Skip to content
Yocto

Privacy Policy

Privacy Policy Yocto
Last updated: October 4, 2026

Yocto attaches great importance to the protection of your personal data and to respecting your privacy. We comply with all applicable legal obligations, including European Regulation 2016/679, better known as the General Data Protection Regulation (GDPR).

In this privacy policy, we aim to provide clear and transparent information about what personal data we collect, why we collect it, and how we handle it.

1. Our commitment to you

This implies that we always ensure that we:

  • process your personal data in accordance with the purpose for which it was provided. These purposes and types of personal data are described in this privacy policy;
  • limit the processing of your personal data to only those data that are strictly necessary for the purposes for which they are processed;
  • ask for your explicit consent when needed for the processing of your personal data;
  • have taken appropriate technical and organizational measures to guarantee the security of your personal data;
  • do not pass on personal data to third parties, unless this is necessary for the execution of the purposes for which they were provided (e.g., for helpdesk support);
  • are aware of your rights regarding your personal data, wish to inform you of them, and respect them.

2. Data controller and contact details

Yocto is responsible for processing your personal data. If, after reviewing our privacy policy, you have any questions or wish to contact us, you can do so using the contact details below:

Yocto BV
Koningin Astridlaan 46
9990 MALDEGEM
Contact person: Ronny Jonckheere
Tel: +32.475.72.94.83
E-mail: info@yocto.be

3. What personal data do we process?

Depending on your relationship with Yocto, we may process the following categories of personal data:

  • Identification data: Name, first name, company name.
  • Contact data: E-mail address, telephone number, billing and delivery address.
  • Financial data: Bank account number, VAT number.
  • Technical data: IP address, login credentials for software licenses.

Your personal data is processed by Yocto for the following purposes and on the following legal grounds:

Performance of a contract:

  • Customer management and the delivery of our services.
  • Handling and following up on quotations, orders, invoicing, and payments.
  • Delivering software licenses.
  • Contacting you in the context of our service provision, including helpdesk support.

Legal obligation:

  • Complying with legal, tax, and accounting obligations (such as the mandatory retention of invoices).
  • Obtaining and justifying government subsidies (such as the SME portfolio / kmo-portefeuille).

Legitimate interest or consent:

  • Sending newsletters and invitations for related services (legitimate interest for existing customers, consent for prospects).
  • Organizing training courses and meetings.
  • Keeping anonymous visitor statistics of our website (legitimate interest, see section 9).

5. Provision of data to third parties

The data you provide to us may be disclosed to third parties if necessary for the implementation of the purposes described above. For example, we use third-party service providers (processors) for:

  • Providing the internet environment (web hosting);
  • Managing the IT infrastructure (including IT networks);
  • Creating and distributing newsletters and invitations;
  • Software manufacturers for the purpose of registering your license.

We never pass on personal data to third parties with whom we have not concluded a Data Processing Agreement. With these processors, we make strict agreements to guarantee the security of your personal data.

Furthermore, we will not pass on the data provided by you to other third parties, unless legally required and permitted by law (e.g., a demand by police or judicial authorities).

We do not provide personal data to parties located outside the European Economic Area (EEA), unless sufficient legal safeguards have been implemented (such as the EU Standard Contractual Clauses).

6. Minors

Since we operate in a B2B environment, we in principle process personal data of adults only. We do not intend to collect data from individuals under 16 years of age. If you suspect that we have collected such data without parental consent, please contact us so we can delete this information.

7. Retention period

Yocto stores personal data no longer than necessary for the purpose for which it was provided, or as long as required by law. As a general rule, customer data following the end of active cooperation is stored for a maximum of 10 years in the context of contractual liability. Invoicing and accounting records are kept for the legally mandated period of 7 years.

8. Data security

We have taken appropriate technical and organizational measures to protect your personal data against unlawful processing or loss. These measures include:

  • All persons who can access your data on behalf of Yocto are bound by strict confidentiality.
  • We maintain a strict username and password policy across all our systems.
  • We ensure the encryption of personal data whenever appropriate.
  • We make regular backups of personal data to restore them in the event of physical or technical incidents.
  • Our employees are informed and trained on the importance of personal data protection.

9. Cookies and local storage

Our website uses no analytics, advertising or tracking cookies, and loads no third-party scripts that follow you across websites. We only store the following on your device, which is why we do not ask for cookie consent:

  • Anti-forgery cookie: when you open the contact form, our website sets a technical cookie that protects the form against misuse from other websites. It contains no personal data, is not used to identify you and is deleted when you close your browser. This cookie is strictly necessary for the operation of the form.
  • Theme preference: if you switch between the light and dark theme, your choice is stored in your browser's local storage so it is remembered on your next visit. This is only done at your request and the information never leaves your browser.

Anonymous visitor statistics: to know how many visitors our website has and which pages are viewed, we count page visits on our own server, without cookies, without scripts and without third-party services. To do so, an anonymous code is calculated from your IP address, your browser identification and a random key that changes every day. Your IP address is not stored. The key of a day is erased the following morning, after which the code can no longer be traced back to you or your device. We only keep totals (number of visitors and page views per day and per page), for at most 13 months. We do not follow you across several days or other websites and we do not build profiles. This processing is based on our legitimate interest in managing and improving our website. Nothing is stored on or read from your device, which is why we do not ask for consent for it.

The language of the website is determined solely by the URL you visit; no cookie is used for this. Should we ever start using cookies or similar technologies that are not strictly necessary, we will first ask for your consent and update this privacy policy.

10. Your rights regarding your data

You have the following rights regarding your personal data:

  • Right of access: You have the right to inspect the data we hold about you.
  • Right to rectification: You may have incorrect data corrected.
  • Right to erasure ('right to be forgotten'): You can request the removal of your data (provided there is no legal obligation to retain it).
  • Right to restriction and objection: You can object to the processing of your data (e.g., for direct marketing).
  • Right to data portability: You have the right to request the transfer of the data you provided to us to yourself or a third party.

At the top of this privacy policy, you can find how to contact us to exercise these rights. To prevent abuse, we may ask you to adequately identify yourself in case of doubt before fulfilling your request.

11. Complaints

If you have a complaint regarding the processing of your personal data, please contact us directly. If we cannot resolve it together, you always have the right to lodge a complaint with the supervisory authority in Belgium:

Data Protection Authority (GBA / APD)
Drukpersstraat 35, 1000 Brussels
Tel: +32 (0)2 274 48 00
E-mail: contact@apd-gba.be
Website: www.dataprotectionauthority.be

12. Amendments to the privacy policy, applicable law, and language

Yocto may amend this privacy policy at any time to adapt to changing legal or operational requirements. The most current version is always available on our website. Older versions are archived and available upon request.

This privacy policy is governed by Belgian law. In the event of a dispute, the courts of the judicial district of East Flanders, Ghent division, shall have exclusive jurisdiction.

Prevalence of Dutch Version: This privacy policy was originally drawn up in the Dutch language. In the event of any discrepancies, contradictions, or disputes regarding the interpretation between this translated English version and the original Dutch version, the original Dutch text shall always prevail and be legally binding.