Privacy Policy

# PRIVACY POLICY FASTASSIST24 **Version 1.1** · Last updated: 18 July 2026 ---

FastAssist24 CommV ("FastAssist24") is the data controller for the processing of personal data via the FastAssist24 platform. **FastAssist24 CommV** Dumolinlaan 1 bus 13 8500 Kortrijk, Belgium Company number (CBE): 1039.597.203 VAT: BE 1039.597.203 E-mail: privacy@fastassist24.be Website: https://www.fastassist24.be FastAssist24 has not appointed a data protection officer, as there is no legal obligation to do so. Questions regarding data protection may be addressed to the e-mail address above.

This Privacy Policy informs you of the manner in which FastAssist24 processes personal data via its website, mobile application and other digital services. This policy constitutes an information obligation under Articles 12 to 14 GDPR and does not constitute an agreement; your rights as a data subject apply regardless of whether you have taken note of this policy.

FastAssist24 processes personal data of, among others: - **consumer customers** who request an Intervention; - **contact persons of business customers** and their directors; - **staff and contact persons of Service Providers**, including data necessary for payouts; - **visitors to the Platform** who do not place a request.

**Identification data** — surname, first name, company name, company number, VAT number. **Contact data** — e-mail address, telephone number, address. **Vehicle data** — make, model, registration number, vehicle category and technical information necessary for the performance of the Service. **Location data** — the location of the breakdown, the destination provided and other location data necessary to bring the Service Provider to the site. **Payment data** — FastAssist24 does **not** process full payment card details. Payments are handled by the authorised payment service provider Mollie B.V. We receive only the information necessary for payment confirmation, invoicing, refunds and fraud prevention. From Service Providers we process bank account details (IBAN) for the payment of remuneration. **Communication data** — messages via the Platform, e-mails, telephone calls, chat messages, complaints and feedback. **Technical data** — IP address, browser type, device type, operating system, language settings, log files, date and time of use. ### Mandatory or voluntary? Certain data are **necessary** in order to conclude an Agreement and perform the Service — in particular your contact details, the location of the breakdown and the vehicle data. Without these data we cannot process your request. Other data are provided voluntarily; not providing them has no consequences for the services.

FastAssist24 processes personal data solely for specified, explicit and legitimate purposes: - handling assistance requests and organising roadside assistance; - selecting and instructing a suitable Service Provider; - communication regarding your request and customer support; - invoicing, payment processing and refunds; - payment of remuneration to Service Providers; - fraud prevention and security of the Platform; - compliance with legal obligations; - quality monitoring and improvement of our services; - statistical analysis on aggregated or anonymised data.

FastAssist24 processes personal data only where a legal basis exists under Article 6 GDPR. **Performance of a contract** *(Art. 6(1)(b))* — performing the Intervention, communication, payments and customer service. **Legal obligation** *(Art. 6(1)(c))* — tax and accounting obligations, retention obligations and cooperation with competent authorities. **Vital interests** *(Art. 6(1)(d))* — in emergency situations, where processing is necessary to protect your safety or life or that of a third party, for example when passing on a location to the emergency services. **Legitimate interests** *(Art. 6(1)(f))* — our legitimate interests consist of ensuring a safe and reliable platform, preventing fraud and abuse, monitoring and improving the quality of our services, and establishing, exercising or defending legal claims. We weigh these interests against your rights and freedoms in each case. You may object to such processing (see Article 10). **Consent** *(Art. 6(1)(a))* — where legally required we request your prior consent, for example for non-essential cookies or commercial communications. You may withdraw that consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

FastAssist24 **never sells your personal data**. We share personal data only where necessary, with: - the **Service Provider** performing your Intervention — solely the data required to reach the site and perform the Service; - the payment service provider **Mollie B.V.** (Netherlands) for the processing of payments; - **hosting, cloud and storage providers** operating our infrastructure and file storage; - **e-mail and messaging service providers** for transactional communication; - **mapping and location service providers** for determining and displaying locations; - **IT, accounting and tax service providers**; - **legal advisers**, where necessary for the defence of our rights; - **competent public authorities**, where required by law. FastAssist24 concludes a **data processing agreement** with every processor in accordance with Article 28 GDPR, imposing appropriate technical and organisational security measures.

FastAssist24 aims to process personal data within the European Economic Area (EEA); our hosting and database are located within the EEA. ⚠ For certain supporting services — including e-mail delivery, mapping and location services, messaging services and error monitoring — we may rely on providers that process personal data outside the EEA. Where this occurs, it takes place solely in accordance with Chapter V GDPR, on the basis of an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework) or appropriate safeguards such as the standard contractual clauses. Information on the safeguards applied is available on request.

Personal data are not retained longer than necessary. The following indicative periods apply, among others: **Invoicing and accounting data** — 7 years, in accordance with Belgian tax and accounting legislation. **Contractual data** — up to 10 years after termination of the Agreement, where necessary for the defence of legal claims. **Customer account** — until deletion of the account, or a maximum of 2 years after the last activity where no statutory retention obligation applies. **Communication** — for as long as necessary for customer service and dispute management. **Location data** — retained insofar as necessary for the performance, invoicing and accountability of the Intervention, and thereafter deleted or anonymised. Upon expiry of the retention period, personal data are deleted or anonymised, unless a legal obligation requires longer retention.

Within the limits of the GDPR, you have the following rights: - the right of **access**; - the right to **rectification**; - the right to **erasure**; - the right to **restriction** of processing; - the right to **data portability**; - the right to **object**, in particular to processing based on legitimate interests; - the right to **withdraw consent**, where processing is based on consent. Requests may be addressed to **privacy@fastassist24.be**. We handle your request **free of charge** and respond **within one month** of receipt. That period may be extended by two months where the request is complex or where there are multiple requests; in that case we will inform you within the first month. FastAssist24 may request additional information to verify your identity where there are reasonable doubts as to the identity of the person making the request.

FastAssist24 takes appropriate technical and organisational measures in accordance with Article 32 GDPR to protect personal data against unauthorised access, loss, destruction, alteration, disclosure and misuse. These measures include, among others, encryption of data in transit (TLS), role-based access control applying the principle of least privilege, logging and monitoring of system access, secured backups, and periodic review of the measures taken. ⚠ This list must correspond to the measures actually implemented; verify this before publication.

The assignment of a suitable Service Provider is wholly or partly automated, based on criteria such as location, availability, vehicle type and the capabilities of the Service Provider. This assignment has no legal effects for you and does not significantly affect you; it determines solely which professional party performs your Intervention. ⚠ Where a request is refused on the basis of indications of fraud or abuse, this does not take place solely on the basis of automated processing: human intervention occurs before a refusal becomes final. *(Verify that this is factually the case; if the refusal is fully automated, Article 22 GDPR applies and additional safeguards are required, including the right to human intervention.)*

The Platform is not directed at minors under the age of 16. We do not knowingly collect personal data of minors without the required consent. If you believe we have nonetheless processed such data, please contact privacy@fastassist24.be so that we can delete it.

FastAssist24 uses cookies and similar technologies. Further information, including the categories used and how you manage your preferences, is set out in the separate **Cookie Policy**.

FastAssist24 may amend this Privacy Policy to take account of changes in legislation, in its services or in the manner in which personal data are processed. The most recent version is always available via the Platform, stating the date of the last update.

If you have questions or complaints about the processing of your personal data, please first contact us at **privacy@fastassist24.be**. You also always have the right to lodge a complaint with the supervisory authority: **Belgian Data Protection Authority (GBA/APD)** Drukpersstraat 35, 1000 Brussels, Belgium https://www.dataprotectionauthority.be contact@apd-gba.be ---