Last updated: 13 October 2026
Tactical-IT BV (“Tactical-IT”, “we”, “us”) takes the protection of your personal data seriously. This privacy policy explains which personal data we collect when you visit www.tactical-it.be, contact us, or use our IT services, why we collect it, how long we keep it, and which rights you have. We process personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, the “GDPR”) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
1. Who is responsible for your data?
The data controller is:
Tactical-IT BV
Bredabaan 71 bus 301
2170 Antwerpen (Merksem), Belgium
Enterprise number / VAT: BE 0803.422.690
Email: support@tactical-it.be
Telephone: +32 3 369 35 55
We have not appointed a Data Protection Officer, because the nature and scale of our processing do not require one. For any question about your personal data, contact us at the address above.
2. Which data we process, why, and on which legal basis
2.1 Visitors of our website
When you visit our website, our hosting provider automatically records technical data in server logs: your IP address, the date and time of your visit, the pages you requested, the referring page, and your browser type and operating system. We use this data to deliver the website, to keep it secure, and to detect and investigate abuse or attacks.
Legal basis: our legitimate interest in operating a secure and reliable website (Article 6(1)(f) GDPR).
Our website uses only cookies that are needed to make it work, unless you give your consent for others. Details are in our cookie policy.
2.2 Contact form, email and telephone
When you contact us through the contact form, by email or by telephone, we process the data you give us: your name, email address, telephone number, the subject and content of your message, and the name of your company if you mention it.
We use this data to answer your question, to prepare a quotation, and to follow up on your request.
Legal basis: taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in answering the people who contact us (Article 6(1)(f) GDPR).
The contact form is protected against spam by a hidden “honeypot” field that is processed on our own server. No data from the form is sent to third-party anti-spam services.
2.3 Customers and prospects
When you become a customer, or request a quotation, we process the data needed to run our business relationship: the identity and contact details of your contact persons (name, function, business email, telephone number), the company’s identification and invoicing details, the contracts, quotations, orders and invoices, our correspondence, and the records of the work we perform for you (tickets, interventions, reports).
We use this data to deliver our services, manage the contract, invoice, provide support, and keep in touch with you about our services.
Legal basis: performance of the contract (Article 6(1)(b) GDPR); compliance with our accounting and tax obligations (Article 6(1)(c) GDPR); and our legitimate interest in managing our customer relationships and in informing existing customers about services similar to those they already use (Article 6(1)(f) GDPR). You can object to such communications at any time.
2.4 Data we process when providing IT services
When we install, maintain, repair or support your IT systems, we may unavoidably have access to personal data stored on those systems (for example user accounts, mailboxes, files, or telephony records). When we do so on behalf of a business customer, we act as a processor: the customer remains the controller, and we process that data only on the customer’s documented instructions and under a data processing agreement, as required by Article 28 GDPR. We never use that data for our own purposes.
When we repair a device belonging to a private individual, we access its contents only to the extent necessary for the repair, and we ask for your explicit agreement before performing operations that involve your data, such as backing up or restoring it.
2.5 Remote support
For remote support we use TeamViewer. A remote session is only established when you expressly allow it, by starting the TeamViewer client and giving us the session identifier. During the session we process the technical data needed to establish the connection (device name, connection identifiers, IP addresses) and we can see what is on your screen. We do not record sessions.
Legal basis: performance of the contract (Article 6(1)(b) GDPR).
2.6 Suppliers and partners
We process the business contact details of our suppliers, subcontractors and partners (name, function, email, telephone, invoicing details) to manage our relationship with them and to comply with our accounting obligations.
Legal basis: performance of the contract (Article 6(1)(b) GDPR) and legal obligation (Article 6(1)(c) GDPR).
2.7 Job applicants
If you apply for a job with us, we process your application data (CV, cover letter, contact details, interview notes) to assess your application. We keep this data for a maximum of 12 months after the end of the procedure, unless you agree to a longer period.
Legal basis: taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in recruiting staff (Article 6(1)(f) GDPR).
3. We do not sell your data and we do not profile you
We never sell, rent or trade personal data. We do not use automated decision-making or profiling that produces legal or similarly significant effects for you. We do not send newsletters or marketing emails without your prior consent, except to existing customers about similar services, and you can always unsubscribe.
4. How long we keep your data
| Data | Retention period |
|---|---|
| Website server logs | Up to 12 months, for security purposes |
| Cookie consent choice | 12 months, stored in your own browser |
| Contact requests that do not lead to a contract | Up to 2 years after our last contact |
| Quotations that are not accepted | Up to 2 years after the quotation date |
| Customer and supplier files, contracts and correspondence | For the duration of the contract and up to 10 years after it ends (limitation period for contractual claims) |
| Invoices and accounting documents | 10 years, as required by Belgian tax and accounting law |
| Support tickets and intervention records | For the duration of the contract and up to 5 years after it ends |
| Data on customer systems that we process as a processor | Only for as long as the customer instructs us; returned or deleted at the end of the services |
| Job applications | Up to 12 months after the end of the procedure |
When a retention period ends, we delete or anonymise the data, unless we must keep it longer for a legal obligation or an ongoing dispute.
5. Who receives your data?
We share personal data only with the parties below, and only to the extent needed.
- Processors acting on our behalf. We use carefully selected service providers that process data on our instructions and under a data processing agreement:
- Combell nv (Ghent, Belgium): hosting of our website and its contact form;
- Microsoft Ireland Operations Ltd (Dublin, Ireland): Microsoft 365 for our email, calendar, documents and collaboration tools;
- SMTP2GO Ltd and Mailchimp (Mandrill): delivery of transactional emails sent by our systems, such as contact form notifications and automated reports;
- TeamViewer Germany GmbH (Göppingen, Germany): remote support sessions;
- Our ticketing, time registration, invoicing and backup tools, hosted in the European Union.
- Our accountant and legal advisers, where needed to meet our legal obligations or to defend our rights.
- Hardware and software vendors, when a repair, warranty claim or licence registration requires it (for example the manufacturer of a device you ask us to repair under warranty).
- Public authorities, when the law obliges us to do so.
Google Maps is shown on our contact page only after you accept the corresponding cookies in our cookie banner. If you do, Google Ireland Ltd processes your IP address and may place cookies, as described in Google’s own privacy policy.
6. Transfers outside the European Economic Area
We store and process your data within the European Economic Area wherever possible. Some of our providers belong to groups established in the United States. Where data may be transferred outside the EEA, we rely on an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework for certified companies) or on the European Commission’s Standard Contractual Clauses, complemented with additional safeguards where needed. You can ask us for a copy of the relevant safeguards.
7. How we protect your data
We apply appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure and alteration. These include encrypted connections (HTTPS, TLS), multi-factor authentication on our business accounts, access limited to the staff who need it, regular updates and backups of our systems, and confidentiality obligations for our staff and subcontractors. As an IT services company, security is at the heart of what we do, but no system is perfectly secure. If a data breach occurs that is likely to result in a risk to you, we will notify you and the supervisory authority as required by law.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and to receive a copy;
- rectify data that is inaccurate or incomplete;
- erase your data, in the cases provided by law;
- restrict the processing of your data, in the cases provided by law;
- receive the data you gave us in a structured, commonly used, machine-readable format, and to have it transmitted to another controller (data portability);
- object to processing based on our legitimate interests, and to object at any time to direct marketing;
- withdraw your consent at any time, where processing is based on consent, without affecting the lawfulness of processing before the withdrawal.
To exercise these rights, send an email to support@tactical-it.be or a letter to our address above. We may ask you to confirm your identity so that we do not hand your data to someone else. We will respond within one month; if your request is complex, we may extend this by two months and will tell you why.
If you believe we have not handled your data correctly, we would like to hear from you first so that we can resolve it. You also have the right to lodge a complaint with the Belgian supervisory authority:
Gegevensbeschermingsautoriteit / Autorité de protection des données
Drukpersstraat 35, 1000 Brussels, Belgium
Telephone: +32 2 274 48 00
Email: contact@apd-gba.be
www.gegevensbeschermingsautoriteit.be
9. Children
Our services are intended for businesses and adults. We do not knowingly collect personal data from children under 16. If you believe a child has given us personal data, contact us and we will delete it.
10. Links to other websites
Our website contains links to other websites, such as our social media pages and the TeamViewer download page. This privacy policy does not apply to those websites. Read their own privacy policies before giving them your data.
11. Changes to this policy
We may update this privacy policy when our services or the law change. The date at the top shows the latest version. For important changes we will inform our customers directly.
12. Contact
Questions about this policy or about your personal data? Contact us at support@tactical-it.be or +32 3 369 35 55.