Privacy Policy and Data Protection
This Privacy Policy defines the strict data security protocols that Vast Winstburg ("the Platform", "we", "us" or "our") employs to protect user information processed via https://vastwinstburg.org. From our headquarters in Brussels, we are unconditionally committed to protecting your digital privacy in accordance with the General Data Protection Regulation (AVG/GDPR) and Belgian national legislation.
Data Architecture and Information Collection
To provide a secure, high-quality AI-driven analysis environment, we systematically collect the following categories of personal data:
-
Identity Data: Full name, date of birth, and government-issued identification required for mandatory Know Your Customer (KYC) verification.
-
Contact Details: Authenticated email address, active phone number, and verified residential address.
-
Digital Telemetry: IP addresses, browser specifications, geographical routing data, and detailed logs of your interactions with our algorithmic interfaces.
-
Compliance Data: Financial source information specifically required to comply with Belgian anti-money laundering (AML) legislation and FSMA guidelines.
Legal Basis for Processing
Under European law, the processing of your personal data is strictly justified on the basis of:
- Contractual necessity: To manage your account and deliver our core analysis services.
- Legal obligations: To comply with national regulations imposed by Belgian financial regulators and the Data Protection Authority (GBA).
- Legitimate interests: For fraud prevention, network stability, and the optimization of our AI models through anonymized datasets.
Cryptographic Standards and Retention
Vast Winstburg employs enterprise-grade 256-bit AES encryption to secure all data transfers. Your personal information is hosted on strictly secured servers with restricted access. We retain personal data no longer than necessary for the stated purposes or as legally required by Belgian retention obligations (typically 7 to 10 years for financial administration).
Your Rights under the GDPR
The GDPR grants you full control over your data. To exercise these rights, please contact our Data Protection Officer at [email protected].
Right to access
Request a copy of the data we hold about you.
Right to rectification
Demand correction of inaccurate or outdated information.
Right to erasure
Request deletion of your data ("Right to be forgotten"), subject to legal retention obligations.
Right to data portability
Receive your data in a structured and machine-readable format.
Effective Date: March 20, 2026.