Privacy policy Ground Control Agency

  1. This privacy policy (“Privacy Policy”) governs the processing of your personal data as part of your use of our website (the “Website”) and the services related thereto. This processing is carried out by Ground Control Agency, acting as the data controller (“controller”), with its registered office in 2930 Brasschaat (“we”, “us”) and registered with the Crossroads Bank for Enterprises (KBO) under number 0643.749.903, in accordance with applicable legislation on the protection of personal data, including, but not limited to, the General Data Protection Regulation 2016/679 (“GDPR”) and the Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
  2. In this Privacy Policy, we describe: how we process personal data that relates to you or that can be used to identify you, either directly or indirectly; the purposes for which and the legal bases upon which we process your personal data; with whom we share your personal data; how we protect your personal data; and the rights you have.
  3. By using our website or services, you agree that you have carefully read this Privacy Policy and that you accept it without reservation. We reserve the right to amend this Privacy Policy from time to time at our own discretion. Any such amendments will be communicated via the website.
  4. ‘Cookies’ or similar technologies may be used as part of the website or the services. Cookies are text files placed on a device’s hard drive that contain certain information, which may sometimes include personal data. You can find more information regarding the use of cookies in our cookie policy.
  5. This Privacy Policy applies only to personal data processed by us. We accept no responsibility or liability for the services and/or websites of third parties (or for their operation and/or content).
  6. This Privacy Policy was last updated on 29/09/2026.

How can you reach us?

If you have any questions about this Privacy Policy, our practices regarding the processing of your personal data, or if you wish to have your personal data removed from our database, you can contact us at: hello@groundcontrolagency.be.

What data we process and why

In principle, we obtain the personal data mentioned below directly from you. The purposes for which we process your personal data are set out below, along with the legal basis upon which we do so.

  1. When you use the Website and/or Services, we process personal data relating to you:◦ When? Use of Services, use of the Website◦ What? Identification data, such as (first/last) name, email address, IP address, mobile phone number, company name, address.◦ Why (purpose)? Processing of a request◦ Legal basis? Legitimate interest
  2. ◦ When? Contacting us (questions, comments, complaints, etc.)◦ What? Identification details, such as (first) name, email address, mobile phone number.◦ Why (purpose)? Sending related information and supplementary details, and responding to questions, comments, complaints, etc.◦ Legal basis? Consent
  3. To provide you with information about the products and services you request—whether via our website, email, telephone, or social media channels—in a personalized and efficient manner.◦ When? Providing information upon your request.◦ What data? First name, surname, email address, IP address, mobile phone number, company name, and address.◦ Why (purpose)? To provide personalized information about products and services at the request of the data subject.◦ Legal basis? Consent.
  4. To process your personal data in order to provide proper service and manage our daily operations.◦ When? During the delivery of our services.◦ What? All personal data necessary for the proper execution of our services: first and last name, email address, mobile phone number, company name, VAT number, business address, (residential) address, availability, bank account number, invoicing details, event specifics, and budget.◦ Why (purpose)? To ensure the proper and efficient delivery of our services.◦ Legal basis? Performance of the agreement.
  5. For direct marketing purposes—that is, to provide you with targeted communications, promotions, offers, newsletters, and other advertisements from us or our selected partners—we will request your consent.◦ What data? First name, surname, email address, IP address, mobile phone number.◦ Why (purpose)? To send direct marketing materials to the data subject.◦ Legal basis? When communications, promotions, offers, newsletters, etc., relate to advertising, offers, or promotions directed at existing customers for similar products or services, the processing of personal data is based on the legitimate interest of Ground Control Agency in providing this information to its customers—taking into account your own interest as a customer in receiving such information. In this context, the interests of Ground Control Agency outweigh your fundamental rights as a customer. Should you no longer wish to receive such newsletters, you may unsubscribe at any time; this means your personal data will no longer be processed for "direct marketing" purposes.◦ Legal basis? In all other cases, we will always seek your prior consent before processing your personal data for advertising or direct marketing purposes. You may withdraw your consent at any time, free of charge, by unsubscribing from the newsletter.
  6. To comply with our legal obligations. In the course of our activities, we may be subject to a legal obligation to process certain personal data—for instance, for tax purposes; for the prevention, investigation, and combating of criminal conduct, offenses, fraud, and money laundering; or for the purpose of providing information to a government or law enforcement agency, pursuant to a court order, etc.◦ Legal basis? Legal obligation
  7. Ground Control Agency uses video surveillance at its headquarters and at its various branch locations for security purposes. Ground Control Agency’s policy regarding video surveillance and the processing of personal data in this context is fully compliant with applicable legislation, including, in particular, the Act of 21 March 2007 regulating the installation and use of surveillance cameras, and the Royal Decree of 8 May 2018 concerning the declaration of the installation and use of surveillance cameras and the register of image-processing activities involving surveillance cameras.
  8. For the use of cookies and similar technologies, and for conducting statistical analyses to improve our Website and/or Services, or to develop new products or services.◦ When? Upon visiting the Website◦ What? Cookie(s)◦ Why (purpose)? To provide faster and more efficient access to our Website, to conduct statistical analyses, and to improve our services◦ Legal basis? Legitimate interest or consent – ​​for more information regarding our use of cookies, please consult our cookie policy via the following link.

If and when your registration on the Website or your use of the Website or services is deemed (a) to be a breach of these terms or of proprietary rights, (b) a threat to the security or integrity of our service provision, (c) a danger to the Website, the Services, or our systems—or those of our subcontractors—due to viruses, Trojan horses, spyware, malware, or any other form of malicious code, or (d) to be in any way illegal, unlawful, discriminatory, or offensive, we may process your data in our own interest, or in the interest of our partners or third parties.

How long do we keep your personal data

We retain your personal data for as long as required under applicable law or for the fulfillment of the purposes for which it is processed. In particular, Ground Control Agency must comply with statutory and tax-related retention periods, including—but not limited to—a ten-year retention period in relation to its contractual liability and a seven-year retention period for accounting records. Once these periods have expired, Ground Control Agency will delete or anonymize your personal data.

Do we share your data?

  1. We may engage external processors to provide you with the best possible website experience and/or to deliver our services in the most effective way. We ensure that these third-party processors process your personal data solely on our behalf and in accordance with our written instructions. Furthermore, these external processors have confirmed to us that they comply with the GDPR and other applicable regulations regarding the processing of personal data, and that they will not use such personal data for any purposes other than those specified by Ground Control Agency.
  2. We may share your personal data with third parties if we are required to do so by law and/or regulation, if we are compelled to do so as a result of legal proceedings, and/or if we deem it necessary for the protection of our established rights.
  3. We do not send your personal data to third parties in a way that identifies you—unless it is required for the provision of services—without your explicit consent.
  4. We may transfer anonymized data to other organizations, which may use this information to improve products and services and to tailor the marketing, presentation, and sale of products and services.

Where do we process data

  1. We, along with our external processors, will process your identifiable personal data exclusively within the European Economic Area (“EEA”).
  2. We may transfer your anonymized data to organizations outside the European Economic Area. Should such a transfer take place, we will ensure that appropriate safeguards are in place to guarantee the security and integrity of your personal data, and that all rights regarding personal data to which you may be entitled under applicable law are upheld.
  3. If personal data is transferred outside the European Economic Area, such transfer will be based on an adequacy decision adopted by the European Commission. If no such adequacy decision is in effect for the non-EEA country in question, the transfer of personal data will be based on an agreement that addresses the requirements for transferring personal data outside the EEA, such as the standard contractual clauses approved by the European Commission.
  4. If a transfer of personal data takes place, the following legal protection mechanism is implemented:◦ Which one? Webflow◦ Country outside the EEA? USA◦ Legal transfer mechanism? US-EU Privacy Shield

How we process data

  1. We will make every effort to process only the personal data necessary to achieve the purposes for processing set out in this Privacy Policy. We will process your personal data in a lawful and transparent manner, and will also do our utmost to keep that personal data accurate and up to date.
  2. Your personal data will only be processed until such time as you withdraw your consent for its processing. Withdrawing your consent may mean that you are no longer able to use the website’s services, either in whole or in part. If you have registered on our website, we will delete your personal data when you delete your profile, unless a legal or regulatory obligation, or a judicial or administrative order, prevents us from doing so.
  3. We will implement appropriate technical and organizational measures to keep your personal data secure against unauthorized access or theft, as well as against accidental loss, manipulation, or destruction. Access by our staff or the staff of our external processors is permitted only on a need-to-know basis and is subject to strict confidentiality obligations.

Your rights regarding personal data

Please note that you have the following rights regarding our processing of your personal data:

  1. Right of access: You have the right to request free access to all personal data that we process about you. However, requests for access that are clearly submitted with the intention of causing nuisance or harm to us will not be processed.
  2. Right to rectification: You have the right to request that any personal data concerning you that is incorrect or inaccurate be corrected, free of charge. If you have registered on our website, you may be able to correct much of this information yourself via your profile. When submitting such a request, you must also provide evidence showing that the personal data for which correction is sought is, in fact, incorrect.
  3. Right to withdraw consent: You have the right to withdraw any consent you have previously given for the processing of your personal data. You can do this by sending an email to hello@groundcontrolagency.be.
  4. Right to erasure of personal data: you have the right to have all your personal data deleted (except in certain cases, for example, to provide proof of a transaction or when required by law).
  5. Right to restriction of processing: Instead of erasure, you may also request that we restrict the processing of your personal data if (a) you contest the accuracy of that data, (b) the processing is unlawful, or (c) the data is no longer required for the stated purposes, but you need it to defend yourself in legal proceedings.
  6. Right to object: You have the right to object to the processing of personal data if you can demonstrate that there are serious and legitimate grounds relating to your particular circumstances that justify such an objection. However, if the intended processing is classified as direct marketing, you have the right to object to such processing free of charge and without needing to provide any justification.
  7. Right to portability of personal data: When your personal data is processed on the basis of consent or a contract, and the processing is carried out by automated means, you may receive the personal data you have provided in a structured format.
  8. If you wish to submit a request to exercise one or more of the rights mentioned above, please send an email to hello@groundcontrolagency.be. This request must clearly state which right you wish to exercise and the reason for doing so. It must also be dated and signed, and accompanied by additional information to verify your identity. If the request is found to be valid, we will fulfill it as soon as reasonably possible, and no later than thirty (30) days after receiving the request. In the event that multiple requests are submitted to us, or if the request is complex, this one-month (1) period may be extended by an additional two (2) months. In such a case, 27 On The Road will inform you of this extension within one (1) month of receiving the request.
  9. If you have an issue regarding our processing of your personal data, you can always contact us by sending an email to hello@groundcontrolagency.be. If you remain dissatisfied with our response, you may file a complaint with the competent data protection authority, the Belgian Data Protection Authority:
    Belgian Data Protection AuthorityAddress: Drukpersstraat 35, 1000 Brussels (Belgium)Tel: +32 (0)2 274 48 00Fax: +32 (0)2 274 48 35Email: contact@apd-gba.be