Privacy & GDPR Notice
Last updated: 24 April 2026
1. Introduction
Your privacy matters to NewWayTo BV (“NewWayTo”, “we”, “us”). This notice explains what personal data we collect, why we collect it, how we use it, and the rights you have under the EU General Data Protection Regulation (“GDPR”) and Belgian law.
2. Who is responsible for your data?
Controller: New Way To - Abis Solutions BV
KBO / CBE:0662.584.729
Address: Varenblok 6, 2650 Edegem, Belgium
Email:info@newwayto.com
Phone: +32 486 34 32 10
We have not appointed a statutory Data Protection Officer, but you can reach our privacy team at the address above.
3. Personal data we process
Context | Categories of data | Examples |
|---|---|---|
Site analytics & cookies | Technical | FIP address, device ID, browser type, pages visited, timestamp, see § 7 |
Client projects | Business & contractual | FProject briefs, corporate documents, usage logs for custom AI solutions |
Training & event enrolment | Professional profile | Role, department, prior experience, dietary / accessibility needs, if provided |
Newsletter sign-up | Contact & preference | Email address, marketing opt-in status |
Website contact or pricing forms | Identification and contact | First name, last name, job title, company, work email, phone, message content |
We do not knowingly collect special‑category data (e.g. health, biometrics) or data on children under 16.
4. How we obtain data
-
Directly from you via webforms, email or phone
-
Indirectly through cookies and analytics pixels when you browse our site
-
From publicly available sources such as LinkedIn when prospecting B2B leads
-
From your employer if they book a training on your behalf
-
From training Feedback & Testimonials — we collect name, function, and survey responses. Where consent is given, this data may be used for commercial and promotional purposes (testimonials, case studies).
5. Why we process your data & legal bases
Purpose | Legal basis - Art 6 GDPR | Explanation |
|---|---|---|
Fulfilling legal obligations, invoicing, tax | Legal obligation (Art. 6 (1)(c)) | |
Improving our website & services, analytics | Legitimate interest (Art. 6 (1)(f)) | We anonymise or pseudonymise where feasible. |
Sending newsletters & event invites | Consent (Art. 6 (1)(a)) | We only send marketing when you have opted in; you may unsubscribe at any time. |
Delivering trainings, workshops, implementations | Contract (Art. 6 (1)(b)) | |
Responding to enquiries & providing quotations | Contract (Art. 6 (1)(b)) | Processing is necessary to take steps at your request prior to entering a contract. |
6. Marketing communications
You will receive emails only if you:
-
tick the “Yes, subscribe me to your newsletter” box, or
-
are an existing client and we send information about similar services (opt‑out available).
Each email contains an unsubscribe link. You may also email info@newwayto.com to withdraw consent.
7. Cookies & analytics
We use:
-
Essential cookies – required for site functionality (e.g. form security).
-
Analytics cookies – Google Analytics 4 with IP‑anonymisation enabled.
-
LinkedIn Insight Tag – for measuring ad conversions.
On your first visit we display a cookie banner ([link to cookie banner]) where you can accept, reject, or customise non‑essential cookies. Full cookie details are listed in our [Cookie Policy].
8. Sharing your data
We only share data with:
-
Service providers acting as processors under Art. 28 GDPR (e.g. [hosting‑provider],[email‑marketing‑platform], [cloud CRM]) bound by strict confidentiality and security terms.
-
Professional advisers (lawyers, accountants) where necessary.
-
Public authorities when required by law or court order.
We never sell or lease your personal data.
9. International transfers
Some processors are located outside the European Economic Area. Where this occurs, we rely on:
-
An adequacy decision (e.g. EU–US Data Privacy Framework), or
-
Standard Contractual Clauses plus supplementary safeguards.
Copies of transfer mechanisms are available on request.
10. Data retention
Category | Retention period |
|---|---|
Cookie consents | 6 months |
Analytics data | 14 months, GA4 default |
Training feedback responses | Retained for 5 years and then permanently deleted |
Marketing records | Until you unsubscribe or 2 years after last interaction, whichever is earlier |
Enquiry & project files | 7 years after last interaction, Belgian bookkeeping rules |
We securely erase or anonymise data when the retention period elapses.
11. Security measures
-
TLS encryption for all web traffic
-
Role‑based access controls and multi‑factor authentication
-
Regular security patches and penetration testing
-
Data‑processing agreements with all vendors
12. Your GDPR rights
You may exercise the following rights at any time:
-
Access – obtain a copy of your data
-
Rectification – correct inaccurate or incomplete data
-
Erasure (“right to be forgotten”)
-
Restriction of processing
-
Portability – receive your data in a structured, machine‑readable format
-
Objection to processing based on legitimate interests or direct marketing
-
Withdraw consent at any time (affects future processing only)
To exercise any right, email privacy@newwayto.com. We will respond within one month.
If you believe we have not handled your request satisfactorily, you have the right to lodge a complaint with the Belgian Data Protection Authority:
Gegevensbeschermingsautoriteit (GBA) / Autorité de protection des données (APD)
Rue de la Presse 35, 1000 Brussels
contact@apd‑gba.be · +32 (0)2 274 48 00
13. Changes to this notice
We may update this notice to reflect legal or operational changes. The latest version is always available at https://newwayto.com/privacy. Material changes will be highlighted or communicated via email where appropriate.
Questions?
Email info@newwayto.com or write to us at the address in § 2. We’re happy to help.