Privacy Policy
TrAInyng (hereinafter "we" or "our") is committed to protecting the privacy of its users. This Privacy Policy explains how we collect, use, store and protect your personal data in accordance with the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679) and the Belgian Law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
Data Controller
The data controller for your personal data is Mohamad Haji, sole proprietor trading as TrAInyng, Rue Bruyn 149, 1120 Brussels (Belgium). Enterprise number: 1004.992.056 - VAT: BE1004992056. For any questions regarding the protection of your data, you can contact us at: privacy@trainyng.be.
Data Collected
We collect the following categories of data: identification data (name, surname, email address, phone number), professional data (company name, industry, company size), technical data (IP address, browser type, pages visited, cookies), and data voluntarily provided through our contact forms, free diagnostics and online questionnaires. Our free diagnostics (cyber, AI, mini-audit) perform non-intrusive, automated analyses based on publicly available information.
Purposes of Processing
Your data is processed for the following purposes: responding to your contact and quote requests, providing our cybersecurity, AI and compliance consulting services, performing free non-intrusive diagnostics, improving our services and website, complying with our legal and regulatory obligations, and sending you commercial communications (only with your prior consent).
No Third-Party Sharing
Your personal data is never sold, rented or shared with third parties for commercial or marketing purposes. It is used exclusively internally by TrAInyng for the purposes described above. No business partner, advertiser or other organisation has access to your personal data.
Technical Sub-processors
To ensure the proper functioning of our services, we use the following technical sub-processors, all bound by processing agreements compliant with GDPR (Article 28): Supabase (database hosting - EU servers), Vercel (website hosting), Resend (transactional email delivery), and Upstash (Redis cache for rate limiting). These sub-processors only have access to data strictly necessary to perform their services and may not use it for any other purpose.
International Transfers
Some of our technical sub-processors may process data outside the European Economic Area (EEA). In such cases, these transfers are governed by Standard Contractual Clauses approved by the European Commission (Article 46.2 of the GDPR) or by an adequacy decision (Article 45 of the GDPR), ensuring a level of protection equivalent to that provided within the EU.
Legal Basis for Processing
We process your data on the following legal bases in accordance with Article 6 of the GDPR: your consent (for non-essential cookies and marketing communications), the performance of a contract or pre-contractual measures (for the provision of our services and quotes), our legitimate interests (for the improvement of our services and the security of our website), and compliance with our legal obligations.
Data Retention
Your personal data is retained only for the duration necessary for the purposes for which it was collected. Contact and quote data is retained for 3 years after the last contact. Diagnostic results are retained for 12 months. Browsing data and cookies are retained in accordance with our cookie policy. Upon expiry of these periods, your data is deleted or anonymised.
Your Rights
Under the GDPR and the Belgian Law of 30 July 2018, you have the following rights: the right of access to your personal data, the right to rectification of inaccurate data, the right to erasure ("right to be forgotten"), the right to restriction of processing, the right to data portability, the right to object to processing, and the right to withdraw your consent at any time.
Right to Deletion - Procedure
You may request the complete deletion of your personal data at any time by sending an email to privacy@trainyng.be with the subject line "Deletion request". Please include the email address associated with your account or your interactions with our services. We will delete your data within a maximum of 30 days and confirm the deletion by email. The deletion covers all your data: contact details, diagnostic results, conversation history and technical data. Note: some data may be retained if required by a legal obligation (invoicing, litigation).
Supervisory Authority
You have the right to lodge a complaint with the Belgian Data Protection Authority (DPA), the competent Belgian supervisory authority for data protection: Data Protection Authority - Rue de la Presse 35, 1000 Brussels - Tel.: +32 (0)2 274 48 00 - www.dataprotectionauthority.be - contact@apd-gba.be.
Cookies
Our website uses essential cookies required for the site to function, analytical cookies to understand site usage, and preference cookies to remember your choices (language, theme). Non-essential cookies are only placed with your prior consent. You can manage your cookie preferences at any time via the consent banner or your browser settings.
Contact
For any questions regarding this privacy policy or the processing of your personal data, contact us at: privacy@trainyng.be.
Last updated: March 2025.