Introduction

DHA & Partners SRL is committed to protecting your personal data and complying with the General
Data Protection Regulation (EU Regulation 2016/679 – GDPR).
This Privacy Policy explains how we collect, process, and protect your data.

Data Controller

Data We Collect

We collect only the data necessary to provide and improve our services:

  • Identification data: name, company, position, email, phone, country.
  • Professional data: project information, job applications, CVs.
  • Technical data: browser type, IP address, cookies (see Cookie Policy).

Purpose of Processing

  • Responding to inquiries and contact requests.
  • Managing project proposals, contracts, and partnerships.
  • Processing recruitment applications.
  • Sending newsletters or updates (only with explicit consent).
  • Fulfilling legal or regulatory obligations.

Legal Basis

Data is processed under one or more of the following bases:

  • Your consent (Article 6(1)(a) GDPR).
  • Contractual necessity (Article 6(1)(b)).
  • Legitimate business interests (Article 6(1)(f)).
  • Legal compliance (Article 6(1)(c)).

Data Retention

Data is retained only as long as necessary for its purpose or as required by Belgian and EU law.
Job applications are stored for a maximum of 12 months unless consent for longer retention

Data Sharing

We do not sell or trade personal data.
Data may be shared with trusted third parties such as:

  • IT and hosting providers (within the EU).
  • Subcontractors and partners bound by confidentiality agreements.
  • Public authorities when required by law.

Your Rights

Under GDPR, you have the right to:

  • Access your data (Art. 15).
  • Request rectification (Art. 16) or erasure (Art. 17).
  • Restrict processing (Art. 18).
  • Data portability (Art. 20).
  • Withdraw consent at any time (Art. 7).
  • To exercise these rights, contact: privacy@dha-partners.com

Data Security

We implement technical and organizational measures to protect data from unauthorized access, loss,
or alteration (encryption, access control, secure backups).
International Transfers

DHA & Partners stores and processes data within the European Economic Area (EEA).
If transfer outside the EEA occurs, it is done under GDPR-approved safeguards (e.g., Standard
Contractual Clauses).

Complaints

If you believe your data rights are violated, you may file a complaint with the Belgian Data Protection
Authority (Autorité de Protection des Données) or your local supervisory authority.