Privacy
Policy

The data controller responsible for your personal data is:

BTU is a bilateral platform operating across the Belgian and Ukrainian tech ecosystems. As a data controller, BTU determines the purposes and means of processing personal data you provide to us.

BTU does not appoint a formal Data Protection Officer (DPO) at this stage, as processing is not carried out at a scale requiring mandatory appointment under Article 37 GDPR. For all data protection enquiries, contact us at the address above.

We collect only the personal data that is necessary for the purposes described in Article 03. We do not collect sensitive categories of data (Article 9 GDPR).

2.1 — Contact & Membership Enquiries

When you submit our contact form, we collect:

• Full name
• Professional email address
• Organisation name and country (optional)
• LinkedIn profile URL
• Your message content
• Submission timestamp and origin country (logged automatically)

2.2 — Technical Data

When you browse this website, our infrastructure (Cloudflare) may process:

• IP address (anonymised or truncated for analytics)
• Browser type and version
• Referring URL and pages visited
• Date and time of access

This data is processed by Cloudflare Inc. under its own privacy terms.

2.3 — Analytics Data (Google Analytics)

If you consent to analytics cookies, Google Analytics (operated by Google Ireland Ltd.) collects:

• Pages visited and navigation path
• Session duration and bounce rate
• Approximate geographic location (country / region, derived from IP)
• Device type, operating system, and browser
• Traffic source and referral URL

This data is associated with a randomly assigned client identifier stored in a cookie, not with your name or email. IP addresses are anonymised before storage. You may opt out at any time by withdrawing your cookie consent.

2.4 — Communications

If you correspond with us by email, we retain those communications as part of our relationship management records.

We process your personal data only for the purposes listed below, each with a defined legal basis under GDPR (Regulation (EU) 2016/679) and, where applicable, the Ukrainian Law on Personal Data Protection (No. 2297-VI, 1 June 2010, as amended).

Where our legal basis is legitimate interests, we have conducted a balancing test and concluded that our interests do not override your rights and freedoms. You may request a copy of this assessment by contacting us.

Where our legal basis is consent, you may withdraw it at any time without affecting the lawfulness of prior processing. To withdraw consent, contact us at privacy@belgiantechhub.com.

We do not sell, rent, or trade your personal data. We share it only with the following categories of recipients, and only to the extent necessary:

4.1 — Infrastructure (Cloudflare)

This website is hosted on Cloudflare Pages. Cloudflare processes connection-level technical data as part of its CDN and security services. See Cloudflare's Privacy Policy for details.

4.2 — Analytics (Google Analytics)

If you accept analytics cookies, browsing data is shared with Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland), acting as our data processor. Google may transfer this data to Google LLC in the United States under Standard Contractual Clauses. See Google's Privacy Policy for details. We have enabled IP anonymisation and do not share any personally identifying information with Google Analytics.

4.3 — Founders and Core Team

Authorised members of the BTU founding team (Belgium and Ukraine) access your data solely to follow up on your enquiry or manage your membership. All team members are bound by confidentiality obligations.

4.4 — Legal Disclosure

We may disclose data if required by law, court order, or a competent authority in Belgium or Ukraine, provided such request is lawful and proportionate.

BTU operates as a bilateral platform with team members in Belgium (EU) and Ukraine (non-EU country). Your data may therefore be accessed from both jurisdictions.

5.1 — Transfers to Belgium / EU

Belgium is an EU member state. Processing within Belgium is governed by GDPR. No additional safeguards are required for intra-EU transfers.

5.2 — Transfers to the United States (Google)

If you accept analytics cookies, data collected by Google Analytics may be transferred to Google LLC in the United States. The United States is subject to an adequacy decision under the EU–US Data Privacy Framework (Commission Decision of 10 July 2023). Google LLC participates in this framework. Where transfers fall outside this framework, Standard Contractual Clauses apply. You may avoid this transfer entirely by declining analytics cookies.

5.3 — Transfers to Ukraine

Ukraine is not currently subject to an EU adequacy decision under GDPR Article 45. Transfers of personal data from Belgium/EU to Ukraine are carried out on the basis of Standard Contractual Clauses (European Commission Decision 2021/914) between the EU-based controller and the Ukrainian-based processing party.

Ukraine's own data protection framework (Law No. 2297-VI, as amended) requires that cross-border personal data transfers be permitted only where the recipient country provides an adequate level of protection or where appropriate safeguards exist. We apply equivalent protections when transferring data in the reverse direction.

You may request a copy of the applicable transfer safeguards by contacting us at privacy@belgiantechhub.com.

We retain personal data only as long as necessary for the purpose for which it was collected, or as required by law.

When the applicable retention period expires, data is permanently deleted or anonymised. If you request erasure before that date, we will comply unless a legal obligation requires us to retain it.

You have rights over your personal data under both GDPR and Ukrainian Law No. 2297-VI. These rights are substantively aligned; we honour both.

To exercise any of these rights, submit a written request to privacy@belgiantechhub.com. We will respond within 30 calendar days. In complex cases we may extend this by a further 60 days, with notification.

We will not charge a fee for legitimate requests. We may request verification of identity before processing your request to protect against unauthorised disclosure.

This website uses two categories of cookies:

Strictly Necessary Cookies (no consent required)

Analytics Cookies (consent required)

Analytics cookies are only placed after you accept them via our cookie consent banner. You may withdraw consent at any time by clicking "Cookie settings" in the website footer. Withdrawing consent stops future data collection but does not retroactively delete data already sent to Google.

We do not use advertising, retargeting, or behavioural profiling cookies. We do not share cookie data with any party other than Google Analytics as described in Article 04.

We implement appropriate technical and organisational measures to protect your data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

Measures in place include:

• TLS encryption for all data in transit (HTTPS enforced)
• Cloudflare WAF and DDoS protection at the infrastructure level
• Access to personal data restricted to authorised team members on a need-to-know basis
• No personal data stored in version control or public repositories

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and inform the competent supervisory authority within 72 hours, as required by GDPR Article 33–34 and UA Law Article 24-1.

This policy may be updated to reflect changes in our data processing activities, legal requirements, or regulatory guidance. When we make material changes, we will:

• Update the effective date at the top of this page
• Notify active members and recent contacts by email where the change directly affects their data

The most current version of this policy is always available at belgiantechhub.com/privacy. Continued use of our website or services after an update constitutes acknowledgement of the revised policy, where permitted by applicable law.

For any data protection enquiry, rights request, or complaint, contact us at:

We are committed to resolving data protection concerns promptly. If you are not satisfied with our response, you retain the right to escalate to a supervisory authority as described in Article 07.