Privacy policy

Updated 10 November 2026 · version 2

Who is responsible for your data?

Common Sense AI is a business unit of Algorhythm Group nv. Algorhythm Group nv is the controller for the personal data processed through this website. Its company number is BE 0759.930.167 and its registered office is Veldkant 33A, 2550 Kontich, Belgium. The registered office is separate from the visiting addresses listed elsewhere on this website.

This notice covers www.common-sense-ai.be, contact enquiries and applications made through the website's links. It does not replace the arrangements governing our client services.

For privacy questions or to exercise your rights, email info@algorhythm.be, addressed to the Security Officer, or write to Algorhythm Group nv, Security Officer, Veldkant 33A, 2550 Kontich, Belgium. You can also reach Common Sense AI at info@common-sense-ai.be.

What data we use and why

Contact enquiries

The contact form asks for your name, work email address, company and a description of what you want to solve. Information about where your data lives is optional. We receive the information you enter and any further correspondence you send us.

We use these details to answer your question and follow up on the assistance you requested. Required fields are needed to submit the form; you can also email us directly. Please do not include passwords, sensitive personal data or confidential client records.

For business enquiries, our basis is our legitimate interest in responding to relevant requests and maintaining business correspondence, balanced against your rights. Where you personally request steps towards a contract with us, the necessary processing is based on those pre-contractual steps. Sending the form does not subscribe you to a newsletter. This website has no newsletter signup or user-account registration.

Job applications

Application links open your email application or, for some roles, a LinkedIn vacancy. Information you send may include contact details, your CV, professional experience and correspondence about the role. The website itself has no CV-upload form.

We use application information to consider your suitability and communicate with you about the role. The basis is taking steps at your request before a possible employment contract, and our legitimate interest in administering recruitment where applicable. Keeping information for future vacancies requires a separately explained purpose and lawful basis.

Website delivery and security

Cloudflare hosts the website and runs the contact endpoint. Delivering and protecting the service involves processing technical request information, such as IP addresses, requested URLs, browser information and timestamps. A hidden form field helps filter automated spam. The basis is our legitimate interest in operating an available, secure website and preventing abuse.

Optional website analytics

If you accept analytics, we use Google Analytics 4 to understand visits to our English and Dutch pages, campaign performance, successful contact submissions and clicks on email and application links. Analytics receives page and campaign information, website language, cookie identifiers and technical browser or device information.

Our integration does not send contact-form contents, names, email addresses, company names or free-text messages to Google Analytics. Google advertising features and Google signals are disabled in our tag. Analytics does not load before consent or after refusal, and is disabled on development and Cloudflare preview hosts.

The basis is your consent. Refusal does not prevent you from using the website, contacting us or applying. You can change or withdraw your choice through Cookie settings in the footer or below. Withdrawal stops further collection and removes this site's accessible analytics cookies. It does not automatically delete previously collected data or affect the lawfulness of earlier processing.

The cookie policy lists the cookies, their purpose and lifetimes. The consent preference lasts 180 days. Analytics-cookie lifetimes are limited to the remaining consent period; this is separate from Google's retention of analytics data. See Google's privacy information and Analytics data safeguards.

Maps and external links

The About page offers an OpenStreetMap map. It connects to OpenStreetMap services only after you choose to load it. That connection shares technical information, including your IP address, to display the map. This choice is separate from optional analytics. See the OpenStreetMap Foundation privacy policy. If you do not load the map, the office addresses remain available.

Google Maps directions and LinkedIn links take you to external services when you follow them. Those operators process data under their own privacy notices. Our website serves its photos, fonts and videos through its hosting rather than embedding a third-party video player.

Who receives personal data?

Enquiries are received at info@common-sense-ai.be. Relevant Common Sense AI and Algorhythm Group personnel handle enquiries, recruitment and the technical administration needed for those activities. The following service providers also process information for the purposes described:

• Cloudflare: website delivery, infrastructure protection and execution of the contact endpoint.
• Resend (Plus Five Five, Inc.): sending contact-form submissions as emails. The email includes the supplied contact details and message. Delivery records and API logs can also contain submission information.
• Algorhythm Group's email and IT providers: receiving, storing and managing enquiries, application emails and replies.
• Google: analytics data if you consent.
• OpenStreetMap services: technical requests after you choose to load the map. LinkedIn and Google Maps also receive requests if you follow their external links.

Information may also be disclosed where necessary to meet a legal obligation or establish, exercise or defend a legal claim. The purpose and lawful basis depend on that obligation or claim.

International processing

Some providers and their subprocessors can process information outside the European Economic Area, including in the United States. Resend's selected sending region is Ireland; that does not mean every copy, log, support activity or subprocessor stays in the EEA.

International transfers require an applicable legal mechanism, such as an adequacy decision or the European Commission's standard contractual clauses with any necessary additional safeguards. The Cloudflare processing terms and Resend processing terms describe their transfer provisions. Contact the Security Officer for information about the safeguards relevant to your data or to request a copy.

How long we keep data

Retention depends on the purpose and the records involved. The criteria below apply rather than a single period for all website data:

• Enquiries and correspondence: the time needed to answer the request and complete relevant follow-up, whether it develops into an ongoing customer relationship, and any applicable recordkeeping obligations or limitation periods for claims.
• Applications: the time needed to complete the selection process and relevant follow-up, and any necessary period to handle questions or claims about that process. Retention for future opportunities must have its own stated purpose and basis.
• Technical, delivery and API logs: the operational period needed for delivery, troubleshooting and security, the provider's configured retention and any specific incident that requires investigation.
• Analytics: the configured Google Analytics property retention and the period needed to evaluate website and campaign performance. Event and user data, aggregate reports and browser cookies have different lifetimes; the cookie limits above are not a blanket limit on all analytics records.

Data should be deleted or anonymised when it is no longer needed for the applicable purpose. A limited record may need to be retained to meet a legal obligation or handle a claim. Contact the Security Officer for the retention criteria and settings relevant to a particular record.

Your rights

Subject to the applicable conditions, you can request access, correction, erasure, restriction or portability of your personal data. You can object to processing based on legitimate interests and withdraw consent for processing based on consent. Contact the Security Officer using the details above.

We normally respond within one month. Where permitted by law, that period can be extended by up to two further months; we will explain the extension within the first month. We may request proportionate information to verify your identity.

You can complain to the Belgian Data Protection Authority, or the competent authority where you live or work or where an alleged infringement occurred.

The website does not automatically assess applicants or make decisions with legal or similarly significant effects. Any separate processing during recruitment or client services must be explained in the context of that activity.

Updates

We update this notice when the website or the processing it describes changes. The revision date above identifies this version.