Privacy Policy

Last updated: 24 June 2026

This privacy policy describes how Indépendant Simonet Antonin (“TrainMarket”) collects, uses and protects the personal data of users of the trainmarket.be Platform, in accordance with Regulation (EU) 2016/679 (“GDPR”).

1. Data controller

  • Company: Indépendant Simonet Antonin — Rue du Taillis 181, 4520 Wanze, Belgium
  • DPO contact: contact@trainmarket.be
  • Company number: BE 0661.650.064

2. Data collected

  • Registration data: name, first name, email, hashed password, profile photo (optional).
  • Transaction data: delivery address, IBAN (Sellers), company number (professional Sellers).
  • Usage data: messages, ratings.
  • Technical data: IP address, browser type, pages visited, session duration.

3. Purposes and legal bases

  • Account creation and management — performance of contract (Art. 6.1.b GDPR)
  • Processing of transactions — performance of contract
  • Customer service — legitimate interest (Art. 6.1.f)
  • Fraud prevention — legitimate interest
  • Newsletter and marketing communications — consent (Art. 6.1.a)
  • Accounting and tax obligations — legal obligation (Art. 6.1.c)

4. Data recipients

Data may be transmitted to:

  • Stripe — for payment processing (processor, GDPR certified)
  • Infomaniak — for hosting (processor, GDPR certified, hosting in Switzerland)
  • Tax authorities and judicial authorities upon legal request

5. Transfers outside the EU

No systematic transfer outside the EU. If a processor does so (e.g. Stripe — United States), it relies on the Standard Contractual Clauses (SCC) approved by the European Commission or the EU-US Data Privacy Framework.

6. Retention period

  • Account data: for the entire registration period + 3 years after deletion
  • Transaction data: 10 years (Belgian accounting obligation)
  • Prospecting data: 3 years after last contact
  • Analytics cookies: 13 months maximum

7. User rights

In accordance with the GDPR, you have the following rights:

  • Right of access and copy (Art. 15)
  • Right to rectification (Art. 16)
  • Right to erasure (Art. 17)
  • Right to restriction of processing (Art. 18)
  • Right to data portability (Art. 20)
  • Right to object (Art. 21)
  • Right to withdraw consent at any time

To exercise these rights: email contact@trainmarket.be with proof of identity. Response within 30 days.

8. Data security

  • Encrypted HTTPS connections (TLS)
  • Hashed passwords
  • Daily encrypted backups (Infomaniak)
  • Access to data restricted to authorised personnel

9. Complaint to the Data Protection Authority

If you believe your rights are not being respected, you may lodge a complaint with the Belgian Data Protection Authority (APD/GBA):
Rue de la Presse 35, 1000 Brussels — dataprotectionauthority.be

Scroll to Top