Privacy Policy

Privacy Policy — Galactus IT Advisory

1. Who We Are

This website is operated by Galactus IT Advisory ("we", "us", "our"), a Belgian sole proprietorship offering interim CIO services, IT health scans, and C-level advisory services.

For purposes of the General Data Protection Regulation (GDPR), Galactus IT Advisory is the data controller.

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

Data you provide directly:

  • Name, email address, phone number (via contact forms or email correspondence)

  • Company name and job title

  • Any other information you choose to share when contacting us

Data collected automatically:

  • IP address (anonymized where possible)

  • Browser type and version

  • Operating system

  • Referring website

  • Pages visited, date and time of visit

  • Cookies and similar tracking technologies (see our Cookie Policy)

3. Why We Process Your Data

We process personal data for the following purposes and legal bases:

Purpose Legal Basis (GDPR) Responding to inquiries and requests Legitimate interest (Art. 6(1)(f)) Providing our services Performance of a contract (Art. 6(1)(b)) Sending service-related communications Legitimate interest (Art. 6(1)(f)) Improving our website and user experience Legitimate interest (Art. 6(1)(f)) Analytics and website performance monitoring Consent (Art. 6(1)(a)) Complying with legal obligations Legal obligation (Art. 6(1)(c))

We will never sell your personal data to third parties.

4. Who We Share Your Data With

We may share your data with the following categories of recipients, only to the extent necessary:

  • Hosting providers — for website hosting and infrastructure

  • Analytics providers — for anonymized website usage statistics

  • Email service providers — for handling correspondence

  • Professional advisors — accountants, legal advisors, as required by law

All third-party processors are bound by data processing agreements in accordance with GDPR Article 28.

5. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or reliance on an adequacy decision.

6. How Long We Retain Your Data

We retain personal data only as long as necessary for the purposes described above:

  • Contact form submissions and correspondence: up to 2 years after last contact

  • Contractual data: up to 10 years after the end of the contract (Belgian legal retention requirements)

  • Analytics data: maximum 26 months (anonymized)

7. Your Rights

Under the GDPR, you have the following rights:

  • Access — request a copy of your personal data

  • Rectification — request correction of inaccurate data

  • Erasure — request deletion of your data ("right to be forgotten")

  • Restriction — request restriction of processing

  • Data portability — receive your data in a structured, machine-readable format

  • Objection — object to processing based on legitimate interest

  • Withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at info@galactus.be. We will respond within 30 days.

You also have the right to lodge a complaint with the Belgian Data Protection Authority:

Gegevensbeschermingsautoriteit (GBA) Drukpersstraat 35, 1000 Brussel https://www.gegevensbeschermingsautoriteit.be contact@apd-gba.be

8. Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted connections (HTTPS), access controls, and regular security reviews.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies.

10. Children's Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

12. Contact Us

For questions about this Privacy Policy or your personal data, contact us at:

Galactus IT Advisory Email: info@galactus.be Website: https://galactus.be