Privacy notice
- Effective
- Version
- 1.1
- Last updated
Contents
This notice describes what happens to personal data when you visit this website or contact us through it. It applies to this website and to nothing else.
We have written it to be brief and specific. Should any part of it be unclear, please ask us, using the contact details given in section 1.
Who is responsible
The personal data described here is controlled by LAAP Group. Its registered office is at Opgeëistenlaan 2, 9000 Gent, Belgium, and its enterprise number is 0440.481.750. FromNine is part of LAAP Group, which has no establishment in Malta.
Any question or request concerning your personal data can be sent to contact@fromnine.com. If you put “privacy” in the subject line, your message reaches the right person sooner.
- Company name
- LAAP Group
- Registered office
- Opgeëistenlaan 2, 9000 Gent
- contact@fromnine.com
What we process, why, and on what basis
There are three situations in which we process personal data. For each one we set out the data concerned, the purpose, the legal basis under the General Data Protection Regulation (GDPR) and the retention period. The GDPR applies directly in Malta, where it is supplemented by the Data Protection Act (Cap. 586).
When you visit the website
Every time your browser asks for a page, our hosting provider processes technical data so that the page can be delivered and the website kept secure: your IP address, the date and time, the address requested, details of your browser and operating system, the page you came from and the status of the response.
Purpose: serving the website, detecting and preventing misuse, and correcting faults. Legal basis: our legitimate interest in running a website that is secure and works properly (Article 6(1)(f) GDPR). Retention: server logs are erased within 30 days at the latest, unless a particular security incident has to be investigated with them.
This website uses no analytics, no advertising and no social media tracking. Should that ever change, we will first update this notice and, where the law requires it, ask for your consent.
When you contact us
When you use the contact form, we process your name and email address, your organisation if you provide it, the topic you select, your message and the language version of the website from which you wrote.
Purpose: replying to your enquiry and, if you would like to, continuing the discussion about a project. Legal basis: steps taken at your request before a contract may be concluded (Article 6(1)(b) GDPR), and in other cases our legitimate interest in answering messages addressed to us (Article 6(1)(f) GDPR). Retention: enquiries are erased 12 months after our last contact with you; if a business relationship follows, the retention rules of that relationship apply instead.
Your message reaches our team by email and is not kept in a database by the website. Our operational logs hold only a reference number and whether delivery succeeded; your name, email address and message are never written to them.
The form is protected against misuse by a hidden spam check and by a limit on the number of messages from one sender. To apply that limit, your IP address and email address are turned into one-way hashed values, held in memory for no more than 24 hours and then discarded.
Preferences stored in your browser
Your browser keeps your chosen theme and animation setting for this website and, if you use the switcher, your language and region. The theme and animation settings never leave your device. The cookie policy gives the details.
Who receives your data
Three kinds of service provider receive personal data, each acting for us, following our instructions and bound by a data processing agreement: the hosting provider that runs the website and keeps the server logs; the email delivery provider that forwards messages from the contact form to our team; and the email and collaboration platform our team works in to read and answer you.
Within FromNine, your enquiry may go to the colleagues or the office best suited to answer it, based on our legitimate interest in dealing with your request properly. FromNine has offices in Antwerp, Ghent, Amsterdam and Cyberjaya (Malaysia); how access from outside the European Economic Area is safeguarded is explained in the next section.
Personal data is not sold, and it is not passed on for advertising.
Transfers outside the European Economic Area
We intend personal data to be processed within the European Economic Area (EEA). One FromNine office, in Cyberjaya, Malaysia, is outside the EEA. If staff at that office, or a service provider established outside the EEA, can access personal data, that access must be covered by appropriate safeguards under Article 46 GDPR, chiefly the Standard Contractual Clauses adopted by the European Commission, supplemented by further measures where necessary. For a country that is the subject of an adequacy decision of the European Commission, we may rely on that decision instead.
To receive a copy of the safeguards that apply, write to contact@fromnine.com.
How we protect your data
FromNine runs an information security management system certified to ISO/IEC 27001. Only the people who need to see an enquiry in order to answer it can open it, and data travelling between your browser, our website and our mail systems is encrypted.
Your rights
You may ask us for access to your personal data, to rectify or erase it, or to restrict its processing. You may object to processing based on our legitimate interests, and where processing is based on steps towards a contract you have the right to data portability. Articles 15 to 21 of the GDPR set out these rights.
To exercise a right, write to contact@fromnine.com. We reply within one month. Where a request is complex, that period may be extended by two further months; if so, we will tell you and explain why. We may first ask you to confirm your identity.
We do not carry out automated decision-making or profiling that has legal or similarly significant effects on you.
Changes to this notice
This notice is updated whenever our processing changes. The version and the dates at the top of the page tell you which version you are reading. Significant changes are announced on this page.
Questions about this page?Contact us