1. Data Collection and Processing
Legal Basis for Processing Data
We collect and process personal data on the following grounds:
- To fulfill user requests (e.g., inquiries submitted through our contact form)
- Consent: Where applicable, we may seek explicit consent for data collection, such as for cookie preferences.
- Legitimate Interests: For analytics and site improvement to enhance user experience.
Categories of Data Collected
We collect personal information directly from users when they submit inquiries, such as:
- Contact Details: Name, email address, phone number, and any other information provided via the contact form.
- Technical Information: Anonymized data collected via cookies and similar technologies through Google Analytics, including IP address, device type, and browser information.
Contact Form
When you submit a contact form, the information provided is used exclusively to respond to your inquiries and provide relevant information. We do not share this data with third parties. The data is retained securely for up to one year for follow-up purposes, after which it is deleted unless required for administrative or legal purposes.
Google Analytics
We use Google Analytics to understand site usage patterns and improve user experience. Google Analytics collects anonymized information such as your IP address and browsing activity. You can learn more about Google’s data processing here: https://policies.google.com/privacy, and you can opt out of this tracking by adjusting your browser settings or using dedicated extensions.
2. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance user experience and gather analytics. You may choose which cookies to accept, as described in our Cookie Policy. Essential cookies are necessary for the operation of the website and do not collect personal information.
3. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy:
- Contact Form Data: Stored for up to one year from submission for follow-up communication.
- Analytics Data: Retained according to Google Analytics policies, with data anonymized after a specific period to ensure user privacy.
We will retain your personal information with us for 90 days to 2 years after user terminate account or for as long as we need it to fulfill the purposes for which it was collected as detailed in this Privacy Policy. We may need to retain certain information for longer periods such as record-keeping / reporting in accordance with applicable law or for other legitimate reasons like enforcement of legal rights, fraud prevention, etc. Residual anonymous information and aggregate information, neither of which identifies you (directly or indirectly), may be stored indefinitely.
4. User Rights Under GDPR
You have the following rights concerning your personal data:
- Right to Access: Request a copy of the data we hold about you.
- Right to Rectification: Request correction of any inaccurate or incomplete data.
- Right to Erasure: Request deletion of your data (subject to administrative or legal obligations).
- Right to Restrict Processing: Request limited processing of your data in specific circumstances.
- Right to Object: Opt-out of specific data processing activities, such as analytics tracking.
- Right to Data Portability: Request transfer of your data to another service provider.
To exercise these rights, please contact us at [email protected]. We will respond within 30 days as required by GDPR.
Depending on the law that applies, you may have a right to access and rectify or erase your personal data or receive a copy of your personal data, restrict or object to the active processing of your data, ask us to share (port) your personal information to another entity, withdraw any consent you provided to us to process your data, a right to lodge a complaint with a statutory authority and such other rights as may be relevant under applicable laws. To exercise these rights, you can write to us at [email protected]. We will respond to your request in accordance with applicable law.
You may opt-out of direct marketing communications or the profiling we carry out for marketing purposes by writing to us at [email protected].
Do note that if you do not allow us to collect or process the required personal information or withdraw the consent to process the same for the required purposes, you may not be able to access or use the services for which your information was sought.
5. Data Security and Transfers
Data Security
We implement industry-standard security measures, including SSL encryption, to protect your data against unauthorized access, alteration, or deletion.
International Data Transfers
If any data is transferred outside of the European Economic Area (e.g., through Google Analytics), we ensure that these transfers comply with GDPR standards via data protection agreements and additional safeguards.
The security of your information is important to us and we will use reasonable security measures to prevent the loss, misuse or unauthorized alteration of your information under our control. However, given the inherent risks, we cannot guarantee absolute security and consequently, we cannot ensure or warrant the security of any information you transmit to us and you do so at your own risk.
6. Automated Decision-Making
Our website does not use automated decision-making or profiling processes that may affect your rights.
7. Changes to Our Privacy Policy
We may update this Privacy Policy from time to time. Any significant changes will be posted on this page, and where applicable, we will notify you via email. Please check this page periodically for updates.
8. Grievance / Data Protection Officer:
If you have any queries or concerns about the processing of your information that is available with us, you may email our Grievance Officer at Seven Flags, Brussel, Rue des Colonies 56, email: [email protected]. We will address your concerns in accordance with applicable law.