intuo cares about your privacy and is committed to processing your personal information in accordance with Belgian law.
For general legal questions please email email@example.com
For questions regarding privacy and data protection please email firstname.lastname@example.org
For general questions around Intuo's offerings and services, including technical questions on how our services work, please email email@example.com
The European Union’s General Data Protection Regulation (GDPR) is an unprecedented privacy regulation in terms of its breadth, depth, and impact. The GDPR will take effect on May 25, 2018, and we’re already compliant. In addition to being compliant, we've conducted a thorough Data Protection Impact Assessment (DPIA) of all our external suppliers and vendors. The GDPR extends the reach of the European Union’s data protection laws and establishes many new requirements for organizations that fall under its scope.
intuo have already undergone the necessary steps for an ISO27001 certification and is an ISO/IEC 27001:2013 certified organisation. Our public ISO27001 certificate can be found here. Our privacy team is well ahead of this deadline to meet and exceed these new requirements.
Overall, we aim for privacy by default: if data collection is not integral to the way our product works, then we won’t collect it. This approach has felt very much in line with the spirit of GDPR, and we’re fortunate that a lot of these data collection practices have been in place at intuo for some time. As such, you may see few banners or forms requesting consent for us to collect personally-identifiable information for tracking or other purposes. We don’t deem this information necessary to provide intuo’s service to you, and we choose not to engage in activities and strategies that make this data relevant.
Here is the current status of our GDPR progress:
We are auditing all areas of intuo to determine what personal data we collect and for what purpose. In a case where collecting personal data is not essential, we are removing that collection process.
We’re working with a legal consultant to ensure that our policy contains the proper language, that it’s easy to understand, and that it communicates clearly any instances of personal data collection.
We have added a cookie notice to all marketing pages and blogs in order to comply with the E-Privacy Directive. We do not collect personally-identifiable information with our cookies, but we do want to acknowledge the use of cookie technology on our website.
A user has the right to request that we delete all of their personal data. Users who wish to inquire about the right to be forgotten will be able to reach out to us at any time.
Get in touch
A user can request access to a copy of the personal data that we have collected. Users who wish to request portability can reach out to us at any time.
Get in touch
We are creating a legal agreement that users and external parties can receive from us, promising the protection of all personally identifiable information that we collect and store.
Within Section 9 of our DPA, we commit to displaying a list of all current sub-processors in use by intuo.
Here is that list:
Last updated: May 24th, 2018
Last updated: June 22, 2018