Last updated: April 2026
Fortiax SRL ("Fortiax", "we", "us") is the data controller for the personal data processed through this website and in the course of our engagements. We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, or "GDPR") and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data. This notice explains what we collect, why, and the rights you may exercise.
Fortiax SRL. Registered office: [street, postal code, city, Belgium]. Belgian enterprise number: [BE 0XXX.XXX.XXX]. VAT: [BE 0XXX.XXX.XXX]. For any question relating to this notice or to your personal data, you may write to privacy@fortiax.com. We do not appoint a Data Protection Officer on a statutory basis; correspondence addressed to that mailbox reaches the partner responsible for data protection.
Through this website, we process only the data you choose to submit through the contact form (name, preferred contact method and details, language preference, nature of inquiry, referral source if you provide one, and the content of your message). When you visit the site we also process limited technical data necessary to deliver it: IP address, browser type, and the pages requested. We do not deploy advertising cookies, third-party trackers, or social media pixels. In the course of an engagement we may process additional categories of personal data strictly necessary to deliver the service; these are governed by a separate written engagement agreement.
We process the data submitted through the contact form to respond to your inquiry and, where relevant, to assess whether to enter into an engagement (Article 6(1)(b) GDPR, pre-contractual measures). We process technical site data on the basis of our legitimate interest in operating a secure and functioning website (Article 6(1)(f) GDPR). Where we are required to retain records by law (for example, accounting and tax obligations), we rely on Article 6(1)(c) GDPR.
Personal data is accessible only to Fortiax personnel bound by professional confidentiality and to a limited number of carefully selected processors who provide infrastructure, communications, and security services on our behalf. Our processors are located in the European Economic Area or in jurisdictions covered by an adequacy decision of the European Commission. Where a transfer outside the EEA is necessary, we rely on the Standard Contractual Clauses adopted by the Commission and apply supplementary measures where required. We do not sell personal data and we do not share it for marketing purposes.
We retain inquiries that do not lead to an engagement for a period of twenty-four (24) months, after which they are deleted. Engagement records are retained for the duration of the engagement and for the period required by applicable professional, accounting, and tax rules thereafter. Technical site logs are retained for a maximum of thirty (30) days.
You have the right to access your personal data, to rectify it, to request its erasure, to restrict or object to its processing, and, where applicable, to data portability. You may withdraw any consent you have given at any time, without affecting the lawfulness of processing carried out before withdrawal. To exercise these rights, write to privacy@fortiax.com. We will respond within one month. If you are not satisfied with our response, you may lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be, www.dataprotectionauthority.be.
This website uses only the strictly necessary cookies required for it to function. We do not use analytics, advertising, or social media cookies, and no consent banner is therefore required. If we introduce optional cookies in the future, we will request your prior consent through a clear and granular interface.
We apply technical and organisational measures appropriate to the sensitivity of the data we hold, including encryption in transit and at rest, segregated environments, strict access controls, and ongoing monitoring. In the unlikely event of a personal data breach affecting your rights, we will notify you and the competent supervisory authority in accordance with Articles 33 and 34 GDPR.
We may update this notice from time to time. The version in force is the one published on this page, with the date of last update shown above. Material changes will be brought to the attention of active clients through their usual point of contact.
The registered office and enterprise number shown above must be kept current. Please contact legal@fortiax.com with questions about this notice.