Privacy
policy

This page explains which personal data MDBR Consult processes, why, for how long, and what your rights are. Last updated: 10 November 2026.

1. Data controller

MDBR Consult SRL
Rue de la Terre Franche Long. 63, 5310 Eghezée, Belgium
Company number BE 0839.831.542
Email : max@mdbr-consult.com
Phone : +32 496 50 03 30

2. Data we process

  • Company form: full name, company, email address, phone, position to fill, location and message.
  • Candidate form: full name, email address, phone, LinkedIn profile, main area of expertise, location and description of your plans.
  • Candidate search: as part of a recruitment assignment, professional information (career history, current role, skills, public LinkedIn profile, CV if you send it to us) and the content of our conversations.
  • Technical data: IP address and browsing information needed for the website to work securely, and your cookie choices.

3. Purposes and legal bases

  • Answering your request and getting back to you: pre-contractual steps at your request or legitimate interest.
  • Carrying out recruitment assignments (identifying, approaching, assessing and presenting candidates): legitimate interest of MDBR Consult and its clients. Your profile is never shared with a company without a prior conversation and your agreement on the opportunity concerned.
  • Managing client relationships and invoicing: performance of the contract and legal obligations.
  • Protecting the website against spam and abuse: legitimate interest.
  • Non-essential cookies: your consent, which you can change at any time (see the cookie policy).

4. Recipients

Your data is processed by Maxime De Brabanter, founder of MDBR Consult. It may be entrusted to technical service providers acting on our behalf: website hosting (OVHcloud, European Union), email and Google (reCAPTCHA, spam protection for the forms). Job openings are published on the Recruit CRM platform: if you apply through that platform, its own privacy policy also applies.

5. Transfers outside the European Union

Google’s reCAPTCHA service may involve a transfer of data to the United States. This transfer is covered by the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses.

6. Retention periods

  • Company requests and client data: 3 years after the last contact.
  • Candidate data: 2 years after the last contact. We may offer to extend this period so you can stay in our network.
  • Accounting records: 7 years, in accordance with Belgian law.
  • Cookies: see the cookie policy.

7. Your rights

You can at any time request access to your data, its rectification, erasure or restriction of processing, object to its processing (in particular to direct approach), request its portability and withdraw your consent. Write to us at max@mdbr-consult.com: we reply within one month.

You also have the right to lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels (www.dataprotectionauthority.be).

8. Security

We take appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure: encrypted connection (HTTPS), restricted access to data and, where possible, service providers based in the European Union.

9. Changes

This policy may be updated. The date of the latest update is shown at the top of this page.