Privacy policy
How Ordosia collects, uses and protects your personal data, in accordance with the General Data Protection Regulation (GDPR) and the Belgian Law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
Last updated: 12 September 2026
1. Data controller
The controller of the data collected on this site is:
AAMAL EUROPE INVESTMENT (trading as Ordosia)
De Kleetlaan 5BC, 1831 Machelen, Belgium
Company number (BCE): BE 0793.992.906
Email: info@aamal.eu — Phone: +32 499 30 44 19
No data protection officer (DPO) has been appointed: that appointment is not a legal requirement for an organisation of our size and activity, which does not carry out large-scale processing of sensitive data. Any question about your personal data may be addressed directly to the contact above.
2. Data we collect
We collect only the data you send us voluntarily, mainly through the site's contact form:
- First name and surname
- Company name (optional)
- Email address
- Phone number (optional)
- Your sector of activity and the message describing your need
We collect no sensitive data within the meaning of Article 9 of the GDPR (health, origin, opinions, and so on), and this site places no tracking or analytics cookie to date (see section 8).
The Odoo demonstration instances publicly accessible from this site contain exclusively fictitious data, created for the purposes of commercial demonstration — no real personal data of any third party appears in them.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to your contact or diagnostic request | Consent (Art. 6(1)(a)) given by ticking the box on the form |
| Drawing up a quote or a contract, or handling commercial follow-up | Performance of pre-contractual measures (Art. 6(1)(b)) |
| Meeting our accounting and tax obligations once you are a client | Legal obligation (Art. 6(1)(c)) |
4. Who has access to your data
Your data is processed internally by Ordosia (AAMAL EUROPE INVESTMENT) and recorded in our CRM tool (Odoo), hosted on secure infrastructure. It is never sold, rented or passed on to third parties for commercial purposes. It may be shared with:
- Our technical host, acting as a processor within the meaning of Article 28 of the GDPR
- The competent authorities, where a legal obligation requires it of us
5. Retention period
Data from a contact request that does not lead to a commercial relationship is kept for 3 years at most from the last exchange, then deleted or anonymised. If you become a client, your data is kept for the entire duration of the contractual relationship, then in accordance with the accounting and tax retention periods applicable in Belgium (generally 7 years after the end of the relationship).
6. Data security
We implement reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration: encrypted connections (HTTPS), restricted access to our CRM, and hosting on professional infrastructure with regular backups. The contact form is further protected against automated submissions (rate limiting and bot detection).
7. Your rights
In accordance with Articles 15 to 22 of the GDPR, you have the following rights over your personal data:
- Right of access — obtain a copy of the data we hold about you
- Right to rectification — correct inaccurate or incomplete data
- Right to erasure — request the deletion of your data, subject to our legal obligations
- Right to restriction of processing
- Right to object, in particular to commercial prospecting
- Right to portability of the data you have provided to us
To exercise any of these rights, contact us at info@aamal.eu. We reply within one month at the latest. You also have the right to lodge a complaint with the Belgian Data Protection Authority (APD/GBA): Rue de la Presse 35, 1000 Brussels — www.autoriteprotectiondonnees.be.
8. Cookies and trackers
This site currently uses no audience-measurement, advertising or tracking cookie. No cookie consent banner is therefore displayed, because no non-essential cookie is placed. If an analytics or audience-measurement tool were to be added in the future, this policy would be updated and a consent mechanism compliant with the ePrivacy Directive would be put in place before any cookie is placed.
This site places a single cookie: ordosia_langue. It remembers the language you chose — or the fact that you dismissed our language suggestion — and holds nothing but "fr", "en" or "ar". It measures nothing, does not identify you and is passed to no one. Strictly necessary to the service you asked for, it does not require your consent. It expires after one year, and you can delete it at any time from your browser settings.
9. Transfers outside the European Union
We make no systematic transfer of your personal data outside the European Economic Area (EEA). If a provider located outside the EEA were to be used in the future, that transfer would be governed by appropriate safeguards (the European Commission's standard contractual clauses or an adequacy decision).
10. Changes to this policy
This policy may be updated to reflect changes in our practices or in the regulations. The date of the last update appears at the top of this page. We invite you to check it periodically.