Privacy policy.
AWIT SRL — last updated: 28 July 2026
This page also serves as an information notice under Article 14 GDPR for individuals whose data we collected from third parties without asking them directly. Section 4 is dedicated to them.
1. Data controller
AWIT SRL
Rue de Tournai 30, 7604 Callenelle, Belgium
Company and VAT number: BE 1002.709.487
Responsible: Andrew Willems, director
Contact: contact@awit.be — +32 43 78 41 38
We have not appointed a Data Protection Officer: our activities do not meet any of the three criteria in Article 37.1 GDPR.
2. Processing activities
| Processing | Data subjects | Legal basis |
|---|---|---|
| Visit to awit.be | Visitors | Legitimate interest (Art. 6.1.f) |
| Contact request or appointment | Enquirers | Pre-contractual measures (Art. 6.1.b) |
| B2B commercial prospecting | Executives and professional contacts | Legitimate interest (Art. 6.1.f) |
| Client relationship | Clients and their staff | Performance of contract (Art. 6.1.b) |
| Invoicing and accounting | Clients | Legal obligation (Art. 6.1.c) |
Prospecting is the only processing that relies on data we did not obtain from you directly. It is covered in Section 4.
3. The awit.be website
The site is hosted by OVH SAS (France) and Visuhost. Domain and traffic flow through Cloudflare, Inc. Contact forms are received by Formspree, Inc. (USA). Technical logs are kept for a maximum of 12 months for security purposes only. Messages and contact details are kept for 3 years from our last exchange.
4. Information notice — B2B prospecting (Article 14 GDPR)
If you received a message from us without having contacted us first, this section concerns you.
4.1 What we do and why
We offer Odoo ERP implementation to construction companies in France and Belgium, particularly in the context of mandatory electronic invoicing. We send professional messages to companies whose activity matches this offer.
4.2 Legal basis and legitimate interest
Legitimate interest (Art. 6.1.f GDPR). We write only to professional addresses in a strictly B2B context, on a topic directly relevant to the recipient's declared activity. In Belgium, only to impersonal addresses of legal entities (Royal Decree of 4 April 2003). We process no sensitive data. Every message includes an immediate opt-out.
4.3 Categories of data processed
- About you: name, first name, role, professional email address, public professional profile URL.
- About the company: name, company number (SIREN/SIRET or BCE), legal form and activity code, headcount, address, website, phone, professional certifications, Peppol directory presence, insolvency information.
4.4 Origin of the data
All data comes from publicly accessible sources: RGE register (ADEME), Sirene register (INSEE), Embuild directory (buildyourhome.be), Open Data SPW Wallonia, BODACC, OpenPeppol, company's public website. No purchased databases.
4.5 Who receives the data
We do not sell, rent or share this data. Every recipient is named on our Sub-processors and recipients page, with their role and processing location.
4.6 Retention periods
| Situation | Duration |
|---|---|
| No exchange after the sequence | 12 months from the last message |
| Exchange with no commercial outcome | 3 years from the last contact |
| Becomes a client | Duration of the relationship, then statutory periods |
| Objection or stop request | Data deleted immediately |
On objection, we retain only your email address in an exclusion list — necessary to honour your refusal permanently.
4.7 Your rights
You have the right to access, rectification, erasure, restriction, portability and objection — for prospecting, this is absolute and requires no justification (Art. 21.2 GDPR). Write to contact@awit.be. We respond within one month, with no justification required from you.
4.8 Complaint to a supervisory authority
- Belgium: Data Protection Authority, Rue de la Presse 35, 1000 Brussels — autoriteprotectiondonnees.be
- France: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr
4.9 Automated decision-making
We assign each company a relevance score based on professional criteria (activity, headcount, certifications, e-invoicing situation, geographic distance) to order our outreach. This score does not produce any automated decision with legal effects within the meaning of Article 22 GDPR.
5. Security
Access is limited to those who need it, data is encrypted in transit, and the prospecting database and CRM are hosted in the EU. Full details on the Sub-processors and recipients page.
6. Changes
Any material change will be published on this page with an updated date.