Privacy
Privacy policy (GDPR)
[LEGAL TEXT TO BE PROVIDED: this page is a structural placeholder and is not legal advice. Have it reviewed before launch.]
What we collect
Only what you send through the contact form or by email: name, email, company, role and message. Used solely to answer your request.
Your rights
You may request access, correction or deletion at any time. You can also complain to the Belgian Data Protection Authority (gegevensbeschermingsautoriteit.be / autoriteprotectiondonnees.be).
Draft – pending legal review
Contact form data
What and why
When you use the contact form we receive your name, email address, company, role, area of interest, message, the page you sent it from, your language and your browser's user agent. We use this only to answer your request and, if you wish, to arrange an intro call.
Legal basis
Your consent (Art. 6(1)(a) GDPR), given with the checkbox on the form, and steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). You can withdraw consent at any time.
How it is handled
Your submission is emailed to us and stored in a Google Sheet. Google (Google Ireland Ltd / Google LLC, under Google Workspace terms) acts as our processor. The email delivery provider is still to be confirmed [TBD]; it will also act as a processor. Our website runs on Cloudflare.
Spam protection (Cloudflare Turnstile)
To keep the form free of bots, the contact page uses Cloudflare Turnstile. It processes technical signals such as your IP address, browser and device characteristics; it does not read your form entries. Cloudflare, Inc. acts as our processor for this check (and as an independent controller for improving its bot detection, see the Turnstile Privacy Addendum). Legal basis: our legitimate interest in protecting the form against abuse (Art. 6(1)(f) GDPR).
Transfers outside the EU
Google, Cloudflare and our email provider may process data outside the European Economic Area, including in the United States. Where that happens, transfers are protected by the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, the EU-US Data Privacy Framework.
Retention
We keep form submissions for [12 months] after our last contact, unless they lead to an engagement, in which case our client-records policy applies. You can ask us to delete them sooner.
Contact
For questions or to exercise your rights, email hello@basgroup.be.
Controller
[Company name, address and enterprise number (KBO/BCE) to be provided.]