Your data, handled with rigour.

K-SAT is an AI agency based in Brussels. This document describes how we collect, use and protect your data in accordance with the GDPR (EU 2016/679) and Belgian law.

Last updated: 23 August 2026 Controller: K-SAT AI Agency Jurisdiction: Belgium

Identity of the controller
Data we collect
Purposes of processing
Legal bases
Recipients
Retention periods
Cookies & tracking
Your GDPR rights
Security
K-SAT products & processing
Contact & complaints

1. Identity of the controller

K-SAT AI Agency ("K-SAT"), an agency for AI-generated advertising production and performance media buying, based in Brussels, Belgium.

Contact: contact@k-sat.be · info@k-sat.be · WhatsApp +32 460 25 64 64

2. Data we collect

Contact form

Name, e-mail address
Company (optional)
Sector (selection)
Type of need (selection)
Indicative budget (selection)
Free-text message

Technical data

IP address, user agent (server logs, kept 30 days for security)
Language preference and cookie choice (stored in localStorage, not transmitted)

Analytics & measurement tools

Google Tag Manager — tag orchestration
Google Analytics 4 (G-Z0N1B9S923) — anonymised audience measurement
Meta Pixel (1386191349903860) — Facebook/Instagram measurement and retargeting
LinkedIn Insight Tag (9030554) — LinkedIn measurement and retargeting

These tools are only activated after acceptance through the cookie banner. No directly identifiable personal data is shared — only pseudonymised identifiers and behavioural events.

3. Purposes of processing

Answering your request and drawing up a commercial proposal
Managing the client relationship (quotes, contract, invoicing)
Anonymised audience measurement of the site (with consent)
Security (intrusion detection, anti-spam)

4. Legal bases

Consent (art. 6(1)(a) GDPR) — form, analytics cookies
Pre-contractual steps (art. 6(1)(b)) — quotes and proposals
Legitimate interest (art. 6(1)(f)) — security, fraud prevention
Legal obligation (art. 6(1)(c)) — invoicing, accounting records

5. Recipients

Your data is accessible only to the K-SAT team (Marketing, Content, Software, Testing, Finance) on an operational need-to-know basis. We do not sell or rent your data to third parties.

Technical processors: Vercel (site hosting), Formspree (contact form delivery), Google (Tag Manager, Analytics — after consent only), LinkedIn and Meta (advertising measurement — after consent only).

Transfers outside the European Union: Vercel, Formspree, Google, LinkedIn and Meta are established in the United States. These transfers rely on the European Commission's "EU‑US Data Privacy Framework" adequacy decision of 10 July 2023 where the processor concerned is certified under it, and otherwise on the standard contractual clauses adopted by the Commission. A copy of the applicable safeguards can be obtained on request at contact@k-sat.be.

6. Retention periods

Contact requests that did not lead to an engagement: 24 months, then deleted
Active client files: duration of the relationship + 10 years (Belgian accounting obligation)
Server logs: 30 days
Analytics cookies: 13 months maximum

7. Cookies & tracking

The site uses the following measurement tools: Google Tag Manager, Google Analytics 4 (ID G-Z0N1B9S923), Meta Pixel (ID 1386191349903860) and LinkedIn Insight Tag (ID 9030554). A consent banner is shown on arrival — your choice is stored in your browser's localStorage.

Strictly necessary cookies (language preference, consent choice) stay in your localStorage only, with no transmission to third parties. If you refuse analytics cookies, you can clear your choice at any time by emptying your browser's local storage for this site.

The events tracked automatically are: Contact (click on an e-mail or phone link) and Lead (form submission, WhatsApp opening). No directly identifiable personal data (name, e-mail entered) is passed to the advertising pixels — only the event and its label.

8. Your GDPR rights

Right of access to the data concerning you
Right to rectification where data is inaccurate
Right to erasure ("right to be forgotten")
Right to restriction of processing
Right to data portability
Right to object to processing on legitimate grounds
Withdrawal of consent at any time

To exercise these rights: contact@k-sat.be marked "GDPR request". Answer within 30 days at most.

9. Security

All communications are encrypted with TLS. Client data is stored on infrastructure located in the EU and is accessible only to authorised team members through strong authentication. Our Testing_Dept carries out regular security audits (see internal organisation).

10. K-SAT products: our role as processor

This policy covers the www.k-sat.be website. When you use a K-SAT product — Logistics ERP, SAGA AI WhatsApp Assistant, OPTIMIS Enterprise OS, Synera or AyguFX AI — the data you enter there does not fall under this policy: you are the data controller for it and K-SAT acts only as a processor, within the limits of a data processing agreement (DPA) signed separately.

Your data stays yours. It is partitioned per tenant at database level, and is neither resold nor reused to train a model.
Sub-processors. Hosting, database and storage, language models, and depending on the product: telephony and voice, messaging, payment, image generation providers. The list applicable to your contract is annexed to the DPA and any change is notified to you in advance.
Calls and messages. Where a product records or transcribes calls, or handles WhatsApp, SMS and e-mail conversations, informing the people concerned and obtaining consent rest with you, as the controller.
AI-generated content. Model output is traceable; derived images keep their origin and their label. No decision producing a legal effect concerning a person is taken without human intervention.
Retention and deletion. Retention periods, anonymisation and deletion follow your policy, which the system applies — we do not set them on your behalf.

In its nominal operation AyguFX AI does not process third-party personal data: it consumes market data and connects to the client's brokerage account. It is not an investment service — see the terms of service.

11. Contact & complaints

For any question about this policy: contact@k-sat.be.

If you believe your rights are not being respected, you may lodge a complaint with the Belgian Data Protection Authority (APD/GBA): autoriteprotectiondonnees.be.