1. Purpose

This policy explains how DCA-S, PME Assistance, and DTAX.LU (“the Group”) collect, use, and protect personal data in accordance with the EU General Data Protection Regulation (GDPR – Regulation 2016/679).

2. Data Controller

DCA-S
Nieuwelaan 71, 1853 Strombeek-Bever, Belgium
VAT: BE0890994191
Email: administration@dca-s.com

3. Personal data we process

• Identity & contact data (clients, prospects, suppliers, recruits)
• Engagement information for accounting/tax mandates
• Compliance information (e.g., AML/KYC identification)
• Website/form communications and operational correspondence
• Recruitment data (CVs, interview notes)

4. Legal bases

• Performance of a contract or pre-contractual steps
• Compliance with legal obligations
• Legitimate professional interest (e.g., client service continuity)
• Consent (for newsletters/optional communications)

5. Retention

Data are retained only as long as necessary for legal/professional obligations and legitimate purposes (typically 7–10 years after mandate end, unless a longer statutory period applies).

6. Sharing

We may share data with:

• Authorities/regulators when legally required
• Sub-processors under written confidentiality (IT, payroll, secure document services)
• Affiliated entities (DCA, PME Assistance, DTAX.LU) for Belux coordination

7. Your rights

You may request access rectification erasure restriction portability or object to processing based on legitimate interest. Contact: administration@dca-s.com.

Supervisory authority: Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels.

8. Cookies & analytics

Our website uses essential cookies, Google Analytics 4 for audience measurement, and Google reCAPTCHA to protect our forms. No analytics cookies are placed before you accept them via the cookie banner, and you can withdraw or change your choice at any time via the banner. These Google services may involve data transfers to the United States, safeguarded by the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses. Our website provider, Squarespace, Inc., also participates in the Data Privacy Framework.

9. Security

We apply appropriate technical and organisational measures to protect data (access controls, secure storage, staff awareness, contractual safeguards for sub-processors).

10. Updates

This policy may be updated to reflect legal or operational changes. The latest version is available on beluxaccounting.com.