Your personal data

Which data do we display?

Company Belgium is a consultation service for the public register of Belgian companies (BCE / KBO). We reproduce the information made public by the Crossroads Bank for Enterprises (Act of 16 January 2003): company name, enterprise number, registered address, legal form, directors, NACE activities, status. We add enrichments (financial analysis derived from annual accounts filed with the NBB, generated FAQ, aggregated contact block).

Our legal basis

Processing BCE register data rests on three cumulative grounds:

• GDPR Article 6(1)(c) — performance of a legal obligation (BCE legal publicity / Act of 16 January 2003).
• GDPR Article 6(1)(e) — public interest mission (operation of a public register recognised by Belgian law).
• GDPR Article 6(1)(f) — legitimate interest for enrichments (financial analysis, contact aggregation), for the benefit of users with a legitimate interest in consulting the register.

Why the right to erasure (GDPR Art. 17) does not apply

The right to erasure is expressly excluded when processing is necessary for compliance with a legal obligation or for a public-interest mission (GDPR Article 17(3)(b)). BCE publicity meets both cumulative conditions. Position confirmed by the Belgian Data Protection Authority. We therefore cannot delete a company record on simple request, including for natural persons appearing in it (directors, managers, shareholders, UBO).

When the right to object (Art. 21) may apply

The right to object remains available, but only for the part of processing that goes beyond strict legal publicity. Concretely, upon motivated request by a natural person (particularly sole proprietors or regulated professions), we may limit for unauthenticated visitors:

• The aggregated contact block (phone, e-mail, website).
• The financial analysis derived from annual accounts.
• The enriched FAQ and generated contextual content.

Scope of a potential restriction

A restriction is NOT a deletion. Raw BCE register data remains visible: we cannot legally derogate. A restriction only limits enriched diffusion to anonymous visitors. Users with an account (documented legitimate interest) retain full access. Requests from legal entities (companies) are by default outside the material scope of the GDPR (Recital 14) and therefore rejected, except in exceptional cases (e.g. an SRL whose name is a natural person's personal name).