Privacy policy

M.S. Management Services BV, trading as M.S. Management & Outstaffing Services acts as the data controller for the personal data processed within the scope of this policy and the separate candidate privacy notice.

• Registered office: Valkeniersdreef 1A, 3140 Keerbergen, Belgium
• Company number 0881.392.478
• Contact us for any question about this policy or about the processing of the personal data we collect and use: info@ms-management.be.

This policy covers personal data we process about visitors to our website, contacts at our clients and prospective clients, suppliers, partners, and anyone who contacts us.

The processing of personal data of candidates is covered in a separate candidate privacy notice, as we process their personal data for specific purposes.

For the same reason, the processing of personal data of our employees is covered in a separate employee privacy notice.

We do not use the website to collect special categories of personal data, and we ask you not to send us any through the contact addresses on it.

As regards cookie-related data, please also refer to our cookie policy.

Mostly from you directly, when you contact us or when we work together. We also use publicly available professional sources such as public (company) websites and LinkedIn to identify and reach the right contact in an organisation.

We do not sell any personal data. We share the personal data we collect and use only where it is needed, and only with third parties with whom we have a contract and who are bound to protect it, or with public authorities:

• IT and communication providers that host our website and provide our email, file storage and office software.
• Lovable Labs Incorporated, which hosts and delivers this website; the technical information it records and its role for that data are described in our cookie policy.
• Our accountant and tax advisers for bookkeeping, invoicing and statutory filings.
• LinkedIn and our video platform, where the platform processes data in its own right, for example when you interact with our company page or a job advertisement.
• Regulatory authorities, courts and public authorities, where required by law or regulatory obligations, or in the context of litigation, court orders, or legal claims.

Where a third party processes personal data on our behalf, we ensure that appropriate contractual safeguards are in place, including, where applicable, data processing agreements meeting the requirements of applicable data protection law. In any event, all personal data disclosures are limited to what is necessary for the relevant purposes.

This website is hosted and delivered by Lovable Labs Incorporated, a company established in the United States. Operating that infrastructure transfers personal data outside the European Economic Area to the United States. That transfer is covered by the European Commission's Standard Contractual Clauses. Lovable's own privacy terms are available at lovable.dev.

Where any other service provider processes personal data outside the European Economic Area, we ensure that an adequate level of protection is provided through an adequacy decision adopted by the European Commission or through appropriate safeguards such as the European Commission's Standard Contractual Clauses and any supplementary measures required by law.

• Website and technical data: retained by our website host, Lovable Labs Incorporated, under the retention terms set out in its own privacy policy at lovable.dev. We do not keep a separate copy of this data.
• Client and supplier-related personal data and records: retained for the duration of the contractual relationship and, thereafter, for up to 10 years following the end of the contract, where necessary to comply with legal, accounting, tax, audit and record-keeping obligations, and to establish, exercise or defend legal claims, resolve disputes or enforce our agreements.
• Correspondence: retained for as long as necessary to handle the relevant request, enquiry or business matter and, where required, for a longer period to comply with legal obligations or to establish, exercise or defend legal claims.

Under applicable data protection and privacy law you can ask us to:

• Access: confirm whether we process your data and give you a copy of it.
• Rectification: correct data that is inaccurate or incomplete.
• Erasure: delete your data where we no longer have a reason to keep it.
• Restriction: pause our use of your data while a dispute about it is resolved.
• Portability: receive data you gave us in a structured, commonly used format.
• Objection: object to processing we base on legitimate interest, including direct marketing.

Where we rely on your consent, you can withdraw it at any time. That does not affect any processing we did before your withdrawal.

Where we process your personal data based on our legitimate interests, you have the right to obtain information about those interests upon request.

You also have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you, subject to the exceptions provided by law.

Exercising your rights is free of charge unless requests are manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse the request as permitted by applicable data protection law.

Who to contact to exercise your rights

By email to info@ms-management.be. We will answer within one month. We may ask you to confirm your identity first.

If you believe we have handled your personal data incorrectly, please tell us first so we can put it right.

You also have the right to lodge a complaint with the Belgian Data Protection Authority. This right is without prejudice to any other administrative or judicial remedy available to you.

You can contact the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35 / Rue de la Presse 35, 1000 Brussels. Email: contact@apd-gba.be. Website: www.dataprotectionauthority.be.

We limit access to personal data to the people who need it for their work, we use the security controls built into our professional software, and we keep our devices and accounts protected. No system is completely secure, but we take these obligations seriously and we act quickly if something goes wrong.

We review this policy at least once a year and whenever our processing changes. The current version and its effective date are always shown at the top of this page.