Privacy Policy for Resona.now

    Effective Date: December 11, 2025

    Introduction

    Resona Pulse, having its registered address at Avenue des Chênes 45 - 1180 Uccle, Belgium (the "Company," "we," or "us") is committed to protecting the privacy of all website visitors, prospective clients, and account holders. This Privacy Policy explains how we collect, use, store, and safeguard your personal data when you use our website (https://resona.now/) and related services, in compliance with the EU General Data Protection Regulation (GDPR).

    Resona is the data controller for personal data collected via this site. By using our site or services, you acknowledge that you have read and understood this Privacy Policy. We may update this Policy from time to time and will post any changes on this page, updating the effective date above.

    Data Collection and Use

    We only collect personal data that you voluntarily provide to us through our website forms or account registration. The types of data and purposes for which we collect it are:

    Contact Form Data

    If you fill out a contact or inquiry form, we collect the information you provide (such as your name, email address, phone number, company name, and the content of your message). We use this information to respond to your inquiry, provide the requested information about our services, and follow up on your requests. We will not use contact form details for marketing emails unless you have expressly consented to such communications.

    Account Registration Data

    If you create an account on our website, we collect information needed to set up and maintain your account. This may include your name, email address, business contact details, username, and a password. We use this data to create and manage your user account, authenticate you when you log in, and provide you with access to the features of our platform. We may also use your account contact information to send you important administrative or service-related communications.

    Technical (Browser Data)

    When you access our website, we may automatically collect certain technical information (such as IP address, OS type and version, and Browser type and version) to ensure the security, stability, and proper functioning of our services. This data is essential for detecting malicious activity, preventing fraud, and diagnosing technical issues.

    Legal Basis for Processing

    We process personal data only when we have a valid legal basis under GDPR Article 6. Depending on the context, one or more of the following legal bases may apply to our processing of your information:

    Consent (GDPR Article 6(1)(a))

    When you actively provide us with personal data through our contact form or other interactive features, we interpret this as you giving your consent for us to use that data to respond to your request. Where we rely on consent, you have the right to withdraw consent at any time (see User Rights below), which will not affect the lawfulness of processing done before your withdrawal.

    Performance of a Contract (GDPR Article 6(1)(b))

    If you create an account or otherwise enter into a service agreement with us, we process your personal data as necessary to perform that contract. This includes using your data to provide our services, maintain your account, and communicate with you regarding service delivery. For example, we need to process your login credentials to authenticate you and provide the service.

    Legitimate Interests (GDPR Article 6(1)(f))

    We may process your personal data as needed for our legitimate business interests, provided such processing is not overridden by your rights and interests. For instance, it is in our legitimate interest to use contact data to respond to inquiries from potential clients, to maintain the security of our website (monitoring for malicious activity), and to improve our services. We carefully consider and balance our interests against your privacy rights, and we will not process your personal data on this basis if our assessment determines that your fundamental rights and freedoms outweigh our legitimate interests.

    Data Storage and Retention

    All personal data collected through our website is stored on secure servers. We primarily store and process data within the European Union. We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or to comply with legal and contractual obligations, and then we securely delete or anonymize it.

    If you contact us and do not become a customer or create an account, we will retain the personal data from your inquiry for the period needed to respond and follow up on your request, and for a short additional period thereafter in case you have further questions. Typically, we will not keep inquiry data longer than 1 year from when your request has been resolved, unless we have another lawful reason to retain it (for example, if needed for the establishment or defense of legal claims).

    If you register an account with us, we will keep your personal data for as long as your account remains active. You can delete your account or request deletion of your data at any time, in which case we will remove or anonymize the personal data associated with your account (except for data we are required to keep for legal compliance or legitimate business purposes such as financial reporting and tax purposes).

    In all cases, when we no longer have a legitimate need or legal obligation to retain your personal data, we will ensure it is either securely destroyed or irreversibly anonymized.

    User Rights under GDPR

    As an individual in the EU (data subject), you have robust rights regarding the personal data we hold about you. Resona Now is committed to honoring your rights and facilitating your exercise of them. Your principal data protection rights are:

    Right of Access

    You have the right to request confirmation of whether we are processing your personal data, and if so, to access that data. Upon request, we will provide a copy of the personal information we hold about you, along with information on how we use it, who we share it with, and other required details.

    Right to Rectification

    If any of your personal data that we have is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.

    Right to Erasure

    You have the right to request deletion of your personal data in certain circumstances. Please note that this "right to be forgotten" is not absolute – for instance, we may retain data if needed to comply with a legal obligation or to establish or defend legal claims.

    Right to Restriction of Processing

    You have the right to request that we restrict the processing of your personal data in certain scenarios.

    Right to Data Portability

    For personal data that you have provided to us and which we process by automated means on the basis of your consent or in performance of a contract, you have the right to obtain a copy in a structured, commonly used, machine-readable format, and/or to have that data transmitted to another controller where technically feasible.

    Right to Object

    You have the right to object to our processing of your personal data at any time when that processing is based on our legitimate interests (or those of a third party). If you raise an objection, we will evaluate whether our legitimate grounds for processing override your privacy rights.

    Right to Withdraw Consent

    If we are processing your personal data based on your consent, you have the right to withdraw that consent at any time. Please note that withdrawing consent does not affect the legality of any processing we conducted prior to your withdrawal.

    Right to Lodge a Complaint

    If you believe that our handling of your personal data violates GDPR or your privacy rights, you have the right to lodge a complaint with a supervisory authority (Data Protection Authority) in the EU. You may do so in the EU member state where you reside, work, or where the alleged infringement occurred.

    You can exercise any of these rights by contacting us using the information in the Contact Information section below. We will respond to your request as soon as possible and at most within one month, as required by law (this timeframe may be extended by an additional two months for complex requests, but we will inform you if an extension is needed). We may need to verify your identity before fulfilling certain requests, to ensure that we do not disclose your data to an unauthorized person.

    Data Security Measures

    We take the security of your personal data very seriously. Resona Now implements appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include, for example, using secure encryption protocols (HTTPS/TLS) to protect data transmission between your browser and our website, and encrypting sensitive data at rest where applicable. We restrict access to personal data to only those personnel and service providers who have a legitimate need to know it for the purposes of our operations, and all such parties are subject to confidentiality obligations. We maintain firewalls and monitoring to prevent and detect unauthorized system access, and we regularly review our security practices to guard against new threats.

    International Data Transfers

    Your personal data is primarily stored and processed in the European Economic Area (EEA). We do not transfer or disclose your personal data to countries outside the EEA unless it is necessary and done in compliance with GDPR requirements.

    Contact Information for Privacy Concerns

    If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: privacy@resona.now