Privacy Policy — Nova Mercatus

1. Introduction

Nova Mercatus (CommV), established at Pastoor Wouterstraat 13 bus 2, 2650 Edegem, Belgium, registered with the Crossroads Bank for Enterprises under number 1032805223 (VAT number BE1032805223), attaches great importance to the protection of your personal data.

In this Privacy Policy, we explain which personal data we collect when you visit our website novamercatus.com or contact us, why, for how long and with whom we share this data, and what rights you have in this regard.

This Privacy Policy should be read together with our Cookie Policy, in which we specifically explain which cookies and similar technologies are used on our website.

We process your personal data in accordance with the General Data Protection Regulation (GDPR) and the applicable Belgian legislation.

2. Who is responsible for the processing?

Nova Mercatus (CommV) is the data controller for the personal data collected via this website.

Contact details:

Address: Pastoor Wouterstraat 13 bus 2, 2650 Edegem, Belgium
E-mail: info@novamercatus.com
Company number: 1032805223
VAT number: BE1032805223

3. What personal data do we collect?

Our website is an informative corporate website, not a webshop — we therefore do not process order, payment or customer account data. Depending on how you use our website, we may process the following categories of personal data:

Identification and contact data: name and e-mail address, when you fill in our contact form;
Communication data: the content of the message you send us via the contact form;
Technical and usage data: via Cloudflare Web Analytics we only collect aggregated statistics that cannot be traced back to you (see point 11 and our Cookie Policy) — this is not personal data.

We do not collect special categories of personal data (such as health or religious data) through this website, unless you disclose these to us on your own initiative.

4. How do we collect your personal data?

We collect personal data directly from you, when you fill in our contact form to ask a question or schedule a call. We do not automatically collect personal data via cookies — our website only uses cookieless technology for this purpose (see point 11).

5. For which purposes and on which legal basis do we process your data?

Purpose	Legal basis (Art. 6 GDPR)
Responding to your question via the contact form and following up on the conversation	Legitimate interest / preparation of an agreement at your request
Complying with legal and accounting obligations	Legal obligation

6. With whom do we share your personal data?

We may share your personal data with the following categories of recipients, only to the extent necessary for the purposes mentioned above:

IT and hosting service providers: for the management and security of our website and systems;
Accounting and legal advisors: for compliance with our legal obligations;
Government authorities: if we are legally required to do so.

We never sell your personal data to third parties. With every processor that processes personal data on our behalf, we conclude a data processing agreement in accordance with Article 28 GDPR.

7. Transfer of data outside the European Economic Area

The contact data you provide us via the contact form is not transferred outside the European Economic Area (EEA).

The statistics collected via Cloudflare Web Analytics are aggregated and cannot be traced back to an individual visitor (see our Cookie Policy) and therefore do not constitute a transfer of personal data.

8. How long do we keep your personal data?

We do not keep your personal data longer than necessary for the purposes for which it was collected, taking into account our legal obligations.

Category of data	Retention period
Data collected via the contact form	1 year after the last contact
Invoicing and accounting data	7 years (legal accounting obligation)

9. What are your rights?

In accordance with the GDPR, you have the following rights with regard to your personal data:

Right of access — you can ask which personal data we process about you;
Right to rectification — you can have inaccurate or incomplete data corrected;
Right to erasure — in certain cases, you can ask to have your data deleted;
Right to restriction of processing — in certain cases, you can ask to temporarily restrict the processing;
Right to data portability — you can request the data you have provided in a structured, commonly used format;
Right to object — you can object to processing based on our legitimate interest;
Right not to be subject to a decision based solely on automated processing that has legal effects on you. We do not make decisions based solely on automated processing that has legal effects on you.

10. How can you exercise your rights?

You can exercise your rights by contacting us via e-mail: info@novamercatus.com.

To process your request, we may ask you to confirm your identity. We will respond within the legally required period (in principle one month).

11. Cookies and similar technologies

Our website does not use cookies that require your prior consent — only Cloudflare Web Analytics, a cookieless technology that does not track individual visitors. More information on this can be found in our separate Cookie Policy.

12. Security of your data

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.

13. Minors

Our website is not specifically aimed at minors. We do not knowingly collect personal data from minors without the consent of a parent or guardian.

14. Changes to this Privacy Policy

We may amend this Privacy Policy from time to time, for example when the website is modified, we introduce new services or processing activities, or the applicable legislation changes. The most recent version is always available at novamercatus.com/privacybeleid. We recommend that you consult this Privacy Policy regularly.

15. Contact

Do you have questions about this Privacy Policy or about the processing of your personal data? Please contact us:

Nova Mercatus
Pastoor Wouterstraat 13 bus 2
2650 Edegem, Belgium

E-mail: info@novamercatus.com
Company number: 1032805223
VAT number: BE1032805223

16. Supervisory authority

If you believe that we are not processing your personal data correctly, you can first contact us. In addition, you always have the right to lodge a complaint with the competent data protection authority.

For Belgium, this is the:

Data Protection Authority (DPA)
Drukpersstraat 35
1000 Brussels
Belgium

Website: https://www.gegevensbeschermingsautoriteit.be