GDPR & Your Data Rights

Last updated: April 2025

1. Our GDPR Commitment

DealDone.be, operated by DigitalStream (VAT: BE 0738.714.881), is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679) and the Belgian Data Protection Act of 30 July 2018.

As a Belgian-based operator, we act as the data controller for all personal data processed through dealdone.be.

2. Data We Process and Why

Category	Examples	Legal Basis
Account data	Name, email, phone, password	Contract
Listing data	Photos, descriptions, location	Contract
Transaction data	Payment history, plans	Contract + Legal obligation
Communication data	Messages between users	Contract + Legitimate interest
Marketing data	Email preferences	Consent
Usage data	IP address, device, pages visited	Legitimate interest

3. Your Rights Under GDPR

As an EU/EEA resident, you have the following rights:

Right of Access (Art. 15)

You can request a copy of all personal data we hold about you. We will provide this within 30 days in a commonly used electronic format.

Right to Rectification (Art. 16)

If your data is inaccurate or incomplete, you can update it yourself in your account settings or request a correction from us.

Right to Erasure / "Right to be Forgotten" (Art. 17)

You can request deletion of your personal data when it is no longer necessary for the purpose it was collected, or when you withdraw consent. Note: we may retain certain data where required by law (e.g. tax records for 7 years).

Right to Restrict Processing (Art. 18)

You can ask us to pause processing your data in certain circumstances — for example, while a dispute is being resolved.

Right to Data Portability (Art. 20)

You can request your data in a structured, machine-readable format (JSON or CSV) to transfer to another service.

Right to Object (Art. 21)

You can object to processing based on our legitimate interests, or object to direct marketing at any time. We will stop processing for that purpose immediately.

Right to Withdraw Consent

Where processing is based on your consent (e.g. marketing emails), you can withdraw it at any time without affecting the lawfulness of prior processing.

4. How to Submit a Request

To exercise any of your rights, send a request to: privacy@dealdone.be

Please include your full name and the email address associated with your account so we can verify your identity. We will respond within 30 calendar days. For complex requests, we may extend this by a further 2 months with notification.

Requests are free of charge unless they are manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse.

5. Data Retention Schedule

• Active accounts: retained while the account is active;
• Inactive accounts: deleted after 24 months of inactivity, with 30 days' notice;
• Messages: retained for 12 months after the conversation ends;
• Transaction records: 7 years (Belgian accounting obligation);
• Marketing consents: until consent is withdrawn;
• Server logs: 90 days maximum.

6. Automated Decision-Making

DealDone.be does not make decisions about you solely through automated means that produce legal or similarly significant effects. Listing moderation may use automated filters, but final decisions involving account suspensions are reviewed by a human moderator.

7. Data Breach Procedure

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Belgian Data Protection Authority within 72 hours of becoming aware of the breach, and notify affected users without undue delay if the breach is likely to result in a high risk.

8. Contact the Data Controller

DigitalStream
VAT: BE 0738.714.881
Belgium
Email: privacy@dealdone.be