Skip to content
Certilux Certification Group

Privacy statement

Last updated on 27 October 2026.

Certilux respects your privacy. This statement explains which personal data we collect through this website and when carrying out our assignments, why we do so, how long we keep it and what your rights are. We process your data in accordance with the General Data Protection Regulation (GDPR) and Belgian privacy law.

1. Who is responsible?

Certilux Certification Group, a business of Casa Sinove BV, company number 0809.948.515, registered office Molenstraat 51, 9340 Impe (Lede), Belgium.
E-mail: info@certilux.be · Phone: +32 53 430 430

2. Which data do we collect?

  • Through the forms (order, quote, EPC NR quote, contact): first and last name, where applicable company name and VAT number, address, postcode and municipality, phone and mobile numbers, e-mail address, the address of the property to be inspected, the type of property and the services requested, your preferred dates and your questions or comments.
  • When carrying out the assignment: the data legally required for the certificate or report (for example characteristics of the property and its installations, photos and findings on site, owner details) and your invoicing details.
  • Technical data: to prevent abuse and spam, when a form is sent we temporarily keep an irreversible code (hash) of your IP address and the browser type. Our web server keeps ordinary access logs (IP address, time, page requested) for security and troubleshooting.

3. Why, and on what legal basis?

  • Handling your request or order, contacting you, making an appointment and carrying out the assignment: performance of a contract or steps taken at your request before entering into one.
  • Registering certificates and keeping or passing on data where the law requires it (for example the asbestos certificate with OVAM, the EPC with the Flemish Energy and Climate Agency) and keeping our accounts: legal obligation.
  • Securing the website, stopping spam and improving our services: legitimate interest.

We do not use your data for third-party advertising and never sell it.

4. Who receives your data?

  • Our staff and experts who carry out your assignment.
  • Public authorities and accredited bodies, only as far as the law or the assignment requires (for example OVAM, the Flemish Energy and Climate Agency, an accredited inspection body or a laboratory analysing samples).
  • Our processors, who work only on our instructions: the hosting provider of this website (Contabo GmbH, servers in the European Union) and Google (Google Workspace) for our e-mail. Google may process data outside the European Economic Area; this happens with the safeguards the GDPR requires (the EU-US Data Privacy Framework and/or the European Commission's standard contractual clauses).
  • Our accountant and, where necessary, our legal advisers.

5. How long do we keep your data?

  • Requests and messages that do not lead to an assignment: at most 2 years after the last contact.
  • Data of completed assignments and invoices: as long as the law requires (10 years for the accounts) and as long as needed to defend our rights.
  • The code of your IP address and the browser type: 7 days. Web server access logs: at most 3 months.

6. Cookies

This website places no cookies for statistics, advertising or social media and uses no trackers. If you install the website as an app, only technically necessary storage is used in the browser (so the app can show a message without internet). The management area for our staff uses one strictly necessary sign-in cookie.

7. Security

All traffic with this website is encrypted (HTTPS). Access to the data is limited to the staff who need it, with personal credentials. Backups are made regularly.

8. Your rights

You have the right to access your data, to have it corrected or erased, to have its processing restricted, to object to processing based on legitimate interest and to data portability. Retention required by law (for example of invoices and certificates) takes precedence over a request for erasure. Send your request to info@certilux.be; we reply within one month and may ask you to confirm your identity.

If you are not satisfied with how we handle your data, you can lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse / Drukpersstraat 35, 1000 Brussels, www.dataprotectionauthority.be.

9. Changes

We may update this statement. The date at the top shows when that last happened. See also our terms and conditions.