General Data Protection Regulation (GDPR) Policy
Last updated: December 3, 2025
1. Introduction
PANOPTIC ("we", "our", or "us") is committed to protecting and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679. This policy explains how we collect, use, store, and protect your personal data when you use our digital platform for construction monitoring.
2. Data Controller
PANOPTIC is the data controller responsible for your personal data. If you have any questions about this policy or our data practices, please contact us at:
Email: info@pan-optic.net
Address: Haachtsesteenweg 582 box 3, 1910 Kampenhout, Antwerp, Belgium
Phone: +32 3 22 11 333
3. Personal Data We Collect
We may collect and process the following categories of personal data:
- Contact Information: Name, email address, phone number, company name, and job title
- Account Information: Username, password, and account preferences
- Technical Data: IP address, browser type, device information, and cookies
- Usage Data: Information about how you use our platform, features accessed, and interaction patterns
- Project Data: Construction site data, images, 3D models, measurements, and reports you upload or generate
- Communication Data: Records of your communications with us, including support requests and feedback
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contractual Necessity: To provide our services as outlined in our terms and conditions
- Consent: Where you have given explicit consent for specific processing activities
- Legitimate Interests: To improve our services, prevent fraud, and ensure platform security
- Legal Obligations: To comply with applicable laws and regulations
5. How We Use Your Data
We use your personal data for the following purposes:
- Providing and maintaining our construction monitoring platform
- Processing your requests for demos, pricing information, or partnerships
- Sending you service updates, technical notices, and security alerts
- Analyzing platform usage to improve our services and user experience
- Detecting and preventing fraud, security breaches, and technical issues
- Complying with legal obligations and responding to lawful requests
- Marketing communications (only with your explicit consent)
6. Data Storage and Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest using industry-standard protocols
- Regular security assessments and vulnerability testing
- Access controls and authentication mechanisms
- Employee training on data protection and security best practices
- Secure data centers located within the European Union
- Regular backups and disaster recovery procedures
Your personal data is stored on secure servers within the European Economic Area (EEA). We retain your data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.
7. Data Retention
We retain personal data for the following periods:
- Account Data: Duration of your subscription plus 3 years for legal compliance
- Project Data: As long as your account is active or as requested by you
- Marketing Data: Until you withdraw consent or request deletion
- Communication Records: 3 years from the last interaction
- Technical Logs: 12 months for security and troubleshooting purposes
8. Your Rights Under GDPR
Under GDPR, you have the following rights regarding your personal data:
- Right of Access: Request a copy of your personal data we hold
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Restriction: Request limitation of processing in certain circumstances
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for direct marketing
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
- Right to Lodge a Complaint: File a complaint with your local data protection authority
To exercise any of these rights, please contact us at info@pan-optic.net. We will respond to your request within 30 days.
9. Data Sharing and Third Parties
We do not sell your personal data to third parties. We may share your data with:
- Service Providers: Cloud hosting, analytics, and customer support tools (all GDPR-compliant)
- Legal Authorities: When required by law or to protect our legal rights
- Business Transfers: In the event of a merger, acquisition, or sale of assets (with appropriate safeguards)
All third-party service providers are carefully selected and contractually obligated to protect your data in accordance with GDPR requirements.
10. International Data Transfers
Your personal data is primarily stored and processed within the European Union. If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions for countries with equivalent data protection standards
- Binding Corporate Rules for intra-group transfers
11. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience, analyze usage, and provide personalized content. You can manage cookie preferences through your browser settings. For detailed information, please refer to our Cookie Policy.
12. Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us immediately.
13. Changes to This Policy
We may update this GDPR policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this GDPR policy or our data practices, please contact us:
15. Supervisory Authority
If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with your local data protection supervisory authority. In Belgium, the supervisory authority is: