The company database contains details of businesses and establishments in Belgium. Some of them are sole traders and self-employed professionals; their details relate to a natural person and are personal data. The same applies to named contact persons and to email addresses used by only one person. Details of legal entities are not covered by the GDPR. Public availability does not permit unrestricted reuse.
Martin Adamec is the controller for the database processing. Contact details are given at the bottom of this page.
Depending on the source and the agreed export: name or trading name, legal form, enterprise number (only as published by the business itself), address of the establishment, municipality, province and region, industry and NACE-BEL code, publicly listed business phone number, email address with the type of address (general, personal or freemail) and website. A business address may also be a sole trader’s home address. We do not process special categories of data under Art. 9 GDPR.
We use two kinds of sources (as of 5 November 2026):
Not used: KBO/BCE open data (the Crossroads Bank for Enterprises requires registration) and business directories. The sources and methodology page gives details; we will tell you the origin of your record on request.
The purpose is to structure business information and to provide agreed exports to businesses for market analysis, sales territory planning, maintaining customer data, addressed postal mailings and, within the legal limits, business contact by email and telephone. An export is neither consent to marketing nor proof of reachability. Marketing email without consent may only go to impersonal addresses of legal entities, with an offer intended for legal entities (Art. 1 of the Royal Decree of 4 April 2003); sole traders and named addresses require consent. Anyone who calls must first screen the numbers against the Do Not Call Me list. We point these rules out to our customers and state the type of each email address in the export.
For personal business data, Art. 6(1)(f) GDPR is intended as the legal basis: the interests of the operator and its customers in reliable business information. Necessity and the impact on data subjects must be assessed for the specific source, fields and use. Safeguards are data minimisation, limitation to publicly listed business contact details, rectification, objection and suppression. The Belgian Data Protection Authority points out that even a functional address such as info@ can be personal data if only one person uses it (recommendation 01/2025 on direct marketing, consulted on 4 November 2026). TO CONFIRM: balancing of interests for sole traders and self-employed professionals in light of the Data Protection Authority’s recommendation 01/2025.
Recipients may be business customers receiving the agreed fields as an export, necessary hosting and IT providers, professional advisers and competent authorities. Customers are responsible for their own processing and have their own information and other obligations towards data subjects.
A personal-data export or access from outside the EEA requires a case-by-case assessment and a transfer mechanism under Chapter V GDPR. A purchase alone does not justify disclosure.
Records are kept only as long as necessary and lawful, taking into account the currency of the source, changes, objections and legal obligations. Outdated details are corrected or removed. Minimal suppression identifiers are kept so that a record is not added again after an objection.
You can request access including the origin of the data, rectification, erasure, restriction and, where applicable, data portability. You can object to processing based on legitimate interests on grounds relating to your particular situation, and to use for direct marketing at any time without giving reasons (Art. 21 GDPR); that use then ends. Use the objection form or write to info@basedecontacts.be. We generally reply within one month.
You can lodge a complaint with the Belgian Data Protection Authority (gegevensbeschermingsautoriteit.be), with the Czech Office for Personal Data Protection (uoou.gov.cz) or with any other competent supervisory authority (Art. 77 GDPR).
Where Art. 14 GDPR applies, data subjects must be informed individually and in good time: generally within one month, earlier at first communication or disclosure to a recipient. This page supplements that obligation and does not automatically replace individual information. TO CONFIRM: whether and for which records the exemption under Art. 14(5)(b) GDPR can be relied on, and how individual information is otherwise provided.
These details are updated when sources, purposes or processing change significantly. The current version date is shown above.
Martin Adamec
Mírová 1541, 516 01 Rychnov nad Kněžnou, Czech Republic
IČO: 19552319
info@basedecontacts.be
Legal notice · Business terms · Privacy policy · Objection · Sources and methodology
