Privacy Policy

Last updated: 9 June 2025

1. Introduction

AL Energy is committed to protecting the confidentiality of your personal data. This Privacy Policy explains how we collect, use, retain and safeguard your personal information, in accordance with the General Data Protection Regulation (GDPR) and applicable Belgian legislation.

2. Data Controller

AL Energy SRL (hereinafter: AL Energy), specialising in EPC certification in Brussels, is the data controller for your personal data.

  • Company name: AL Energy SRL
  • Company registration number (CBE): BE 1029.739.033
  • Address: Avenue de Stalingrad 52, 1000 Brussels
  • Phone: +32 233 233 20
  • Email: devis@alenergy.be

3. Data Collected

We collect only the data necessary to provide our EPC certification services:

  • Identification data: surname, first name, phone number
  • Contact data: email address, postal address of the building to be certified
  • Building data: property type, floor area, energy characteristics
  • Technical data: information collected during the EPC on-site inspection

4. Purposes of Processing

Your personal data is processed exclusively for the following purposes:

  • Handling your quote requests and scheduling appointments
  • Carrying out the EPC certification of your property
  • Preparing and issuing the official EPC Certificate
  • Managing the customer relationship and following up on services
  • Compliance with legal and regulatory obligations
  • Improving our services (with your explicit consent)

5. Legal Basis for Processing

The processing of your data is based on:

  • Performance of a contract: for carrying out the EPC certification
  • Legal obligation: for compliance with Brussels EPC regulations
  • Legitimate interest: for managing the customer relationship
  • Your consent: for improving our services

6. Retention Periods

Your personal data is retained for the following periods:

  • Customer data: 10 years after the end of the contractual relationship
  • EPC Certificates: legal retention period required by regulation
  • Contact data: until your request for deletion or objection
  • Accounting data: 7 years in accordance with tax legislation

7. Data Transfers

Your data may be transmitted to the following recipients:

  • Brussels Environment (Leefmilieu Brussel): for the official registration of the EPC Certificate
  • Technical service providers: only where necessary for the certification
  • Competent authorities: where required by law

No data is sold or transferred to third parties for commercial purposes.

8. Your Rights

Under the GDPR, you have the following rights:

  • Right of access: to obtain confirmation of processing and access to your data
  • Right to rectification: to have inaccurate or incomplete data corrected
  • Right to erasure: to have your data deleted under certain conditions
  • Right to restriction of processing: to limit processing in certain cases
  • Right to data portability: to receive your data in a structured format
  • Right to object: to oppose processing on legitimate grounds

To exercise these rights, please contact us at devis@alenergy.be.

9. Data Security

AL Energy takes appropriate technical and organisational measures to ensure the security of your data:

  • Encryption of sensitive data
  • Access restricted to authorised personnel only
  • Regular and secure backups
  • Staff training on confidentiality rules
  • Regular updates to security systems

10. Cookies and Similar Technologies

Our website uses only technical cookies that are necessary for the proper functioning of the site. No tracking or advertising cookies are used. You can configure your browser to refuse cookies.

11. Changes to This Policy

This Privacy Policy may be updated. Any significant change will be communicated to you by email or via a notice on our website. The date of the last update appears at the top of this page.

12. Contact and Complaints

For any question about this Privacy Policy or the exercise of your rights:

In the event of a dispute, you may lodge a complaint with the Data Protection Authority (GBA / APD): www.gegevensbeschermingsautoriteit.be