Privacy policy
Privacy and Cookie Statement
Version 1.0 – valid as of 21/01/2026
This privacy and cookie statement aims to set out in a transparent manner how Storm Management NV and Storm CV process personal data collected via the website www.storm.be. Storm ensures that such processing is at all times carried out in accordance with the General Data Protection Regulation (GDPR) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data. Where reference is made in this statement to “Storm”, this always refers to the entity that, in the specific case, acts as the data controller.
The website is managed by Storm Management NV, having its registered office at Borsbeeksebrug 22, 2600 Berchem. For processing activities relating to cooperators, Storm CV, with its registered office at the same address in Antwerp, acts as the data controller, while Storm Management NV acts in that context as the data processor. In accordance with Article 37 of the GDPR, Storm has appointed a Data Protection Officer, who may be contacted independently at dpo@storm.be.
Storm processes personal data that you actively provide, for example when you contact us or use the forms available on the website, as well as personal data that are automatically collected during your visit. This includes, inter alia, identification and contact details, data relating to your communications, technical information such as IP address, browser and device data, timestamps, and data concerning the use of the website. Storm does not process special categories of personal data, unless you voluntarily provide such data and the processing is necessary for a specific and legitimate purpose.
Personal data are processed solely for specific, explicit and legitimate purposes. These purposes include the technical operation and security of the website, handling questions and requests, improving services, performing contractual or pre-contractual obligations, complying with legal obligations, and preventing or detecting fraud, abuse and security incidents. An appropriate legal basis is applied to each of these processing activities. Processing necessary for the operation and security of the website is based on Storm’s legitimate interest. Processing in the context of communication or service provision is based on the performance of a contract or on pre-contractual measures. Prior consent is requested for marketing and analytical activities. Where Storm relies on a legitimate interest, a balancing test is always carried out to assess whether the interests or fundamental rights and freedoms of the data subjects do not prevail. Where processing is based on consent, such consent may be withdrawn at any time, without affecting the lawfulness of processing carried out prior to the withdrawal.
Storm does not retain personal data longer than is necessary for the purposes for which they are processed. Contact and communication data are in principle retained for a maximum of two years after the last contact. Marketing-related data are retained until consent is withdrawn. Technical and analytical data are retained for a maximum period of 26 months. Contractual and administrative data are retained for the period prescribed by law.
For the performance of its activities, Storm may transfer personal data to carefully selected service providers acting as processors, including IT, hosting, cloud and security service providers. These parties process personal data solely on behalf of Storm and on the basis of written data processing agreements that comply with the requirements of the GDPR. Personal data may also be shared with other entities within the Storm group or with competent public authorities where required by law. Storm does not sell personal data and does not make them available to third parties for their own purposes. Where personal data are transferred to countries outside the European Economic Area, Storm ensures that such transfers take place in accordance with the GDPR and that appropriate safeguards, such as standard contractual clauses, are applied.
The website uses cookies and similar technologies that store or read information on the user’s device. Essential cookies are necessary for the technical functioning of the website and do not require consent. Analytical and marketing cookies are placed only after you have given your free, specific, informed and unambiguous consent. Your consent is managed via the cookie tool that appears upon your first visit to the website and can be modified or withdrawn at any time. An up-to-date overview of all cookies used, including their category, purpose and retention period, is always available via this cookie tool and forms an integral part of this statement. Insofar as cookies give rise to the processing of personal data, such processing takes place solely for the purposes for which consent has been given or for which the cookies are strictly necessary.
Storm does not make use of automated decision-making or profiling within the meaning of Article 22 of the GDPR that produces legal effects concerning data subjects or similarly significantly affects them.
Data subjects enjoy all rights granted under the GDPR, including the right of access, rectification, erasure, restriction of processing, objection and, where applicable, data portability. These rights may be exercised by contacting privacy@storm.be or the Data Protection Officer. Storm handles such requests within the statutory period of one month. If you believe that your personal data are being processed unlawfully, you may lodge a complaint with the Belgian Data Protection Authority, having its offices at Rue de la Presse 35, 1000 Brussels (www.dataprotectionauthority.be).
This privacy and cookie statement may be amended to reflect developments in legislation, case law or internal processing activities. The most recent version is always available on the website and replaces all previous versions. For any further questions regarding this statement or the processing of personal data, you may contact us at privacy@storm.be.
