GDPR

At SNDQ, we take data protection and privacy very seriously. We ensure that our services comply with the General Data Protection Regulation (GDPR) and help our customers meet their own compliance obligations.

Our GDPR Commitment

Since May 25, 2018, the effective date of the GDPR, we align our data practices with its requirements:

• Legal basis for all data processing
• Transparent privacy statements and notices
• Minimal data collection
• Secure storage and transfer of data
• User control over personal data
• Accountability through documentation

How We Protect Your Data

Security Measures

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security audits and updates
• Access controls and authentication
• Secure data centers within the EU
• Incident response procedures

Data Processing

• SNDQ treedt op als gegevensverwerker voor klantdata
• We process data exclusively according to your instructions
• A Data Processing Agreement (DPA) is available for all customers
• We maintain a clear and up-to-date list of sub-processors

Your Rights Under GDPR

We support all individual rights under the GDPR:

• Access – Request a copy of your personal data
• Rectification – Correct inaccurate data
• Erasure – Have your personal data deleted
• Portability – Export your data
• Restriction – Restrict the processing of your data
• Objection – Object to certain processing activities

To exercise these rights, contact us at: privacy@sndq.be

Features for GDPR Compliance

For Our Customers

• Data export tools
• Ability to delete users
• Consent management
• Audit logs
• Retention period management

For Your End Users

• Privacy-friendly default settings
• Clear consent mechanisms
• Easy opt-out options
• Access requests
• Account deletion capability

Data Location & Transfers

• Primary data storage: data centers within the EU
• International transfers: only with appropriate safeguards (such as Standard Contractual Clauses)
• Sub-processors: carefully selected and GDPR-compliant

Data Breaches

In the unlikely event of a data breach involving personal data:

• We inform affected customers within 72 hours
• We provide all necessary information for regulatory compliance
• We support your notification obligations