Privacy Policy

Version November 2025

Introduction

When we need your agreement to process data concerning you, we ask you to confirm this by means of the various tools present on our websites and platforms and by referring to this privacy policy, available and consultable at any time on https://www.fintensy.com/en/.

By using the services of Fintensy, you acknowledge you have taken cognisance of this privacy policy. This is not an agreement but rather an undertaking on behalf of Fintensy with regards to the processing of your data and the exercise of your rights.

Data Controller

Your personal data is processed by and under the responsibility of Fintensy SA/NV, as the Data Controller, whose office is located at 1 Chemin du Stocquoy, 1300 Wavre, Belgium, under BCE number 0651.648.473, in compliance with this privacy policy and respecting the legislation applicable in Belgium, in particular, the General Data Protection Regulation (GDPR) 2016/679. You can also contact us by letter at the above-mentioned address, or by email to privacy@fintensy.com or by phone to number +32 (0)2 765 09 69.

As part of the services it provides, Fintensy also processes personal data as a processor acting on behalf of and for the account of its business partners. In this context, such data is processed under the responsibility and according to the instructions of the partners involved, acting as data controllers. If you wish to obtain more information about the data processing carried out in this context, you can consult the privacy policies of these partners or contact them directly.

Why and on which basis do we collect and process your data?

In the context of our activities, we collect and process your personal data. The different processing purposes and legal basis are described hereunder. These only concern the processing activities that Fintensy carries out as data controller (and thus not as processor).

Execution of the MyProved service

We process some of your data in the context of the execution of the MyProved service. You can consult the information relating to the processing carried out for this purpose in the Privacy Policy specific to the MyProved service which is available at anytime on MyProved website.

Functioning and development of our websites and platforms and improvement of our services

We process some of your data, either in an automated or manual way, with the aim of ensuring the smooth functioning of our websites and platforms and their ongoing improvement.

With regards to the use of data collected automatically during your visits on the website of Fintensy, we refer you to our Cookie Policy accessible on https://www.fintensy.com/en/cookies/. Your consent is required to enable the functioning of some cookies.

We also regularly carry out internal audits with the aim of improving our websites, platforms and services.

Finally, we may need to process your data in order to carry out research on our behalf with the aim of improving existing products and services or to develop others. Such processing is based on our legitimate interest. The improvements and developments achieved on this basis may, where applicable, benefit you as well as current or future business partners of Fintensy.

Processing for statistical purposes

Finally, some of the data processed by Fintensy may also be used to produce anonymized statistical results. The results may also be used for various purposes (e.g. publication of statistics via the SpendTracker tool), including commercial purposes (e.g. sale of statistical data to third parties, provision of services based on statistical results, etc.).

In this context, your data is processed with your prior consent if such consent is required under the applicable regulations. Your consent will not be required if the initial processing is necessary for the performance of a contract between you and Fintensy (in this case, processing for statistical purposes is indeed considered a further processing authorized by law).

In any case, the data concerned is processed in an anonymous and aggregated form, which does not allow your identification.

Which data do we collect?

You will find hereunder information with regards to the various categories of data that we may need to collect and process depending on each processing purpose.

Execution of the MyProved service

Some of your data may be processed in the context of the execution of the MyProved service. You can consult the information relating to the data processed for this purpose in the Privacy Policy specific to the MyProved service.

Functioning and development of the platform and improvement of our services

We may process some of your data in order to ensure the operation, improvement, and development of our websites, platforms, and existing services, as well as the development of new services. This may among others include your personal and electronic identification data, as well as certain data processed by Fintensy in the context of the services it provides, where such processing is permitted under applicable regulations and, where relevant, under the agreements concluded with the business partners involved. This is notably the case for certain banking data initially collected and processed as part of the MyProved service, as described in the Privacy Policy specific to that service.

Such data may be collected directly from you or from partners to whom we provide services as data processor.

Processing for statistical purposes

We may also re-use certain data initially processed in the context of the performance of other services in an anonymous and aggregate form for statistical purposes. This may among others include banking data or generalized personal information such as your age or province of residence.

Automated decisions

The presence or absence of automated decisions depends on the various processing operations carried out by Fintensy.

The data processed in the context of the MyProved service may thus be subject to automated analyses carried out by IT systems. These analyses could also lead to entirely automated decisions that may affect your situation. In this regard, we encourage you to consult the information specific to the MyProved service.

In the context of processing in which Fintensy acts as a data processor, your data may, where applicable, be subject to automated analyses carried out by IT systems. Such analyses could also result in entirely automated decisions made by our partners providing their own services to you, which may affect your situation. We therefore invite you to directly consult the Privacy Policies of the relevant partners.

Personal data processed by Fintensy for other purposes do not, in principle, result in automated decisions affecting you.

Data sent to and processed by third parties

In the context of its activities, Fintensy operates in collaboration with various third parties. To enable these collaborations, some of your data are therefore communicated by Fintensy to third parties who then process some of your data.

• With your prior agreement, we may use your data, such as your email address and mobile phone number, to send you marketing communications on behalf of Fintensy and also on behalf of its partners;
• We may also transfer all or part of your data to third parties, when that is imposed on us by an administrative or a judicial authority, in compliance with the relevant legislation;
• Your data are intrinsically linked to the activity of our platform and may therefore be transferred to another company in the event that we must sell, divest, give or otherwise transfer all or part of our activities or merge with another company or proceed to any other form of reorganisation of our business.

Apart from these potential cases, we do not share any of your data with third parties who would be likely to use it for their own purposes.

Some of your data may potentially be transferred to service providers or partners located outside the European Economic Area. In such cases, Fintensy will ensure that an adequate level of protection is applied to the processing of your data. If the country to which your data is transferred is recognized by the European Commission as providing an adequate level of protection, no further measures will be required by Fintensy. However, if the country is not recognized as providing an adequate level of protection, Fintensy will implement additional measures (e.g., the use of the European Commission's standard contractual clauses) to ensure the security of your data.

Duration of data retention

In the context of its activities, Fintensy retains your data only for a defined period, dependant on various applicable regulations. Nevertheless, your data are never retained beyond the necessary processing period for which they have been collected.

Once these deadlines have passed, your strictly-personal data (e.g.: surname, first name(s), postal address, phone number, etc.) will be erased from our database. We always retain aggregated data for statistical reasons, that's to say anonymised data that does not allow you to be identified (region, age, etc.).

What are your rights regarding the processing of your personal data?

In the context of the processing of your personal data, as a data subject you have a series of rights available, enumerated and described hereunder:

Right of access

As a data subject, you have the right to ask Fintensy if your personal data have been subject to processing on its part. If affirmative, you can furthermore ask Fintensy for a list of the data concerned along with the purposes for which they have been processed.

Right to rectification

You have the right to obtain rectification by Fintensy, without undue delay, of your inaccurate or incomplete data.

Right to erasure

Under certain conditions, you can obtain from Fintensy that it erases personal data in its possession concerning you.

However, it is not possible to exercise this right when then retention of your data is due to a legal obligation for Fintensy or for the execution of an agreement.

Right to limitation of processing

You have the right to ask Fintensy to limit processing of your data, for example, when you are contesting the accuracy of your data or if Fintensy no longer needs to retain your data but where these are still needed by you for the establishment, exercise or defence of legal claims.

Right to data portability

In certain circumstances, you are entitled to obtain from Fintensy personal data being retained on you in a structured, commonly-used and machine-readable format and to transmit this data to another data controller of your choosing without hindrance from Fintensy.

Right to object

In some cases, you can object to the processing of your personal data by Fintensy. For example, when Fintensy processes your data on the basis of legitimate or public interest. This right is not applicable when your data is processed in accordance with a legal obligation or in the context of execution of an agreement.

Right not to be made subject of a decision based exclusively on automated processing (including profiling)

Apart from exceptions, you have the right to not be subject to a decision based solely on automated processing, including profiling, that produces legal effects or significantly affects you. This right is namely not applicable when the decision is necessary for the conclusion or execution of an agreement between you and Fintensy. Nevertheless, you can always ask Fintensy for human intervention, to communicate your opinion to Fintensy in regards to the decision and to object to it. To do this, you need to contact us.

Right to withdraw your consent

You also have the right, at any time, to withdraw your consent to the uses that you have previously authorised. To do this, you can contact us. Withdrawal of your consent for a specific processing will not affect the processing already carried out prior to this but will be applied in the future.

How to exercise your rights?

To exercise your rights you simply have to contact us. We will respond within a month.

Questions, claims and objections

In the event of a question or claim, we ask you to contact us.

In the case of an objection regarding the processing of personal data, you have the possibility of instituting a claim with our main supervisory authority, the Belgian Data Protection Authority, 35 rue de la Presse, 1000 Brussels (Tel +32 (0)2 274 48 00 - email: contact@apd-gba.be) or with your local authority if you are a resident of another country of the European Union.

Entry into force and amendments

We reserve the right to make amendments to this privacy policy. These amendments will be brought to your attention by means of the platform intermediary or via an individual notification, and will immediately become effective after their publication.