For any questions regarding your personal data or to exercise your rights, please write to aml-rgpd@generationimmo.be.

The Company does not sell your personal data to partners or third-party service providers.

Depending on the features used, the following data may be collected:

• —Identity data: name, first name, postal address, email address, phone number.
• —Professional data: profession, IPI registration number (for agent users).
• —Property preferences: search criteria, favourited listings, configured alerts.
• —Technical connection data: IP address, terminal identifier, browser type and version, operating system, navigation language, security logs.
• —Navigation data: pages visited, session duration and frequency, cookie data (see section 10).
• —Third-party module data: when you sync your calendar (Outlook / Google Calendar) or messaging (Outlook / Gmail) with the solution, the data in those modules is processed in accordance with Microsoft's or Google's privacy policies.

Data is retained for as long as necessary for the purposes described, then deleted or anonymised. As a guide:

Retaining certain data beyond its primary purpose responds to administrative, legal and security requirements, particularly to handle your requests to exercise rights and to comply with legal obligations to retain or disclose data to competent authorities.

Your data is only accessible to authorised agency staff and its technical service providers, strictly to the extent necessary and under confidentiality obligations. Authorised internal persons are:

• —Licensed estate agents, commercial agents and trainees of the agency, within the limits of their duties.
• —Administrative staff of the business centre in which the agency is established, exclusively within the scope of their assigned tasks and under a confidentiality undertaking.

The main technical sub-processors are listed below. Each is bound by a data processing agreement (DPA) compliant with Article 28 of the GDPR:

Your data is never sold to third parties.

For any other transfer that may prove necessary, it will be carried out exclusively to countries with a European Commission adequacy decision, or on the basis of standard contractual clauses or binding corporate rules.

Appropriate technical and organisational measures are implemented to protect your data against unauthorised access, loss, alteration or disclosure:

• —Access rights control and management; password policy and workstation locking.
• —Communications encryption (HTTPS/TLS) and database encryption at rest.
• —Security logging and intrusion detection; network zone firewalls.
• —Hosting on a certified cloud infrastructure (Microsoft Azure Belgium Central).
• —Protection of sensitive files against unauthorised direct access.
• —Request rate limiting to prevent abusive use.
• —Antivirus and protection tools on the operating environment.

In accordance with Articles 15 to 22 of the GDPR, you have the following rights:

• —Right of access – obtain confirmation that data concerning you is being processed and receive a copy.
• —Right to rectification – correct or update inaccurate or incomplete data.
• —Right to erasure – request deletion of your data, subject to legal retention obligations.
• —Right to restriction of processing – restrict processing in the cases provided for by the GDPR.
• —Right to object – in particular to processing based on legitimate interest or for prospecting purposes.
• —Right to data portability – receive your data in a structured, machine-readable format. This right does not extend to data derived or inferred by us.
• —Right to withdraw consent – at any time, without retroactive effect on prior processing.
• —Right not to be subject to automated decision-making – producing legal effects or significantly affecting you.

These rights may be exercised by writing to aml-rgpd@generationimmo.be. Proof of identity may be requested. In the case of manifestly unfounded or repetitive requests, the Company reserves the right to charge reasonable administrative fees or to refuse to comply.

Personalised notifications and alerts are based on the preferences you record yourself in your account. This processing constitutes a form of profiling within the meaning of Article 4(4) of the GDPR, but it does not lead to any decision producing legal effects or significantly affecting you within the meaning of Article 22 of the GDPR. You can modify or delete your preferences at any time from your private space.

A cookie is a small text file deposited on your device during your browsing. The site uses the following cookie categories:

You can accept, refuse or customise your choices via the cookie banner displayed on your first visit, and change your preferences at any time. You can also configure your browser to block or delete cookies, noting that disabling certain cookies may affect the operation of the site or private space.