Your data belongs to you.
This document describes, purpose by purpose, what we collect, why, for how long, and with whom. Compliant with Articles 13 and 14 of the GDPR.
Roles: who processes what
Praticable is a white-label hosted service. Each client has its own instance and remains the sole data controller for its audience's data.
Organiser / B2B data: account, contract, billing, direct support.
Buyer / audience data collected by each client through its instance. The client is the sole data controller.
Gerry Ntabuhashe, managing director.
Autorité de protection des données (APD), Rue de la Presse 35, 1000 Bruxelles. contact@apd-gba.be
Data we collect as controller
Outside the contractual service relationship with its organiser clients, Praticable does not collect any personal data.
Account data
Name, professional email, organisation, role, Argon2id-hashed password, locale, login logs (90 days).
Billing data
VAT number, IBAN, invoices. Retained for 7 years (art. III.86 CDE).
Support data
Emails and tickets opened directly with Praticable.
Technical data
IP anonymised after 30 days, user agent, browser locale. No fingerprinting, no cross-site tracking, no behavioural analytics.
Purposes and legal bases
- Performance of contract (6.1.b): open and maintain the account, host the instance, support, billing.
- Legal obligation (6.1.c): retention of invoices for 7 years.
- Legitimate interest (6.1.f): security, instance monitoring.
- Consent (6.1.a): marketing testimonials only; no cookie set by default.
Sub-processors and recipients
Email notification for any change of sub-processor.
Retention periods
Your rights under the GDPR
You can exercise your rights directly from your dashboard or by writing to privacy@praticable.eu. We respond within one month at most.
If you are a buyer whose data is processed by an organiser through Praticable, please direct your request first to that organiser, who is the data controller. We will assist them in processing your request.
Right of access
Art. 15Obtain confirmation that your data is being processed and receive a copy.
Right to rectification
Art. 16Have any inaccurate or incomplete data about you corrected.
Right to erasure
Art. 17Request the deletion of your data, subject to legal retention obligations.
Right to restriction
Art. 18Request that processing be suspended in the cases provided for by the GDPR.
Right to data portability
Art. 20Retrieve your data in a structured, machine-readable format.
Right to object
Art. 21Object to processing based on legitimate interest.
Right to withdraw consent
Art. 7Withdraw your consent at any time, without affecting the lawfulness of prior processing.
Right to lodge a complaint
APDLodge a complaint with the Data Protection Authority.
Response within one month, free of charge, art. 12.3 GDPR. May be extended by 2 months for complex requests (with notification within the first month).
Cookies and trackers
No advertising cookies, no behavioural analytics. All cookies we use are strictly necessary for the service to function.
Updates to this policy
Any substantial change to this policy will be notified by email 30 days before its effective date. Previous versions are available upon request.