Privacy Policy

Last updated: February 2, 2026

This Privacy Policy describes how EngiFlex ("we", "us", or "our") collects, uses, and shares your personal information when you visit our website engiflex.be, use our services, or otherwise interact with us.

As a project sourcing consultancy agency, we process personal data of candidates, clients, and website visitors. We are committed to protecting your privacy and handling your data in accordance with the General Data Protection Regulation (GDPR) and applicable Belgian data protection laws.

1. Data controller

The data controller responsible for your personal data is:

EngiFlex
VAT: BE0792584030
Email: info@engiflex.be
Website: engiflex.be

2. What personal data we collect

We may collect and process the following categories of personal data:

2.1 Information you provide directly

• Contact information: name, email address, phone number, company name when you fill out our contact form or reach out to us
• Candidate data: CV/resume, work experience, education, skills, certifications, salary expectations, and other information relevant to job placement when you apply for positions or register as a candidate
• Client data: company information, contact details of representatives, project requirements, and staffing needs
• Communication records: content of emails, messages, and other correspondence with us

2.2 Information collected automatically

• Technical data: IP address, browser type and version, operating system, device information
• Usage data: pages visited, time spent on pages, referral source, navigation paths
• Cookie data: information stored in cookies and similar technologies (see Cookies section)

3. Purposes and legal basis

We process your personal data for the following purposes, based on the corresponding legal grounds:

3.1 Contract performance

• Matching candidates with suitable job opportunities
• Providing project sourcing and consultancy services to clients
• Managing candidate profiles and applications
• Communicating about job opportunities, interviews, and placements

3.2 Legitimate interests

• Responding to inquiries and providing customer support
• Improving our website and services
• Marketing our services to existing clients (with opt-out option)
• Maintaining the security of our systems and preventing fraud
• Building and maintaining our talent pool for future opportunities

3.3 Legal obligations

• Complying with tax, accounting, and reporting requirements
• Responding to lawful requests from authorities

3.4 Consent

• Sending marketing communications about new opportunities (where required)

4. Sharing with third parties

We may share your personal data with the following categories of recipients:

• Clients: We share candidate profiles and CVs with prospective employers when matching candidates with job opportunities. This is essential to our recruitment services.
• Service providers: Third-party companies that help us operate our business, such as hosting providers, email services, and applicant tracking systems. These providers process data on our behalf and are bound by data processing agreements.
• Professional advisors: Accountants, lawyers, and other advisors when necessary for business operations.
• Legal requirements: When required by law, court order, or government request.

We do not sell your personal data to third parties for marketing purposes.

5. Data retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected:

• Candidate data: We retain your profile for up to 3 years after your last interaction with us, to match you with future opportunities. You can request earlier deletion at any time.
• Client data: For the duration of our business relationship plus 7 years for legal and accounting purposes.
• Contact form submissions: Up to 2 years, unless a longer retention is necessary for ongoing communication.

6. Data security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (HTTPS/TLS)
• Access controls and authentication for our systems
• Regular security assessments and updates
• Staff training on data protection

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct inaccurate or incomplete data.
• Right to erasure: You can request deletion of your data in certain circumstances ("right to be forgotten").
• Right to restrict processing: You can ask us to limit how we use your data.
• Right to data portability: You can request your data in a structured, commonly used format.
• Right to object: You can object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at info@engiflex.be. We will respond to your request within one month.

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit):

Gegevensbeschermingsautoriteit
Drukpersstraat 35, 1000 Brussels
www.gegevensbeschermingsautoriteit.be

8. Cookies

Cookies are small text files stored on your device when you visit a website. We use only essential cookies that are strictly necessary for the website to function. No consent is required for these cookies under the ePrivacy Directive.

Cookie	Purpose	Duration	Type
ef_lang	Remembers your language preference (Dutch or English)	1 year	Essential / Functional

We do not use analytics, marketing, or tracking cookies. No personal data is collected through cookies on this website.

You can manage cookie preferences through your browser settings. Note that deleting the language preference cookie will cause the website to auto-detect your language on your next visit.

9. Children's privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will promptly delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a new "Last updated" date. We encourage you to review this policy periodically.

For significant changes that materially affect your rights, we will make reasonable efforts to notify you (e.g., via email or a notice on our website).

11. Contact us

If you have any questions about this Privacy Policy or our data practices, please contact us:

EngiFlex
Email: info@engiflex.be
Website: Contact page