Privacy Policy
At EDSR, we're committed to protecting and respecting your privacy. Last updated: 30 July 2026.
This Policy explains when and why we collect personal information about people, how we use it, the conditions under which we may disclose it to others, and how we keep it secure. We may change this Policy from time to time, so please check this page occasionally to ensure that you're happy with any changes.
We are not required to have a data protection officer, so any enquiries about our use of your personal data should be sent by e-mail to compliance@edsr.eu or by writing to Avenue Huart Hamoir 71, 1030 Brussels, Belgium.
Who we are
We're European Digital Services Representative (EDSR), a limited liability company incorporated under the laws of Belgium, with registered office at 1030 Brussels, Avenue Huart Hamoir 71, registered with the Register of Legal Entities of Brussels under number 0444.396.095. Our website is https://edsr.eu. EDSR is the controller for the personal data that we process, unless otherwise stated.
The type of information that we collect
The personal information we may collect from you includes your first name, last name, job title, company name, e-mail address, postal address, telephone number, country, device-specific information and log information (as described below), and other personal information you communicate to us or that is otherwise collected as described below ("Personal Data").
How we collect information from you
Information that you provide to us. We collect Personal Data when you send us a request or an inquiry, register as a client, apply for a job, subscribe to our newsletter, fill out a form or survey, submit an online meeting request, download information we publish, request customer support, use our services, or otherwise interact with us.
Information that we process on behalf of our clients. Our clients may provide us with Personal Data. In such cases we act as a data processor or sub-processor and only process such data on our clients' instructions, as defined in the Mandate Agreement. The client remains responsible for compliance with applicable data privacy laws.
Information that we collect from other sources. We may obtain information from third parties — including social media platforms, data enrichment providers, lead generation providers and publicly available sources — where we've checked that these third parties either have your consent or are otherwise legally permitted to disclose your data.
Information that we automatically collect. This includes website usage data (browser type, access times, pages viewed, IP address, general location), device information (hardware model, operating system, device identifiers), and information collected via cookies and similar technologies.
Why we collect information from you
We collect information to: provide, operate and secure our website; handle inquiries and requests; process registration forms; schedule meetings; negotiate and execute contracts; carry out our obligations under client contracts; perform our role as Legal Representative under Article 17 of the TCOR, Article 13 of the DSA and the e-Evidence Package; perform administrative duties; seek your feedback; compile aggregated usage statistics; carry out research and development; notify you of service changes; send our newsletter and marketing communications; and pursue other legitimate and lawful business purposes.
Legal basis for processing
We primarily rely on four legal bases: (1) your consent, where given; (2) necessity to provide our services under a Mandate Agreement with our clients; (3) our legitimate interests, such as direct marketing and analytics, where not overridden by your rights; and (4) compliance with a legal obligation.
How long we keep your information
We review our retention periods regularly. We hold Personal Data only for as long as necessary for the relevant activity, or as set out in a relevant contract, unless we are legally required to retain it longer.
Who has access to your information
We do not sell or rent your Personal Data, nor share it for direct marketing by third parties. We may share it: with your consent or instructions; with consultants, subcontractors and service providers assisting our operations; or to comply with a legal obligation, court order, or to protect the rights, property or safety of our clients. Third-party processors are contractually bound to keep your data secure and retain it no longer than necessary.
Your rights in relation to your Personal Data
- Right to withdraw your consent at any time
- Right of access to the data we hold about you
- Right to rectification of inaccurate or incomplete data
- Right of erasure in certain circumstances
- Right to restrict processing in certain circumstances
- Right to object to processing based on legitimate interests
- Right to data portability
How you can access and update your information
If your details change or any information we hold is inaccurate, please email compliance@edsr.eu or write to Avenue Huart Hamoir 71, 1030 Brussels, Belgium.
Security
We take steps to ensure your information is treated securely. Non-sensitive details are transmitted over the internet, which can never be guaranteed 100% secure; we make our best effort to protect your data once received.
Transfers outside the European Economic Area
As part of our services, your information may be transferred to countries outside the EEA, which may not have equivalent data protection laws. Where this occurs, we take steps to ensure appropriate safeguards are in place, consistent with this Policy.
Children
EDSR's services are not directed at children under the age of 16, and we do not knowingly collect personal data from them.
Questions or complaints
Please email compliance@edsr.eu or write to Avenue Huart Hamoir 71, 1030 Brussels, Belgium. You can also file a complaint with the Belgian Data Protection Authority: www.dataprotectionauthority.be.
