Privacy Statement
Last updated: 10/10/2025
VWALA (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This privacy statement explains how we collect, use, and share your personal data when you use our website and services. We are committed to processing your personal data securely and in line with applicable data protection laws, including Regulation 2016/679 (“GDPR”). Unless stated otherwise, terms used in this privacy statement that are defined in the GDPR have the same meaning here. This privacy statement applies to the use of our website vwala.be (the “Website”) and to the use of all of our services via every medium they are made available to you (collectively, the “Platform”). We encourage you to read this privacy statement carefully. If you have any questions, you can contact us at privacy@vlawa.be.
WHO WE ARE
VWALA BV
BE1028304423
Bakkereel 26
9600 Ronse
Belgium
support@vwala.be
CHANGES
We may update this privacy statement from time to time. When we do, we will update the date shown at the top of this page. We encourage you to review this statement regularly. If we make significant changes, we will let you know, for example by email or with a notice on our Website.
WHO PROCESSES YOUR PERSONAL DATA?
In most situations we act as the controller of your personal data. This is the case, for example, when you visit our Website, contact us, apply for a job with us, or use our Platform. If you decide to enter into an agreement with an external commercial partner (such as an energy supplier, telecom operator, or insurance company), that partner will be an independent data controller.
WHAT PERSONAL DATA DO WE PROCESS FROM WHOM, AND FOR WHAT PURPOSES?
The personal data we process depends on our relationship with you. In the sections below we explain, for each category of data subject, the types of personal data we process, for what purposes, and on which legal bases.
Visitors to the website
Personal data collected | When you visit our Website, we may collect information such as your IP address, browser type and version, the pages you view, the date and time of your visit, the duration of your visit, and unique device identifiers. This may also include technical data needed for website statistics and security monitoring. |
Purpose | We use this personal data to manage the technical and functional operation of our Website, to improve the user experience of our Website, and to protect its security. Where we use cookies or similar technologies for analytics or personalization that are not strictly necessary, we will ask for your prior consent. You can find more information in our cookie statement. |
Legal basis | We process this personal data based on our legitimate interest in providing a secure and properly functioning Website. Where consent is required, for example for the use of certain cookies or similar technologies, we will only process your personal data where you have given your consent. |
Newsletter and marketing recipients
Personal data collected | When you subscribe to our newsletter or agree to receive marketing communications, we process personal data such as your name and email address. |
Purpose | We use this data to send you our newsletter and any other marketing communications you have opted in to receive. |
Legal basis | We process this data based on your consent. You may withdraw your consent at any time by using the unsubscribe link in our communications or by contacting us directly. |
Persons who contact us
Personal data collected | When you submit a contact request, we process personal data such as your name, email address, phone number and other personal information you would provide in your contact request. |
Purpose | We use this personal data to get in touch with you by email, telephone, text message, or another form of electronic communication, and to handle and respond to your request. |
Legal basis | We process this personal data based on our legitimate interest in responding to your request. If your request relates to a potential contract with us, the processing is also necessary to take steps at your request prior to entering into a contract. |
Users of our Platform and services
Personal data collected | When you create an account and/or use our Platform or other online services as a (registered) user or a customer, we process personal data such as your name, contact details (email, address, telephone number), and account information. We may also collect technical data such as your IP address, device and network information, and local storage data, as well as any other personal data you provide in the context of using our Platform. Further, when you use our Platform to compare the services of commercial partners, we may collect personal information such as identification details, consumption or usage data, and information about your costs and overall financial situation. |
Purpose | We use this personal data to provide the services you request and to administer your account. Further, we use this information in order to generate personalized comparisons of offers from different commercial partners, provide you with an overview of your costs and overall financial situation, highlight potential savings, display relevant deals, and improve the accuracy of our recommendations. We also use certain data to maintain, secure, and improve our Platform. We may also use this data for statistical purposes and benchmarking. In the latter case, we will ensure that your data is aggregated and will be anonymized. |
Legal basis | We process this personal data as necessary for the performance of our agreement with customers and based on your explicit consent. In addition, some processing takes place on the basis of our legitimate interest in maintaining, securing, and improving our services as well as gaining and providing insights in the use of our Platform. Where legally required, we only process this personal data with your consent. |
Suppliers, subcontractors, and business partners
Personal data collected | When you act as our supplier, subcontractor, or business partner, or when you are employed by one of these parties, you provide us with personal data such as your name, contact details, role, and correspondence. |
Purpose | We use this personal data to manage our relationship with the organization you represent, to enter into, perform, and manage our agreements, and to communicate about our cooperation. |
Legal basis | We process this personal data as necessary for the performance of our agreement with the relevant organization and, where applicable, on the basis of our legitimate interest in managing our relationships with suppliers, subcontractors, and business partners. |
Applicants
Personal data collected | When you apply for a job with us, you provide personal data such as your name, contact details (email, address, phone number), CV, cover letter, and any other information you include in your application. |
Purpose | We use this data to review your application and to contact you about the recruitment process. With your consent, we may also keep your application data to inform you of future job opportunities. |
Legal basis | We process this data as necessary to take steps at your request prior to entering into an employment contract and, where appropriate, based on our legitimate interest in managing an efficient recruitment process. If we retain your data for future opportunities, we rely on your consent, which you may withdraw at any time. |
WHO HAS ACCESS TO MY PERSONAL DATA?
Website hosting and analytics
We use Combell to host our Website and have entered into a data processing agreement with Combell. You can find Combell’s privacy statement at https://www.combell.com/nl/over-combell/privacy-policy. Further, we use Google Analytics to monitor and analyze how our Website is used. Google Analytics provides us with traffic reports and related analytics. You can find Google Analytics’s privacy statement here: https://policies.google.com/privacy.
Social media providers
Our Website may include links or buttons that let you follow us on social media channels such as LinkedIn or similar platforms. When you click on one of these, the relevant social media provider collects your personal data directly from you. We do not share your personal data with these providers and are not responsible for how they handle it. We recommend reviewing the privacy statement of each social media provider you use.
External commercial partners
Your personal data may be shared with external commercial partners (such as energy suppliers, telecom operators, or insurance companies) if you choose to proceed with the offers they present. These commercial partners act as independent data controllers and are responsible for their own processing of your personal data. We will only transfer your data to these partners after obtaining your explicit consent.
Other parties
We may share personal data with trusted third parties in the following situations:
Service providers and subcontractors that support our operations, such as IT and cloud service providers, payment processors, CRM platforms, and providers of communication and analytics services. These parties process personal data only on our behalf and in line with our instructions.
Professional advisors such as accountants, auditors, and lawyers, where necessary for them to provide their services to us.
Affiliates, joint venture partners, or other companies we control or jointly control, provided they comply with this privacy statement.
Judicial, police, or administrative authorities when we are legally required to disclose personal data, for example to comply with a legal obligation, binding decision, or court order.
Investors and other relevant third parties in connection with a potential sale, merger, or other corporate transaction involving our business.
We share personal data with third parties only where this is lawful and necessary. If these third parties act as our processors, they process the personal data solely on our behalf and in accordance with our instructions. In such cases, we enter into appropriate data processing agreements with them.
PROCESSING OF PERSONAL DATA OUTSIDE THE EEA
We are a Belgian company and mainly process personal data within the European Economic Area (EEA). However, your personal data may be transferred outside the EEA through our processors or sub-processors. If such transfers are made to a country that does not have an adequacy decision from the European Commission, we will put in place appropriate safeguards to ensure that your personal data receives an adequate level of protection. These safeguards may include the European Commission’s Standard Contractual Clauses or other legally recognised transfer mechanisms. You may contact us for more information about these safeguards and to obtain a copy where relevant.
HOW DO WE PROTECT YOUR PERSONAL DATA?
We have implemented appropriate technical and organizational measures to process your personal data in line with applicable data protection laws and to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. We also enter into data processing agreements with our processors and sub-processors to ensure they apply adequate safeguards. Within our organization, we enforce confidentiality obligations and access restrictions to protect your personal data.
HOW LONG DO WE KEEP YOUR PERSONAL DATA?
We do not keep personal data longer than necessary for the purposes for which the personal data was collected. We may retain personal data where this is required to comply with legal obligations, to resolve disputes, or to enforce our agreements. We may also retain usage data (such as technical data automatically collected when you use the Website) for internal analysis. Usage data is generally retained for a shorter period, unless it is needed to improve the security or functionality of our Website or we are legally required to retain it for longer. If you would like more information about specific retention periods, please contact us using the details provided above.
WHAT ARE MY RIGHTS AS A DATA SUBJECT?
To the extent provided under applicable data protection laws, you have the following rights with respect to your personal data:
Right of access: to obtain confirmation of whether we process your personal data and, if so, to access it and receive related information.
Right to rectification: to have inaccurate personal data corrected and incomplete personal data completed without undue delay.
Right to erasure: to have your personal data deleted in certain circumstances (the “right to be forgotten”).
Right to restriction of processing: to request that processing be restricted in certain situations, for example if the accuracy of the data is contested or the processing is unlawful.
Right to data portability: to receive your personal data in a structured, commonly used, and machine-readable format and to transfer it to another controller.
Right to object: to object to the processing of your personal data in certain circumstances, including objecting at any time to the use of your personal data for direct marketing.
You can exercise these rights by contacting us using the details provided above. If we act as controller of the personal data concerned, we will respond to your request in accordance with applicable law. If we act as processor, we will put you in contact with the relevant controller.
If you believe your personal data is being processed in violation of data protection laws, you also have the right to lodge a complaint with the competent supervisory authority. In Belgium, this is the “Gegevensbeschermingsautoriteit”: https://www.gegevensbeschermingsautoriteit.be/burger.