Privacy Policy
Last updated: September 2025
Preamble
Data controller
The controller of the personal data collected via the Seido Platform is:
UMUMENTUM SRL
- Address: Rue de Grand-Bigard 14, 1082 Berchem-Sainte-Agathe, Belgium
- Email: rgpd@seido-app.com
As a preliminary point, the terms “personal data” must be understood within the meaning given to them in Article 4 of Regulation 2016/679 (the “GDPR“).
Processing of the managing Client’s data
By registering on Seido, the Client accepts that Seido may store, process and use the personal data collected upon registration, and that relating to Seido’s invoicing obligations towards the Client. This includes the possibility of citing the Client’s name in Seido’s customer references.
By registering on Seido, the Client consents to Seido, as a data controller, retaining and processing its data for the performance of the services, including for the commercialisation of additional services managed by third parties and offered by Seido.
Legal bases for processing:
- Performance of the contract (Art. 6(1)(b) GDPR): for the provision of the Platform’s services, the management of the Client’s account, and invoicing
- Consent (Art. 6(1)(a) GDPR): for the commercialisation of additional services, the use of marketing cookies, and promotional communications
- Legitimate interest (Art. 6(1)(f) GDPR): for the improvement of our services, the security of the Platform, and the prevention of fraud
- Legal obligation (Art. 6(1)(c) GDPR): for the retention of invoicing data and compliance with accounting and tax obligations
These personal data of the Client will be retained for the entire duration of use of the service and for a period of five (5) years after its termination.
The Client accepts that the communication of its personal information takes place from the free trial period onwards, where such a period has been requested by the Client.
Processing of the data of Platform users
Tenants
The Client acknowledges that the use of the Platform by its tenants involves the collection and processing of the personal data of the latter by Seido.
The Client undertakes to:
- Inform its tenants in advance of this collection and processing of their personal data in accordance with the GDPR
- Obtain their consent where necessary
- Warrant that it has the necessary authorisations for the processing of their data via the Platform
Service providers
Seido directly informs service providers, upon their registration on the Platform, of the processing of their personal data and obtains their consent in accordance with the GDPR.
Owners and managers
Additional owners invited to the Platform by the Client are informed by Seido, upon their registration, of the processing of their personal data and give their consent in accordance with the GDPR.
Types of data collected
Seido processes the data of all users of the Platform (managers, owners, tenants and service providers) solely in the context of the provision of its services, as a data controller or data processor as the case may be.
The personal data collected include in particular but are not limited to:
- Identification data: surname, first name, address, phone, email
- Communication data: messages, photos, documents exchanged via the Platform
- Intervention data: reports, evaluations, action history
- Geolocation data: only where necessary for interventions
Data sharing
The data entrusted by the Client to Seido are initially processed by Seido in its capacity as data controller. However, depending on the products or services chosen, in certain particular cases, Seido may be required to share the required personal data of the Client with:
- Contacts within Seido in order to handle any technical problems of the Client through the technical support system
- Seido’s partners so that they can provide the Client with their products and services commercialised by Seido and which the Client has accepted during a free trial period and/or as part of the Subscription via the Platform
- IT and security service providers (in particular Cloudflare for security management and protection against bots)
- Social media platforms and marketing partners (in particular LinkedIn for tracking and marketing features)
- The competent governmental and public authorities, to comply with legal or regulatory obligations or requests
- Any other third parties deemed necessary or appropriate: (a) under the applicable law; (b) to comply with legal proceedings; (c) to enforce the Terms of Use; (d) to protect the rights of Seido, the interests of Seido, its security or its property, that of the Client or that of others
Apart from the aforementioned situations, Seido requests the Client’s authorisation, if necessary, in order to be able to use and/or share its data with third parties.
List of sub-processors
Seido uses the following sub-processors for the processing of personal data:
- Cloudflare, Inc. – Security and protection against bots – United States (EU-US Data Privacy Framework certified)
- LinkedIn Corporation – Marketing services and social features – United States (EU-US Data Privacy Framework certified)
- Vercel Inc. – Hosting of the application and website – European Union
- Supabase – Database and file storage – European Union
This list is updated regularly. To receive notifications in the event of a change to the list of sub-processors, please contact rgpd@seido-app.com. Clients have a period of thirty (30) days to object to the addition of a new sub-processor.
Rights of data subjects
In accordance with the GDPR, the Client has the following rights concerning its personal data:
- Right of access (Art. 15): obtain confirmation that data concerning you is being processed and access that data
- Right of rectification (Art. 16): obtain the rectification of inaccurate or incomplete data
- Right to erasure (Art. 17): obtain the erasure of your data in certain circumstances
- Right to restriction of processing (Art. 18): obtain the restriction of processing in certain circumstances
- Right to portability (Art. 20): receive your data in a structured and commonly used format
- Right to object (Art. 21): object to the processing of your data for reasons relating to your particular situation
- Right to withdraw your consent: where the processing is based on consent
This information will not be communicated to third parties in any way.
Regarding the right to portability (Art. 20), you can export a copy of your personal data yourself at any time from your Settings, in the “Data and privacy” section, via the “Export my data” button.
To exercise these rights, contact:
- Email: rgpd@seido-app.com
- Postal address: UMUMENTUM SRL, Rue de Grand-Bigard 14, 1082 Berchem-Sainte-Agathe (Belgium)
Request procedure:
To exercise your rights, please send your request to the email address above, including: (1) your full name, (2) the email address associated with your Seido account, (3) the nature of your request (access, rectification, deletion, etc.), and (4) a copy of an identity document for verification. Seido undertakes to respond to your request within a period of one (1) month from its receipt. This period may be extended by two (2) additional months in the event of complexity of the request, in which case you will be informed of this extension.
Contact for questions relating to data protection:
For any question concerning the processing of your personal data or the exercise of your rights, you can also contact our data protection officer at: rgpd@seido-app.com
Recourse to the supervisory authority:
The Client has the right to lodge a complaint with a competent supervisory authority if it considers that the processing of its personal data by Seido does not comply with the GDPR.
The Client may contact the Data Protection Authority (Belgium) for any question relating to its rights and/or lodge a complaint with the Data Protection Authority regarding the processing of its personal data by Seido:
- Email: dpo@apd-gba.be
- Address: Rue de la Presse 35, 1000 Brussels
- Website: https://www.autoriteprotectiondonnees.be
Ownership and confidentiality of the data
The data belonging to the Client and hosted on Seido (information on owners, tenants, service providers, contracts, financial information, communications, intervention tickets, etc.) are and remain the property of the Client.
Seido undertakes to:
- Keep this data strictly confidential
- Make no copy of the data, apart from technical necessities
- Make no use of it other than that provided for the performance of the services
Client’s responsibilities
The Client is solely responsible for the data it transmits to Seido for the purposes of hosting or using the Platform.
The Client warrants:
- That this data belongs to it or that it has the right to use it and transfer it to Seido
- The legality and accuracy of the data communicated to Seido
- That it has the necessary authorisations from the other parties (tenants, providers, owners) for the processing of their data via the Platform
- That it has fulfilled all the obligations that may fall to it with regard to the information/property/data that it shares with Seido and of which it is the holder
Data security
Data location
The personal data collected via the Seido Platform is stored and processed within the European Union. Seido uses hosting infrastructures located in the EU/EEA to ensure compliance with the GDPR requirements regarding international data transfers.
Seido implements appropriate technical and organisational measures to ensure the security of personal data:
- SSL encryption for all communications
- Secure environment for data storage
- Staff training on confidentiality
- Daily encrypted backups on an external server
- Software firewall on all servers
However, as no mechanism offers maximum security, an element of risk is always present during the transmission of data over the Internet. Seido cannot be held liable for the loss of the Client’s data, even in the event of a failure of the Platform or the servers.
Notification of data breaches
In the event of a personal data breach likely to result in a risk to the rights and freedoms of the data subjects, Seido undertakes to:
- Notify the Data Protection Authority within seventy-two (72) hours of becoming aware of the breach
- Inform the affected Clients without undue delay where the breach presents a high risk to their rights and freedoms
- Provide in the notification: the nature of the breach, the categories and approximate number of data subjects concerned, the likely consequences, and the measures taken or proposed to remedy the breach
- Document all data breaches, including the facts, the effects and the corrective measures taken
Retention period
Personal data is retained for:
- The duration of use of the service for the data necessary for the operation of the Platform (identification, communication, intervention, geolocation data)
- Five (5) years after termination of the service for invoicing and contractual data
- Three (3) years for marketing cookie data (LinkedIn) from the last consent
- The duration of the session for technical and security cookies (Cloudflare)
- The applicable legal periods for data subject to specific retention obligations
International transfers
Seido undertakes to ensure that all transfers of personal data outside the European Union are carried out in accordance with the GDPR and with the adequacy decisions or appropriate safeguards provided for by the regulations.
In the context of the use of third-party services (in particular LinkedIn and Cloudflare), certain personal data may be transferred to countries located outside the European Economic Area, including the United States. These transfers are governed by appropriate safeguards such as the Standard Contractual Clauses of the European Commission or the EU-US Data Privacy Framework for certified companies. You can obtain a copy of these safeguards by contacting rgpd@seido-app.com.
Changes to the policy
This privacy policy may be modified at any time. In the event of a significant change, users will be informed by email fifteen (15) days before the entry into force of the changes.
Data Processing Agreement (DPA)
For professional Clients acting as data controllers, Seido makes available a Data Processing Agreement (DPA) compliant with Article 28(3) of the GDPR. This DPA defines the subject matter, duration, nature and purpose of the processing, the types of personal data and the categories of data subjects, as well as the obligations and rights of the data controller and the data processor.
To obtain a copy of the DPA or for any question relating to the processing of data, please contact: rgpd@seido-app.com
UMUMENTUM SRL – Seido
Rue de Grand-Bigard 14, 1082 Berchem-Sainte-Agathe, Belgium
BCE/KBO: 0775.691.974 | VAT: BE0775691974
