M cenaly.ru
🇧🇪 Belgium · Customers

Privacy Policy (Privacyverklaring / Déclaration de confidentialité) — GDPR

Mandatory under GDPR Article 13, supervised in Belgium by the Gegevensbeschermingsautoriteit / Autorité de protection des données (GBA/APD). Publication is mandatory on the guest menu/ webshop site; recommended minimum languages Dutch + French (+ English for tourists).

All templates
Country
🇧🇪 Belgium
Category
Customers
Language of the text
EN
Version
1

⚠️ This is a blank template, not legal advice: check the wording with a lawyer and adapt it to your jurisdiction and your case.

This template has no optional clauses: the text is the same for everyone. Field placeholders are shown as labels — on the site the template is read-only, values are entered inside the system.

Document

PRIVACY POLICY (PRIVACYVERKLARING / DÉCLARATION DE CONFIDENTIALITÉ) (GDPR — Regulation (EU) 2016/679)

Data controller name (BTW/BCE: Controller VAT/BCE-BTW number), Controller address Effective date: Effective date

1. DATA CONTROLLER 1.1. Data controller name is the data controller (verwerkingsverantwoordelijke/responsable du traitement) for the personal data described below.

2. CATEGORIES OF DATA AND PURPOSES 2.1. Categories of personal data processed: Categories of personal data processed 2.2. Purposes and legal bases: Purposes and legal bases of processing

3. RETENTION 3.1. Retention periods

4. RECIPIENTS AND PROCESSORS 4.1. Recipients and processors

5. RIGHTS OF THE DATA SUBJECT 5.1. Data subject rights and contact 5.2. Includes the right to lodge a complaint with the Gegevensbeschermingsautoriteit / Autorité de protection des données (GBA/APD), the Belgian data-protection authority.

6. ⚠️ PUBLICATION AND LANGUAGE 6.1. This policy must be published on the guest-facing digital menu and/or webshop site. 6.2. Language versions note

— — — ⚠️ This is a boilerplate template, not legal advice. Belgian labour, data-protection, consumer- protection and camera-surveillance law (Arbeidsreglementenwet of 8 April 1965; the Dimona declaration regime under RSZ/ONSS; the flexi-job legislation, open to ALL sectors — subject to sectoral opt-out — from 1 July 2026, with a 2026 income ceiling of €18,440/year and a HoReCa minimum flexi rate of €12.78/hour from 1 March 2026; the 650-hours/year student quota (2025– 2026 reform); deeltijdse arbeid rules on minimum hours and variable-schedule notice; the 2014 Wet betreffende het eenheidsstatuut on notice periods, as reformed for contracts starting on or after 1 June 2026; the GDPR (Regulation (EU) 2016/679), supervised by the GBA/APD; Boek VI WER/ CDE on distance sales and the 14-day herroepingsrecht/droit de rétractation; and the Camera Act of 21 March 2007 with the Royal Decree of 8 May 2018) is highly procedural, tied to fixed statutory deadlines (e.g. Dimona BEFORE work starts, arbeidsreglement filed with the inspection within 8 days, camera declarations no later than the day before activation) and to sanctions that include absolute nullity of documents. ⚠️ CRITICAL: the language of every HR/labour document is determined by the location of the operating office, NOT by the parties' choice — Flanders (Vlaanderen) requires Dutch only, under the Taaldecreet of 19 July 1973 a document in any other language is ABSOLUTELY VOID; Wallonia (Wallonie) requires French; Brussels (Bruxelles/Brussel) requires Dutch or French depending on the worker's own language; the German-speaking Community requires German. This English text is a DRAFTING AID ONLY and must be translated into the legally required language for the actual operating office before use, and reviewed and adapted by a Belgian employment/legal advisor (avocat/advocaat) or accountant (comptable/boekhouder) and verified against current FOD WASO/SPF Emploi, RSZ/ONSS, GBA/APD and FOD Economie/SPF Économie guidance before use.

Fields of the document

Fields that belong to a switched-off clause are dimmed — they are not asked for.

  • Data controller nametextrequiredautomatic
  • Controller addresslong textrequired
  • Controller VAT/BCE-BTW numbertextrequired
  • Categories of personal data processedlong textrequired
  • Purposes and legal bases of processinglong textrequired
  • Retention periodstextrequired
  • Recipients and processorslong textrequired
  • Data subject rights and contactlong textrequired
  • Language versions notetextoptional

    Recommended minimum NL + FR, + EN for tourists

  • Effective datedaterequired

In Cenaly this template fills itself in

1 of 10 fields are taken from the company, employee or counterparty record, the questionnaire can be dictated to the AI, and the finished document comes with a number, a PDF and an acknowledgement record.