Last updated: 17 FEBRUARI
Website: https://houseato.com
Business: HOUSE OF ATO BV, Antwerp, Belgium — studio@houseato.com

Article 1 — Introduction

1.1 House of Ato respects your privacy and processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Belgian legislation.
1.2 This policy explains which data we collect, why we collect it and how your rights are protected.

Article 2 — Data Controller

2.1 The data controller responsible for processing personal data is House of Ato, Antwerp, Belgium.
2.2 Questions regarding privacy may be sent to studio@houseato.com.

Article 3 — Personal Data Collected

3.1 We may process identification data such as name, email address, phone number and company details provided through contact forms, email or project communication.
3.2 We may process project related information including briefing documents, files and feedback you provide.
3.3 We may collect technical data such as IP address, browser type and device information through cookies and analytics tools where permitted.
3.4 We do not intentionally collect sensitive personal data.

Article 4 — Legal Basis for Processing

4.1 Contractual necessity: to communicate with clients and deliver services.
4.2 Legitimate interest: to respond to inquiries and improve services.
4.3 Legal obligation: accounting and administrative obligations.
4.4 Consent: analytics cookies or marketing communication when applicable.

Article 5 — Purpose of Processing

5.1 Managing client relationships and providing requested services.
5.2 Communication regarding projects or inquiries.
5.3 Improving the website and services.
5.4 Fulfilling legal and accounting obligations.

Article 6 — Data Sharing

6.1 Personal data is never sold to third parties.
6.2 Data may be shared with service providers such as hosting providers, email providers, accounting software and cloud storage solely for operational purposes.
6.3 Data may be disclosed when legally required.

Article 7 — Data Retention

7.1 Contact and communication data is retained up to 5 years.
7.2 Accounting data is retained according to legal obligations (typically 7 years in Belgium).
7.3 Project files may be retained for portfolio and support purposes unless deletion is requested.

Article 8 — International Transfers

8.1 If data is transferred outside the European Economic Area, appropriate safeguards such as Standard Contractual Clauses will be applied.

Article 9 — Your Rights

9.1 You have the right to access, rectify or erase your personal data.
9.2 You may request restriction of processing or object to processing based on legitimate interest.
9.3 You may request data portability.
9.4 You may withdraw consent at any time.
9.5 Requests can be sent to studio@houseato.com.

Article 10 — Cookies

10.1 The website may use functional and analytical cookies.
10.2 Non‑essential cookies are only placed with consent where required.

Article 11 — Security

11.1 Appropriate technical and organisational measures are implemented to protect personal data against unauthorised access, loss or misuse.

Article 12 — Complaints

12.1 You may lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels.

Article 13 — Changes

13.1 This policy may be updated periodically. The latest version is always available on the website.