Who is responsible
Kastral Systems (“Kastral”), Brussels, Belgium, is responsible for personal data processed through this website and during initial infrastructure assessments.
Privacy enquiries and rights requests can be sent to legal@kastral.eu.
KASTRALClear handling of the information you entrust to us.
This notice explains how we handle personal data submitted through the Kastral website and during an initial infrastructure assessment.
Our default is simple: collect what is necessary, use it for a defined purpose and keep it only as long as that purpose requires.
What we collect
We may receive your name, work email, organisation, role, country and the operational information you choose to include in an assessment or correspondence.
Our hosting and security providers may also process limited technical information such as request time, IP address, browser information and security events.
Why we use it
We use assessment information to respond to your request, understand deployment requirements, prepare an appropriate scope and communicate about a potential engagement.
We process this information to take steps at your request before entering a contract, to pursue our legitimate interests in responding securely and operating this website, and where necessary to meet legal obligations.
Retention and disclosure
Initial assessment and correspondence records are normally retained for up to 24 months after the last meaningful interaction, unless a commercial relationship, legal obligation or dispute requires a different period.
We do not sell personal data. Information may be handled by hosting, email and professional-service providers acting for us, or disclosed where required by law.
Location and safeguards
We aim to keep website and engagement data within the European Economic Area. If a provider processes data elsewhere, we use an appropriate transfer mechanism and contractual safeguards where required.
We apply access controls, data minimisation, secure transport and operational measures proportionate to the information involved.
Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction, portability or object to processing. You may also complain to the Belgian Data Protection Authority.
We do not use assessment information for solely automated decisions with legal or similarly significant effects.
Cookies and updates
This website does not currently use advertising or behavioural-tracking cookies. Essential hosting or security mechanisms may be used to deliver and protect the service.
We may update this notice when our processing changes. The current version is dated 7 August 2026.