DELMONTLegal
Privacy policy
Last updated on 18 September 2026
1. Who is responsible for your personal data?
Delmont Capital BV, Jasmijnlaan 13, 1600 Sint-Pieters-Leeuw, Belgium, company number BE 1038.525.649, is the controller of the personal data described in this privacy policy.
Questions or requests about privacy can be sent to legal@delmontcapital.be. General questions can be sent to info@delmontcapital.be.
2. Who does this policy apply to?
This policy applies to website visitors, people who request information, subscribe to updates or register for a course, participants, business contacts, account users, users of the Delmont Investment Framework and people who communicate with Delmont in any other way.
3. Which personal data do we process?
Depending on your relationship with Delmont, we may process the following data:
- identification and contact details, such as name, email address, telephone number and address;
- invoicing and company details, such as company name, company number and billing address;
- registration and participant details, such as the chosen session, attendance, dietary requirements and practical preferences;
- payment and transaction details, where full card or bank details are in principle processed by the payment provider;
- communication, questions, complaints, feedback and correspondence;
- account and security data, such as username, encrypted password, verification data, IP address, session and login information;
- usage data of the website, emails, software and the Delmont Investment Framework;
- search queries, analysis requests, preferences and generated results entered by the user;
- marketing preferences and proof of consent;
- technical data, cookies and similar technologies as described in the cookie policy;
- exceptionally, strictly necessary information from a voluntarily provided medical certificate when a participant asks for a special cancellation arrangement.
Delmont does not ask for full portfolio, account, transaction or asset information unless this is necessary and lawful for a clearly defined future service. Do not share sensitive or confidential financial information that is not needed.
4. Where does the data come from?
We receive data directly from you, from your employer when it organises a company course, from technical systems when you use the website or software, from payment and communication service providers and, where permitted by law, from public sources.
When an employer provides data about participants, that employer must ensure a valid legal basis and provide correct information to those participants.
5. Why and on what legal basis do we process data?
We process personal data for the following purposes:
| Purpose | Main legal basis |
|---|---|
| Registration, payment, invoicing and delivery of courses | Performance of the contract and legal obligations |
| Answering requests before a contract | Pre-contractual measures |
| Organisation, follow-up and participant communication | Performance of the contract |
| Creating and securing an account | Performance of the contract and legitimate interest in security |
| Providing and improving the Framework and digital tools | Performance of the contract or legitimate interest, depending on the function |
| Preventing fraud, misuse and security incidents | Legitimate interest and legal obligations |
| Accounting, tax and legal administration | Legal obligation |
| Handling complaints and legal claims | Legitimate interest and the establishment, exercise or defence of legal claims |
| Newsletters and non-essential marketing | Consent, unless a legally permitted exception applies |
| Non-essential analytics and advertising cookies | Consent |
| Necessary website and security cookies | Legitimate interest or necessity for the requested service |
When we rely on legitimate interest, we weigh our interest against your rights and reasonable expectations.
6. Medical certificates and special categories of personal data
Delmont does not request medical information as standard. If you voluntarily provide a medical certificate to request an exceptional arrangement, we process only what is strictly necessary to assess that request. Preferably do not include any diagnosis or medical details that are not needed for this purpose.
Access is restricted to authorised persons. The certificate is in principle deleted no later than three months after the request has been finally handled, unless longer retention is necessary for an existing dispute or legal obligation. Before submission, an appropriate legal basis is provided for this processing, including explicit consent where necessary.
7. Who do we share personal data with?
We may share data with carefully selected service providers who support us with, among other things:
- website hosting and cloud infrastructure;
- email, forms and customer communication;
- online registration and payment;
- accounting, invoicing and professional advice;
- IT security, support, analytics and software development;
- venue, catering and course organisation, only insofar as necessary;
- legal authorities, supervisory authorities, bailiffs, lawyers or courts when this is required or justified.
Service providers may only process data according to our instructions when they act as processors. The specific suppliers will be listed before publication and, where necessary, mentioned in this policy or the cookie table.
We do not sell personal data.
8. Transfers outside the European Economic Area
Some future technology or cloud service providers may process data outside the EEA. In that case, Delmont uses a legally permitted mechanism, such as an adequacy decision or appropriate contractual safeguards, supplemented by additional measures where necessary. More information can be requested via the legal contact address.
9. How long do we keep personal data?
We do not keep data longer than necessary. As a starting point, the following periods apply, subject to legal obligations and specific disputes:
| Data | Indicative period |
|---|---|
| Invoices and legally required accounting data | Ten years or the statutory period then in force |
| Registration, contract and payment records | Duration of the contract plus a maximum of ten years |
| Practical participant data with no lasting need | Up to one year after the course |
| Questions and general correspondence | A maximum of three years after closure |
| Newsletter data | Until consent is withdrawn or a maximum of three years without interaction |
| Waiting list for course dates | Until unsubscribing or a maximum of two years after the last interaction |
| Account data | As long as the account is active and in principle up to thirty days after deletion, except for backups and legal necessity |
| Security and access logs | In principle a maximum of twelve months, unless an incident requires longer retention |
| Medical certificate for a request for an exception | In principle a maximum of three months after final handling |
| Cookie data | According to the period in the current cookie table |
These periods must be aligned with the final IT architecture and legal retention obligations before publication.
10. Is providing data mandatory?
Data marked as mandatory is needed to handle a request, registration, payment, account or legal obligation. Without that data, Delmont may not be able to provide the requested service. Marketing consent and non-essential cookies are voluntary and may not be a condition for the basic service.
11. Automated processing and AI
The Delmont Investment Framework can generate automated analyses based on input chosen by the user and available data. This output is informative and is not a decision with legal effects or a similarly significant effect on the user. Delmont does not use solely automated decision-making about admission to a course, creditworthiness or other legally significant situations without separate information and appropriate safeguards.
12. Security
Delmont takes appropriate technical and organisational measures, including access management, encrypted connections, secured accounts, logging, backups and restriction of access rights. No system is entirely without risk. Users protect their own passwords, devices and accounts and report suspicious activity immediately.
13. Your rights
Under the applicable conditions, you are entitled to:
- access to your personal data;
- rectification of incorrect data;
- erasure of data;
- restriction of processing;
- data portability;
- object to processing based on legitimate interest or direct marketing;
- withdraw your consent, without affecting earlier lawful processing;
- information about applicable safeguards for international transfers;
- lodge a complaint with the competent supervisory authority.
A request can be sent to legal@delmontcapital.be. Delmont may ask for reasonable information to verify your identity. We respond within the statutory period.
You can lodge a complaint with the Belgian Data Protection Authority via the current contact details at www.dataprotectionauthority.be.
14. Minors
The website and courses are not specifically aimed at minors. Anyone under the age of eighteen may only register with the valid consent and involvement of a parent or legal representative, insofar as required by law. The minimum age and technical checks will be finalised before registration opens.
15. Changes
This privacy policy may be updated when our services, technology or regulations change. The current version is published on the website with a new date. In the event of material changes, we inform the people concerned where required by law.