Privacy statement

This statement describes which personal data we process, why, for how long, and what rights you have. When you entrust us with a storage device, you give us access to data that is often private or confidential. That is why we keep that access as limited as possible.

Who is responsible

The controller for the data on this website and in your case file is:

Company: Datarecuperatie BV
Address: Bargiestraat 15B, 8900 Ypres, Belgium
Company number: BE 0436.125.559 (RPR Ypres)
E-mail: info@datarecuperatie.be
Phone: +32 (0)57 36 60 60

Which data and why

We only process what is needed for the purpose. Per processing activity:

Analysis request and case file: name, address, phone, e-mail, where applicable company name and VAT number, details of the device (brand, type, serial number) and your description of the problem. Needed to carry out the analysis and recovery (performance of the contract).
Customer account: e-mail address, name and an encrypted password, so you can follow up your cases (performance of the contract).
Invoicing and accounting: data on quotes and invoices (legal obligation).
Contact by e-mail or phone: what you tell us, to answer your question (pre-contractual measures or our legitimate interest).
Website security: IP address and technical data of your visit, and a Google reCAPTCHA check on forms, to prevent abuse and spam (legitimate interest).
Statistics and advertising: only with your consent through the cookie settings (see "Cookies").

The data on your device

A failed device often holds personal or confidential files, sometimes also sensitive data such as medical information. We process that content solely to recover it for you. We only look at files as far as needed to check that the recovery succeeded. Only the technician handling your case has access; if a case moves to another technician, the data is re-encrypted with that technician's key. For business customers who have personal data of others recovered, we sign a data processing agreement.

How long we keep data

Recovered data: 30 days after shipping, so we can deliver again if something goes wrong in transit. It is then permanently erased.
Case data: while the case is open and afterwards as long as needed for warranty and any disputes, within the legal retention periods.
Invoices and accounting records: as long as accounting and tax law require.
Customer account: until you ask us to delete it.
Technical website data: a limited time, only for the security of the site.

Who we share data with

We do not sell data. We only share it with parties needed to deliver our service, and only what they need:

Drop-off points, if you bring your device there: your name and case number.
Carriers that collect or return devices: name and address.
Our hosting provider in Belgium, where the website and database run.
Google, for reCAPTCHA and, with your consent, for statistics and measuring advertising.
Our accountant, and authorities where the law requires it.

Transfers outside the European Union

Google may process data in the United States. That transfer is based on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

Cookies

We always place necessary cookies (session, security, language choice); the site does not work without them. We only place analytics and marketing cookies if you consent through the cookie settings. You can change your choice at any time via "Cookie preferences" at the bottom of the site. More details are in our cookie policy.

Security

We work according to the ISO 27001 standard; certification is in progress. In practice: access to case files only for the handling technician, encryption per technician, re-encryption on transfer, our own lab in Belgium, and permanent deletion of recovered data after the retention period.

Your rights

You have the right of access, rectification, erasure and restriction of your data, the right to data portability, and the right to object to processing based on our legitimate interest. If you gave consent, you can withdraw it at any time. Send your request to info@datarecuperatie.be; we reply within one month. We may ask you to confirm your identity, so that nobody else requests your data.

A complaint

If you disagree with how we handle your data, please tell us first. You can also lodge a complaint with the Belgian Data Protection Authority:

Address: Rue de la Presse 35, 1000 Brussels
E-mail: contact@apd-gba.be
Website: www.dataprotectionauthority.be

Last updated on 19 September 2026. If this statement changes, we update the date.