Privacy Notice

Van Dessel Insurance Brokers (hereinafter referred to as “we”) attaches great importance to the protection of your personal data and respects your rights regarding the processing thereof. This privacy notice explains how we collect, process and use your personal data in accordance with applicable legislation, including the General Data Protection Regulation (GDPR).

As an insurance broker, we may have a dual role with regard to data processing. On the one hand, we act as data controller when we process personal data in our own name and for our own account. On the other hand, we may act as data processor on behalf of insurance companies. This notice only relates to the processing of personal data for which we act as data controller.

Data controller

The controller responsible for processing your personal data is Van Dessel Insurance Brokers, located at Misstraat 112, 2590 Berlaar, company number 0446.433.491.

If you have any questions regarding this privacy notice or the processing of your personal data, you may contact our Data Protection Officer via privacy@vandessel.be or by post at the above address.

When do we process your personal data?

We process your personal data when you contact us for advice regarding insurance contracts, when applying for or concluding insurance policies, for the management and execution of existing insurance contracts or in relation to claims handling. We may also process your data when you contact us in another way or when you use our website. In addition, we may obtain personal data through third parties in the context of our services.

Which personal data do we process?

We process personal data that you provide to us, such as your name, address, e-mail address, telephone number and professional data (such as company name and VAT number). We also process data necessary to assess your insurance needs, such as information regarding your home, vehicle, financial situation or family situation.

In certain cases, we also process special categories of personal data, such as health data, only where necessary and in accordance with the applicable legal requirements.

When using our website, we may also process technical data such as your IP address and browsing behaviour through cookies. For more information, please refer to our cookie policy.

We may also use CCTV surveillance in and around our offices. This is always clearly indicated. The images are retained for a maximum period of one month unless they are necessary for establishing an offence or damage.

For which purposes do we process your data?

Your personal data is processed for various purposes. First of all, this takes place in the context of entering into and executing insurance contracts, including customer administration and general

administration. In addition, we may process your data to comply with legal obligations, such as anti-money laundering legislation.

In the context of our services, we may use digital applications, including applications using artificial intelligence (AI), to support our employees in processing and analysing information. These applications may be used, among other things, to structure, summarise, search, compare or process information and communications.

Such applications are used exclusively for support purposes. Decisions that produce legal effects concerning you or otherwise significantly affect you are not made solely on the basis of automated processing.

We may also use your data for direct marketing purposes. If you are already a customer, we may inform you about similar products and services based on our legitimate interest. If you are not yet a customer, we will only contact you by e-mail for marketing purposes if you have given your consent. You may object at any time to the use of your data for marketing purposes.

What are the legal bases for processing?

The processing of your personal data is based on various legal grounds. In most cases, processing is necessary for the performance of a contract or in order to take steps at your request prior to entering into a contract. In other cases, processing is necessary to comply with a legal obligation.

Where processing is not necessary for the performance of a contract, it may be based on our legitimate interests, while always balancing our interests against your rights. In certain cases, processing may also be based on your consent. For the processing of special categories of personal data, we rely on an applicable legal basis and request your explicit consent where required.

Are your data shared with third parties?

Your personal data are mainly processed internally. In the context of our services, they may be shared with insurance companies, IT and technology service providers (such as hosting providers, CRM systems, e-mail platforms and providers of digital and AI-supported applications) and external partners supporting us with specific services.

In addition, we may be legally required to share personal data with public authorities.

In principle, your data are not transferred outside the European Economic Area. If this exceptionally occurs, we will ensure that appropriate safeguards are in place.

How long do we retain your data?

We do not retain your personal data longer than necessary for the purposes for which they were collected. The specific retention periods depend on the nature of the data, the purposes of processing and applicable legal and regulatory obligations.

Data relating to a contractual relationship are in any event retained for as long as necessary for the execution of the agreement and afterwards for the period during which we are legally obliged to retain such data or during which they may still be relevant in the context of potential disputes.

Prospect and marketing data are retained for as long as they remain relevant for the purposes for which they were collected or until you object or withdraw your consent.

CCTV footage is not retained longer than legally permitted unless a longer retention period is justified in connection with an incident.

Your rights

You have several rights regarding your personal data. You have the right to access your data, to rectify or erase them. In addition, you have the right to restrict processing, to object to processing and the right to data portability. Where processing is based on your consent, you may withdraw this consent at any time. To exercise your rights, you may contact our Data Protection Officer via privacy@vandessel.be. We may ask you to verify your identity.

If you believe that your data are processed unlawfully, you have the right to lodge a complaint with the Belgian Data Protection Authority (Drukpersstraat 35, 1000 Brussels - www.dataprotectionauthority.be).

Amendments

We reserve the right to amend this privacy notice. The most recent version is always available on our website.

Last updated: 29/09/2026