Legal, Privacy & GDPR

Bewebwise SRL (Enterprise Number: BE 0666.602.014) is committed to transparency, professional integrity, and the highest standards of data security.

This page Bewebwise Terms and Privacy Policy outlines the legal framework under which we provide our compliance services.

Bewebwise Terms and Privacy Policy

By accessing our website or utilizing our B2B compliance services, you acknowledge that you have read and understood this Bewebwise Terms and Privacy Policy. This document serves as the legal foundation for our partnership.

Data Collection and Usage Protocols

The data processing activities described in the Bewebwise Terms and Privacy Policy are strictly limited to what is necessary for Peppol registration and B2B invoice routing.

Under this Bewebwise Terms and Privacy Policy, we operate with a strict “Data Minimization” philosophy. We only collect the information absolutely necessary to fulfill our role as your B2B compliance and Peppol implementation partner. The data we collect is categorized into the following three pillars:

Identity & Business Registration Data

To facilitate your registration on the international Peppol network, we must collect official identification data. This includes your BCE/KBO number (Banque-Carrefour des Entreprises), your official company name (SRL, ASBL, or Management Company), and your VAT registration details. This data is used to populate your entry in the 0208 Participant Directory, which is a requirement for the mandatory 2026 e-invoicing transition in Belgium.

Technical Transmission Metadata

When you utilize our 2026 Immunity Bundle or emergency setup services, our systems process technical metadata. This includes UBL (Universal Business Language) file headers, transmission timestamps, and Access Point (AP) logs. This data does not contain the granular “content” of your invoices but is necessary for troubleshooting connectivity and ensuring that your structured e-invoices are successfully delivered to your clients’ Access Points.

Financial Connectivity (PSD2)

For clients using our automated synchronization tools (such as OkiOki), we facilitate secure, encrypted connections to your professional bank accounts. In accordance with the Bewebwise Terms and Privacy Policy, we utilize PSD2-compliant API tokens. This means Bewebwise never sees or stores your banking passwords or credentials; we simply act as a secure bridge to ensure your financial data is mirrored correctly in your accounting software for audit-proof compliance.

Professional Disclaimer & Terms of Service

  • Nature of Engagement: Bewebwise SRL provides expert technical implementation and consulting. Under Belgian law, our services constitute an “obligation of means” (obligation de moyens). We commit to using our decade of expertise to implement tools (such as OkiOki or Safeonweb) according to 2026/2027 Belgian standards.
  • Limitation of Liability: To the maximum extent permitted by the Belgian Civil Code, Bewebwise SRL’s total liability for any claim is strictly limited to the amount paid for the specific session in question.
  • No Liability for Fines: While our goal is to prevent them, Bewebwise SRL is not responsible for administrative fines (SPF Finances, Social Inspection, etc.) resulting from Client-side errors, third-party software failures, or missed deadlines outside of our direct intervention windows.
  • Fiscal Disclaimer: The 120% tax deduction for digital transition is a federal incentive. While we provide the necessary documentation, the final admissibility of any deduction remains the sole responsibility of the Client and their professional accountant.

GDPR & Data Protection Policy

As a Brussels-based firm, we strictly adhere to the General Data Protection Regulation (GDPR) and the Belgian Data Protection Act of July 30, 2018.

  • Zero-Storage Policy: We do not hold your company information in “open” cloud environments. Any data observed during a session is used solely for technical configuration.
  • Banking & Financial Security: * We do NOT store bank details. We never record or hold your IBANs, tokens, or professional banking credentials.
    • Direct Authentication: During an OkiOki setup, you enter your credentials directly into the secure, PSD2-compliant interface of the provider. We never see or “log” your passwords.
  • No Credential Harvesting: Under no circumstances will Bewebwise SRL ask you to share sensitive passwords via email, chat, or phone. All security-sensitive work is performed via live, authenticated sessions.
  • Data Minimization: we collect only the absolute minimum personal data (Name, professional email, Enterprise Number) required to fulfill our contract and comply with Belgian accounting laws.

Client Responsibilities

  • The “Final Check” Rule: The Client remains the “Data Controller.” You are responsible for the final verification of all invoices sent/received via the Peppol network and for the ongoing accuracy of your digital records.
  • Security Hygiene: The Client must safeguard their itsme credentials and eID PINs. Bewebwise SRL will never store these “keys to your business.”
  • System Maintenance: While we provide the “Rescue” setup, the Client is responsible for ensuring their systems remain operational and updated after our intervention.

Third-Party Solutions

Bewebwise SRL implements industry-leading third-party tools (OkiOki, itsme, Safeonweb). We are not the developer of these platforms. Any technical downtime or service-level changes by these providers are governed by their respective Terms of Service.

Jurisdiction & Language

  • Law: These terms are governed exclusively by Belgian Law.
  • Disputes: Any legal disputes shall be subject to the exclusive jurisdiction of the Courts of Brussels.
  • Service Language: While we offer support and implementation in English for your professional convenience, the legal interpretation of these terms follows standard Belgian civil principles.