areal – Privacy Policy

This privacy policy (hereafter referred to as the “Privacy Policy”) regulates the processing of your Personal Data by Areal BV, a company having its registered office at Sint Annastraat 70,2990 Wuustwezel (Belgium), and registered in the Crossroads Banks for Enterprises under VAT number BE 0764.661.787 (hereafter also referred to as “Us”, “We” or “Areal BV”).

We qualify as Data Controller regarding the processing of your Personal Data for the purposes mentioned in this Privacy Policy. This Privacy Policy governs the data processing activities specifically related to, or taking place through our website (hereafter referred to as the “Website”). Consequently, this Privacy Policy does not apply to any other services or products offered by Areal BV.

Should you have any questions, you may contact Us by sending a signed and dated request to Our offices at Areal BV, Lab of Tomorrow – Hoek 76/unit 200, 2850 Boom, Belgium, or by e-mail via hello@areal.world.

You are advised to read this Privacy Policy carefully, as it contains essential information about how your Personal Data is processed. By providing your Personal Data on the Platform and via the e-mail addresses specified thereon, you declare that you have taken notice of this Privacy Policy. For information regarding Our use of cookies, We refer to Our Cookie Policy.

All capitalized terms set out in this Privacy Policy have the meaning as defined under Regulation (EU) 2016/679 (hereafter the “General Data Protection Regulation” or “GDPR”). This includes, but is not limited to, terms such as “Personal Data,” “Processing,” “Data Controller,” and “Data Subject.”

Areal BV collects the following categories of Personal Data:
  • Identification data: name, email address, phone number and pseudonymous social media profile identifiers (such as LinkedIn Member IDs used for ad attribution).
  • Payment and transaction data: shipping/billing address, and payment details.
  • Technical data: IP address, browser type and version, time zone, device type, operating system, cookies and platform.
  • Usage data: information on how you use our Website and products including pages visited, links clicked, forms viewed, and interactions with our advertising campaigns.
  • Marketing and communications data: your preferences in receiving direct marketing from Us.
  • Technical and telemetry data: when you interact with our online forms (including IP address, browser type, user-agent, and interaction data processed via Cloudflare Turnstile to verify human users)

You directly provide Areal BV with most of the Personal Data We Process.

We Process Personal Data when you:

  • Register online or place an order for any of Our products or services.
  • Fill out forms on Our Website, including contact forms and newsletter subscriptions.
  • Voluntarily complete a survey or provide feedback via email or through Our support channels.
  • Use or view Our Website via your browser’s cookies.

Our Company may also receive your Personal Data indirectly from the following sources:

  • Data submitted via forms embedded from Odoo into Our WordPress Website.
  • Payment processors (e.g., Stripe, PayPal).
  • Analytics tools (e.g., Google Analytics or Matomo).
  • Communication platforms or scheduling tools you may use to book calls or demos with Us.

  • Advertising platforms (e.g., LinkedIn Campaign Manager) which provide pseudonymous ad interaction data and conversion details.

  • Marketing automation platforms (e.g., Klaviyo) that compile user activity data and profile details.

Categories of Personal Data Purposes of Processing Legal Basis Retention period
Identification data   Manage your customer account, support inquiries and communicate with you about your order and Our products. Necessary for the performance of an agreement (art. 6(1)(b) GDPR). For a period of ten (10) years from the end of the agreement.
Direct marketing and promotional communications. Consent from the Data Subject (art. 6(1)(a) GDPR) or “Soft-opt-in” (see below) (cfr. Article 3.3 and art. 13(2) e-Privacy Directive and art. 1 Royal Decree regulating the sending of advertising by electronic mail of 4 April 2003). For a period of two (2) years after the last contact.
Maintain Our internal records and CRM. Legitimate interests pursued by the Data Controller (art. 6(1)(f) GDPR). (i.e. managing customer and prospects relationships). For a period of two (2) years after the last contact.
To send direct marketing e.g., per e-mail Article 6(1)(a) GDPR – Consent and “Soft-opt-in” (see below) (cfr. Article 3.3 and art. 13(2) e-Privacy Directive and art. 1 Royal Decree regulating the sending of advertising by electronic mail of 4 April 2003). For a period of two (2) years after the last contact or one (1) month after withdrawing consent.
Conducting surveys and to obtain feedback Article 6(1)(f) GDPR – Legitimate interests (i.e. maintaining client relationship and improving services) For a period of two (2) years after the last contact.
Payment and transaction data To process payments, fulfill transactions and deliver your order. Necessary for the performance of an agreement (art. 6(1)(b) GDPR). For a period of ten (10) years after the end of the agreement.
To comply with legal and regulatory obligations. Necessary for compliance with a legal obligation (art. 6(1)(c) GDPR). Dependent on the specific legal obligation but in any case, not longer than ten (10) years after the termination of the agreement.
Technical data To analyze usage trends to improve Our Website and services. Legitimate interests pursued by the Data Controller (art. 6(1)(f) GDPR). (i.e. improve the quality of Areal BV’s services). Two (2) years after visiting the Website.
To ensure Website security and functionality. Legitimate interests pursued by the Data Controller (art. 6(1)(f) GDPR) (i.e. to ensure security and safety of the Website). For a period of one (1) year from the date of collection.
Form interaction telemetry data processed via Cloudflare Turnstile to protect online forms from automated abuse and malicious bot attacks. Legitimate interests pursued by the Data Controller (art. 6(1)(f) GDPR) (i.e. to ensure security, prevent fraud, and maintain proper website functionality). Processed volatilely during submission; logs are retained only as long as necessary for security and fraud prevention purposes.
To track ad conversions, sync behavioral data with third-party platforms (e.g., LinkedIn, Klaviyo), and enable remarketing campaigns. Consent from the Data Subject (art. 6(1)(a) GDPR). Until consent is withdrawn, or upon expiration of the specific tracking cookie (e.g., 30 to 90 days).
Usage data Analyze usage trends to improve Our Website and services. Legitimate interests pursued by the Data Controller (art. 6(1)(f) GDPR) (i.e. improve the quality of Areal BV’s services). Two (2) years after visiting the Website.
To build user profiles based on website interactions for personalized email marketing automation and targeted social media advertising. Consent from the Data Subject (art. 6(1)(a) GDPR). Until consent is withdrawn, or up to a maximum of two (2) years after the last interaction.
Marketing and communications data Direct marketing and promotional communications. Consent from the Data Subject (art. 6(1)(a) GDPR) or “Soft-opt-in” (see below) (cfr. Article 3.3 and art. 13(2) e-Privacy Directive and art. 1 Royal Decree regulating the sending of advertising by electronic mail of 4 April 2003). For a period of two (2) years after the last contact.

Your Personal Data will (only) be processed for the purposes stated in the overview above. In case we would like to process your Personal Data for other purposes than those stated above in this Privacy Policy, We will notify you without delay and you will receive all necessary information, you can also object to such use, except when it is required for Areal BV to adhere to its legal obligations.

If the processing of your Personal Data as per the above overview is necessary to perform an agreement between you and Areal BV, We cannot execute the agreement if you do not provide your Personal Data to Us. In practice, this means you will no longer be able to use Our services.

Sending direct marketing via e-mail or SMS is, in some cases, allowed without your explicit consent, for example, because We have obtained your electronic contact details in the context of the sale of products or services and because Our commercial messages relate to Our own similar products or services (“Soft opt-in“). You can object to receiving further direct marketing messages from Us at any time by clicking on the appropriate unsubscribe link at the bottom of each promotional e-mail message or by sending your intention to unsubscribe to our offices at Areal BV, Lab of Tomorrow – Hoek 76/unit 200, 2850 Boom, Belgium, or by e-mail via hello@areal.world.

If We process your Personal Data on the basis of Our legitimate interest, this means that, after balancing all relevant interests, We have determined that Our identified interest outweigh yours. If you would like more information about the balancing of interests, please contact Us by your sending request to our offices at Areal BV, Lab of Tomorrow – Hoek 76/unit 200, 2850 Boom, Belgium, or by e-mail via hello@areal.world. 

We retain your Personal Data for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Once the retention period expires, your data will be securely deleted or anonymized.

We may disclose your Personal Data to third parties who provide services to Us, such as, but not limited to credit reference agencies, marketing offices, IT-service providers, payment service providers, group entities, logistical service providers, and sustainability advisors. Specifically, we share form validation telemetry data with our security provider, Cloudflare, Inc., to protect our website from automated abuse and malicious bots; you can learn more about how they process this data via the Cloudflare Turnstile Privacy Addendum. Furthermore, we share pseudonymous tracking data with LinkedIn Ireland Unlimited Company (for ad campaign performance and retargeting) and Klaviyo Inc. (for marketing automation and email profiling). These Processors may only process your Personal Data on explicit and written instruction from Us for Our benefit, for example to prevent fraudulent purchases. We guarantee that all Processors are selected with due care, and We oblige them to observe the security and integrity of your Personal Data. Because tools like LinkedIn and Klaviyo operate servers in the United States, your personal data may be transferred outside the European Economic Area (EEA). To ensure an adequate level of data protection, these transfers are protected via Standard Contractual Clauses (SCCs) and their active participation under the EU-U.S. Data Privacy Framework. In the event of a complete or partial sale, reorganization or transfer of activities of Areal BV, whereby its business activities are reorganized, transferred or ceased, or if Areal BV goes bankrupt, your Personal Data may be transferred wholly or partly to new entities or third parties who acquire Our business. As the case may be, We may also disclose your Personal Data to (non-)affiliated third parties including advisors involved in the process of the partial sale, reorganization or transfer. In rare cases, it may occur that Areal BV must disclose your Personal Data pursuant to a court order or to comply with other mandatory laws or regulations. Areal BV will make reasonable efforts to inform you in advance of this, unless this is subject to legal restrictions. Except if you have consented otherwise, Areal BV will not sell your Personal Data, nor rent, distribute or otherwise make commercially available to third parties, except as described above or with your prior consent. Currently, Areal BV does not share customer data with third-party partners for marketing purposes. This section will be updated if those changes. In any case, all rights and obligations embedded in this Privacy Policy will also be applicable to the third party which processes or controls your Personal Data as set forth in this Privacy Policy.

We will primarily process your Personal Data within the European Economic Area (“EEA”). In the event that We transfer your Personal Data to countries outside the EEA, We will ensure that the same level of protection is achieved as within the EEA (e.g. by entering into Standard Contractual Clauses (“SCCs”)).

Should you have questions or want to obtain more information regarding this topic, please contact Us by letter at Areal BV, Lab of Tomorrow – Hoek 76/unit 200, 2850 Boom, Belgium, or by e-mail via hello@areal.world.

Personal data will also be used for direct marketing, provided you have given consent for this (“opt-in”). If you have already been included in Our mailing list for receiving marketing materials in paper and/or electronic form, We may use your Personal Data for sending marketing and other materials with regard to Us, Our products and/or services.

Your consent can be withdrawn at any time, without justification and free of charge, for example by clicking on the appropriate unsubscribe link at the bottom of each promotional e-mail message or by contacting us via the contact details provided in this Privacy Policy.

Sending direct marketing via e-mail or SMS is, in some cases, allowed without your explicit consent, for example, because We have obtained your electronic contact details directly in the context of the sale of products or services and because Our commercial messages relate to Our own similar products or services (“Soft opt-in”). You can object to receiving further direct marketing messages based on such Soft opt-in from Us at any time by clicking on the appropriate unsubscribe link at the bottom of each promotional e-mail message or by contacting us via the contact details provided in this Privacy Policy.

Areal BV would like to make sure you are fully aware of all your data protection rights.

Every user is entitled to the following:

  • The right to access – You have the right to request Areal BV for copies of your Personal Data. We will not charge you for this service unless the request is excessive or repetitive.
  • The right to rectification – You have the right to request that Areal BV corrects any information you believe is inaccurate. You also have the right to request Areal BV to complete information you believe is incomplete.
  • The right to erasure – You have the right to request that Areal BV erases your Personal Data, under certain conditions (e.g. if the data is no longer necessary, or you withdraw consent).
  • The right to restrict processing – You have the right to request that Areal BV restricts the processing of your Personal Data, under certain conditions (e.g. if the accuracy of the data is contested).
  • The right to object to Processing – You have the right to object to Areal BV’s processing of your Personal Data, under certain conditions, particularly for direct marketing purposes.
  • The right to data portability – You have the right to request that Areal BV transfers the data we have collected to another organization, or directly to you, under certain conditions.
  • Right to Withdraw Consent – Insofar as processing is based on your prior consent, you have the right to withdraw such consent at any moment and free of cost.

You can exercise your rights by contacting Us for this purpose by letter at Areal BV, Lab of Tomorrow – Hoek 76/unit 200, 2850 Boom or by sending an e-mail to hello@areal.world. We will handle your request within a reasonable period of time, abiding by the rules set out under the GDPR.

When contacting Us, please ensure that You clearly indicate which of the above rights you wish to exercise. Please note that in certain cases, We may request additional documentation or information. Under certain exceptional circumstances, We have the right not to fulfil your request (e.g. if We have the legal obligation to retain your Personal Data).

The Website may contain links to other websites. Our privacy policy applies only to Our Website — if you click on a link to another website, We recommend that you read their privacy policy before providing any Personal Data.

Areal BV keeps its privacy policy under regular review and places any updates on this web page. This privacy policy was last updated on 11 August 2025.

If you have any questions about Areal BV’s privacy policy or about your Personal Data we Process or if you would like to exercise one of your data protection rights, please contact us:

Email: hello@areal.world

Or write to us: Areal BV, Lab of Tomorrow – Hoek 76/unit 200, 2850 Boom

Should you wish to report a complaint or if you feel that Areal BV has not addressed your concern in a satisfactory manner, you may contact the data protection authority.

As a company based in Belgium, Our lead supervisory authority is:

Gegevensbeschermingsautoriteit (GBA) / Autorité de protection des données (APD)
Email: contact@apd-gba.be
Website: https://www.gegevensbeschermingsautoriteit.be
Address:
Drukpersstraat 35
1000 Brussel
Belgium