fbpx

Privacy Notice

Last updated: May 2026

1. Introduction

Cream Consulting SA  attaches great importance to the protection of personal data and the respect of your privacy.

This Privacy Notice explains:

    • what personal data we collect;
    • why and how we process it;
    • how long we keep it;
    • with whom it may be shared;
    • and the rights you have regarding your personal data.

Cream Consulting SA processes personal data in accordance with:

    • the General Data Protection Regulation (EU) 2016/679 (“GDPR”);
    • applicable Belgian data protection laws;
    • and internal security and confidentiality standards.

This Privacy Notice applies to:

    • visitors of our website;
    • candidates;
    • clients and prospects;
    • partners and suppliers;
    • users interacting with Cream Consulting SA through digital channels or social media.

2. Data Controller

The data controller is:

Cream Consulting SA
Avenue Louise 54
1050 Brussels
Belgium

For any question regarding this Privacy Notice or the processing of your personal data, you may contact: Data Protection Officer (DPO) – Nicolas LIEVIN
gdpr@creamconsulting.com

3. What Personal Data Do We Collect?

Depending on your interaction with Cream Consulting SA, we may collect the following categories of personal data:

Identification and Contact Data

    • first name and last name;
    • email address;
    • phone number;
    • contact language;
    • LinkedIn profile or professional information.

Recruitment Data

    • CV and cover letter;
    • professional experience;
    • education and certifications;
    • interview notes and assessments;
    • availability and mobility preferences;
    • salary expectations;
    • professional references where applicable.

Business Relationship Data

    • company name;
    • job title;
    • communication history;
    • contractual and invoicing information.

Technical and Browsing Data

    • IP address;
    • browser and device information;
    • website navigation and page visits;
    • anonymous website usage statistics.

Cream Consulting SA only collects data that is relevant, adequate, and limited to what is necessary for the intended purposes.

4. Why Do We Process Your Personal Data?

Cream Consulting SA processes personal data for the following purposes:

Recruitment Activities

    • managing applications and recruitment processes;
    • evaluating profiles and skills;
    • contacting candidates regarding job opportunities;
    • maintaining a recruitment database.

Client and Business Relationship Management

    • managing commercial relationships;
    • responding to requests and inquiries;
    • providing consulting services;
    • contract and project management.

Website and Service Improvement

    • improving user experience;
    • measuring website traffic and performance;
    • ensuring website security.

Legal and Compliance Purposes

    • complying with legal obligations;
    • ensuring information security;
    • preventing fraud or misuse;
    • handling disputes or legal claims.

5. Legal Basis for Processing

Depending on the context, Cream Consulting SA processes personal data based on:

    • the performance of a contract;
    • legitimate interest;
    • compliance with legal obligations;
    • or your consent where required by law.

For example:

    • recruitment management may rely on legitimate interest and pre-contractual measures;
    • newsletter subscriptions rely on consent;
    • accounting obligations rely on legal obligations.

You may withdraw your consent at any time where processing is based on consent.

6. Who Can Access Your Personal Data?

Your personal data may be accessed by:

    • authorised Cream Consulting SA employees;
    • HR and recruitment teams;
    • managers involved in recruitment or project delivery;
    • IT and security teams where necessary.

Cream Consulting SA may also share personal data with trusted service providers acting on our behalf, such as:

    • hosting providers;
    • internally managed business and recruitment tools;
    • communication tools;
    • IT support providers.

All third parties processing personal data on behalf of Cream Consulting SA are contractually bound to ensure confidentiality, security, and GDPR compliance.

Personal data may also be disclosed where required by law or competent authorities.

Cream Consulting SA does not sell personal data to third parties.

7. How Long Do We Keep Your Data?

Cream Consulting SA retains personal data only for as long as necessary for the purposes described in this Privacy Notice and in accordance with applicable legal requirements.

As a general principle:

    • candidate data may be retained for up to two years after the last contact;
    • client and contractual data may be retained for the duration required by accounting and legal obligations;
    • technical logs and cookies are retained according to applicable legal retention periods.

Data may be retained longer where required by law or necessary for legal claims or security purposes.

8. Cookies and Tracking Technologies

Cream Consulting SA uses cookies and similar technologies on its website to:

    • ensure website functionality;
    • improve navigation and user experience;
    • analyse website traffic and performance;

Some cookies are strictly necessary for the website to function properly, while others require your consent.

You can manage your cookie preferences through your browser settings or through our cookie banner.

9. Security Measures

Cream Consulting SA implements appropriate technical and organisational security measures to protect personal data against:

    • unauthorised access;
    • accidental loss;
    • disclosure;
    • destruction;
    • alteration;
    • misuse.

Access to personal data is restricted to authorised persons who require access for legitimate business purposes.

Cream Consulting SA continuously works to maintain a high level of information security and confidentiality.

10. Your Rights

Under GDPR, you have the right to:

    • access your personal data;
    • request correction of inaccurate data;
    • request deletion of your data;
    • request restriction of processing;
    • object to certain processing activities;
    • withdraw your consent at any time;
    • request data portability where applicable;
    • lodge a complaint with the competent supervisory authority.

To exercise your rights, please contact: gdpr@creamconsulting.com

Cream Consulting SA may request proof of identity before processing certain requests.

11. Social Media

Cream Consulting SA may interact with users through social media platforms such as:

    • LinkedIn;
    • Instagram;
    • Facebook.

Please note that these platforms apply their own privacy policies and processing activities independently from Cream Consulting SA.

12. Changes to this Privacy Notice

Cream Consulting SA reserves the right to update this Privacy Notice at any time in order to reflect:

    • legal or regulatory changes;
    • technological developments;
    • organisational changes;
    • or updates to our processing activities.

The latest version will always be available on our website.