Privacy policy

Introduction

Welcome to Wally. We attach great importance to your privacy. This privacy policy helps you understand which personal data agent.wally BV ("Wally", "we", "us") collects, why we collect it, and how we handle, secure, retain and delete this data.

Personal data is any information relating to an identified or identifiable natural person, such as a name, email address, address or phone number.

By using our website (wally.be) and the services connected to it, you acknowledge having read this privacy policy.

Contact us

agent.wally BV is the data controller for the personal data collected via the website.

Do you have questions about this policy or about your privacy, including a possible breach of your privacy? Then contact us.

• Company name: agent.wally BV
• Address: Xavier De Cocklaan 49, 9831 Deurle, Belgium
• VAT number: BE1025254168
• Phone number: +32 9 298 03 48
• General email address: hello@wally.be
• Email address for privacy questions: privacy@wally.be

Our processing activities

Wally processes your personal data for the purposes described below. For each activity we specify the purpose, the categories of personal data processed, the legal basis and the retention period.

1. Marketing and newsletters

Purpose: We use your email address to send you marketing communication and newsletters, only if you have shown interest or are a client of ours.

Categories of personal data: Name and email address.

Legal basis: Our legitimate interest in informing interested persons about our services (GDPR art. 6(1)(f)).

Retention period: The data is deleted as soon as you unsubscribe. Unsubscribing is easy via the link in every marketing email or by contacting us.

2. Use of the website and cookies

Purpose: When you visit our website, we process data to offer you relevant content, improve your user experience and optimise our website. We do this through technologies such as cookies.

Categories of personal data: Aggregated data such as your IP address, interests (what you click on), and device information. We use tools such as Google Analytics, PostHog and HubSpot for this.

Legal basis: Our legitimate interest in offering a relevant and functional website (GDPR art. 6(1)(f)).

Retention period: The data is generally not kept longer than 2 years after your last activity. For specific retention periods per cookie, please see our Cookie Policy at wally.be/cookies.

3. Providing our services to clients

Purpose: We process the data needed to deliver our AI agent for accountants, manage agreements, and personalise the service for optimal advice.

Categories of personal data: Name, email address, company name, position, role within the firm, and personal preferences you provide.

Legal basis: The processing is necessary for the performance of a contract to which you are a party (GDPR art. 6(1)(b)).

Retention period: We keep this data for a maximum of 2 years after the end of the contractual relationship (with the exception of billing data, which we keep in accordance with statutory periods).

4. Handling questions and providing support

Purpose: If you contact us via hello@wally.be or support@wally.be, we process your data to answer your question or request efficiently.

Categories of personal data: Your contact details and the content of your correspondence with us.

Legal basis: Our legitimate interest in responding to questions and providing support to visitors and clients (GDPR art. 6(1)(f)).

Retention period: Requests and related correspondence are kept for a maximum of 2 years after handling.

5. Job applications

Purpose: We process personal data to manage application procedures, evaluate documents, conduct interviews and contact references.

Categories of personal data: Contact information (name, address, phone, email), CV, cover letter and other documents you submit.

Legal basis: Our legitimate interest in finding the right candidate (GDPR art. 6(1)(f)). For candidates who receive an offer, the legal basis is the necessity to enter into a contract (GDPR art. 6(1)(b)).

Retention period: The data is deleted no later than 6 months after the application procedure is completed, unless otherwise agreed with you.

6. Webinars and events

Purpose: When you register for webinars or events, we collect data to manage and follow up your participation (e.g. for issuing certificates).

Categories of personal data: Contact information such as name and email address, and details about the event you register for.

Legal basis: Our legitimate interest in offering events to interested persons (GDPR art. 6(1)(f)).

Retention period: The data is kept for up to 2 years after the event.

7. Security

Purpose: We process personal data to detect, prevent and limit security risks and abuse.

Categories of personal data: User and web traffic data such as log IDs, IP addresses and device information.

Legal basis: Our legitimate interest in maintaining a secure environment for our clients and our operations (GDPR art. 6(1)(f)).

Retention period: Security logs are generally deleted after 6 months.

Who do we share your personal data with?

Wally only shares your personal data when necessary and in accordance with applicable legislation.

Processors

Wally uses external service providers (processors) to process personal data. These are typically providers of cloud services or other IT services. For the website we use, among others:

• Google Cloud
• Supabase

When we engage processors, we conclude a data processing agreement to safeguard the protection of your privacy rights.

Transfers outside the EEA

All personal data is processed within the European Economic Area (EEA). We ensure your data is not transferred outside the EEA.

Public authorities

The police and other authorities may request access to information from us. In such cases we only share the information that is strictly legally required on the basis of a valid court order or comparable legal document.

Your rights

You have several rights with regard to the processing of your personal data:

• Access: You have the right to request a copy of the personal data we process about you.
• Rectification: You have the right to have inaccurate personal data corrected.
• Erasure: You can ask us to delete your personal data ("right to be forgotten").
• Restriction: You can ask us to restrict the processing of your personal data.
• Portability: You can ask us to provide your personal data in a structured, commonly used and machine-readable format to you or another party.
• Objection: You have the right to object to the processing of your personal data based on our legitimate interest or for direct marketing.

Please note that exceptions or limitations to these rights may apply. To exercise any of these rights, you can send an email to privacy@wally.be.

Complaints

If you have complaints, we always try to reach a joint solution first. However, you have the right at any time to lodge a complaint with the supervisory authority. In Belgium this is the Data Protection Authority (DPA).

• Address: Rue de la Presse 35, 1000 Brussels
• Phone: +32 (0)2 274 48 00
• Website: www.dataprotectionauthority.be

Changes

We recommend consulting this privacy policy regularly. If we make important changes that materially alter our privacy practices, we will notify you.