Create a bespoke document in minutes,聽or upload and review your own.
Get your first 2 documents free
Your data doesn't train Genie's AI
You keep IP ownership聽of your information
Privacy Notice
I need a privacy notice that complies with the GDPR, clearly explaining how personal data is collected, used, and stored, with sections on data subject rights, data retention periods, and contact information for the data protection officer.
What is a Privacy Notice?
A Privacy Notice tells people how an organization collects and uses their personal data. Under Belgian privacy law and GDPR requirements, these notices explain your rights over your information and how companies protect it. They cover everything from what data gets collected to how long it's kept.
Every Belgian business that handles personal information must provide clear privacy notices to their customers and employees. These documents help build trust by being transparent about data practices, while also meeting legal obligations. You'll typically find them on websites, in apps, and in employee handbooks - anywhere personal information gets processed.
When should you use a Privacy Notice?
Use a Privacy Notice whenever you start collecting personal data from customers, employees, or website visitors in Belgium. This includes launching a new website, rolling out a customer loyalty program, installing workplace surveillance, or creating an employee database. The notice needs to be in place before you begin processing any personal information.
Belgian companies must provide updated Privacy Notices when changing how they handle data, introducing new processing activities, or transferring information to different countries. The GDPR requires these updates before implementing changes, so plan ahead when modifying your data practices or expanding operations.
What are the different types of Privacy Notice?
- Privacy Policy Notice: Comprehensive document covering all data processing activities of an organization, typically used as the main privacy document
- Online Privacy Notice: Specifically addresses website and digital service data collection, including cookies and online tracking
- Privacy Notice Statement: Shorter, focused version for specific activities or services, often used in forms or applications
- Applicant Privacy Notice: Tailored for job candidates, explaining how recruitment data is handled
- Cctv Privacy Notice: Specialized notice for video surveillance systems, explaining recording practices and data retention
Who should typically use a Privacy Notice?
- Data Protection Officers (DPOs): Draft and maintain Privacy Notices, ensuring compliance with Belgian and EU data protection laws
- Business Owners: Responsible for implementing privacy notices in their operations and ensuring staff follow data protection practices
- Legal Teams: Review and update notices to reflect current regulations and company practices
- HR Departments: Handle employee-focused privacy notices and ensure proper communication of data processing practices
- Website Operators: Display and maintain online privacy notices for digital services and cookie policies
- Data Subjects: Belgian residents whose personal data is processed, and who have rights explained in these notices
How do you write a Privacy Notice?
- Data Mapping: Document all personal data your organization collects, processes, and stores
- Processing Purposes: List why you collect each type of data and how long you keep it
- Third Parties: Identify all external organizations who receive or process the data
- Security Measures: Detail your data protection methods and safeguards
- Contact Information: Include DPO details and how data subjects can exercise their rights
- Language Requirements: Prepare translations if operating in multiple Belgian regions
- Review Process: Our platform generates compliant notices automatically, ensuring all GDPR requirements are met
What should be included in a Privacy Notice?
- Identity and Contact: Name and details of the data controller and Data Protection Officer
- Processing Purpose: Clear explanation of why personal data is collected and processed
- Legal Basis: Specific GDPR grounds for processing each category of data
- Data Categories: List of all personal information types being collected
- Recipients: Who receives the data, including third-party processors
- Transfer Details: Information about any data transfers outside the EU
- Retention Period: How long different types of data are kept
- Data Subject Rights: Explanation of privacy rights under Belgian law
- Complaint Procedures: How to file concerns with Belgian DPA
What's the difference between a Privacy Notice and a Notice of Intent?
A Privacy Notice differs significantly from a Notice of Intent in both purpose and legal requirements under Belgian law. While both are formal communications, they serve distinct functions in different contexts.
- Purpose: Privacy Notices inform individuals about data processing activities and their rights, while a Notice of Intent declares future actions or decisions
- Legal Framework: Privacy Notices must comply with GDPR and Belgian Data Protection Act requirements; Notices of Intent follow general contract and administrative law principles
- Content Requirements: Privacy Notices must detail specific data processing information, rights, and safeguards; Notices of Intent focus on declaring planned actions and their timeline
- Timing: Privacy Notices are required before data collection begins and must be continuously available; Notices of Intent are typically one-time communications for specific situations
- Audience: Privacy Notices address all data subjects whose information is processed; Notices of Intent target specific parties in a legal or business relationship
Download our whitepaper on the future of AI in Legal
骋别苍颈别鈥檚 Security Promise
Genie is the safest place to draft. Here鈥檚 how we prioritise your privacy and security.
Your documents are private:
We do not train on your data; 骋别苍颈别鈥檚 AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
Our bank-grade security infrastructure undergoes regular external audits
We are ISO27001 certified, so your data is secure
Organizational security
You retain IP ownership of your documents
You have full control over your data and who gets to see it
Innovation in privacy:
Genie partnered with the Computational Privacy Department at Imperial College London
Together, we ran a 拢1 million research project on privacy and anonymity in legal contracts
Want to know more?
Visit our for more details and real-time security updates.
Read our Privacy Policy.