Privacy Policy
The website www.sumzero.eu (hereafter: the “Website”) is an initiative of Sumzero, part of icapps NV (hereafter: “icapps”).
Contact information:
Name: icapps NV
Address: Hangar 26/27, Rijnkaai 100 B16, 2000 Antwerp, Belgium
Telephone: +32 3 259 04 70
Email: info@icapps.com / info@sumzero.eu
Company number (enterprise number): BE0819.575.764
Competent court: RPR Antwerp (Antwerp section)
Feel free to contact us should you have any privacy-related questions. We promise to reply as soon as possible!
1. Why this Privacy Statement?
Every person (hereafter the “User”) who visits or uses the Website discloses a certain amount of personal data. Personal data is any information that allows icapps to identify you as a natural person, directly or indirectly.
We process your personal data in accordance with applicable privacy legislation, in particular:
- The European Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation or "GDPR"); and
- The Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
This Privacy Statement informs you about how icapps handles your personal data. icapps reserves the right to modify this Privacy Policy at any time. Any substantial changes will be clearly communicated to the User. We advise you to consult this document regularly.
2. Who is responsible for the processing of personal data?
2.1 Data Controller
icapps NV is the Data Controller. This means that icapps determines, alone or jointly with others, the purposes and technical/organisational means for processing your personal data.
2.2 Data Processor(s)
icapps may rely on data processors. A processor is a natural or legal person who processes your personal data upon request and on behalf of icapps. Processors act solely on instructions from icapps and are contractually obliged to ensure data security and confidentiality.
3. On what legal grounds are my data processed?
In accordance with the GDPR, we process personal data based on the following legal grounds:
- Performance of a contract: The processing is necessary for the execution of an agreement with you or to take pre-contractual steps at your request;
- Legal obligation: The processing is necessary to comply with legal or regulatory obligations incumbent upon icapps;
- Legitimate interest: The processing is necessary for the legitimate business interests of icapps (e.g., ensuring security, preventing fraud, improving services), provided your rights do not override these interests;
- Consent: We process certain data based on your explicit consent (e.g., for sending direct marketing newsletters or placing non-essential cookies). You have the right to withdraw your consent at any time.
4. Which personal data are being processed?
icapps commits to collecting and processing only personal data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed. Depending on your interaction with the Website, this may include:
- First name, last name, and contact details;
- Email address;
- Telephone number;
- Date of birth, gender, nationality, and profession (if provided during registration);
- Technical and connection data (e.g., IP address, approximate geographical location, browser type, device information, pages visited).
This data is collected when you fill out forms on our Website, register, or use our services.
We also use cookies. For detailed information regarding the cookies we use and how to manage your cookie preferences, please consult our Cookie Statement.
5. For which purposes are my personal data being used?
icapps collects and processes your personal data for the following specific purposes:
- Providing access to the Website, your user account/profile, and managing our services;
- Managing the contractual and client relationship;
- Providing customer support and following up on enquiries or complaints;
- Sending newsletters and promotional offers (direct marketing), provided you have given your explicit consent;
- Preventing and detecting fraud, security incidents, or unlawful behavior;
- Improving and optimizing the Website experience through general analytics and technical monitoring.
Data collected for statistical and analytics purposes (such as IP address, visit duration, pages consulted) is processed to optimize user experience and is done in accordance with applicable cookie consent rules.
6. Who receives your personal data and international transfers?
Your personal data will not be sold or rented to third parties. We only share data with third parties if necessary for fulfilling the processing purposes (e.g., service providers, IT hosting, marketing tools).
We may transfer certain personal data to service providers located outside the European Economic Area (EEA), such as Google, Meta, LinkedIn, X/Twitter, Hotjar, or Mailchimp.
Where data is transferred to countries outside the EEA (such as the United States), icapps ensures that appropriate safeguards are in place in accordance with Chapter V of the GDPR—for example, by transferring data under the EU-U.S. Data Privacy Framework (DPF) or by implementing Standard Contractual Clauses (SCCs) approved by the European Commission.
7. How long do we store your personal data?
Your personal data is stored only as long as necessary to achieve the intended processing purposes, or to comply with statutory legal retention periods (e.g., accounting or tax obligations). Once the data is no longer required, it will be securely erased or anonymized.
8. What are your rights?
Under the GDPR and Belgian law, you have the following rights regarding your personal data:
8.1 Right of access (Art. 15 GDPR)
You have the right to request confirmation as to whether or not your personal data is being processed, and to obtain access to that data along with information on the processing.
8.2 Right to rectification (Art. 16 GDPR)
You have the right to request the immediate correction of inaccurate personal data or completion of incomplete data.
8.3 Right to erasure / Right to be forgotten (Art. 17 GDPR)
You have the right to request the deletion of your personal data where applicable (e.g., data no longer necessary, withdrawal of consent, unlawful processing).
8.4 Right to restriction of processing (Art. 18 GDPR)
You have the right to obtain restriction of processing in specific cases, such as when contesting the accuracy of data or pending a verification request.
8.5 Right to object (Art. 21 GDPR)
You have the right to object at any time to the processing of your personal data based on legitimate interests. In addition, you have an absolute right to object to the processing of your data for direct marketing purposes at any time, free of charge.
8.6 Right to data portability (Art. 20 GDPR)
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, or to request its transfer to another controller, where technically feasible.
8.7 Right to withdraw consent (Art. 7 GDPR)
Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
9. How to exercise your rights?
To exercise your rights, please submit a written request clearly stating which right you wish to exercise:
- By email to: info@sumzero.eu or info@icapps.com
- By post to: icapps NV, Hangar 26/27, Rijnkaai 100 B16, 2000 Antwerp, Belgium
To ensure security and prevent unauthorized disclosure, icapps may request reasonable proof of identity if there is reasonable doubt regarding your identity.
We will respond to your request without undue delay and at the latest within one (1) month of receipt.
10. Right to lodge a complaint with the Data Protection Authority
If you feel that the processing of your personal data infringes applicable legislation, you have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données):
Gegevensbeschermingsautoriteit (GBA)
Drukpersstraat 35, 1000 Brussel
Tel: +32 (0)2 274 48 00
Email: contact@apd-gba.be
Website: https://www.gegevensbeschermingsautoriteit.be