1. General
Nirmana Real Estate NV has its registered office at Edingensesteenweg 196, 1500 Halle and is registered under company number BE 1018.082.405.
Together with its subsidiaries, Nirmana Real Estate NV forms a group of companies active in the real estate sector. This group includes companies specialising in property development, property management, property operations and logistics real estate activities. In this Privacy Statement, we refer to these companies collectively as “Nirmana”, “we” or “us”.
Personal data are very important to us, and we are committed to protecting them as effectively as possible. When using your personal data, we take account of the rights granted to you by law. For the purposes of this Privacy Statement, Nirmana is considered the controller for all activities involving the processing of your personal data.
As part of our commitment to protecting your privacy and securing your personal data, we wish to explain transparently:
- why and how we collect, use and store personal data;
- what our role as controller entails; and
- what your rights and our obligations are in this respect.
This Privacy Statement applies to any “processing” (i.e. any use) of your personal data by Nirmana.
2. What personal data do we collect and use?
Data you provide to us
- Personal identification data, such as surname, first name, address, date of birth and nationality
- Contact details, such as email address and telephone number
- Professional data, such as job title, company name, company number and professional contact details (for contact persons at companies, suppliers, contractors, architects, property developers, public authorities and other business partners)
- Data you share with us through our contact, project or collaboration forms, via social media, by email, by telephone or by other means in connection with an enquiry, project proposal, collaboration or real estate transaction
- Information about your device and your use of our website (e.g. IP address, browser data and other technical data) collected through cookies and similar technologies
We obtain these personal data in various ways:
- Contacting us through one of the contact forms on our website (general form, sustainability form and project form)
- Entering into an agreement
- Registering a visit
- In the context of our business relationship or professional activities
When using the contact form, we strongly encourage you to provide only the data that are necessary.
Via the website
We retain technical data about each individual who visits our website. Examples include the IP address, browser and external website or app that referred the visitor to us.
We also record how each visitor uses the website. This enables us to see when people visit our website, how a web page is viewed, exactly where they click, where they leave the website, and so on. These analyses allow us to improve the user-friendliness of our website. This information is also used to tailor the website to your personal preferences and interests. This allows us to show you first the products or benefits in which you are most interested and to select the most relevant advertisements.
Cookies allow us to build up this understanding across multiple visits to our websites. A cookie is a piece of information that your browser stores on our behalf and sends back to us at a later time, for example during a subsequent visit. More information about how we use cookies can be found in our Cookie Policy.
3. Why and on what legal basis do we process your personal data?
Performance of a contract or steps taken prior to entering into a contract
- Managing invoicing and payments
To properly manage incoming and outgoing invoices and process payments, we process personal data such as surname, first name, contact details, billing details, company details and bank details. All these data are strictly necessary to ensure that invoices are handled in a timely manner.
- Management of suppliers, contractors, architects, property developers and other business partners
We process personal data relating to contact persons at suppliers, contractors, architects, property developers, public authorities and other business partners in order to manage our contractual relationship, communications, project follow-up and administrative processing. This includes, among other things, names, job titles, professional contact details, company details and correspondence.
Legitimate interests
- Handling enquiries and contact requests
When you contact us through our website, social media, email, telephone or other communication channels, we process your personal data to answer your enquiry, follow up on your request and improve our services. This may include processing your name, contact details, the content of your message and communication history.
- Management of projects and collaborations
Architects, property developers, local authorities, sustainability organisations and other partners can contact us through our website in connection with projects or collaborations. We process the personal data provided in order to assess such opportunities, maintain contacts and further develop potential collaborations.
- Security of our website, systems and infrastructure
We process technical data such as IP addresses, device data, browser data and log data to secure our websites, networks and systems, detect misuse and ensure the continuity of our services.
- Direct marketing to existing customers
If you are already a customer, we may contact you with offers similar to the products or services you have previously purchased from us. In this way, we keep you informed of relevant new offers and our latest news.
Consent
- Direct marketing communications
With your explicit consent, we may use your surname, first name and contact details to send you direct marketing communications. You may withdraw your consent at any time and you always have the right to object to direct marketing, for example by unsubscribing through the link in the footer of the email. This right to object is absolute, and we will therefore respect it without exception.
Legal obligation
- Compliance with our legal obligations relating to the letting and sale of real estate
In certain cases, Nirmana is legally required to request and process certain data. This is the case, among other things, in order to comply with legal obligations relating to:
- the prevention of money laundering and terrorist financing;
- the management of co-owned properties by property managers; and
- responding to formal requests from Belgian tax and judicial authorities.
The list of legal obligations for which Nirmana must process your data is not exhaustive and may change.
4. Who has access to your personal data?
Nirmana employees
Nirmana employees have access to your personal data insofar as this is necessary for the performance of their duties. In all cases, your personal data will be processed only for the purposes described in section 3.
Nirmana staff are bound by strict internal rules and procedures concerning the processing of personal data. They must also comply with the technical and organisational measures we have implemented to protect your personal data.
Partners and service providers
For operational purposes, Nirmana may engage third parties. These include payment service providers, customer management system providers, external accounting firms, marketing system providers, hosting providers, and others. These third parties are bound by this Privacy Statement and will not use your personal data for purposes other than those described herein.
Other service providers may also need access to your personal data. This includes law firms, debt collection agencies, bailiffs, insurance companies and banks.
Competent authorities
In addition, where we receive a lawful request, we must disclose your personal data to competent authorities. We will review and assess every request before actually disclosing your personal data to the competent authorities.
Acquisitions
In the context of an acquisition, your personal data may be disclosed to the third party that acquires all or part of Nirmana.
In any event, Nirmana will never sell your data.
5. Where do we store your personal data?
Your personal data are stored within the European Union.
Some of our service providers process or store your personal data outside the European Economic Area. For transfers of personal data to third countries outside the EEA, we will take appropriate measures to ensure that such transfers comply with the applicable rules on international transfers of personal data. You may obtain further information and a copy of these safeguards by exercising your rights as described in section 8.
6. How long do we retain your personal data?
Your personal data are retained for as long as necessary to achieve the purpose for which they were originally collected. Retention periods vary depending on the type of processing activity and the purpose for which the personal data were collected.
Please note that various statutory retention periods may require personal data to remain stored. Where no retention obligation applies, the data are routinely erased once the purpose for which they were collected has been fulfilled.
In addition, we may retain personal data where you have consented to this or where we may need those data in connection with legal proceedings. In the latter case, we may need to use certain personal data as evidence. For that purpose, we retain certain personal data in accordance with the applicable statutory limitation period, which may be up to thirty years; the usual limitation period for personal claims is ten years.
7. How do we secure your personal data?
We take the necessary administrative, technical and organisational measures to ensure the security and confidentiality of your personal data. We protect your personal data against destruction, loss, misuse and unauthorised access that could result in physical, material or non-material damage.
We store your personal data on appropriately secured computers. When we work with other parties, we require them to maintain the same level of security. Despite all our efforts, we can never fully guarantee the security and protection of your personal data.
8. What are your rights?
Nirmana attaches great importance to protecting your personal data. When using your personal data, we take account of the rights granted to you by law. These rights are set out below.
You can contact us using the contact details provided in section 9 of this Privacy Statement.
Right of access
You have the right to obtain access to your personal data and to request a copy of those personal data free of charge.
Right to rectification
You have the right to have inaccurate personal data corrected or incomplete personal data completed.
Right to erasure
You may request the erasure of personal data held about you. A request to erase your personal data cannot always be granted, for example because of contractual or legal obligations.
Right to object
You have the right to object to the processing of your personal data, for example where the processing is based on our legitimate interests. Where your personal data are used for direct marketing purposes, you have an absolute right to object to that processing.
Right to withdraw consent
Where Nirmana processes your personal data on the basis of your consent, you may withdraw that consent at any time.
Right to restriction of processing
In certain circumstances, you have the right to obtain restriction of processing, for example where you contest the accuracy of the personal data, for a period enabling Nirmana to verify their accuracy.
Right to data portability
You have the right to receive personal data concerning you that are processed by Nirmana in a structured, commonly used and machine-readable format and/or to transmit those data to another controller.
9. How can you contact us?
Do you have any questions or would you like more information about how we handle your personal data? Please contact our customer service team in one of the following two ways:
- Write to: Nirmana Real Estate BV, Vlasgaardstraat 52, 9000 Ghent
- Send an email to: contact@nirmana.realestate
Complaints about the handling of your personal data?
Do you have a complaint about how we handle your personal data? Please contact the Colruyt Group DPO Office at privacy@colruytgroup.com. We will make every effort to find an appropriate solution in consultation with you.
If the DPO Office is unable to assist you adequately, you may contact the competent supervisory authority:
- The Belgian Data Protection Authority
Rue de la Presse 35, 1000 Brussels, Belgium, +32 (0)2 274 48 35, contact@apd-gba.be.
10. Changes to this Privacy Statement
Our services are continuously growing and evolving so that we can continue to provide the best possible service. We will therefore update this Privacy Statement regularly to ensure that it accurately explains how we handle your personal data. Although we will make every effort to draw your attention to changes, we recommend that you review this Privacy Statement regularly. It is your responsibility to keep track of any amendments.
This Privacy Statement was last updated on 18 September 2026.