Privacy & Data Protection Charter

Effective date: 04/08/2025

Confidentiality is of the utmost importance to us, and we are committed to protecting it. This Charter explains how we handle your personal data, both under the General Data Protection Regulation (EU Regulation 2016/679 – GDPR) and the UAE Federal Data Protection Law (Federal Decree-Law No. 45 of 2021 – PDPL).

It applies to all our services and websites operated by AG IMMO I.B.P. Intercontinental Brussels Properties (IBP), whether accessed from Europe, the United Arab Emirates, or elsewhere.

Who are we? What services do we provide?

This Privacy and Data Protection Charter (the “Charter”) applies to personal data processed in the context of any of our services (“Services”) or any contact with IBP.

The Service is provided by:

AG IMMO I.B.P. INTERCONTINENTAL BRUSSELS PROPERTIES (“IBP”)
Avenue d’Auderghem 277
1040 Etterbeek – Belgium
BCE No.: 0463.031.676
Email: [email protected]

Our company is a real estate agency offering a full range of real estate services, including sale, purchase, rental, management, and advisory.The individuals whose data we may process are:

  • Clients (sellers, landlords, buyers, tenants, investors).
  • Interested parties considering using our services.
  • Third parties affected by our services (occupants, heirs, etc.).
  • Partners collaborating with us (banks, notaries, IT providers, advertising platforms).
  • Any person contacting us.

All of these are collectively referred to as “You”.

Why do we process your data and on what legal grounds?

We process data as data controller, for the purposes and legal bases defined by:

  • GDPR (for EU residents).
  • PDPL (for UAE residents).

Examples:

  • Execution of contracts (sales, rentals, management).
  • Pre-contractual measures (evaluations, lead qualification).
  • Compliance with legal obligations (e.g., archiving, anti-money laundering, tax).
  • Legitimate interests (business development, dispute management).
  • Consent (marketing, newsletters, photos, videos).

What categories of data do we process?

We may process:

  • Identification data (name, address, email, phone, ID number, IP).
  • Legal and contractual data (property documents, rights of occupation).
  • Financial data (bank, fees, payments).
  • Preferences and search criteria (budget, location, property type).
  • Communication history (emails, calls, messages).
  • Images and media (photos, videos of properties).

With whom do we share your personal data?

  • Service providers and subcontractors (IT, hosting, CRM, advertising platforms).
  • Professional partners (banks, brokers, lawyers, notaries, public authorities).
  • Authorities when required (tax, police, courts, Data Protection Authorities).

We ensure that any processor complies with GDPR or PDPL, depending on the jurisdiction.

How long do we keep your data?

  • Clients / Partners: 10 years after contract termination.
  • Interested parties without contract: up to 3 years from last contact.
  • Marketing data: until withdrawal of consent, or 3 years without interaction.

Security

We apply appropriate technical and organizational measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal data.

Your rights over your personal data

You may exercise the following rights:

  • Access to your data.
  • Rectification of incorrect data.
  • Erasure (“right to be forgotten”).
  • Restriction of processing.
  • Objection to processing (e.g., marketing).
  • Portability (transfer of data to you or another controller).
  • Withdrawal of consent at any time.

Note: These rights are guaranteed both under GDPR (EU residents) and PDPL (UAE residents), although conditions and procedures may differ slightly between the two frameworks.

Exercising your rights

Send us a request by email or postal mail (with ID copy). We will respond within 1 month (extendable by 2 months if necessary).

International transfers

  • Within the EEA: same level of protection applies.
  • Outside the EEA (e.g., to UAE or other jurisdictions): we ensure compliance with GDPR transfer rules (standard contractual clauses) and PDPL requirements (adequate safeguards, UAE Data Office oversight).

Supervisory authorities

If you believe your rights are not respected, you can file a complaint with:

  • Belgium: Data Protection Authority (APD/GBA) – Rue de la Presse 35, 1000 Brussels – [email protected]
  • UAE: UAE Data Office (federal regulator) or, if applicable, the DIFC Commissioner of Data Protection or the ADGM Office of Data Protection.

Changes to this Charter

We may update this Charter to reflect legal, regulatory, or service changes. Please consult it regularly.

Glossary (simplified)

Personal data: Any information identifying a natural person (name, ID, email, IP, etc.).
Processing: Any operation on personal data (collection, use, storage, transfer, deletion).
Controller: The entity deciding purposes and means of processing.
Processor: The entity processing data on behalf of the controller.