Privacy Policy
Last updated: 1 September 2026
EXYRO SA
1. Why this privacy policy?
This is the privacy policy of EXYRO SA (hereinafter also referred to as "EXYRO", "we" or "our"). Our company's contact details can be found in Article 3 below.
This privacy policy applies to the processing of your personal data by EXYRO in connection with its property management services.
Here we explain which personal data we process, how and why we do so, on what legal basis, what your rights are, and with whom we may share your data.
Your privacy is extremely important to us. We take all appropriate measures to protect and secure your data in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR).
EXYRO may amend this policy. The most recent version is available on the website; any changes will be communicated via the website, by email or through other electronic means.
This policy is governed by Belgian law. In the event of a dispute, only the courts of Walloon Brabant (Nivelles division) have jurisdiction.
2. Who is responsible for processing your data?
EXYRO is the "data controller": we determine the purpose and means of processing and ensure that processing is lawful and correct. EXYRO employees with access to your data, as well as any processors engaged (see Article 6), are also required to comply with this legislation.
3. How can you contact us?
EXYRO SA
Schoonzichtstraat 21
9051 Sint-Denijs-Westrem, Belgium
Licensed IPI/BIV no. 510.120 (property manager)
CBE/VAT: BE0479.544.442 (RPM Nivelles)
+32 9 274 03 61
beheer@exyro.be
Our data protection officer can be reached at the same email address.
4. What data do we process and how?
EXYRO processes the following categories of data:
- Identification and contact data: name, surname, address, email address, phone number
- Electronic data: device data, IP address, browser, operating system, pages visited, cookies
- Personal characteristics: date of birth, age, place of birth, gender, marital status, nationality
- Financial data: bank account number, credit card number
- Education and training: studies, diplomas
- Profession and employment: current job, position, employer, CV, career
- Memberships
- Image capture: photos, videos
We process your data when you contact us directly, when you request a quote, or indirectly through partners or third parties. We may also process your data through the website, our social media and our platforms. Your newsletter subscription details, emails and phone calls may constitute an additional source of data, always processed lawfully and for the purposes described in Article 5. If you are a supplier or service provider to EXYRO, your data will be processed within the context of that relationship.
5. Why and on what basis do we process your data?
Making contact, enquiries, information
We process your identification data in order to contact you, handle your requests and provide you with the information necessary about our company, activities, services and website. If you do not provide this information, we may not be able to contact you again or provide our services.
Client management, service delivery (property management)
We process your data for managing our client files, preparing proposals and quotes, executing and following up on orders, administration, invoicing, accounting, complaints handling, disputes and monitoring the creditworthiness of clients and suppliers. This processing is necessary for the performance of the contract with you or your company, or is based on our legitimate interests when you act on behalf of a company, in particular for:
- offering services tailored to your needs
- performing and managing the contract(s)
- compliance with applicable legislation
- optimising and improving our services
- developing and maintaining business relationships
- prospecting
- risk management
- preventing abuse, fraud and money laundering
- network security
- staff training
- defending our rights in the event of a dispute
EXYRO carefully weighs its legitimate interests against yours. If you do not provide certain data required for the contract, we will not be able to perform our services.
Prospect management
We may process your data as a potential client for prospecting, acquisition, appointments or preparing a possible future cooperation, based on our legitimate interests.
Supplier management
We process your data as a supplier or service provider in the context of cooperation, contract performance, administration and accounting.
Optimising EXYRO's services
Your data may be processed as part of satisfaction surveys aimed at improving our services.
Prospecting
Your data may be used for prospecting via newsletter or other means: based on our legitimate interest if you are a client, or based on your prior consent if you are not. You may withdraw this consent at any time via beheer@exyro.be.
Optimal functioning of the website
When you visit our website, certain electronic data may be processed (cookies, IP address, etc.). More information is available in our cookie policy.
Compliance with applicable law
You cannot object to processing that is necessary to comply with our legal obligations, for example:
- the anti-money laundering act of 18 September 2017 (customer due diligence)
- IPI regulations
- obligations imposed by public authorities
Certain processing may involve profiling or automated decision-making, i.e. the evaluation of certain personal aspects (economic situation, preferences, etc.). You always have the right to object, the right to human intervention, and the right to contest an automated decision.
6. Which parties receive or process your data?
Your data may be shared with the following categories of recipients: public authorities, the IPI or judicial authorities, IT, marketing or payment service providers, accountants and auditors, insurers, and legal advisers. It may also be transferred outside the European Economic Area as part of cloud services, subject to the appropriate safeguards required by the GDPR.
7. How long do we keep your data?
EXYRO does not keep your data longer than necessary. Retention periods generally range from 5 to 10 years depending on applicable deadlines, including:
- statutory limitation periods
- anti-money laundering law: 10 years
- tax obligations: 7 years
- marketing data: 2 years
- job applications: 2 to 3 years
Once these periods expire, your data is deleted or anonymised.
8. What are your rights?
You have the right to access, rectify, erase, restrict, object to, port and withdraw consent regarding your data. You can exercise these rights via beheer@exyro.be or dpo@exyro.be.
Data Protection Authority: Rue de la Presse 35, 1000 Brussels, tel +32 (0)2 274 48 00, email contact@apd-gba.be.
In the event of a complaint, you may also contact compliance@exyro.be.
Procedure for exercising your rights
- Contact your EXYRO sales representative
- Or write to beheer@exyro.be
- Or to our data protection officer: dpo@exyro.be
You may be asked to provide proof of identity to verify who you are; please mask any unnecessary data (in particular your national register number).
← Back to the site