#(S)heDIDIT vzw (Belgian enterprise number 0680.560.710) (referred to herein as “SheDIDIT”, “we,” “us,” or “our”) have created this privacy statement in order to demonstrate our commitment to privacy. Your right to privacy and data security is a primary concern and we endeavour always to comply with all applicable data protection and privacy laws, including the GDPR.
This privacy statement sets out the basis on which any information we collect from you, or that is provided to us, will be processed by us.
INFORMATION GATHERING AND USAGE
Your personal data
We intend to give you as much control as reasonably possible over your personal data (information that can be used to identify you, such as your name, email address, telephone numbers, postal address, credit card information, etc.). There are times when we may need to collect and process personal data from you in order to service your needs.
Set out below is a list of the types of personal data we might collect from you, the purposes for which we would use it, and the legal basis we would rely upon under GDPR.
| Purpose | Type of data | Legal basis |
| To register you as a new user to the platform or for any of our coaching programs | Identity information Contact details Background information Any other information you provide as part of the registration process | We have obtained your prior (explicit) consent or processing is necessary to enter into a contract or to perform our contractual obligations towards our users. |
| To prepare aggregated information for internal and external reporting purposes, including to our members and our funders and subsidy providers | Identity information Background information Ethnicity (with consent) | We have obtained your prior (explicit) consent or the processing is necessary for the purposes of legitimate interest. |
| To manage our recruitment process and process job applications which includes evaluating, at your request, your profile as a job applicant related to entering in a potential employment agreement with us, as well as storing all submitted application documents including to establish a recruitment reserve by maintaining a pool of candidates to fill future vacancies for which your profile may be suitable | (a) Identity information (b) Contact details (c) Professional background (d) Educational background (d) Application materials (e) Recruitment assessments We will not ask you to provide us with sensitive personal data unless it is necessary for the purposes of carrying out our obligations and specific rights according to legal and regulatory requirements, or with your explicit consent | The processing is necessary to enter into a possible contract with applicants. The processing is necessary for the purposes of legitimate interest. The processing is necessary to comply with our legal obligations. |
| To manage our obligations and operations related to employment processes which include: (a) processing and managing payroll administration, including compliance with social and labor legislation (b) applying for subsidy applications (c) evaluating and monitoring personnel performance within the performance of any employment relationship or agreement (d) guaranteeing workplace security and access control to the workplace (e) managing internal IT-systems and online technology in the workplace | (a) Identity (b) Employment details (c) Payroll and benefits information (d) Attendance data (e) Performance records (f) Workplace access data (g) Communications data (h) Incident records (i) Social security and related documentation | The processing is necessary to perform our contractual obligations towards our employees. The processing is necessary for the purposes of legitimate interest. The processing is necessary to comply with our legal obligations. |
| To process and deliver your order including: (a) Manage payments, fees and charges (b) Collect and recover money owed to us | (a) Identity (b) Contact details (c) Financial / Payment information (d) Transactional information | Processing is necessary to enter into a contract or to perform our contractual obligations towards you. The processing is necessary for the purposes of legitimate interest. |
| To manage our relationship with you which will include: (a) Running our coaching programs, including to provide a more tailored experience to individual participants (b) Notifying you about changes to our terms or privacy policy (c) Dealing with your requests, complaints and queries | (a) Identity (b) Contact details (c) Background information Any other information you provide as part of the registration process or during any subsequent interactions with us | Processing is necessary to enter into a contract or to perform our contractual obligations towards you. The processing is necessary for the purposes of legitimate interest. |
| To enable you to partake in a giveaway or prize draw | (a) Identity (b) Contact details (c) Background information | The processing is necessary for the purposes of legitimate interest. |
| To administer and protect our business and this website (including troubleshooting, fraud prevention, cybersecurity, data analysis, testing, system maintenance, support, reporting and hosting of data) | (a) Identity (b) Contact details (c) Background information (d) Usage data (e) Technical information | The processing is necessary for the purposes of legitimate interest or it is necessary to comply with our legal obligations. |
| To use data analytics to improve our website, products, services, customer relationships and experiences and to measure the effectiveness of our communications | (a) Technical information (b) Usage data | The processing is necessary for the purposes of legitimate interest. |
| To carry out research through your voluntary participation in surveys | (a) Identity (b) Contact details (c) Background information | The processing is necessary for the purposes of legitimate interest. |
| To enter into a contract with you, to perform under a contract we have entered into with you or to enforce our Terms of Use | (a) Identity (b) Contact details (c) Background information (d) Usage data (e) Technical information | Processing is necessary to enter into a contract or to perform our contractual obligations towards you. Processing is necessary for the purposes of legitimate interests. |
| To send newsletters or similar communications | (a) Identity (b) Contact details (c) Background information | We have obtained your prior consent or processing is necessary for the purposes of legitimate interests. |
| Compliance with law, court or governmental orders | All personal data mentioned above in this table (as the case may be) | Processing is necessary to comply with our legal obligations. |
In some instances we will collect personal information from you when we need this information in order to provide a product or service to you. In such instances, failure to provide your personal data may mean that we are not able to provide the products or services you requested.
If we would process your personal information for direct marketing purposes, you may object to our processing your personal data in this way at any time. If you do so, we will log your objection, stop processing your data for direct marketing purposes, and we will not contact you again.
We do not perform any automated-decision making activities, including profiling, where your personal data is processed by automated means.
Your consent
Before collecting personal information from you, we may ask you for your consent. We may request this consent in varying forms, such as, by asking you to tick a box on a form (or when visiting our website) or by asking you to provide a written or oral statement.
You may withdraw your consent at any time, by contacting us using the contact details below. Please note, however, that withdrawing your consent will not affect the lawfulness of processing based on the consent you grave prior to withdrawal.
Processing your data for the purposes of legitimate interests
In some cases we will process your personal data for the purposes of legitimate interests, rather than seeking your consent. This is largely so that we can efficiently provide you with services without having to seek individual consent for everything we do. We will, however, always provide you with information on our data processing activities on request and from time to time. Before undertaking processing based on legitimate interests, we will consider your rights and freedoms and will only commence such processing where we do not think your rights will be infringed.
For how long do we keep your personal data?
SheDIDIT will retain your personal information only for so long as is necessary in order to fulfil the applicable purpose for which it was collected.
The main criteria we use to determine the retention period is as follows:
- how long we need to keep the data to fulfil the purposes for which we are using it;
- whether there are contractual or legal obligations that exist that require us to retain the data for a specific period of time;
- whether there is an ongoing legal claim that relates to any products or services we have provided or received, or that is related to your relationship with us; and
- whether the data is sensitive or special category data (as defined in applicable data protection laws), in which case we would generally apply a shorter retention period.
With whom do we share your personal data?
We do not sell, rent or lease your personal data to third parties. We may however share personal data with our service providers, to the extent necessary for the purpose of receiving services from those providers, including to provide products or services to you, or in execution of our values and mission, or insofar as required to comply with our legal or contractual obligations.
External third-party recipients of your data may include, without limitation:
- IT service providers (including cloud hosting providers or SaaS providers, including AI);
- Marketing service providers;
- HR service providers (for employment or recruitment related data processing);
- Funders or subsidy providers (to the extent required for our funding and, whenever possible, only in a pseudonymized or aggregated form);
- Insurance service providers;
- Government agencies and judicial authorities when legally required;
- Accounting, legal or other external advisors to SheDIDIT.
We may also share personal data with organizations or companies in the context of a succession, reorganization, transfer, assignment or sale of our activities.
We will not otherwise use, share, disseminate, publish or disclose your personal data (except as may be required in response to litigation, investigations or other legally required disclosures).
Where do we store your personal data?
We may transfer your personal data to, or store it in, a destination outside of Europe. This is because SheDIDIT is globally active, with activities located in various jurisdictions, which uses service providers based in a number of locations worldwide (including, for example, cloud hosting providers and other service providers such as Google Drive, WordPress and ActiveCampaign (Mailblue). In some cases, your personal data will be stored in or transferred to jurisdictions outside of the European Economic Area (“EEA”), where data protection laws are not as stringent as the applicable laws under the EEA regime. Where we have to transfer your personal data to such jurisdictions, we will use appropriate approved safeguards or we will seek your explicit consent.
Links to third-party websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our website, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such websites and such websites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
Electronic newsletters
We offer various free electronic newsletters. Users can sign up by clicking on the “Stay updated via email” button on the homepage. If you participate in one of our various coaching programs, you will also be automatically subscribed (unless you actively opt-out in advance) to updates regarding the specific program for which you have enrolled or in which you have participated. We do not spam, sell or rent email addresses, and there’s an easy unsubscribe in every email you’ll receive. You may also remove your address from our mailing lists by sending an email to hello@shedidit.be.
Access. You may contact us at any time in order to request access to the personal information we hold about you. We will confirm whether we are processing your personal data, provide details of the categories of personal data concerned and the reasons for our processing. We can also provide you with a copy of your personal information on request.
Rectification. If the information we hold appears to be inaccurate we will not use it, and not allow others to use it, until it is verified. You can ask us to correct or complete your personal data by contacting us at any time. To the extent possible, we will inform anyone who has received your personal data of any corrections we make to it.
Restriction. In certain circumstances, it may be possible to require us to limit the way in which we process your personal information (i.e., require us to continue to store your personal data, but not otherwise process it without your consent). Such circumstances include:
- where you think the data we hold about you is inaccurate, processing can be restricted while it is being rectified;
- where you object to our processing, (which is being carried out on the grounds that it is necessary in the public interest or for the purposes of legitimate interests) processing can be restricted while we determine whether such grounds override your interests;
- where processing is unlawful but you oppose the erasure and request restriction of your data instead; and
- where we no longer need the personal data but you require the data in order to establish, exercise or defend a legal claim, our processing can be restricted.
Erasure. You may ask to have the information on your account deleted or removed. We will try to do so promptly, and, to the extent possible, we will inform anyone who has received your personal information of your request. However, we must keep track of certain transaction information, such as past purchases and similar information, for legal compliance purposes, so we may not be able to fully delete your information in certain circumstances.
Receiving your personal data. You may also ask us to send you the personal data we hold on you in an electronic, structured and user-friendly format, or you may ask us to send this data to another person. Please note that if you choose to ask us to send your personal data to you or another party, this may impact our ability to provide the products and services you requested.
Object. Where we are processing your personal information without your consent to pursue the purposes of legitimate interests, you may object to us processing your personal data. In particular, where we are using your personal data to contact you for marketing purposes, you may object to such processing at any time.
Automated decision-making. You have the right to be informed of any automated decision-making, including profiling, used in connection with your personal data, and we will provide information about the logic we apply, as well as the significance and consequences of such processing.
Complaints. If you believe that our processing of your personal data is in breach of data protection law, you have the right to lodge a complaint with the Belgian data protection authority (Gegevensbeschermingsautoriteit): https://www.dataprotectionauthority.be/citizen. You may contact the Belgian data protection authority at the following email address: contact@apd-gba.be. You may also contact us at any time if you wish to complain about our processing of your personal data.
For any of the requests listed above, please contact us using the contact details below. We will make reasonable efforts to respond promptly and at the latest within one month. Our response to such requests may be limited to information under our direct control.
Security measures
We limit access to personal data that we collect about you to our employees and third-party agents, who we reasonably believe need to have access to your information to provide you with the information or services you request from us. We have security measures in place to help protect against the loss, misuse and alteration of the information under our control. While we cannot guarantee that loss, misuse or alteration to data will not occur, we ensure that our systems adhere to reasonably security standards so as to help safeguard against such occurrences.
Where information is provided to us via our website, in certain areas the information passed between your browser and our system is encrypted with secure sockets layer (“SSL”) technology to create a protected connection between you and our Site to ensure confidentiality. However, no method of transmission over the Internet, or method of electronic storage is 100% secure. We will use commercially acceptable means to protect your personal data, but we cannot guarantee its absolute security. If you have any questions about our security, you can contact us using the contact details below.
Children’s privacy protection
SheDIDIT does not target and its websites are not intended for children under the age of 15. SheDIDIT will not knowingly collect personal data from children, and will delete such data upon discovery. Where SheDIDIT requires personal data pertaining to children for the purpose of providing a service, the consent of an adult with parental responsibility for that child will be required.
If you do not wish to receive certain communications from us you may opt out by: informing us (using the contact details below) that you no longer wish to receive such communications or following the opt out instructions that we include in each of our communications with you. We will comply with such requests unless such communications from us are required by law or do not require your consent under applicable laws. Your opting out may restrict our ability to provide you with the full extent of our services.
If you would like to get in touch with us with regards to your personal data, please email us at hello@shedidit.be or contact us at:
#SheDIDIT vzw
Enterprise number 0680.560.710
Statiestraat 5, 2600 Antwerpen, Belgium
CHANGES IN THIS PRIVACY STATEMENT
This statement was last updated on 5 November 2025. If we decide to change our privacy policy, we will post those changes to this privacy statement on our website and other places we deem appropriate so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it. We reserve the right to modify this privacy statement at any time, so please review it frequently.