Skip to main content
FromNine
Menu

Privacy notice

Effective
Version
1.1
Last updated
Contents

This notice describes the personal data we process when you browse this website or send us a message through it. It applies to this website and to nothing else.

We have tried to keep it brief and concrete. If a point is not clear, contact us at the address given in section 1.

  1. Who is responsible

    LAAP Group, of which FromNine is part, is the controller of the personal data covered by this notice. Its registered office is at Opgeëistenlaan 2, 9000 Gent, Belgium, and its enterprise number is 0440.481.750.

    Send any question or request about your personal data to contact@fromnine.com. If you put “privacy” in the subject line, your message reaches the right colleague sooner.

    Company name
    LAAP Group
    Registered office
    Opgeëistenlaan 2, 9000 Gent
  2. What we process, why, and on what basis

    There are three situations in which we process personal data. For each one we set out the data concerned, the purpose, the legal basis under the General Data Protection Regulation (GDPR), to which the Data Protection Act 2018 gives further effect in Ireland, and the retention period.

    When you visit the website

    Each time your browser asks for a page, our hosting provider processes technical data so that it can deliver the page and keep the website secure: your IP address, the date and time, the address requested, details of your browser and operating system, the page you came from and the status of the response.

    Purpose: serving the website, spotting and stopping misuse, and correcting faults. Legal basis: our legitimate interest in running a website that works and is secure (Article 6(1)(f) GDPR). Retention: we delete server logs within 30 days at the latest, unless we need them to investigate a particular security incident.

    This website has no analytics, no advertising and no social media tracking. Before that changes, we will update this notice and, where the law requires consent, ask you for it.

    When you contact us

    When you use the contact form, we process your name and email address, your organisation if you enter it, the topic you select, your message and the language version of the website you were on.

    Purpose: replying to your enquiry and, if you want to, taking a conversation about a project further. Legal basis: steps you ask us to take before a possible contract (Article 6(1)(b) GDPR) or, where that does not apply, our legitimate interest in answering messages sent to us (Article 6(1)(f) GDPR). Retention: enquiries are deleted 12 months after our last contact with you; if a business relationship follows, the retention rules of that relationship take over.

    The form sends your message to our team by email. It is not kept in a database on the website. Our operational logs hold only a reference number and whether delivery worked; your name, email address and message are never logged.

    Against misuse of the form we use a hidden spam check and a limit on the number of messages per sender. To apply that limit, your IP address and email address are turned into one-way hashed values, held in memory for no more than 24 hours and then thrown away.

    Preferences stored in your browser

    Your browser keeps the theme and animation setting you choose and, if you use the switcher, your language and region. The theme and animation settings never leave your device. The cookie policy describes each item.

  3. Who receives your data

    Personal data goes only to service providers that process it for us, on our instructions and under a data processing agreement: our hosting provider, which serves the website and holds the server logs; our email delivery provider, which delivers messages from the contact form to our team; and our email and collaboration platform, in which our team reads and answers your message.

    Inside FromNine, we may pass an enquiry to the colleagues or the office best able to deal with it; we do so on the basis of our legitimate interest in handling your request properly. FromNine has offices in Antwerp, Ghent, Amsterdam and Cyberjaya (Malaysia). How access from outside the European Economic Area is protected is explained in the next section.

    We never sell personal data, and we never share it for advertising purposes.

  4. Transfers outside the European Economic Area

    Our aim is to process personal data inside the European Economic Area (EEA). FromNine also has an office in Cyberjaya, Malaysia, which lies outside the EEA. If colleagues in that office, or a service provider based outside the EEA, have access to personal data, we ensure that the access is covered by appropriate safeguards under Article 46 GDPR, in particular the Standard Contractual Clauses adopted by the European Commission, with supplementary measures where they are needed. If the European Commission has adopted an adequacy decision for the country concerned, we may rely on that decision instead.

    To receive a copy of the safeguards that apply, write to contact@fromnine.com.

  5. How we protect your data

    FromNine runs an information security management system certified to ISO/IEC 27001. Only the people who need an enquiry to answer it can access it, and data travelling between your browser, our website and our mail systems is encrypted.

  6. Your rights

    You may ask us for access to your personal data, ask us to correct or erase it, or ask us to restrict how we process it. You may object to processing that relies on our legitimate interests, and where processing is based on steps towards a contract you have the right to data portability. Articles 15 to 21 of the GDPR set out these rights.

    To exercise a right, email contact@fromnine.com. We answer within one month. If a request is complex, we may extend that period by up to two further months; if so, we will tell you, with the reason. We may first ask you to confirm who you are.

    We do not take decisions about you by automated means, and we do not profile you in a way that has legal or similarly significant effects for you.

  7. Complaints

    If you believe we are mishandling your data, please let us know first so that we can correct it. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU Member State where you live or work or where the alleged infringement took place (Article 77 GDPR). If you live or work in Ireland, that authority is the Data Protection Commission (DPC), An Coimisiún um Chosaint Sonraí, established by the Data Protection Act 2018.

    LAAP Group has its registered office in Belgium, so our lead supervisory authority under the one-stop-shop mechanism of the GDPR (Article 56) is the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données). You may still bring a complaint to the DPC; the authorities concerned then cooperate under the GDPR. The European Data Protection Board (opens external site) lists the supervisory authorities of every Member State.

    Supervisory authority for this market

    Data Protection Commission (DPC) / An Coimisiún um Chosaint Sonraí

    www.dataprotection.ie (opens external site)

  8. Changes to this notice

    When our processing changes, we update this notice. The version and dates at the top of the page tell you which version you are reading. Significant changes are announced on this page.

Questions about this page?Contact us