Privacy Policy

The LegalBelgique service is published and operated by Espero-Soft Informatiques SRL. We attach great importance to the protection of your personal data. This privacy policy describes how we collect, use, store and protect your data in accordance with Regulation (EU) 2016/679 (GDPR) and the Belgian law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.

The data controller is Espero-Soft Informatiques SRL, Rue de la Colonne 1A, 1080 Molenbeek-Saint-Jean, Belgium, CBE/VAT BE 1033.022.383, publisher and operator of the LegalBelgique service.

Data Protection Officer (DPO): you may reach our DPO at dpo@legalbelgique.be for any request concerning your personal data.

For general inquiries, you can contact us at info@legalbelgique.be or by phone at +32 484 711 719. For inquiries to the publisher: info@espero-soft.com.

Identification data: name, first name, email address, phone number, address and — where anti-money laundering law requires it — a copy of an identity document, date and place of birth, nationality.

Company data: company name, legal form, CBE number, VAT number, registered office, data relating to beneficial owners (UBOs).

Financial data: payment information (processed by our secure payment provider Stripe; we do not store full card numbers).

Technical data: IP address, browser type, device information, strictly necessary cookies.

Usage data: browsing history on the Platform, order history and exchanges with our advisers.

We process your data for the following purposes: execution of our services (company formation, domiciliation, accounting, etc.), management of your customer account, invoicing and payment processing, communication about your orders, compliance with our anti-money laundering obligations, improvement of our services and compliance with our accounting and tax obligations.

The processing of your data is based on: the execution of a contract (when you order a service), your consent (for marketing communications, withdrawable at any time), our legitimate interests (improvement and security of our services) and compliance with legal obligations (accounting and tax obligations, as well as the due diligence obligations of the Belgian law of 18 September 2017 on the prevention of money laundering and terrorist financing).

Your data is retained for the time necessary for the purposes for which it was collected. Contractual and accounting data is retained for up to 10 years after the end of the financial year, in accordance with Belgian accounting obligations.

Documents and data collected under the anti-money laundering due diligence obligations are retained for 10 years from the end of the business relationship, in accordance with the law of 18 September 2017. After these periods, your data is deleted or anonymised.

Your data may be shared with: notaries (for company formation), the CBE and FPS Finance (legal formalities), our payment provider Stripe (payment processing), our cloud storage provider Amazon Web Services (document storage) and our hosting provider Hetzner (technical storage). A detailed list of our sub-processors is available on the "Sub-processors" page. We never sell your data to third parties.

Transfers outside the European Union: some sub-processors (Stripe, Google LLC for OAuth authentication) may process data in the United States. These transfers take place on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission and, where applicable, the EU-US Data Privacy Framework. You may obtain a copy of these safeguards upon simple request at dpo@legalbelgique.be.

In accordance with the GDPR, you have the right to access your data, rectify inaccurate data, delete your data ("right to be forgotten"), restrict processing, data portability and object to processing. You may also withdraw your consent at any time where processing is based on it.

These rights may be limited where the retention of data is imposed by a legal obligation (in particular accounting or anti-money laundering). To exercise your rights, contact us via the contact form or at dpo@legalbelgique.be. We will process your request within one month, extendable by two months in the event of complexity.

We do not take decisions producing legal effects concerning you based solely on automated processing within the meaning of Article 22 of the GDPR. The risk assessments carried out under our anti-money laundering obligations are always subject to human intervention.

Our Platform uses only cookies that are strictly necessary for its operation (authentication, security, remembering your preferences). We do not use advertising or third-party tracking cookies. For more details, please consult our Cookie Policy.

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or destruction: encryption in transit (TLS) and at rest, access control, logging, backups and hosting within the European Union. In the event of a data breach likely to create a risk to your rights, we notify the Data Protection Authority and, where applicable, the data subjects, in accordance with Articles 33 and 34 of the GDPR.

For questions or complaints about the processing of your data, you can contact us via the contact form, at dpo@legalbelgique.be or by phone at +32 484 711 719.

You also have the right to lodge a complaint with the Data Protection Authority (APD/GBA), Rue de la Presse 35, 1000 Brussels — +32 (0)2 274 48 78 — contact@apd-gba.be — www.autoriteprotectiondonnees.be.