Privacy Notice

Trialzen SA — Chaussée de Louvain 490, 1380 Lasne, Belgium — VAT BE 0770.478.918 Last updated: 16-Jul-2026

Trialzen SA ("Trialzen", "we") is committed to protecting your personal data. This notice explains what personal data we collect, why, and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and Belgian data protection law.

1. Who is responsible?

Trialzen SA is the controller for the personal data described in this notice. Our Data Protection Officer can be reached at security@trialzen.com.

Where Trialzen provides its FPS (Forecasting & Planning Solution) service to customers, Trialzen acts as a processor on behalf of the customer for the data processed in the service. That processing is governed by our agreement with the customer, including its data processing terms, and the customer's own privacy notice applies.

2. What data we collect and why

Website visitors. When you visit trialzen.com we process technical data (IP address, browser type, pages visited) and cookie data. We use this to operate and secure the website and to understand how it is used. Legal basis: our legitimate interest in running a secure, effective website; consent, for non-essential cookies.

Contact, demo and sandbox requests. When you contact us or request a demo or sandbox we process the details you provide (name, business email, company, message). We use this to respond to you and follow up on your interest. Legal basis: steps prior to entering into a contract; our legitimate interest in developing our business.

Marketing contacts. We may send information about Trialzen products to business contacts. Legal basis: consent, or our legitimate interest in marketing to business contacts, subject to your right to object. You can opt out at any time via the unsubscribe link or by emailing security@trialzen.com.

FPS user accounts. If your organization uses FPS, we process your user account data (name, business email, role) and technical usage logs to provide, secure and support the service. Legal basis: performance of our contract with your organization; our legitimate interest in securing the service.

3. How long we keep data

We keep personal data only as long as necessary for the purposes above, per our Data Retention Policy: account data for the duration of the customer relationship, correspondence and marketing data until you object or the interaction is no longer relevant, and financial records as required by Belgian law. Data is then deleted or anonymized.

4. Who we share data with

We do not sell personal data. We share it only with service providers who process it on our instructions under data processing agreements: Amazon Web Services (hosting, EU region — Ireland, with replication within the EU) and Google Workspace (email and collaboration, EU data storage), plus carefully selected sub-contractors with time-limited, scope-restricted access. We may also disclose data where required by law.

5. International transfers

Personal data is hosted in the EU. Transfers outside the European Economic Area are only performed where an adequacy decision applies or appropriate safeguards (such as EU Standard Contractual Clauses) are in place.

6. Your rights

You have the right to access, rectify and erase your personal data, to restrict or object to its processing, to data portability, and rights related to automated decision-making. To exercise these rights, contact security@trialzen.com. We respond within one month. You can also lodge a complaint with the Belgian Data Protection Authority (autoriteprotectiondonnees.be / gegevensbeschermingsautoriteit.be) or your local supervisory authority.

7. Security

We protect personal data with technical and organizational measures aligned with ISO 27001, including encryption in transit and at rest, least-privilege access control with multi-factor authentication, and continuous compliance monitoring.

8. Changes to this notice

We may update this notice from time to time; the latest version is always available on this page.