Privacy policy

Last updated: 26 May 2026 v2.2

Who are we?

Ceusters N.V. is active as a landlord, real estate agent, property manager, asset manager and syndic. In these capacities, we process personal data of tenants, buyers, sellers, co-owners, clients, suppliers, applicants and visitors to our website.

In this privacy statement, we explain in clear language which data we process about you, why we do so, how long we keep it and which rights you can exercise. We do this in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Belgian Act of 30 July 2018.

Who is responsible for your data?

The controller is:

Legal name	Ceusters N.V.
Company number	BE 0404 697 064
Registered office	Uitbreidingstraat 72 bus 2, 2600 Antwerp, Belgium
BIV/IPI recognition(s)	202.258
Telephone	+32 3 231 88 76
Email	compliance@ceusters.be
Website	https://ceusters.be

Contact for privacy questions

Ceusters N.V. has not appointed a legally required Data Protection Officer (DPO). For all questions or to exercise your rights, you can contact our internal privacy contact point:

Contact person	Elke Franckx
Email	compliance@ceusters.be
Postal address	Uitbreidingstraat 72 bus 2, 2600 Antwerp, Belgium

Which data do we process?

Depending on your relationship with us, we collect different types of data. We always limit this to what is necessary for the intended purpose.

Identification and contact details

Surname, first name, date and place of birth, nationality, national register number (only where legally permitted), address, telephone number, email address, copy of your identity card (where legally required, for example anti-money laundering obligations).

Financial and professional data

Profession, employer, income data, bank account number, payment data, data relating to your solvency (within the legal limits), data of guarantor(s).

Real estate related data

Data relating to the property (title deed, cadastral data, energy performance certificate, inventory of fixtures, technical reports), use of the property and rental history.

Data in the context of co-ownership

Share in the co-ownership, participation and voting behaviour at the general meeting, individual statements, communication with the co-ownership council.

Communication and usage data

Correspondence, emails, data from contact forms, IP address, cookies and log files when using our website.

Special categories of data

In principle, we do not process special categories of personal data, such as health data. If this is exceptionally necessary, it will be done on the basis of your explicit consent or another legal ground under Article 9 GDPR.

When and why do we process your data?

Below we explain, for each relationship, what we do with your data and on which legal basis this is done. The legal basis determines why we may process your data under Article 6 GDPR.

If you are a tenant or prospective tenant

We process your data, including a proportionate assessment of your solvency, in order to prepare and perform the lease agreement and to properly manage the tenancy relationship (invoicing, indexation, inventory of fixtures, follow-up of rent arrears, dispute management).

Why may we do this? Preparing the agreement is based on pre-contractual measures taken at your request (Art. 6.1.b GDPR). Managing and performing the lease agreement is based on the performance of that agreement (Art. 6.1.b GDPR). For certain legal obligations, such as tax or social obligations, we rely on a legal obligation (Art. 6.1.c GDPR).

If you are a seller, buyer or interested party (real estate brokerage)

We process your data to carry out the sales mandate or purchase mediation, to organise viewings, to prepare the sales agreement and to communicate with the notary. If you are an interested party or prospective buyer, we keep your data in order to inform you about a suitable offer.

Why may we do this? The performance of a mandate or brokerage agreement is based on the performance of that agreement (Art. 6.1.b GDPR). The follow-up of interested parties and prospective buyers is carried out solely on the basis of your consent, which you may withdraw at any time (Art. 6.1.a GDPR). As a real estate agent, we are also subject to the Act of 18 September 2017 on the prevention of money laundering and terrorist financing: in this context, we must verify your identity, investigate the origin of funds and report certain transactions to the Financial Intelligence Processing Unit (CFI). These processing activities are based on a legal obligation (Art. 6.1.c GDPR).

If you are a co-owner (syndic)

We process your data to manage the common parts of your building: organisation of general meetings, preparation and follow-up of individual and common statements, communication with the co-ownership council, and management of suppliers and interventions.

Why may we do this? The role of syndic is largely regulated by the Belgian Civil Code (Article 3.93 et seq., formerly Article 577-8). Our processing activities are therefore based both on a legal obligation (Art. 6.1.c GDPR) and on the performance of the syndic mandate (Art. 6.1.b GDPR).

If you are an owner or client (property/asset management)

We process your data to carry out the management assignment: financial management, reporting, technical follow-up, monitoring of investments and rental income, and communication with tenants and third parties on your behalf.

Why may we do this? Mainly on the basis of the performance of the management agreement (Art. 6.1.b GDPR). For legal obligations, such as accounting and tax obligations, we rely on a legal obligation (Art. 6.1.c GDPR).

If you are a supplier or contractor

We process your contact and invoicing data to place orders, follow up interventions and process invoices correctly.

Why may we do this? On the basis of the performance of our agreement with you (Art. 6.1.b GDPR) and, for accounting purposes, a legal obligation (Art. 6.1.c GDPR).

If you apply for a job

We process your application data to assess your candidacy and, if you consent, to contact you for a future vacancy.

Why may we do this? The assessment of your candidacy is based on pre-contractual measures taken at your request (Art. 6.1.b GDPR). Keeping your application after a rejection is done only on the basis of your consent (Art. 6.1.a GDPR), which you may withdraw at any time.

If you visit our website

We process technical data (IP address, browser type, page visits) to ensure the operation and security of the website.

Why may we do this? For the operation and security of the website, we rely on our legitimate interest (Art. 6.1.f GDPR). For non-strictly necessary cookies, such as analytics or marketing cookies, we request your prior consent (Art. 6.1.a GDPR). More details can be found in our cookie policy: https://www.ceusters.be/en/cookie-statement.

How do we obtain your data?

• Directly from you, for example through a contact form, a viewing, the completion of an application form or the signing of an agreement.
• From third parties such as notaries, real estate portals, credit insurers, syndic platforms or a previous landlord/owner, always within the legal framework.
• From public sources, such as the Land Registry or the Crossroads Bank for Enterprises.
• Automatically when you visit our website (see the cookie statement).

With whom do we share your data?

We share your data only when this is necessary for our services, a legal obligation or with your consent. Possible recipients are:

• Our IT and software suppliers (hosting, real estate and syndic software, email, accounting, archiving), always under a data processing agreement in accordance with Article 28 GDPR.
• Notaries in the context of a real estate transaction.
• Accountants, statutory auditors and lawyers for advice, accounting or dispute management.
• Insurers for, among other things, fire, liability and rental guarantee insurance.
• Authorities and supervisory bodies when we are legally required to do so (Federal Public Service Finance, BIV/IPI, CFI, judicial authorities, etc.).
• Co-owners and co-ownership councils in the context of the syndic mandate and within the limits of the law.
• Owners/clients in the context of property/asset management or a brokerage assignment.
• Suppliers and contractors in the context of technical management, maintenance, repairs, inspections, works or other operational assignments.

Transfer outside the European Economic Area

We aim to process your personal data within the European Economic Area (EEA). If a transfer outside the EEA is nevertheless necessary, this will be done on the basis of an adequacy decision by the European Commission or the Standard Contractual Clauses (SCCs), supplemented with additional technical and organisational measures where necessary.

How long do we keep your data?

We do not keep your data longer than necessary for the purposes for which we process it or as legally required. The periods below are indicative; deviations may occur on the basis of a specific legal obligation or ongoing dispute proceedings.

How do we secure your data?

Ceusters N.V. implements appropriate technical and organisational measures to protect your data against unauthorised access, loss or unlawful processing. In doing so, we rely on the principles of the ISO/IEC 27001 standard and are building an Information Security Management System (ISMS).

Specifically, we focus on:

• Access management based on the need-to-know principle and strong authentication.
• Encryption of data in transit and, where relevant, at rest.
• Logging and monitoring of access to critical systems.
• Regular backups and tested recovery procedures.
• Awareness and training programmes for employees.
• Data processing agreements with all external service providers that process personal data.
• A procedure for detecting, investigating and, where required, reporting personal data breaches to the Data Protection Authority within 72 hours.

What rights do you have?

Under the GDPR, you have the following rights in relation to your personal data:

• Right of access (Art. 15 GDPR): you can request which data we process about you.
• Right to rectification (Art. 16 GDPR): you can have inaccurate or incomplete data corrected.
• Right to erasure (Art. 17 GDPR): you can ask us to erase your data, subject to any legal retention obligation.
• Right to restriction (Art. 18 GDPR): you can ask us to temporarily restrict the processing.
• Right to data portability (Art. 20 GDPR): for data you have provided yourself on the basis of consent or an agreement.
• Right to object (Art. 21 GDPR): to processing based on a legitimate interest or for direct marketing.
• Right to withdraw consent (Art. 7 GDPR): when the processing is based on your consent.
• Right not to be subject to automated decision-making (Art. 22 GDPR): Ceusters N.V. does not in principle use automated decision-making with significant consequences for you.

You can exercise these rights by sending a written request to our privacy contact point (see point 2.1), accompanied by a copy of your identity card or another document by which we can reasonably verify your identity. We will respond to your request within one month, which may be extended by two months for complex requests.

Cookies

Our website uses cookies and similar technologies. For more information, please refer to our cookie policy: https://www.ceusters.be/en/cookie-statement.

Changes to this privacy statement

Ceusters N.V. may amend this privacy statement from time to time, for example due to changes in legislation, our services or our internal organisation. The most recent version is always available on our website. We recommend that you consult this page regularly.

Complaints

We make every effort to process your personal data correctly. If you nevertheless believe that we are not acting in accordance with privacy legislation, please contact us first. If we cannot resolve the matter together, you always have the right to lodge a complaint with the competent supervisory authority:

Data Protection Authority (DPA)	Rue de la Presse 35, 1000 Brussels, Belgium
Telephone	+32 (0)2 274 48 00
Email	contact@apd-gba.be
Website	https://www.dataprotectionauthority.be