Data protection

Privacy Policy

Last updated: June 20, 2026

This policy describes how the website pacte-coloc.be collects, uses and protects the personal data of its users, in accordance with the General Data Protection Regulation (GDPR) and the Belgian Act of 30 July 2018 on the protection of individuals with regard to the processing of personal data.

1.Data controller

The data controller is:

InWeb — Olivier Sohy
Company registration number (BCE): BE0745945341
Contact: info@pacte-coloc.be

2.Data collected

In connection with the use of the service, we collect the following categories of data:

Account data

Email address and, where applicable, identification information required to create and manage your account.

Data entered in the agreement-generation tool

Identity of flatmates (names, first names), address of the property, rent and charges amounts, shares, composition of the flatshare, move-in and move-out dates, and any other information required to draft the flatshare agreement.

Data relating to social benefit status

The tool may collect information relating to a flatmate's social benefit status (for example, receipt of benefits), where this information is required to insert a specific clause into the agreement. This data, which reveals an economic and social situation, is treated with particular care: it is only collected when you choose to activate the clause concerned, is used only for that specific purpose, and benefits from the same security measures as the rest of your data.

Payment data

Payments are processed by our provider Mollie. Card data never passes through our servers and is not stored by us. We receive from Mollie the information necessary to confirm and track the transaction (status, amount, reference).

Technical data

Connection data, technical logs, IP address and cookies necessary for the operation and security of the website.

Free tools (calculators and checklists)

The free tools available in the Tools section run entirely in your browser. The information you enter there is never sent to our servers and is not recorded by us in any way. The move-in/move-out inspection checklist keeps what you enter in your browser's local storage (localStorage) so you can pick it up again later: this data stays on your device, is not accessible to us, and you can delete it at any time using the tool's "Clear all" button or by clearing your browser's browsing data.

3.legal.confidentialite.s3.title

legal.confidentialite.s3.intro

legal.confidentialite.s3.cat1.title

legal.confidentialite.s3.cat1.text

legal.confidentialite.s3.cat2.title

legal.confidentialite.s3.cat2.text

legal.confidentialite.s3.finalityTitle
legal.confidentialite.s3.finalityText

legal.confidentialite.s3.visibilityTitle
legal.confidentialite.s3.visibilityText

legal.confidentialite.s3.viewsTitle
legal.confidentialite.s3.viewsText

legal.confidentialite.s3.retentionTitle
legal.confidentialite.s3.retentionText

4.Purposes and legal bases

Purpose	Legal basis
Creating and managing your account	Performance of the contract (art. 6.1.b GDPR)
Generating and managing the flatshare agreement and its amendments	Performance of the contract
Inserting the social benefits clause	Performance of the contract, based on your choice to activate this clause
Processing payments	Performance of the contract
Preparing and retaining accounting records	Legal obligation (art. 6.1.c GDPR)
Website security and fraud prevention	Legitimate interest (art. 6.1.f GDPR)
Measuring website audience and the performance of our advertising campaigns	Consent (art. 6.1.a GDPR), revocable at any time
Non-essential cookies (where applicable)	Consent (art. 6.1.a GDPR)

5.Recipients and processors

Your data is never sold. It may be processed by the following processors, acting on our behalf and subject to contractual safeguards:

Google Ireland Limited (Firebase / Google Cloud) — hosting and storage of data, in data centres located within the European Union.
Mollie B.V. (Netherlands) — payment processing.
PostHog — website audience measurement, on its "Cloud EU" infrastructure: data is stored within the European Union. For logged-in users, we only share a technical identifier with it — never your email address or your name. Only activated if you have accepted measurement cookies.
Meta and TikTok — measuring the performance of our advertising campaigns. Only activated if you have accepted measurement cookies.
Google (reCAPTCHA) — protecting the contact form against automated submissions, on that page only. We do not share any data from your agreement with it.

The hosting and storage of data, as well as payment processing, take place within the European Union. Measurement tools are configured to store data within the European Union; as their providers belong to groups established outside the European Economic Area, a transfer outside the EEA cannot be ruled out and would then be governed by the safeguards provided for under the GDPR (standard contractual clauses or an adequacy decision).

6.Retention period

Account data and agreement data: retained for as long as your account remains active, in order to support the "living" agreement (amendments, recalculations, flatmates moving in and out). If your account is closed or remains inactive for an extended period, this data is deleted or anonymised within 30 days, unless a legal retention obligation applies.
Billing and accounting data: retained for 7 years, in accordance with Belgian legal obligations relating to accounting and taxation.
Technical data and logs: retained for a limited period not exceeding what is necessary for the security and proper functioning of the website.

7.Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure: encryption of communications, access controls, and hosting on secure infrastructure within the European Union.

8.Your rights

In accordance with the GDPR, you have the following rights over your data:

Right of access: obtain confirmation that your data is being processed and obtain a copy of it.
Right to rectification: have inaccurate or incomplete data corrected.
Right to erasure: request the deletion of your data, subject to legal retention obligations (in particular accounting obligations).
Right to restriction of processing.
Right to data portability: receive your data in a structured, machine-readable format.
Right to object to processing based on legitimate interest.
Right to withdraw your consent at any time, where processing is based on it.

To exercise these rights, contact us at: info@pacte-coloc.be. We respond within one month.

9.Complaints

If you believe that the processing of your data does not comply with the regulations, you have the right to lodge a complaint with the Belgian supervisory authority:

Data Protection Authority
Rue de la Presse 35, 1000 Bruxelles
contact@apd-gba.be

10.Cookies

The website uses cookies necessary for its operation and security. Where applicable, audience-measurement or non-essential cookies are only placed with your consent, collected via a dedicated banner. You may change your preferences at any time.

11.Changes

This policy may be updated to reflect changes in the service or the regulations. The date it was last updated appears at the top of the page. We encourage you to check it regularly.

In the event of any discrepancy between the language versions, the French version shall prevail.

Last updated: June 20, 2026← Back to home