platform
Spacebloom collects some personal data from You to make the Site, Platform, and Services available to You and to provide You with content which is tailored to your individual situation. Specifically, to:
the management of your User account;
provide You with the services relating to the Platform and/or Services that You request;
connect You with partners;
evaluate your eligibility for marketing offers, products and services; and
answer your questions and requests and provide You with support, including when You interact with our chatbot, or request a demo/free trial.
Spacebloom collects certain personal data that it obtains from You for the performance of the contract with You or based on your consent. Without your personal data, We cannot provide You with our services.
3.3 Legitimate interests
Spacebloom also processes your personal data for the realization of its legitimate interests. To that end, Spacebloom strives to maintain a balance between the need to process data and respect for your rights and freedoms, including the protection of privacy.
Your data is processed for:
the retaining of evidence (archiving);
the operation, evaluation and improvement of the quality of services rendered to Users;
the management of our communications with You;
facilitate the functionality of the Platform and the Site;
the preparation of studies, models (risk, marketing and others) and statistics, using techniques of anonymization and/or pseudonymization of the persons concerned;
the recognition, exercise, defense and preservation of Spacebloom’s rights; and
processing your requests.
We may use automated and manual (human) methods to process your personal data by using artificial intelligence (AI), e.g. Open AI API, to provide You with valuable personalized advice, recommendations and experiences.
3.4 Direct Marketing
We may use your personal data to assess Your eligibility for and offer You or promote products and services which we think may interest You; and
where You have given us your consent, to disclose your personal information to carefully chosen third parties so that they may contact You (including by SMS and e-mail) with products and services which may interest You.
However, We respect your right to control your personal data, and You can unsubscribe from such marketing messages at any time by using the link provided in the business message or contact us by e-mail at: firstname.lastname@example.org.
We will not disclose, sell or rent your personal information to any third party unless You have consented to this. If You do consent but later change your mind, You may contact Us and We will cease any such activity.
4. Data Subjects rights
As a User of the Site, Platform and/or Services, You have the following rights:
the right to access: You have the right to ask us to provide You with copies of personal data that We hold about You at any time. You have the right to access the following information:
a) For what purpose We process your personal data and what its categories are.
b) Who the recipients and processors of your personal data are.
c) How long your personal data will be saved and if this time cannot be determined, then the use criteria to determine this time.
d) Which personal data You may request removal or processing restrictions for and object to such processing.
e) About the right to file a complaint with the supervisory authority.
f) About personal data sources, unless they have been obtained from you.
g) Whether automatic decision-making or profiling takes place automatically.
If You ask for it, We will provide You with copies of your processed personal data. If You require additional copies, You may be charged for the costs incurred. If You request it in electronic form, copies will be provided in electronic form if You do not request it in another way. However, We have the right to require verification of your identity to verify that this information regarding your personal data does not reach an unauthorized person.
We will try to provide You with this information as soon as possible, depending on the range of information You require.
the right to rectification: You have the right to ask us to update and correct any out-of-date or incorrect personal information that We hold about You free of charge;
the right to withdraw your consent: where the processing is based on your consent, You have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
the right to erasure: You have your right to have your personal data permanently deleted. We are not always obliged to delete your personal data at your request. This right only applies if the conditions of article 17 of the GDPR have been met;
the right to restrict processing: You have the right to require us to restrict the processing of your personal data. This allows You to freeze our use of your personal data without deleting it. We are not always obliged to limit the processing of your personal data at your request. This right only applies if the conditions of article 18 of the GDPR have been met.
the right to data portability: To the extent that the legal basis for our processing of your personal data is consent, and such processing is carried out by automated means, You have the right to receive your personal data from us in a structured, commonly used and machine-readable format. This allows You to easily transfer, copy or move personal data from one controller to another. However, this right does not apply where it would adversely affect the rights and freedoms of others. You also have the right to have your personal data transferred directly to another controller, if this is technically possible;
the right to object to processing: You have the right to object to the processing of your personal data. We are not always obliged to accept your objection. This right only applies if We process your personal data on grounds relating to the legitimate interests pursued by us or by a third party. We will be allowed to continue to process your personal data if We can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims; and
the right to withdraw your consent: You have the right to withdraw your consent when the processing of your personal data takes place on the basis of your consent. Withdrawal of your consent does not affect the lawfulness of the processing based on consent before withdrawal.
If You wish to exercise any of the above rights, please write to us by e-mail at email@example.com including a supporting identity document to allow us to validate and treat your request.
The right to complain to a supervisory authority: You have the right to lodge a complaint with the competent supervisory authority.
In Belgium You can submit a complaint to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit - Autorité de protection de des données), either by mail at the Rue de la Presse 35, 1000 Brussels or by e-mail at firstname.lastname@example.org or by phone at +32 2 274 48 00).
5. How long does Spacebloom retain your personal data?
If You would like to find out how long We keep your personal data for a particular purpose You can contact us by e-mail at: email@example.com.
Spacebloom has taken appropriate technical and organisational measures to safeguard the personal information that you provide us with, against unauthorized or unlawful processing and against accidental destruction, loss or damage.
Data breaches are detected by an array of potential triggers:
Customer complaint, as described in the previous chapter.
Abnormal activity, identified by log monitoring solutions
In case of breach, all credentials are revoked and renewed, including:
platform authentication tokens
database authentication credentials
system administrator authentication credentials
backup encryption keys if required
6. Who has access to your personal data?
Third parties potentially accessing your personal can only access the information they have been specifically authorized for by Spacebloom. This ensures limited and targeted data exposure to authorized parties. Access rights are tailored to restrict data availability to relevant and authorized individuals or entities.
Cloud Infrastructure provider
We utilize cloud infrastructure services from reputable providers to securely store and manage your data.
We make use of Bubble to manage and host the Platform.
We make use of Wix to host the Site.
Marketing and Analytics
We engage marketing and analytics service providers to optimize our marketing efforts and gain insights into User interactions. These providers help us analyze data trends and improve our services:
Hotjar is a web analytic services that tracks website traffic to show Us how You are using our Site and collect feedback.
We make use of social media plugins to direct You to our social media channels and to allow You to interact with our content. These social media channels include Instagram and LinkedIn. In the event You click such link, such social media service provider may collect personal data about You and may link this information to your existing profile on such social media.
We are not responsible for the use of your personal data by such social media service provider. In such case, the social media service provider will act as controller. For your information only, We have included the relevant links to these social media privacy policies (which may be changed from time to time by the relevant service provider):
– Instagram: https://help.instagram.com/155833707900388
– LinkedIn: http://linkedin.com/legal/privacy-policy
For specific purposes, Spacebloom may share certain data with OpenAI to facilitate the functionality of the Site and Platform and the performance of the Services. When You use our Site, Platform and/or Services, We may process your requests, messages, or other content by utilizing OpenAI.
The specific data shared will be determined in accordance with our legitimate interests, taking into consideration the needs of our services and the optimal utilization of OpenAI’s services, while respecting the principles of data minimization and privacy protection. We will ensure that any data shared with OpenAI is done so in compliance with applicable data protection laws.
Other sub processors
- Wix Payments (https://wix.com/about/terms-of-payments - United States), Adyen B.V. (https://www.wix.com/about/us-wixpayments-tou - Netherlands), and Stripe (https://stripe.com/legal/connect-account#translation - Ireland) for payment processing.
- OpenAI (US) for the extraction of text and structured data from documents, large language model processing.
Other third parties
(sub)contractors for assisting us in fulfilling the purposes listed above;
our accountants, auditors, lawyers or similar advisers when We ask them to provide us with professional advice; and
the competent authorities, judicial, police or administrative authorities if We are under a duty to disclose or share your personal data in order to comply with any legal obligation, a binding decision of an administrative authority or a court order.