GDPR · EU 2016/679
Privacy policy
How Group S processes your personal data in the context of the social compliance audit tool.
1. Data controller
Group S — Accredited Social Secretariat Rue des Ursulines 2, 1000 Brussels, Belgium DPO contact: dpo@groups.be
2. Data collected
• Email address (authentication) • Company data (audit profile: headcount, region, joint committee) • Audit answers and results (compliance status per document)
3. Purpose of processing
Verification of Belgian social compliance (Social Criminal Code) and issuance of an indicative self-assessment report.
4. Legal basis
Legitimate interest (provision of a regulatory compliance tool) and performance of the service requested by the user.
5. Retention period
• Audit sessions and results: 5 years (aligned with retention obligations for social documents) • User account: until deletion request
6. Your rights
You have the right to access, rectify, delete and port your data. The right to erasure can be exercised directly from the « My data » section of your administrator panel. Contact: privacy@groups.be
7. Hosting
Your data is hosted within the European Union (Supabase, Paris region — France). Processing complies with the General Data Protection Regulation (EU 2016/679).
The addresses dpo@groups.be and privacy@groups.be are indicative and must be confirmed by Group S before official publication.