Privacy policy

01. Data controller

The data controller is neeoo NV, a public limited company under Belgian law.

• Registered office, Alfons Gossetlaan 40, 1702 Groot-Bijgaarden, Belgium
• Company and VAT number, BE 1042.011.315
• Contact for any privacy-related question, info@neeoo.com

02. Data we process

We mainly process business data. Depending on your relationship with neeoo, this may include the following categories:

• Professional identification and contact data (first and last name, job title, company, business email address and phone number, LinkedIn profile)
• Data relating to the business relationship (correspondence, meetings, proposals, contracts, invoicing)
• Engagement data (information on R&D and innovation projects, data on the employees involved such as identity, job title, degree, time spent on projects and the salary elements needed to calculate tax incentives)
• Browsing data (IP address, browser type, pages visited, cookies)
• Application data (CV, cover letter, contact details) if you apply for a job with us

We do not knowingly process special categories of data within the meaning of Article 9 GDPR.

03. Source of the data

We obtain your data directly from you (form, email, phone, meetings, platform). For B2B prospecting, we may also use professional or public sources such as LinkedIn Sales Navigator, Lusha, your company’s website or the Crossroads Bank for Enterprises. Data on our clients’ employees is provided to us by our clients themselves.

04. Purposes and legal bases

Where we rely on our legitimate interest, we make sure it does not override your rights and freedoms. Our prospecting only targets people in their professional capacity and in connection with their role.

05. Data processed on behalf of our clients

In the course of our engagements, our clients entrust us with data about their employees (for example timesheets, degrees, notes or documents relating to R&D projects). For this data, neeoo in principle acts as a processor within the meaning of Article 28 GDPR. The client remains the controller and informs its employees. The terms are set out in a data processing agreement concluded with each client.

06. Recipients

We never sell or rent your data. Where necessary, it may be shared with the following recipients:

• our IT service providers, acting on our instructions (Odoo for sales management and invoicing, Microsoft 365 for email and document storage, LinkedIn Sales Navigator and Lusha for prospecting)
• Google Ireland Limited (Google Analytics 4, Google Tag Manager, Google Maps), only for the cookie categories you have accepted
• the authorities and bodies with which we file or defend our clients’ applications (FPS Finance, BELSPO, regional authorities) and the relevant social secretariats
• our professional advisers (accountant, lawyers, notary) and, where applicable, insurers, with the client’s agreement
• public authorities where required by law

07. Data location

Your data is processed and hosted within the European Union. Should a service provider exceptionally access it from a country outside the European Economic Area, such a transfer would only take place to a country covered by an adequacy decision of the European Commission or on the basis of appropriate safeguards, such as standard contractual clauses. When you accept Google cookies, some data may be processed by Google LLC in the United States; this transfer relies on the EU-U.S. Data Privacy Framework, under which Google LLC is certified, and on standard contractual clauses.

08. Retention period

We keep your data for as long as necessary for the purposes above.

• Prospecting data, no longer than 3 years after the last contact, or until you object
• Client and engagement data, for the duration of the contract and then for the statutory accounting and tax retention periods (up to 10 years), as well as for as long as the incentives obtained may still be audited
• Unsuccessful applications, up to 6 months after the end of the recruitment process, or 2 years with your consent
• Cookies, no longer than 13 months

09. Security

We take appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure. These include access management, strong authentication, encrypted communications and restricting access to those who need it.

10. Your rights

You have the following rights:

• right of access to your data
• right to rectification
• right to erasure
• right to restriction of processing
• right to data portability
• right to object, in particular to direct marketing, without having to give reasons
• right to withdraw your consent at any time, without retroactive effect

To exercise your rights, write to us at info@neeoo.com. We respond within one month. We may ask for proof of identity where necessary.

You may also lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels (contact@apd-gba.be, www.dataprotectionauthority.be).

11. Cookies

We use cookies and similar technologies, such as the browser’s local storage. Strictly necessary cookies are always on. All others are only placed with your consent, per category, via the cookie banner: until you accept, no Google tool is loaded. You can change or withdraw your consent at any time via “Cookie settings” at the bottom of every page; the Google cookies concerned are then deleted.

• Strictly necessary: remembering your cookie choices.
• Statistics: Google Analytics 4, loaded through Google Tag Manager, to measure the site’s audience in aggregate (pages viewed, visit duration, traffic sources). Google Analytics 4 does not store full IP addresses.
• Marketing: measuring the effect of our campaigns, for example Google Ads or LinkedIn. No marketing tool is active yet; this policy will be updated before any is enabled.
• External content: the Google Maps map on the Contact page. When it is shown, Google may set its own cookies.

Google Tag Manager itself sets no cookies: it only loads the tools above, after your consent. Your consent status is passed to Google’s tools through Google Consent Mode.

To find out how Google processes your data: policies.google.com/privacy.

12. Changes

We may update this policy to reflect changes in our activities or in the law. The current version is always available on neeoo.com. In the event of any discrepancy between the language versions, the French version prevails.