Privacy Policy
Last updated: July 2026
1. Who we are (data controller)
Aydan Consulting is a trading name of NextdoorSEC BV, the controller responsible for the personal data processed through this website. We are committed to processing your data lawfully, fairly and transparently in accordance with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and the Belgian Law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
NextdoorSEC BV
Aydan Consulting (trading name)
Brusselstraat 38
2018 Antwerpen
Belgium
KBO/BCE & VAT: BE 0798.791.337
Email: hello@aydanconsulting.com
Phone: +32 33 320 029
2. What data we collect
Depending on how you interact with us, we may process:
- Identity & contact data: name, email address, phone number and company details you provide when you contact us by email, phone, WhatsApp or by booking a meeting.
- Content of your communications: the messages, requests and quotes you exchange with us.
- Client & billing data: where you become a client — contract, project and invoicing details.
- Technical & usage data: with your consent, aggregated and privacy-friendly statistics (page views, referrer, approximate country, device type) collected via Vercel Web Analytics. This service is cookieless and does not build an individual profile of you.
- Server logs: your IP address and basic request metadata are processed transiently by our hosting provider to deliver the site securely and prevent abuse.
We do not knowingly collect data from children, and we do not carry out automated decision-making or profiling that produces legal effects concerning you.
3. Purposes & legal bases (Art. 6 GDPR)
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Responding to your enquiries and preparing a quote | Steps taken at your request prior to entering a contract — Art. 6(1)(b); and our legitimate interest in answering you — Art. 6(1)(f) |
| Providing our services and managing the client relationship | Performance of a contract — Art. 6(1)(b) |
| Invoicing, accounting and meeting statutory record-keeping obligations | Legal obligation — Art. 6(1)(c) |
| Operating, securing and maintaining the website | Legitimate interest in a secure, functioning website — Art. 6(1)(f) |
| Privacy-friendly audience measurement (analytics) | Your consent — Art. 6(1)(a) |
| Sending occasional service updates to existing clients | Legitimate interest — Art. 6(1)(f); or consent where required — Art. 6(1)(a) |
Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal. Where we rely on legitimate interest, you may object at any time (see your rights below).
4. Who we share data with (processors & third parties)
We do not sell your personal data. We share it only with service providers who process it on our behalf under a data-processing agreement, and only as far as necessary:
| Recipient | Role / purpose | Location | Safeguard |
|---|---|---|---|
| Vercel Inc. | Website hosting, content delivery, security and privacy-friendly analytics (Vercel Web Analytics) | EU edge network; parent company in the USA | EU Standard Contractual Clauses and EU–US Data Privacy Framework |
| Calendly LLC | Scheduling, if you book a meeting via our booking link | USA | EU Standard Contractual Clauses / EU–US Data Privacy Framework |
| Meta Platforms Ireland Ltd (WhatsApp) | Only if you choose to contact us via the WhatsApp link | Ireland (EU); infrastructure partly in the USA | EU Standard Contractual Clauses |
| Our email / inbox provider | Receiving and storing the emails you send us | EU/EEA (to be confirmed by the controller) | Data-processing agreement; SCCs if outside the EEA |
We may also disclose data to our accountant, professional advisers, or to public authorities where we are legally required to do so.
5. International transfers
Your data is primarily stored and processed within the European Economic Area (EEA). Where a processor (such as Vercel or Calendly) transfers data to a country outside the EEA — in practice the United States — that transfer is protected by appropriate safeguards, namely the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, certification under the EU–US Data Privacy Framework. You may request a copy of these safeguards from us.
6. How long we keep your data (retention)
We keep personal data only as long as necessary for the purposes above. Indicative periods (to be confirmed):
- Enquiries / quotes that do not lead to a contract: up to 2 years after our last contact.
- Client contract & project files: for the duration of the engagement and up to 10 years afterwards (statutory limitation periods).
- Invoices & accounting records: 7 years, as required by Belgian tax law.
- Analytics: aggregated statistics only, retained by Vercel for a limited period; no individual profile is stored.
- Server logs: short-term only, for security and troubleshooting.
7. Your rights
Under the GDPR you have the right to:
- Access your personal data and obtain a copy;
- Rectify inaccurate or incomplete data;
- Erase your data (the “right to be forgotten”);
- Restrict processing in certain circumstances;
- Data portability — receive your data in a structured, machine-readable format;
- Object to processing based on our legitimate interests, including direct marketing;
- Withdraw your consent at any time, where processing is based on consent (e.g. analytics — via “Cookie preferences” in the footer).
To exercise any of these rights, contact us at hello@aydanconsulting.com. We will respond within one month. You will not have to pay a fee unless your request is manifestly unfounded or excessive.
8. Complaints — supervisory authority
If you believe we have not handled your data properly, we would like the chance to resolve it — please contact us first. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données):
Gegevensbeschermingsautoriteit (GBA / APD)
Drukpersstraat 35 / Rue de la Presse 35, 1000 Brussels, Belgium
Tel: +32 (0)2 274 48 00 · contact@apd-gba.be
www.gegevensbeschermingsautoriteit.be
9. Cookies
This website loads no non-essential cookies or scripts until you give consent. For the full inventory and how to change or withdraw your choice, see our Cookie Policy.
10. Changes to this policy
We may update this Privacy Policy from time to time. The current version is always the one published on this page; we will update the “last updated” date to reflect any changes.