GDPR Compliance

LAAP Group BV, incorporated in Belgium and registered under enterprise number BE0891763461, is subject to the General Data Protection Regulation (GDPR) as a controller of personal data collected through its website and associated business activities. We take this responsibility seriously and have implemented policies, processes, and technical measures to ensure that personal data is handled lawfully, fairly, and transparently in accordance with Articles 5 and 6 GDPR and applicable Belgian implementing legislation.

Data controller

LAAP Group BV (BE0891763461), with its registered office in Mol, Antwerp Province, Belgium, acts as data controller for all personal data collected via this website and through direct business communications. As controller, we determine the purposes and means of processing. We do not currently appoint a formal Data Protection Officer, as we do not meet the thresholds in Article 37 GDPR that would make appointment mandatory. For all data protection matters, you may contact us at hello@laapgroup.com.

Your rights under the GDPR

• Right of access (Article 15): You may request confirmation that we process personal data about you and, if so, obtain a copy of that data together with information on the purposes of processing, categories of data, recipients, retention periods, and your rights.
• Right to rectification (Article 16): You may request correction of inaccurate personal data we hold about you and completion of incomplete data, without undue delay.
• Right to erasure (Article 17): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where consent is withdrawn, or where processing is unlawful. This right is subject to legal retention obligations.
• Right to restriction of processing (Article 18): You may request that we restrict processing of your data where you contest its accuracy, where processing is unlawful but you oppose erasure, where we no longer need the data but you require it for legal claims, or where you have objected to processing pending verification.
• Right to data portability (Article 20): Where processing is based on your consent or a contract and is carried out by automated means, you may request your personal data in a structured, commonly used, machine-readable format and, where technically feasible, have it transmitted directly to another controller.
• Right to object (Article 21): You may object at any time to processing of your personal data based on legitimate interest or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent (Article 7(3)): Where we process your data based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal can be made by contacting us or, for cookie consent, via the Cookie Preferences panel.

To exercise any of the above rights, submit a written request to hello@laapgroup.com, clearly stating the right you wish to exercise and providing sufficient information to verify your identity. We will respond within 30 calendar days. If a request is complex or numerous, we may extend this period by a further two months and will notify you accordingly. If you believe your rights have been infringed, you have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit) at gegevensbeschermingsautoriteit.be, or with the supervisory authority in the EU member state of your habitual residence.

Legal basis and purposes of processing

We process personal data only where a valid legal basis under Article 6 GDPR exists. Consent (Article 6(1)(a)): data submitted via our contact form, and optional cookies, are processed on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time. Contract (Article 6(1)(b)): where your enquiry relates to a prospective or existing business relationship, we process necessary data to take steps at your request prior to entering a contract. Legitimate interest (Article 6(1)(f)): we process limited technical data for the security, availability, and performance of the website, and to detect and respond to potential threats. We have conducted a Legitimate Interests Assessment and concluded that our interests do not override the rights and freedoms of data subjects for these limited purposes. We do not process special categories of personal data (Article 9 GDPR) and do not carry out automated decision-making with legal or similarly significant effects.

Contact for data protection matters

For any enquiry relating to your personal data or our GDPR obligations, contact us at hello@laapgroup.com, marking your subject line 'Data Protection Enquiry'. LAAP Group BV, Mol, Antwerp Province, Belgium. We aim to acknowledge all data protection correspondence within five business days and to provide a substantive response within the statutory 30-day period.